| Server IP : 103.4.122.14 / Your IP : 216.73.216.103 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : statewid ( 1251) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/local/apache/domlogs/ |
Upload File : |
[Mon Nov 10 19:27:48.106192 2025] [autoindex:error] [pid 36674:tid 36680] [client 3.84.111.36:34138] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 10 19:27:49.373350 2025] [autoindex:error] [pid 36674:tid 36681] [client 178.171.117.129:45885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 01:06:16.408409 2025] [:error] [pid 41825:tid 41910] [client 43.157.175.122:34700] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRIbiIr5hkwmQG_pQgAHAgAAAFc"]
[Tue Nov 11 01:38:43.502452 2025] [autoindex:error] [pid 24554:tid 24582] [client 172.93.148.182:44538] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 02:05:27.943917 2025] [:error] [pid 41825:tid 41898] [client 43.157.156.190:54932] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRIpZ4r5hkwmQG_pQgAc9wAAAEs"]
[Tue Nov 11 02:20:24.286991 2025] [autoindex:error] [pid 41816:tid 41874] [client 172.93.148.182:42490] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:17:12.934572 2025] [:error] [pid 34002:tid 34021] [client 45.153.34.41:60800] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRJkaNNx46Ag0u620oq4sgAAAA8"]
[Tue Nov 11 06:18:54.706464 2025] [autoindex:error] [pid 33932:tid 33981] [client 49.13.72.93:27606] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:18:55.350898 2025] [autoindex:error] [pid 33932:tid 33983] [client 49.13.72.93:41204] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:18:56.749700 2025] [autoindex:error] [pid 33888:tid 33898] [client 49.13.72.93:6233] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:18:57.384727 2025] [autoindex:error] [pid 33932:tid 33973] [client 49.13.72.93:13958] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:55:18.087109 2025] [autoindex:error] [pid 34002:tid 34016] [client 5.161.247.57:28959] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:55:18.654894 2025] [autoindex:error] [pid 57437:tid 57450] [client 5.161.247.57:2778] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:55:19.810036 2025] [autoindex:error] [pid 33932:tid 33981] [client 5.161.247.57:62049] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:55:20.404110 2025] [autoindex:error] [pid 57437:tid 57460] [client 5.161.247.57:21240] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 07:00:56.936624 2025] [:error] [pid 57437:tid 57443] [client 45.153.34.41:34612] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRJuqOxevBIdHxHQtFqN1gAAAEI"]
[Tue Nov 11 11:02:02.541449 2025] [autoindex:error] [pid 53414:tid 53422] [client 13.211.68.164:35316] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 11:32:34.948765 2025] [:error] [pid 53449:tid 53475] [client 43.163.104.54:43228] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRKuUtpz08j5NoUSzp_e5wAAAVU"]
[Tue Nov 11 12:26:57.340139 2025] [:error] [pid 53449:tid 53457] [client 103.182.69.40:30155] [client 103.182.69.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.69.40, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRK7Edpz08j5NoUSzp_zywAAAUM"]
[Tue Nov 11 12:26:57.355300 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 103.182.69.40:30155] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:18:38.901887 2025] [:error] [pid 59670:tid 59696] [client 193.36.224.99:42663] [client 193.36.224.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aRLHLqk2Cnts0y-hpfrWeQAAAJc"]
[Tue Nov 11 13:18:39.489696 2025] [:error] [pid 53355:tid 53363] [client 104.234.19.2:36939] [client 104.234.19.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/style.php"] [unique_id "aRLHL4B5X5A3rMc4_nAR0wAAAAU"]
[Tue Nov 11 13:18:41.150417 2025] [:error] [pid 59670:tid 59694] [client 136.144.19.100:60271] [client 136.144.19.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aRLHMak2Cnts0y-hpfrWfQAAAJU"]
[Tue Nov 11 14:03:06.647854 2025] [autoindex:error] [pid 59670:tid 59677] [client 185.226.197.34:39881] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 15:55:19.846294 2025] [:error] [pid 53355:tid 53371] [client 157.245.116.174:49990] [client 157.245.116.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRLr54B5X5A3rMc4_nBHSgAAAA0"]
[Tue Nov 11 15:55:20.757915 2025] [:error] [pid 53355:tid 53359] [client 157.245.116.174:44412] [client 157.245.116.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRLr6IB5X5A3rMc4_nBHTQAAAAE"]
[Tue Nov 11 18:11:28.733976 2025] [:error] [pid 36673:tid 36685] [client 157.245.116.174:45460] [client 157.245.116.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRML0CvASiSDHs9bkffxTgAAAIo"]
[Tue Nov 11 18:11:29.798016 2025] [:error] [pid 36673:tid 36687] [client 157.245.116.174:43126] [client 157.245.116.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRML0SvASiSDHs9bkffxVQAAAIw"]
[Tue Nov 11 18:58:41.411638 2025] [autoindex:error] [pid 43205:tid 43218] [client 207.241.235.138:49504] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 19:09:46.390417 2025] [:error] [pid 43205:tid 43212] [client 223.244.35.77:53730] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRMZer48SbhIkX6TjwOAwAAAAQQ"]
[Tue Nov 11 20:53:29.978905 2025] [autoindex:error] [pid 43205:tid 43217] [client 35.168.132.30:40611] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:30.834033 2025] [autoindex:error] [pid 36578:tid 36607] [client 35.168.132.30:12768] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:32.172541 2025] [autoindex:error] [pid 36673:tid 36692] [client 35.168.132.30:61048] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:35.460297 2025] [autoindex:error] [pid 36673:tid 36696] [client 35.168.132.30:61048] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:39.324676 2025] [autoindex:error] [pid 36580:tid 36642] [client 35.168.132.30:29319] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:39.754496 2025] [autoindex:error] [pid 36578:tid 36604] [client 35.168.132.30:18516] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:41.164796 2025] [autoindex:error] [pid 36580:tid 36662] [client 35.168.132.30:31562] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:53:44.557593 2025] [autoindex:error] [pid 36580:tid 36653] [client 35.168.132.30:31562] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 21:04:32.915965 2025] [autoindex:error] [pid 36579:tid 36630] [client 45.80.49.38:12841] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 22:48:29.096212 2025] [:error] [pid 47964:tid 47974] [client 157.245.116.174:50500] [client 157.245.116.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRNMvV6CQC3ebUS5pkQVOAAAAYc"]
[Tue Nov 11 22:48:30.332719 2025] [:error] [pid 49628:tid 49648] [client 157.245.116.174:48164] [client 157.245.116.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRNMvr82AgnfnwL7V2ZHMgAAAJI"]
[Wed Nov 12 02:20:39.437432 2025] [:error] [pid 40745:tid 40758] [client 43.130.111.40:56250] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRN-d8dgIR-a_T0XcdAcHgAAAAg"]
[Wed Nov 12 02:23:08.205050 2025] [autoindex:error] [pid 40747:tid 40825] [client 47.79.212.17:25056] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 12 02:31:27.551201 2025] [autoindex:error] [pid 40747:tid 40821] [client 47.79.199.89:50318] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 12 02:45:59.150278 2025] [autoindex:error] [pid 40833:tid 40853] [client 47.79.216.199:12914] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 12 02:56:32.050196 2025] [autoindex:error] [pid 54518:tid 54531] [client 47.79.199.201:50362] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 12 03:58:44.029422 2025] [autoindex:error] [pid 57223:tid 57257] [client 54.244.199.232:54376] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 04:35:09.065810 2025] [autoindex:error] [pid 57224:tid 57308] [client 54.198.149.117:8282] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 04:35:10.479793 2025] [autoindex:error] [pid 57222:tid 57239] [client 54.198.149.117:5959] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 09:51:03.504109 2025] [autoindex:error] [pid 41829:tid 41896] [client 3.80.226.247:46892] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 12:47:28.036540 2025] [autoindex:error] [pid 60097:tid 60164] [client 172.93.148.182:47458] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 15:22:05.032470 2025] [autoindex:error] [pid 60095:tid 60103] [client 172.93.148.182:59204] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 15:40:11.635935 2025] [autoindex:error] [pid 12744:tid 12748] [client 23.88.126.40:13558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 15:52:47.958833 2025] [:error] [pid 12744:tid 12752] [client 196.251.115.37:38080] [client 196.251.115.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aRQ8z51cp_ouUvkFj0UWOgAAAQQ"]
[Wed Nov 12 15:52:48.645676 2025] [:error] [pid 12744:tid 12755] [client 196.251.115.37:38092] [client 196.251.115.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env"] [unique_id "aRQ80J1cp_ouUvkFj0UWOwAAAQc"]
[Wed Nov 12 19:39:44.344933 2025] [:error] [pid 60095:tid 60115] [client 3.141.85.8:39764] [client 3.141.85.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRRyAHlw2elroagFF1o9eQAAAFA"]
[Wed Nov 12 23:28:13.398287 2025] [:error] [pid 60405:tid 60431] [client 195.178.110.159:49598] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRSnjXMGv_mlVi6mf5o4bAAAABc"]
[Thu Nov 13 01:24:03.093606 2025] [:error] [pid 12744:tid 12755] [client 195.178.110.159:54412] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRTCs51cp_ouUvkFj0W79gAAAQc"]
[Thu Nov 13 02:20:07.324744 2025] [:error] [pid 60180:tid 60191] [client 15.204.248.161:54776] [client 15.204.248.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style.php"] [unique_id "aRTP11hgd7ccS8EZg1qcoQAAAUk"]
[Thu Nov 13 02:20:08.794328 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 15.204.248.161:54778] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 04:48:26.695077 2025] [autoindex:error] [pid 51405:tid 51411] [client 35.87.170.246:44760] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 05:48:32.992179 2025] [proxy_fcgi:error] [pid 22224:tid 22280] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.094998 2025] [proxy_fcgi:error] [pid 22224:tid 22295] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.197823 2025] [proxy_fcgi:error] [pid 22224:tid 22299] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.293225 2025] [proxy_fcgi:error] [pid 22224:tid 22292] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.389434 2025] [proxy_fcgi:error] [pid 22224:tid 22286] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.489388 2025] [proxy_fcgi:error] [pid 22224:tid 22301] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.587446 2025] [proxy_fcgi:error] [pid 22224:tid 22297] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.680178 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.783495 2025] [proxy_fcgi:error] [pid 22224:tid 22302] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.876510 2025] [proxy_fcgi:error] [pid 22224:tid 22289] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:33.971655 2025] [proxy_fcgi:error] [pid 22224:tid 22284] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.069033 2025] [proxy_fcgi:error] [pid 22224:tid 22290] [client 194.5.82.26:52841] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.159040 2025] [:error] [pid 22224:tid 22283] [client 194.5.82.26:52841] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRUAsruEVuTj3a_UBfAA7AAAAIM"]
[Thu Nov 13 05:48:34.341593 2025] [proxy_fcgi:error] [pid 22222:tid 22250] [client 194.5.82.44:39205] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.435067 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 194.5.82.44:39205] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.530014 2025] [proxy_fcgi:error] [pid 22222:tid 22229] [client 194.5.82.44:39205] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.623632 2025] [proxy_fcgi:error] [pid 22222:tid 22232] [client 194.5.82.44:39205] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.718790 2025] [proxy_fcgi:error] [pid 22222:tid 22235] [client 194.5.82.44:39205] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:34.811195 2025] [:error] [pid 22222:tid 22238] [client 194.5.82.44:39205] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aRUAsjL-5qXvQuZkA4GjLwAAAAw"]
[Thu Nov 13 05:48:34.993262 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.091196 2025] [proxy_fcgi:error] [pid 22307:tid 22330] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.286712 2025] [proxy_fcgi:error] [pid 22307:tid 22310] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.380494 2025] [proxy_fcgi:error] [pid 22307:tid 22317] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.480459 2025] [proxy_fcgi:error] [pid 22307:tid 22322] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.576812 2025] [proxy_fcgi:error] [pid 22307:tid 22318] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.672981 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.765132 2025] [proxy_fcgi:error] [pid 22307:tid 22324] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:35.861608 2025] [proxy_fcgi:error] [pid 22307:tid 22325] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:36.358218 2025] [proxy_fcgi:error] [pid 22307:tid 22309] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:36.547105 2025] [proxy_fcgi:error] [pid 22307:tid 22333] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:36.640766 2025] [proxy_fcgi:error] [pid 22307:tid 22332] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:36.739604 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:36.834082 2025] [proxy_fcgi:error] [pid 22307:tid 22330] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:36.932396 2025] [proxy_fcgi:error] [pid 22307:tid 22319] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:37.027298 2025] [proxy_fcgi:error] [pid 22307:tid 22310] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:37.230025 2025] [proxy_fcgi:error] [pid 22307:tid 22322] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:37.325835 2025] [proxy_fcgi:error] [pid 22307:tid 22318] [client 194.5.82.40:36771] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:37.513303 2025] [:error] [pid 22307:tid 22314] [client 194.5.82.40:36771] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRUAtar7fLMQQanZ_9x4SgAAAMU"]
[Thu Nov 13 05:48:37.698833 2025] [proxy_fcgi:error] [pid 22307:tid 22312] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:37.905722 2025] [proxy_fcgi:error] [pid 22307:tid 22331] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:37.999380 2025] [proxy_fcgi:error] [pid 22307:tid 22329] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:38.242771 2025] [proxy_fcgi:error] [pid 22307:tid 22311] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:38.340422 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:38.433388 2025] [proxy_fcgi:error] [pid 22307:tid 22323] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:38.830162 2025] [proxy_fcgi:error] [pid 22307:tid 22319] [client 194.5.82.26:40213] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:38.923595 2025] [:error] [pid 22307:tid 22310] [client 194.5.82.26:40213] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRUAtqr7fLMQQanZ_9x4WQAAAME"]
[Thu Nov 13 05:48:39.134723 2025] [proxy_fcgi:error] [pid 22307:tid 22322] [client 194.5.82.38:54263] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:39.226908 2025] [proxy_fcgi:error] [pid 22307:tid 22318] [client 194.5.82.38:54263] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:39.323564 2025] [proxy_fcgi:error] [pid 22307:tid 22328] [client 194.5.82.38:54263] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:39.420259 2025] [proxy_fcgi:error] [pid 22307:tid 22327] [client 194.5.82.38:54263] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:39.516933 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.38:54263] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:39.613402 2025] [:error] [pid 22307:tid 22324] [client 194.5.82.38:54263] [client 194.5.82.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aRUAt6r7fLMQQanZ_9x4YAAAAM8"]
[Thu Nov 13 05:48:39.923781 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.079385 2025] [proxy_fcgi:error] [pid 22566:tid 22582] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.186906 2025] [proxy_fcgi:error] [pid 22566:tid 22578] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.289593 2025] [proxy_fcgi:error] [pid 22566:tid 22577] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.382915 2025] [proxy_fcgi:error] [pid 22566:tid 22571] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.479472 2025] [proxy_fcgi:error] [pid 22566:tid 22587] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.579096 2025] [proxy_fcgi:error] [pid 22566:tid 22580] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:40.676266 2025] [proxy_fcgi:error] [pid 22566:tid 22574] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.178979 2025] [proxy_fcgi:error] [pid 22566:tid 22584] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.280992 2025] [proxy_fcgi:error] [pid 22566:tid 22576] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.474378 2025] [proxy_fcgi:error] [pid 22566:tid 22579] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.568492 2025] [proxy_fcgi:error] [pid 22566:tid 22588] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.672792 2025] [proxy_fcgi:error] [pid 22566:tid 22575] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.766317 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:42.956455 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.052127 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.329120 2025] [proxy_fcgi:error] [pid 22566:tid 22577] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.423052 2025] [proxy_fcgi:error] [pid 22566:tid 22571] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.518642 2025] [proxy_fcgi:error] [pid 22566:tid 22573] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.619803 2025] [proxy_fcgi:error] [pid 22566:tid 22580] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.714260 2025] [proxy_fcgi:error] [pid 22566:tid 22574] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:43.935456 2025] [proxy_fcgi:error] [pid 22566:tid 22585] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:44.040472 2025] [proxy_fcgi:error] [pid 22566:tid 22581] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:44.133269 2025] [:error] [pid 22566:tid 22572] [client 194.5.82.45:47817] [client 194.5.82.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.45, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRUAvDfdqWaUbu3e06-MggAAAQQ"]
[Thu Nov 13 05:48:44.137108 2025] [proxy_fcgi:error] [pid 22566:tid 22572] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:44.433958 2025] [proxy_fcgi:error] [pid 22566:tid 22588] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:44.625834 2025] [proxy_fcgi:error] [pid 22566:tid 22575] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:44.813635 2025] [proxy_fcgi:error] [pid 22566:tid 22592] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:44.909475 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 194.5.82.45:47817] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:45.099522 2025] [:error] [pid 22566:tid 22582] [client 194.5.82.45:47817] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aRUAvTfdqWaUbu3e06-MjwAAAQ4"]
[Thu Nov 13 05:48:46.408474 2025] [proxy_fcgi:error] [pid 22222:tid 22231] [client 194.5.82.12:58657] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:46.608582 2025] [proxy_fcgi:error] [pid 22222:tid 22241] [client 194.5.82.12:58657] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:46.988196 2025] [:error] [pid 22222:tid 22237] [client 194.5.82.12:58657] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRUAvjL-5qXvQuZkA4GjSAAAAAs"]
[Thu Nov 13 05:48:48.256376 2025] [proxy_fcgi:error] [pid 22307:tid 22327] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:48.357961 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:48.460546 2025] [proxy_fcgi:error] [pid 22307:tid 22324] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:48.558488 2025] [proxy_fcgi:error] [pid 22307:tid 22325] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:48.655944 2025] [proxy_fcgi:error] [pid 22307:tid 22312] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:48.862127 2025] [proxy_fcgi:error] [pid 22307:tid 22331] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:48.968746 2025] [proxy_fcgi:error] [pid 22307:tid 22330] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.066259 2025] [proxy_fcgi:error] [pid 22307:tid 22311] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.166027 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.281846 2025] [proxy_fcgi:error] [pid 22307:tid 22313] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.377050 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.487116 2025] [proxy_fcgi:error] [pid 22307:tid 22317] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.682082 2025] [proxy_fcgi:error] [pid 22307:tid 22327] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:49.790135 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:50.307603 2025] [proxy_fcgi:error] [pid 22307:tid 22331] [client 194.5.82.35:31321] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:50.495371 2025] [:error] [pid 22307:tid 22311] [client 194.5.82.35:31321] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRUAwqr7fLMQQanZ_9x4iAAAAMI"]
[Thu Nov 13 05:48:50.777874 2025] [proxy_fcgi:error] [pid 22566:tid 22572] [client 194.5.82.9:24607] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:50.872067 2025] [proxy_fcgi:error] [pid 22566:tid 22585] [client 194.5.82.9:24607] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:50.973035 2025] [proxy_fcgi:error] [pid 22566:tid 22576] [client 194.5.82.9:24607] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:51.068281 2025] [:error] [pid 22566:tid 22588] [client 194.5.82.9:24607] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aRUAwzfdqWaUbu3e06-MrAAAARQ"]
[Thu Nov 13 05:48:51.411780 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 194.5.82.11:45279] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:51.506658 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.11:45279] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:51.602479 2025] [proxy_fcgi:error] [pid 22566:tid 22592] [client 194.5.82.11:45279] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:51.696096 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 194.5.82.11:45279] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:51.896357 2025] [:error] [pid 22566:tid 22571] [client 194.5.82.11:45279] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRUAwzfdqWaUbu3e06-MswAAAQM"]
[Thu Nov 13 05:48:52.079059 2025] [proxy_fcgi:error] [pid 22224:tid 22283] [client 194.5.82.41:49075] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:52.173792 2025] [proxy_fcgi:error] [pid 22224:tid 22291] [client 194.5.82.41:49075] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:52.269090 2025] [proxy_fcgi:error] [pid 22224:tid 22303] [client 194.5.82.41:49075] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:52.367241 2025] [proxy_fcgi:error] [pid 22224:tid 22296] [client 194.5.82.41:49075] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:52.463113 2025] [:error] [pid 22224:tid 22287] [client 194.5.82.41:49075] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aRUAxLuEVuTj3a_UBfABAAAAAIc"]
[Thu Nov 13 05:48:52.765976 2025] [proxy_fcgi:error] [pid 22222:tid 22250] [client 194.5.82.52:49185] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:52.968623 2025] [proxy_fcgi:error] [pid 22222:tid 22239] [client 194.5.82.52:49185] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:53.186408 2025] [proxy_fcgi:error] [pid 22222:tid 22238] [client 194.5.82.52:49185] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:53.568099 2025] [proxy_fcgi:error] [pid 22222:tid 22245] [client 194.5.82.52:49185] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:53.662588 2025] [:error] [pid 22222:tid 22236] [client 194.5.82.52:49185] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aRUAxTL-5qXvQuZkA4GjWgAAAAo"]
[Thu Nov 13 05:48:53.959717 2025] [proxy_fcgi:error] [pid 22566:tid 22588] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:54.061818 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:54.261438 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:55.809543 2025] [proxy_fcgi:error] [pid 22566:tid 22571] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:55.996788 2025] [proxy_fcgi:error] [pid 22566:tid 22581] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.089805 2025] [proxy_fcgi:error] [pid 22566:tid 22587] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.184120 2025] [proxy_fcgi:error] [pid 22566:tid 22583] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.370437 2025] [proxy_fcgi:error] [pid 22566:tid 22585] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.465701 2025] [proxy_fcgi:error] [pid 22566:tid 22576] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.559411 2025] [proxy_fcgi:error] [pid 22566:tid 22588] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.657145 2025] [proxy_fcgi:error] [pid 22566:tid 22569] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.750299 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:56.843160 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.37:63505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:57.124065 2025] [:error] [pid 22566:tid 22578] [client 194.5.82.37:63505] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRUAyTfdqWaUbu3e06-M1AAAAQo"]
[Thu Nov 13 05:48:57.312008 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:57.407198 2025] [proxy_fcgi:error] [pid 22307:tid 22315] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:57.501218 2025] [proxy_fcgi:error] [pid 22307:tid 22329] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:57.701426 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:57.797656 2025] [proxy_fcgi:error] [pid 22307:tid 22323] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:58.084995 2025] [proxy_fcgi:error] [pid 22307:tid 22327] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:58.271040 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:58.364644 2025] [proxy_fcgi:error] [pid 22307:tid 22328] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:58.662411 2025] [proxy_fcgi:error] [pid 22307:tid 22331] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:58.762996 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:58.958046 2025] [proxy_fcgi:error] [pid 22307:tid 22329] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:59.051828 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 194.5.82.8:25209] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:59.239925 2025] [:error] [pid 22307:tid 22317] [client 194.5.82.8:25209] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aRUAy6r7fLMQQanZ_9x4qgAAAMg"]
[Thu Nov 13 05:48:59.429419 2025] [:error] [pid 22222:tid 22246] [client 194.5.82.42:24501] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aRUAyzL-5qXvQuZkA4GjYAAAABQ"]
[Thu Nov 13 05:48:59.630026 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 194.5.82.43:27071] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:48:59.927720 2025] [proxy_fcgi:error] [pid 22223:tid 22270] [client 194.5.82.43:27071] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:00.092132 2025] [:error] [pid 22223:tid 22277] [client 194.5.82.43:27071] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRUAzN6it_tNBGH9EAEXowAAAFg"]
[Thu Nov 13 05:49:00.292758 2025] [proxy_fcgi:error] [pid 22307:tid 22322] [client 194.5.82.18:29127] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:00.389507 2025] [proxy_fcgi:error] [pid 22307:tid 22327] [client 194.5.82.18:29127] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:00.585707 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.18:29127] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:00.696520 2025] [:error] [pid 22307:tid 22319] [client 194.5.82.18:29127] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aRUAzKr7fLMQQanZ_9x4rwAAAMo"]
[Thu Nov 13 05:49:00.987853 2025] [proxy_fcgi:error] [pid 22222:tid 22250] [client 194.5.82.16:21395] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:01.328536 2025] [:error] [pid 22222:tid 22232] [client 194.5.82.16:21395] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRUAzTL-5qXvQuZkA4GjZAAAAAY"]
[Thu Nov 13 05:49:01.530860 2025] [proxy_fcgi:error] [pid 22223:tid 22266] [client 194.5.82.9:45383] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:01.638665 2025] [proxy_fcgi:error] [pid 22223:tid 22267] [client 194.5.82.9:45383] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:01.735181 2025] [:error] [pid 22223:tid 22261] [client 194.5.82.9:45383] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRUAzd6it_tNBGH9EAEXpgAAAEg"]
[Thu Nov 13 05:49:01.955150 2025] [proxy_fcgi:error] [pid 22224:tid 22286] [client 194.5.82.52:58835] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:02.100306 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 194.5.82.52:58835] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:02.252872 2025] [:error] [pid 22224:tid 22302] [client 194.5.82.52:58835] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aRUAzruEVuTj3a_UBfABDgAAAJY"]
[Thu Nov 13 05:49:04.311758 2025] [proxy_fcgi:error] [pid 22222:tid 22236] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:04.558768 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:04.757314 2025] [proxy_fcgi:error] [pid 22222:tid 22248] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:04.902002 2025] [proxy_fcgi:error] [pid 22222:tid 22242] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:05.053766 2025] [proxy_fcgi:error] [pid 22222:tid 22237] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:05.972068 2025] [proxy_fcgi:error] [pid 22222:tid 22234] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:06.070670 2025] [proxy_fcgi:error] [pid 22222:tid 22244] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:06.273533 2025] [proxy_fcgi:error] [pid 22222:tid 22233] [client 194.5.82.30:23619] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:06.378689 2025] [:error] [pid 22222:tid 22250] [client 194.5.82.30:23619] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aRUA0jL-5qXvQuZkA4GjeAAAABg"]
[Thu Nov 13 05:49:06.599798 2025] [proxy_fcgi:error] [pid 22223:tid 22273] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:06.831933 2025] [proxy_fcgi:error] [pid 22223:tid 22276] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:06.931635 2025] [proxy_fcgi:error] [pid 22223:tid 22260] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.040913 2025] [proxy_fcgi:error] [pid 22223:tid 22255] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.148008 2025] [proxy_fcgi:error] [pid 22223:tid 22275] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.252483 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.350072 2025] [proxy_fcgi:error] [pid 22223:tid 22264] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.460480 2025] [proxy_fcgi:error] [pid 22223:tid 22256] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.566612 2025] [proxy_fcgi:error] [pid 22223:tid 22259] [client 194.5.82.6:55415] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:07.656388 2025] [:error] [pid 22223:tid 22270] [client 194.5.82.6:55415] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "aRUA096it_tNBGH9EAEXswAAAFE"]
[Thu Nov 13 05:49:08.098182 2025] [proxy_fcgi:error] [pid 22566:tid 22573] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:08.207716 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:08.436709 2025] [proxy_fcgi:error] [pid 22566:tid 22570] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:08.540519 2025] [proxy_fcgi:error] [pid 22566:tid 22587] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:08.974427 2025] [proxy_fcgi:error] [pid 22566:tid 22585] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:09.078090 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:09.179718 2025] [proxy_fcgi:error] [pid 22566:tid 22584] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:10.588242 2025] [proxy_fcgi:error] [pid 22566:tid 22572] [client 194.5.82.19:56957] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:10.681944 2025] [:error] [pid 22566:tid 22582] [client 194.5.82.19:56957] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aRUA1jfdqWaUbu3e06-NBgAAAQ4"]
[Thu Nov 13 05:49:10.867250 2025] [proxy_fcgi:error] [pid 22222:tid 22227] [client 194.5.82.51:28187] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:10.965124 2025] [proxy_fcgi:error] [pid 22222:tid 22241] [client 194.5.82.51:28187] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:11.064336 2025] [:error] [pid 22222:tid 22245] [client 194.5.82.51:28187] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRUA1zL-5qXvQuZkA4GjgAAAABM"]
[Thu Nov 13 05:49:12.432144 2025] [proxy_fcgi:error] [pid 22223:tid 22261] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:12.541339 2025] [proxy_fcgi:error] [pid 22223:tid 22265] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:12.638923 2025] [proxy_fcgi:error] [pid 22223:tid 22253] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:12.740488 2025] [proxy_fcgi:error] [pid 22223:tid 22269] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:12.837603 2025] [proxy_fcgi:error] [pid 22223:tid 22272] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:12.942317 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:13.250140 2025] [proxy_fcgi:error] [pid 22223:tid 22262] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:13.459744 2025] [proxy_fcgi:error] [pid 22223:tid 22276] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:13.562440 2025] [proxy_fcgi:error] [pid 22223:tid 22260] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:13.782794 2025] [proxy_fcgi:error] [pid 22223:tid 22257] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:13.987454 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 194.5.82.11:49593] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:14.083529 2025] [:error] [pid 22223:tid 22264] [client 194.5.82.11:49593] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/about.php"] [unique_id "aRUA2t6it_tNBGH9EAEXxgAAAEs"]
[Thu Nov 13 05:49:14.281740 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 194.5.82.44:39839] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:14.388782 2025] [proxy_fcgi:error] [pid 22222:tid 22243] [client 194.5.82.44:39839] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:14.496932 2025] [proxy_fcgi:error] [pid 22222:tid 22248] [client 194.5.82.44:39839] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:14.798296 2025] [proxy_fcgi:error] [pid 22222:tid 22249] [client 194.5.82.44:39839] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:14.887805 2025] [:error] [pid 22222:tid 22235] [client 194.5.82.44:39839] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/ff2.php"] [unique_id "aRUA2jL-5qXvQuZkA4GjhwAAAAk"]
[Thu Nov 13 05:49:15.171084 2025] [proxy_fcgi:error] [pid 22307:tid 22329] [client 194.5.82.11:31579] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:15.263181 2025] [proxy_fcgi:error] [pid 22307:tid 22315] [client 194.5.82.11:31579] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:15.356609 2025] [proxy_fcgi:error] [pid 22307:tid 22321] [client 194.5.82.11:31579] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:15.552731 2025] [proxy_fcgi:error] [pid 22307:tid 22322] [client 194.5.82.11:31579] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:15.649323 2025] [:error] [pid 22307:tid 22327] [client 194.5.82.11:31579] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRUA26r7fLMQQanZ_9x4yQAAANI"]
[Thu Nov 13 05:49:23.218470 2025] [:error] [pid 22566:tid 22578] [client 194.5.82.17:38295] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRUA4zfdqWaUbu3e06-NHgAAAQo"]
[Thu Nov 13 05:49:23.760657 2025] [proxy_fcgi:error] [pid 22566:tid 22586] [client 194.5.82.19:38283] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:23.851687 2025] [:error] [pid 22566:tid 22576] [client 194.5.82.19:38283] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aRUA4zfdqWaUbu3e06-NJQAAAQg"]
[Thu Nov 13 05:49:24.169508 2025] [proxy_fcgi:error] [pid 22223:tid 22275] [client 194.5.82.30:63819] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:24.263596 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 194.5.82.30:63819] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:24.366724 2025] [proxy_fcgi:error] [pid 22223:tid 22264] [client 194.5.82.30:63819] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:24.466103 2025] [proxy_fcgi:error] [pid 22223:tid 22256] [client 194.5.82.30:63819] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:24.555532 2025] [:error] [pid 22223:tid 22259] [client 194.5.82.30:63819] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aRUA5N6it_tNBGH9EAEX2AAAAEY"]
[Thu Nov 13 05:49:24.737367 2025] [:error] [pid 22307:tid 22324] [client 194.5.82.19:56981] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRUA5Kr7fLMQQanZ_9x42QAAAM8"]
[Thu Nov 13 05:49:24.941033 2025] [proxy_fcgi:error] [pid 22224:tid 22301] [client 194.5.82.48:60505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:25.041797 2025] [proxy_fcgi:error] [pid 22224:tid 22295] [client 194.5.82.48:60505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:25.141369 2025] [proxy_fcgi:error] [pid 22224:tid 22291] [client 194.5.82.48:60505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:25.350796 2025] [proxy_fcgi:error] [pid 22224:tid 22303] [client 194.5.82.48:60505] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:25.454005 2025] [:error] [pid 22224:tid 22297] [client 194.5.82.48:60505] [client 194.5.82.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRUA5buEVuTj3a_UBfABLAAAAJE"]
[Thu Nov 13 05:49:25.651042 2025] [proxy_fcgi:error] [pid 22307:tid 22315] [client 194.5.82.22:64557] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:25.845624 2025] [proxy_fcgi:error] [pid 22307:tid 22325] [client 194.5.82.22:64557] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:25.952467 2025] [:error] [pid 22307:tid 22326] [client 194.5.82.22:64557] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/ff2.php"] [unique_id "aRUA5ar7fLMQQanZ_9x43wAAANE"]
[Thu Nov 13 05:49:26.142338 2025] [proxy_fcgi:error] [pid 22224:tid 22288] [client 194.5.82.43:48657] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:26.435189 2025] [proxy_fcgi:error] [pid 22224:tid 22281] [client 194.5.82.43:48657] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:26.529328 2025] [proxy_fcgi:error] [pid 22224:tid 22287] [client 194.5.82.43:48657] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:26.626513 2025] [proxy_fcgi:error] [pid 22224:tid 22280] [client 194.5.82.43:48657] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:27.039276 2025] [:error] [pid 22224:tid 22301] [client 194.5.82.43:48657] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRUA57uEVuTj3a_UBfABOgAAAJU"]
[Thu Nov 13 05:49:27.243769 2025] [proxy_fcgi:error] [pid 22307:tid 22310] [client 194.5.82.9:27995] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:27.335324 2025] [:error] [pid 22307:tid 22327] [client 194.5.82.9:27995] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aRUA56r7fLMQQanZ_9x44wAAANI"]
[Thu Nov 13 05:49:27.743070 2025] [proxy_fcgi:error] [pid 22307:tid 22324] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:27.835829 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:27.945922 2025] [proxy_fcgi:error] [pid 22307:tid 22315] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:28.348061 2025] [proxy_fcgi:error] [pid 22307:tid 22311] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:28.459018 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:28.554802 2025] [proxy_fcgi:error] [pid 22307:tid 22317] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:28.658928 2025] [proxy_fcgi:error] [pid 22307:tid 22310] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:28.756746 2025] [proxy_fcgi:error] [pid 22307:tid 22327] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.010119 2025] [proxy_fcgi:error] [pid 22307:tid 22330] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.118106 2025] [proxy_fcgi:error] [pid 22307:tid 22332] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.226456 2025] [proxy_fcgi:error] [pid 22307:tid 22333] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.339082 2025] [proxy_fcgi:error] [pid 22307:tid 22312] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.445337 2025] [proxy_fcgi:error] [pid 22307:tid 22324] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.637709 2025] [proxy_fcgi:error] [pid 22307:tid 22315] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.732251 2025] [proxy_fcgi:error] [pid 22307:tid 22325] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:29.825608 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 194.5.82.25:59717] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:30.032041 2025] [:error] [pid 22307:tid 22311] [client 194.5.82.25:59717] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-includes/class-walker-category.php"] [unique_id "aRUA6qr7fLMQQanZ_9x4_wAAAMI"]
[Thu Nov 13 05:49:31.479010 2025] [:error] [pid 22566:tid 22573] [client 194.5.82.7:24617] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aRUA6zfdqWaUbu3e06-NNAAAAQU"]
[Thu Nov 13 05:49:31.661469 2025] [proxy_fcgi:error] [pid 22566:tid 22585] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:31.762010 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:32.195763 2025] [proxy_fcgi:error] [pid 22566:tid 22577] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:32.404084 2025] [proxy_fcgi:error] [pid 22566:tid 22582] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:32.499661 2025] [proxy_fcgi:error] [pid 22566:tid 22570] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:32.611759 2025] [proxy_fcgi:error] [pid 22566:tid 22574] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:32.906507 2025] [proxy_fcgi:error] [pid 22566:tid 22587] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:32.999649 2025] [proxy_fcgi:error] [pid 22566:tid 22569] [client 194.5.82.52:47937] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:33.097470 2025] [:error] [pid 22566:tid 22585] [client 194.5.82.52:47937] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aRUA7TfdqWaUbu3e06-NSAAAARE"]
[Thu Nov 13 05:49:33.290136 2025] [:error] [pid 22222:tid 22240] [client 194.5.82.16:25599] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-includes/class-wp-block-pattern-categories-registry.php"] [unique_id "aRUA7TL-5qXvQuZkA4GjmAAAAA4"]
[Thu Nov 13 05:49:33.601485 2025] [proxy_fcgi:error] [pid 22224:tid 22281] [client 194.5.82.165:29039] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:33.753064 2025] [proxy_fcgi:error] [pid 22224:tid 22287] [client 194.5.82.165:29039] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:34.042701 2025] [proxy_fcgi:error] [pid 22224:tid 22299] [client 194.5.82.165:29039] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:43.501305 2025] [proxy_fcgi:error] [pid 22224:tid 22288] [client 194.5.82.165:29039] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:49:46.127816 2025] [proxy_fcgi:error] [pid 22566:tid 22578] [client 194.5.82.15:49407] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 06:02:54.101080 2025] [autoindex:error] [pid 22224:tid 22300] [client 81.44.186.203:51652] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 06:48:54.795635 2025] [autoindex:error] [pid 22224:tid 22302] [client 64.44.38.244:44124] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 07:28:10.719486 2025] [autoindex:error] [pid 22566:tid 22579] [client 172.93.148.164:53744] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 07:42:50.052265 2025] [:error] [pid 22307:tid 22329] [client 85.203.36.132:21951] [client 85.203.36.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aRUbeqr7fLMQQanZ_9yhpgAAANQ"]
[Thu Nov 13 08:17:58.465619 2025] [autoindex:error] [pid 22223:tid 22276] [client 74.7.227.201:51462] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 08:34:14.757146 2025] [autoindex:error] [pid 22307:tid 22321] [client 74.7.227.68:56120] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 08:38:50.836933 2025] [autoindex:error] [pid 22566:tid 22568] [client 15.235.59.82:55149] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 10:23:04.447110 2025] [:error] [pid 32822:tid 32846] [client 62.60.131.125:55154] [client 62.60.131.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aRVBCPTm5EvopNqK8LEkWAAAABQ"]
[Thu Nov 13 10:23:07.331298 2025] [:error] [pid 32742:tid 32763] [client 62.60.131.125:56781] [client 62.60.131.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aRVBC4q0YAqHEz6MsZH51gAAANM"]
[Thu Nov 13 10:30:48.582124 2025] [:error] [pid 62303:tid 62317] [client 43.135.133.194:46818] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRVC2L-hlFTtVrZw8jA3vQAAAIo"]
[Thu Nov 13 14:16:45.805520 2025] [autoindex:error] [pid 6086:tid 6109] [client 35.81.151.75:54868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 15:30:18.109684 2025] [:error] [pid 6086:tid 6092] [client 180.110.203.108:42061] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRWJCn9_6CRZzjZnAe0D6gAAAQM"]
[Thu Nov 13 16:20:57.525248 2025] [autoindex:error] [pid 62215:tid 62227] [client 217.154.14.189:57325] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 17:33:01.328942 2025] [:error] [pid 62217:tid 62287] [client 43.167.239.66:45486] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRWlzRjGU3T9wKBmdNcySQAAAE0"]
[Thu Nov 13 19:56:28.206486 2025] [autoindex:error] [pid 62303:tid 62311] [client 3.83.179.145:43758] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 19:56:29.769445 2025] [autoindex:error] [pid 44354:tid 44380] [client 92.240.204.93:42521] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 21:32:46.943852 2025] [:error] [pid 5086:tid 5108] [client 104.234.19.25:65107] [client 104.234.19.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/postnews.php"] [unique_id "aRXd_h_dsYLFCHw574ib9QAAARM"]
[Thu Nov 13 21:32:47.433361 2025] [:error] [pid 4993:tid 5029] [client 193.36.224.11:45461] [client 193.36.224.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRXd_8l_cC0Js5xNCU08QQAAAAM"]
[Thu Nov 13 21:32:47.924211 2025] [:error] [pid 4994:tid 5053] [client 136.144.19.193:20287] [client 136.144.19.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRXd_wVaYoYtjfBbabUEzgAAAIA"]
[Thu Nov 13 22:10:19.710699 2025] [:error] [pid 4994:tid 5064] [client 106.227.49.113:46336] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRXmywVaYoYtjfBbabUUyAAAAIs"]
[Thu Nov 13 22:21:05.595709 2025] [autoindex:error] [pid 5086:tid 5103] [client 3.83.179.145:35360] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 22:21:06.631033 2025] [autoindex:error] [pid 4993:tid 5039] [client 136.227.184.207:42363] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:58.942070 2025] [:error] [pid 19872:tid 19899] [client 43.173.1.57:53358] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRYAususrN1b6ZJ_vbtE_QAAAFY"]
[Fri Nov 14 00:13:45.373728 2025] [autoindex:error] [pid 4993:tid 5030] [client 35.205.235.254:56432] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:40:28.572833 2025] [autoindex:error] [pid 56586:tid 56591] [client 3.83.179.145:47866] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:40:29.929177 2025] [autoindex:error] [pid 56495:tid 56506] [client 136.227.172.172:33395] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:57:17.010382 2025] [autoindex:error] [pid 56586:tid 56607] [client 64.140.136.70:12994] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:57:36.754637 2025] [autoindex:error] [pid 49246:tid 49262] [client 205.169.39.25:53776] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:05:56.685562 2025] [autoindex:error] [pid 56496:tid 56550] [client 205.169.39.26:34709] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:24:42.319275 2025] [:error] [pid 56496:tid 56536] [client 43.133.253.253:40092] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRYUWuh2ME7eucGJGGK6TQAAAAg"]
[Fri Nov 14 02:11:00.033608 2025] [:error] [pid 56495:tid 56522] [client 170.106.84.136:46880] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRYfNFwO8wZZL5WJceXSxwAAANc"]
[Fri Nov 14 02:12:33.682281 2025] [autoindex:error] [pid 56496:tid 56532] [client 36.255.98.220:57212] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 02:43:12.252953 2025] [autoindex:error] [pid 49246:tid 49274] [client 3.83.179.145:43698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 02:43:13.663258 2025] [autoindex:error] [pid 56586:tid 56591] [client 193.46.204.162:44349] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 03:45:08.168601 2025] [:error] [pid 56495:tid 56500] [client 2.58.56.199:50067] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/postnews.php"] [unique_id "aRY1RFwO8wZZL5WJceX2TgAAAME"]
[Fri Nov 14 03:45:08.752922 2025] [:error] [pid 49246:tid 49266] [client 2.58.56.199:56476] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRY1RN-hdG_ZJBT6alMm9wAAAFA"]
[Fri Nov 14 03:45:09.275088 2025] [:error] [pid 56497:tid 56561] [client 2.58.56.199:59904] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRY1RXsatOTNIa5GK3uOQwAAAIY"]
[Fri Nov 14 09:01:24.228922 2025] [autoindex:error] [pid 47242:tid 47261] [client 49.13.95.119:45332] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 09:42:46.734404 2025] [:error] [pid 47630:tid 47636] [client 136.144.19.200:53355] [client 136.144.19.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aRaJFsxXXNBfWgpfVJ6JmwAAAQQ"]
[Fri Nov 14 09:42:47.214379 2025] [:error] [pid 47154:tid 47181] [client 136.144.19.172:21853] [client 136.144.19.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRaJF0ijA13A3g3ATrK64gAAABY"]
[Fri Nov 14 09:42:47.696792 2025] [:error] [pid 47242:tid 47254] [client 104.234.19.21:61403] [client 104.234.19.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRaJF1PNnvrux3OMagzc2AAAAMk"]
[Fri Nov 14 10:05:43.721877 2025] [:error] [pid 47242:tid 47257] [client 5.101.157.234:22953] [client 5.101.157.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style.php"] [unique_id "aRaOd1PNnvrux3OMagzlrgAAAMw"]
[Fri Nov 14 10:05:45.197307 2025] [proxy_fcgi:error] [pid 47630:tid 47638] [client 5.101.157.234:22957] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 10:05:46.357116 2025] [:error] [pid 47630:tid 47655] [client 5.101.157.234:29459] [client 5.101.157.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style.php"] [unique_id "aRaOesxXXNBfWgpfVJ6S4QAAARc"]
[Fri Nov 14 10:05:47.243446 2025] [proxy_fcgi:error] [pid 47156:tid 47231] [client 5.101.157.234:11483] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 12:42:25.478677 2025] [autoindex:error] [pid 16573:tid 16581] [client 110.150.48.112:37070] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 14:09:03.413267 2025] [:error] [pid 16575:tid 16646] [client 66.249.64.9:35910] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nohu/xxx%E0%B8%9B%E0%B9%88%E0%B8%B2%20%20%E0%B8%A5%E0%B8%B1%E0%B8%9A%20%E0%B8%A1%E0%B8%AD%E0%B9%80%E0%B8%95%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B9%84%E0%B8%8B%E0%B8%84%E0%B9%8C.html"] [unique_id "aRbHf-6qT670YxigvbA4ngAAAMw"]
[Fri Nov 14 16:35:42.274454 2025] [:error] [pid 16671:tid 16681] [client 103.184.94.134:17691] [client 103.184.94.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.184.94.134, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRbp3jsoHwEAmeIzZXA21QAAAQQ"]
[Fri Nov 14 16:35:42.288400 2025] [proxy_fcgi:error] [pid 16671:tid 16681] [client 103.184.94.134:17691] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 17:01:24.869105 2025] [:error] [pid 16709:tid 16728] [client 182.42.105.144:53478] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRbv5KNdzfVNC4oipLVJygAAAVE"]
[Fri Nov 14 17:12:35.967349 2025] [autoindex:error] [pid 16709:tid 16713] [client 47.128.43.224:54472] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 17:16:47.082252 2025] [autoindex:error] [pid 16575:tid 16651] [client 198.240.126.211:41849] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 17:20:36.561310 2025] [autoindex:error] [pid 16573:tid 16590] [client 49.197.229.223:51955] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 17:20:39.453506 2025] [autoindex:error] [pid 16575:tid 16636] [client 1.123.58.12:43643] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 18:27:19.068200 2025] [autoindex:error] [pid 16574:tid 16614] [client 3.81.208.94:37678] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 18:27:19.478758 2025] [autoindex:error] [pid 1170:tid 1176] [client 3.81.208.94:53398] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 21:03:38.055176 2025] [autoindex:error] [pid 16575:tid 16646] [client 185.39.19.49:49736] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Nov 14 21:03:38.618095 2025] [autoindex:error] [pid 16575:tid 16656] [client 185.39.19.49:50057] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Nov 14 21:03:39.184472 2025] [autoindex:error] [pid 16574:tid 16618] [client 185.39.19.49:50645] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Nov 14 21:03:39.746441 2025] [autoindex:error] [pid 16573:tid 16579] [client 185.39.19.49:51329] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Nov 14 23:08:18.835268 2025] [:error] [pid 1170:tid 1176] [client 43.157.168.43:36988] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRdF4g5pkvzCDzzjItS3UgAAAAQ"]
[Fri Nov 14 23:11:25.796601 2025] [autoindex:error] [pid 16573:tid 16584] [client 66.249.64.7:52290] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 00:35:59.970271 2025] [autoindex:error] [pid 45995:tid 46003] [client 45.156.128.167:56317] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 01:44:25.492123 2025] [:error] [pid 45907:tid 45925] [client 45.153.34.41:55550] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRdqeVAqmYxCpnT9gJGLFQAAAU4"]
[Sat Nov 15 01:51:36.262164 2025] [:error] [pid 18513:tid 18529] [client 43.167.239.66:52044] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRdsKPc94upQFzRWlUnT7QAAAEs"]
[Sat Nov 15 05:01:40.888197 2025] [autoindex:error] [pid 37318:tid 37369] [client 3.254.67.68:45976] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 05:52:53.006499 2025] [:error] [pid 27910:tid 27942] [client 125.75.66.97:41876] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRektY6e1LusHMYkS7ZXBQAAAEE"]
[Sat Nov 15 06:07:17.578669 2025] [:error] [pid 27997:tid 28011] [client 3.35.9.160:38516] [client 3.35.9.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aReoFdpja_6cDxKbxFkjhgAAAMw"]
[Sat Nov 15 06:07:18.191797 2025] [autoindex:error] [pid 37318:tid 37381] [client 3.35.9.160:38532] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 06:08:18.335077 2025] [autoindex:error] [pid 27910:tid 27952] [client 35.205.163.48:38498] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 07:23:16.637938 2025] [autoindex:error] [pid 27997:tid 28007] [client 108.130.148.35:49076] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 08:03:32.922262 2025] [autoindex:error] [pid 37318:tid 37378] [client 34.121.233.146:52146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 08:13:47.270918 2025] [:error] [pid 37318:tid 37388] [client 43.135.133.194:60408] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRfFu-gM1rHoEAqoQDdv0QAAARY"]
[Sat Nov 15 09:03:14.776360 2025] [autoindex:error] [pid 27911:tid 27970] [client 45.234.22.8:33095] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 09:18:15.275866 2025] [autoindex:error] [pid 20346:tid 20367] [client 165.227.68.64:35302] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 09:26:23.637913 2025] [:error] [pid 27909:tid 27916] [client 18.234.116.177:34686] [client 18.234.116.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRfWvyTfZ6B57n8HepXOjgAAAAM"]
[Sat Nov 15 09:26:59.535800 2025] [autoindex:error] [pid 19959:tid 19967] [client 157.245.117.219:39204] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 10:06:39.030473 2025] [:error] [pid 20654:tid 20673] [client 49.51.183.75:34724] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRfgL3cS7eC8vO76_ydDFAAAA5A"]
[Sat Nov 15 11:07:54.160513 2025] [:error] [pid 22765:tid 22788] [client 35.89.219.217:39840] [client 35.89.219.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRfuiqbrQzjuZmPIWDaTVAAAApI"]
[Sat Nov 15 11:07:55.106598 2025] [autoindex:error] [pid 19959:tid 19981] [client 35.89.219.217:39848] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 11:24:09.295812 2025] [:error] [pid 22765:tid 22777] [client 35.177.57.58:45832] [client 35.177.57.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aRfyWabrQzjuZmPIWDaWegAAAoc"]
[Sat Nov 15 11:24:10.454297 2025] [autoindex:error] [pid 20654:tid 20663] [client 35.177.57.58:45848] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 11:30:58.332248 2025] [:error] [pid 20654:tid 20670] [client 54.89.190.89:45382] [client 54.89.190.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRfz8ncS7eC8vO76_ydhlwAAA40"]
[Sat Nov 15 11:30:59.207829 2025] [autoindex:error] [pid 22765:tid 22775] [client 54.89.190.89:45396] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 11:45:25.775364 2025] [:error] [pid 20654:tid 20659] [client 18.169.171.46:38832] [client 18.169.171.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aRf3VXcS7eC8vO76_ydmpwAAA4I"]
[Sat Nov 15 11:45:27.245035 2025] [autoindex:error] [pid 19959:tid 19967] [client 18.169.171.46:38848] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 12:06:38.487941 2025] [:error] [pid 27909:tid 27932] [client 36.111.67.189:47639] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRf8TiTfZ6B57n8HepXs0AAAABM"]
[Sat Nov 15 12:09:26.997157 2025] [:error] [pid 20654:tid 20658] [client 138.197.23.42:64858] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydtoQAAA4E"]
[Sat Nov 15 12:09:27.426478 2025] [:error] [pid 22613:tid 22627] [client 138.197.23.42:65011] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRf89yoyR3cDsIRGPRl8cAAAAgw"]
[Sat Nov 15 12:09:27.846227 2025] [:error] [pid 19961:tid 20011] [client 138.197.23.42:65191] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRf89zar7Si-84EApVQ2awAAAdI"]
[Sat Nov 15 12:09:28.277881 2025] [:error] [pid 20313:tid 20319] [client 138.197.23.42:56039] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRf8-BI9DXIgPadBLUZSSQAAAsM"]
[Sat Nov 15 12:09:28.704693 2025] [:error] [pid 19961:tid 20015] [client 138.197.23.42:52413] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRf8-Dar7Si-84EApVQ2dQAAAdY"]
[Sat Nov 15 12:32:45.174029 2025] [:error] [pid 20654:tid 20676] [client 216.24.219.38:55197] [client 216.24.219.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aRgCbXcS7eC8vO76_yd1PAAAA5M"]
[Sat Nov 15 12:32:45.665309 2025] [:error] [pid 20654:tid 20661] [client 193.36.224.152:41671] [client 193.36.224.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRgCbXcS7eC8vO76_yd1QQAAA4Q"]
[Sat Nov 15 12:32:46.165659 2025] [:error] [pid 19959:tid 19989] [client 216.24.219.102:60675] [client 216.24.219.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRgCbsjejiTUP1-IawOFwwAAAZc"]
[Sat Nov 15 12:35:31.045745 2025] [:error] [pid 20654:tid 20665] [client 3.236.211.235:33454] [client 3.236.211.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aRgDE3cS7eC8vO76_yd19wAAA4g"]
[Sat Nov 15 12:35:32.093802 2025] [autoindex:error] [pid 20654:tid 20681] [client 3.236.211.235:33462] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 12:41:09.641678 2025] [:error] [pid 27911:tid 27976] [client 13.202.43.83:44526] [client 13.202.43.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aRgEZcGzUdrhGBIfiKQrfgAAAIg"]
[Sat Nov 15 12:41:10.277446 2025] [autoindex:error] [pid 20654:tid 20662] [client 13.202.43.83:44530] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 14:13:29.801088 2025] [:error] [pid 20654:tid 20680] [client 18.234.116.177:45834] [client 18.234.116.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aRgaCXcS7eC8vO76_yeXVQAAA5c"]
[Sat Nov 15 14:14:01.073011 2025] [:error] [pid 19959:tid 19973] [client 49.51.183.75:52546] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRgaKcjejiTUP1-IawOeOAAAAYc"]
[Sat Nov 15 14:28:03.625505 2025] [autoindex:error] [pid 27909:tid 27919] [client 146.112.163.43:41726] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 14:44:23.175888 2025] [autoindex:error] [pid 27997:tid 28008] [client 3.85.86.19:55102] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 14:44:23.628320 2025] [autoindex:error] [pid 19959:tid 19976] [client 134.199.74.74:41887] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 16:58:26.548208 2025] [autoindex:error] [pid 22613:tid 22630] [client 5.133.192.167:53369] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 17:10:56.180782 2025] [autoindex:error] [pid 22613:tid 22633] [client 3.85.86.19:41774] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 17:10:57.081244 2025] [autoindex:error] [pid 19959:tid 19972] [client 134.199.95.92:35759] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 18:45:05.983602 2025] [:error] [pid 20313:tid 20318] [client 49.51.203.164:33322] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRhZsRI9DXIgPadBLUaRlQAAAsI"]
[Sat Nov 15 19:27:34.675877 2025] [autoindex:error] [pid 19959:tid 19970] [client 62.129.2.2:26720] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 20:07:06.294507 2025] [autoindex:error] [pid 19961:tid 20005] [client 3.85.86.19:33948] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 20:07:08.266873 2025] [autoindex:error] [pid 27911:tid 27991] [client 45.80.116.58:33035] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 20:26:28.087497 2025] [:error] [pid 20654:tid 20669] [client 45.134.79.103:64100] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRhxdHcS7eC8vO76_ycI7QAAA4w"]
[Sat Nov 15 20:26:28.734489 2025] [:error] [pid 27911:tid 27989] [client 45.134.79.103:64293] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRhxdMGzUdrhGBIfiKR2BQAAAJU"]
[Sat Nov 15 20:26:29.372086 2025] [:error] [pid 27909:tid 27932] [client 45.134.79.103:64448] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdSTfZ6B57n8HepU9swAAABM"]
[Sat Nov 15 21:39:57.714837 2025] [autoindex:error] [pid 27997:tid 28019] [client 54.190.8.48:43336] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 22:02:08.125257 2025] [autoindex:error] [pid 20654:tid 20672] [client 3.85.86.19:50706] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 22:02:09.515501 2025] [autoindex:error] [pid 20654:tid 20673] [client 136.227.185.6:40941] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 00:50:45.223468 2025] [autoindex:error] [pid 20346:tid 20365] [client 54.198.84.173:56254] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 01:02:20.133894 2025] [autoindex:error] [pid 27909:tid 27929] [client 54.198.84.173:34354] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 01:16:52.069640 2025] [autoindex:error] [pid 19959:tid 19968] [client 144.31.87.8:45999] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 01:16:53.776719 2025] [autoindex:error] [pid 19959:tid 19984] [client 144.31.87.8:45999] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 02:38:18.094672 2025] [:error] [pid 27911:tid 27979] [client 43.165.67.57:36090] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRjImsGzUdrhGBIfiKShRwAAAIs"]
[Sun Nov 16 03:23:18.484500 2025] [autoindex:error] [pid 27972:tid 27989] [client 45.132.49.182:58161] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 16 03:23:19.049672 2025] [autoindex:error] [pid 27972:tid 27982] [client 45.132.49.182:65052] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 16 03:23:19.614413 2025] [autoindex:error] [pid 27972:tid 27985] [client 45.132.49.182:52632] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 16 03:23:20.189240 2025] [autoindex:error] [pid 27972:tid 27981] [client 45.132.49.182:58327] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 16 06:14:19.261084 2025] [autoindex:error] [pid 52469:tid 52486] [client 34.221.197.72:37096] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 07:28:26.785672 2025] [proxy_fcgi:error] [pid 52471:tid 52545] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:27.032605 2025] [proxy_fcgi:error] [pid 52471:tid 52539] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:27.202272 2025] [proxy_fcgi:error] [pid 52471:tid 52544] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:27.398728 2025] [proxy_fcgi:error] [pid 52471:tid 52549] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:27.639502 2025] [proxy_fcgi:error] [pid 52471:tid 52536] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:27.816609 2025] [proxy_fcgi:error] [pid 52471:tid 52554] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:28.136204 2025] [proxy_fcgi:error] [pid 52471:tid 52548] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:28.373541 2025] [proxy_fcgi:error] [pid 52471:tid 52543] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:28.589354 2025] [proxy_fcgi:error] [pid 52471:tid 52537] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:28.789435 2025] [proxy_fcgi:error] [pid 52471:tid 52551] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:29.029643 2025] [proxy_fcgi:error] [pid 52471:tid 52553] [client 57.154.65.147:59614] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 07:28:29.209997 2025] [:error] [pid 52471:tid 52532] [client 57.154.65.147:59614] [client 57.154.65.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRkMndmWsFzjR5CEgDW-swAAAIA"]
[Sun Nov 16 07:28:29.662822 2025] [:error] [pid 52563:tid 52583] [client 57.154.65.147:52014] [client 57.154.65.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRkMnc-l3ey-hVJ5AusSGgAAANE"]
[Sun Nov 16 07:28:30.255723 2025] [:error] [pid 52563:tid 52582] [client 57.154.65.147:55709] [client 57.154.65.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRkMns-l3ey-hVJ5AusSHQAAANA"]
[Sun Nov 16 07:28:30.878043 2025] [:error] [pid 20556:tid 20576] [client 57.154.65.147:48870] [client 57.154.65.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRkMnkkbyEckbWtBcCK7AQAAARI"]
[Sun Nov 16 07:34:36.235721 2025] [autoindex:error] [pid 20556:tid 20566] [client 98.82.136.71:40092] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 08:13:40.472334 2025] [:error] [pid 52470:tid 52523] [client 43.130.228.73:54756] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRkXNEg9mXF2ZFFtj1XyKQAAAFI"]
[Sun Nov 16 08:15:47.434784 2025] [autoindex:error] [pid 52469:tid 52494] [client 192.36.121.172:38379] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 08:22:27.320762 2025] [autoindex:error] [pid 52469:tid 52487] [client 54.209.176.124:34786] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 09:56:22.683865 2025] [autoindex:error] [pid 52470:tid 52510] [client 66.249.64.1:38122] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 09:57:47.357186 2025] [autoindex:error] [pid 52563:tid 52572] [client 66.249.64.14:45738] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 10:06:15.735561 2025] [:error] [pid 20556:tid 20572] [client 177.131.73.167:3406] [client 177.131.73.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.131.73.167, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRkxl0kbyEckbWtBcCLv-AAAAQ4"]
[Sun Nov 16 10:06:15.747097 2025] [proxy_fcgi:error] [pid 20556:tid 20572] [client 177.131.73.167:3406] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 10:07:09.788990 2025] [:error] [pid 20556:tid 20574] [client 103.240.35.138:40790] [client 103.240.35.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.35.138, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRkxzUkbyEckbWtBcCLwPQAAARA"]
[Sun Nov 16 10:07:09.800797 2025] [proxy_fcgi:error] [pid 20556:tid 20574] [client 103.240.35.138:40790] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 13:07:57.608481 2025] [autoindex:error] [pid 52469:tid 52500] [client 34.221.197.72:40286] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 14:53:12.556720 2025] [autoindex:error] [pid 34165:tid 34195] [client 66.249.64.14:50192] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 17:46:35.476353 2025] [autoindex:error] [pid 34227:tid 34253] [client 104.218.55.248:43796] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 18:25:34.850697 2025] [proxy_fcgi:error] [pid 52469:tid 52477] [client 144.172.94.50:60771] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 18:26:03.978728 2025] [proxy_fcgi:error] [pid 52469:tid 52486] [client 144.172.94.50:63620] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 18:26:30.559999 2025] [proxy_fcgi:error] [pid 20556:tid 20559] [client 144.172.94.50:49952] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 18:26:57.249808 2025] [:error] [pid 34271:tid 34287] [client 144.172.94.50:52634] [client 144.172.94.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aRmm8UNmlZhoZZV1BUC58gAAAk4"]
[Sun Nov 16 18:27:20.459610 2025] [:error] [pid 52563:tid 52584] [client 144.172.94.50:55331] [client 144.172.94.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/inputs.php"] [unique_id "aRmnCM-l3ey-hVJ5AuuqJwAAANI"]
[Sun Nov 16 18:27:20.460701 2025] [:error] [pid 34165:tid 34209] [client 144.172.94.50:55332] [client 144.172.94.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aRmnCHhG2YTKEjXchwknZwAAAc4"]
[Sun Nov 16 18:27:20.817769 2025] [:error] [pid 34165:tid 34213] [client 144.172.94.50:55340] [client 144.172.94.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geju.php"] [unique_id "aRmnCHhG2YTKEjXchwknaAAAAdI"]
[Sun Nov 16 18:27:49.270872 2025] [:error] [pid 34164:tid 34171] [client 144.172.94.50:58623] [client 144.172.94.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aRmnJe93ccBCLD8-Q4ZP8QAAAYM"]
[Sun Nov 16 18:27:49.272588 2025] [:error] [pid 34301:tid 34327] [client 144.172.94.50:58622] [client 144.172.94.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/userfuns.php"] [unique_id "aRmnJbGPoZwUGuFNREvJ1QAAApc"]
[Sun Nov 16 18:27:50.087192 2025] [:error] [pid 34165:tid 34203] [client 144.172.94.50:58680] [client 144.172.94.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aRmnJnhG2YTKEjXchwknfAAAAcg"]
[Sun Nov 16 18:30:18.291519 2025] [:error] [pid 52471:tid 52555] [client 144.172.94.50:56957] [client 144.172.94.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.172.94.50, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aRmnutmWsFzjR5CEgDVV4gAAAJc"]
[Sun Nov 16 18:30:18.301188 2025] [proxy_fcgi:error] [pid 52471:tid 52555] [client 144.172.94.50:56957] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 18:44:23.899519 2025] [autoindex:error] [pid 34301:tid 34325] [client 213.225.251.197:50714] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 18:46:14.240973 2025] [autoindex:error] [pid 52471:tid 52535] [client 213.225.251.197:57247] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 18:50:43.433154 2025] [autoindex:error] [pid 34164:tid 34182] [client 213.225.251.197:55361] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 18:57:14.664038 2025] [autoindex:error] [pid 52469:tid 52499] [client 74.7.227.102:50592] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 18:59:09.655212 2025] [autoindex:error] [pid 34227:tid 34234] [client 74.7.227.67:54924] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 19:08:09.884987 2025] [:error] [pid 34133:tid 34147] [client 155.94.163.116:61180] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aRmwmfSAB3iwXVRY0gGW6QAAAUw"], referer: binance.com
[Sun Nov 16 19:08:13.292108 2025] [:error] [pid 20556:tid 20565] [client 155.94.163.116:63217] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/"] [unique_id "aRmwnUkbyEckbWtBcCKRtQAAAQc"], referer: binance.com
[Sun Nov 16 19:08:19.671797 2025] [:error] [pid 34133:tid 34143] [client 155.94.163.116:56472] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aRmwo_SAB3iwXVRY0gGW8AAAAUg"], referer: binance.com
[Sun Nov 16 20:28:53.046305 2025] [autoindex:error] [pid 34227:tid 34252] [client 34.38.109.241:53317] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 21:00:06.458406 2025] [autoindex:error] [pid 34301:tid 34326] [client 34.6.181.95:55143] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 21:01:19.342609 2025] [:error] [pid 34164:tid 34178] [client 123.187.240.242:55062] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRnLH-93ccBCLD8-Q4Z2kwAAAYo"]
[Sun Nov 16 21:37:53.588915 2025] [autoindex:error] [pid 34227:tid 34252] [client 136.117.235.178:60967] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 23:07:53.954679 2025] [:error] [pid 52563:tid 52577] [client 43.135.133.241:33430] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRnoyc-l3ey-hVJ5AuviHgAAAMs"]
[Sun Nov 16 23:20:13.818334 2025] [autoindex:error] [pid 34271:tid 34276] [client 157.245.63.215:59930] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 23:20:13.911865 2025] [autoindex:error] [pid 34271:tid 34275] [client 157.245.63.215:59930] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 23:33:46.164012 2025] [autoindex:error] [pid 20556:tid 20580] [client 34.90.199.112:32768] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 23:34:15.391476 2025] [autoindex:error] [pid 52471:tid 52546] [client 34.91.213.89:32768] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 16 23:50:09.293568 2025] [autoindex:error] [pid 52469:tid 52477] [client 34.16.136.148:65252] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 00:10:36.715302 2025] [:error] [pid 34227:tid 34232] [client 20.186.38.116:3826] [client 20.186.38.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRn3fH108zGLYs9eMuhy_QAAAgM"]
[Mon Nov 17 00:10:42.717762 2025] [proxy_fcgi:error] [pid 34301:tid 34314] [client 20.186.38.116:3591] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 00:10:45.356842 2025] [:error] [pid 34301:tid 34308] [client 20.186.38.116:3591] [client 20.186.38.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRn3hbGPoZwUGuFNREsKWgAAAoQ"]
[Mon Nov 17 00:10:46.195494 2025] [:error] [pid 34271:tid 34294] [client 20.186.38.116:1997] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn3hkNmlZhoZZV1BUD4QQAAAlU"]
[Mon Nov 17 00:10:46.675276 2025] [:error] [pid 52469:tid 52498] [client 20.186.38.116:3832] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn3hk6HaXpHeEZ98Z1HOAAAABU"]
[Mon Nov 17 00:10:47.186315 2025] [:error] [pid 34133:tid 34155] [client 20.186.38.116:1647] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn3h_SAB3iwXVRY0gHILQAAAVQ"]
[Mon Nov 17 00:10:47.794690 2025] [:error] [pid 34301:tid 34314] [client 20.186.38.116:5839] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn3h7GPoZwUGuFNREsKXQAAAoo"]
[Mon Nov 17 00:17:50.181061 2025] [autoindex:error] [pid 65480:tid 333] [client 136.118.155.84:53722] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:37:45.549347 2025] [autoindex:error] [pid 55745:tid 55771] [client 54.209.176.124:60078] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 02:16:38.701020 2025] [:error] [pid 65480:tid 329] [client 40.79.24.79:4509] [client 40.79.24.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRoVBg3NjAS-v6ul5QB8bgAAAMg"]
[Mon Nov 17 02:16:43.781772 2025] [proxy_fcgi:error] [pid 55745:tid 55756] [client 40.79.24.79:1833] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 02:16:46.367871 2025] [:error] [pid 55745:tid 55768] [client 40.79.24.79:1833] [client 40.79.24.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRoVDoZk0eT801XQsauO9wAAAFU"]
[Mon Nov 17 02:16:47.587323 2025] [:error] [pid 65480:tid 329] [client 40.79.24.79:1799] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRoVDw3NjAS-v6ul5QB8hgAAAMg"]
[Mon Nov 17 02:16:48.089204 2025] [:error] [pid 65480:tid 335] [client 40.79.24.79:6151] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRoVEA3NjAS-v6ul5QB8igAAAMw"]
[Mon Nov 17 02:16:48.833829 2025] [:error] [pid 55655:tid 55678] [client 40.79.24.79:4483] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRoVECGT_hu1vaVuRSSD-AAAABM"]
[Mon Nov 17 02:16:49.744122 2025] [:error] [pid 65480:tid 343] [client 40.79.24.79:5716] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRoVEQ3NjAS-v6ul5QB8kQAAANI"]
[Mon Nov 17 03:45:11.582855 2025] [:error] [pid 56530:tid 56554] [client 182.42.105.144:40819] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRopxxMBYsDZoSvAo7sJVQAAANU"]
[Mon Nov 17 04:14:53.219127 2025] [autoindex:error] [pid 39451:tid 39530] [client 185.189.167.115:55384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 07:41:16.413762 2025] [:error] [pid 40548:tid 40570] [client 102.90.118.77:7305] [client 102.90.118.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.90.118.77, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRphHAM_PykfYnxh-j_fVwAAARQ"]
[Mon Nov 17 07:41:16.439593 2025] [proxy_fcgi:error] [pid 40548:tid 40570] [client 102.90.118.77:7305] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 10:12:09.130153 2025] [:error] [pid 39449:tid 39472] [client 43.153.35.128:33102] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRqEeaUCymTA3MDfzLPgfQAAABI"]
[Mon Nov 17 13:47:02.556279 2025] [:error] [pid 39537:tid 39562] [client 104.234.19.23:35275] [client 104.234.19.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aRq21oZRrh1pcrdcLB-IJQAAANY"]
[Mon Nov 17 13:47:03.598034 2025] [:error] [pid 19120:tid 19136] [client 136.144.19.199:59975] [client 136.144.19.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRq214O1H08wfYmhCh-6YgAAAs4"]
[Mon Nov 17 13:47:08.237726 2025] [:error] [pid 39537:tid 39559] [client 136.144.19.202:52327] [client 136.144.19.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRq23IZRrh1pcrdcLB-ILQAAANM"]
[Mon Nov 17 15:26:10.219192 2025] [autoindex:error] [pid 32753:tid 32756] [client 146.112.163.34:33164] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 19:48:48.509221 2025] [autoindex:error] [pid 30801:tid 30812] [client 198.235.24.38:57368] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 21:17:56.587655 2025] [proxy_fcgi:error] [pid 39537:tid 39548] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:57.004331 2025] [proxy_fcgi:error] [pid 39537:tid 39564] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:57.220661 2025] [proxy_fcgi:error] [pid 39537:tid 39553] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:57.411181 2025] [proxy_fcgi:error] [pid 39537:tid 39549] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:57.628926 2025] [proxy_fcgi:error] [pid 39537:tid 39552] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:57.836004 2025] [proxy_fcgi:error] [pid 39537:tid 39556] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:58.054661 2025] [proxy_fcgi:error] [pid 39537:tid 39557] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:58.278384 2025] [proxy_fcgi:error] [pid 39537:tid 39561] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:58.828635 2025] [proxy_fcgi:error] [pid 39537:tid 39541] [client 51.57.73.118:12268] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 21:17:59.059533 2025] [:error] [pid 39537:tid 39546] [client 51.57.73.118:12268] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRsgh4ZRrh1pcrdcLB_GmAAAAMY"]
[Mon Nov 17 21:17:59.420355 2025] [:error] [pid 39451:tid 39526] [client 51.57.73.118:12262] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRsgh-fgkqXTS0SO3fArUAAAAJI"]
[Mon Nov 17 21:17:59.781962 2025] [:error] [pid 30801:tid 30810] [client 51.57.73.118:12178] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRsghzbGAU49DhMTBD75mAAAAkc"]
[Mon Nov 17 21:18:00.533178 2025] [:error] [pid 30801:tid 30818] [client 51.57.73.118:12272] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRsgiDbGAU49DhMTBD75mgAAAk8"]
[Mon Nov 17 21:18:02.941347 2025] [:error] [pid 30801:tid 30810] [client 51.57.73.118:12178] [client 51.57.73.118] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "186.122.104.165_e7f7872d1f072df13adde147b911fb7b6f889d07"): Internal error (specific information not available) [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRsghzbGAU49DhMTBD75mAAAAkc"]
[Mon Nov 17 22:25:13.787619 2025] [autoindex:error] [pid 31419:tid 31424] [client 220.151.9.22:39620] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 23:09:33.218321 2025] [:error] [pid 39449:tid 39458] [client 43.153.35.128:38184] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRs6raUCymTA3MDfzLOAWgAAAAQ"]
[Tue Nov 18 02:19:08.716064 2025] [:error] [pid 39189:tid 39203] [client 152.58.179.196:61695] [client 152.58.179.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.179.196, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtnHJJJLi753QwyqGz1ngAAAIo"]
[Tue Nov 18 02:19:08.729595 2025] [proxy_fcgi:error] [pid 39189:tid 39203] [client 152.58.179.196:61695] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:52:00.931846 2025] [proxy_fcgi:error] [pid 24777:tid 24788] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:01.103192 2025] [proxy_fcgi:error] [pid 24777:tid 24798] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:01.287667 2025] [proxy_fcgi:error] [pid 24777:tid 24803] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Nov 18 02:52:01.473874 2025] [proxy_fcgi:error] [pid 24777:tid 24800] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:01.677078 2025] [proxy_fcgi:error] [pid 24777:tid 24791] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:02.232427 2025] [proxy_fcgi:error] [pid 24777:tid 24790] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:52:03.565413 2025] [:error] [pid 24777:tid 24783] [client 20.172.5.103:51192] [client 20.172.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.172.5.103, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtu0_YMFHMtkgWmmlKXJgAAAQQ"], referer: https://duckduckgo.com/
[Tue Nov 18 02:52:03.571891 2025] [proxy_fcgi:error] [pid 24777:tid 24783] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:03.924969 2025] [proxy_fcgi:error] [pid 24777:tid 24780] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:04.097828 2025] [proxy_fcgi:error] [pid 24777:tid 24796] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:04.420198 2025] [proxy_fcgi:error] [pid 24777:tid 24787] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:52:04.581469 2025] [proxy_fcgi:error] [pid 24777:tid 24781] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:04.742728 2025] [proxy_fcgi:error] [pid 24777:tid 24799] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:04.932638 2025] [proxy_fcgi:error] [pid 24777:tid 24782] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:05.115814 2025] [proxy_fcgi:error] [pid 24777:tid 24785] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:05.287584 2025] [proxy_fcgi:error] [pid 24777:tid 24801] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:52:05.450155 2025] [proxy_fcgi:error] [pid 24777:tid 24802] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:05.611171 2025] [proxy_fcgi:error] [pid 24777:tid 24788] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:05.803650 2025] [proxy_fcgi:error] [pid 24777:tid 24798] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:05.976916 2025] [proxy_fcgi:error] [pid 24777:tid 24800] [client 20.172.5.103:51192] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:06.150447 2025] [:error] [pid 24777:tid 24793] [client 20.172.5.103:51192] [client 20.172.5.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aRtu1vYMFHMtkgWmmlKXOQAAAQ4"], referer: https://www.bing.com/
[Tue Nov 18 02:52:06.645440 2025] [proxy_fcgi:error] [pid 24928:tid 24931] [client 20.172.5.103:51080] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:52:06.992993 2025] [proxy_fcgi:error] [pid 24928:tid 24940] [client 20.172.5.103:51080] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:52:07.750649 2025] [proxy_fcgi:error] [pid 24928:tid 24944] [client 20.172.5.103:51080] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:07.910465 2025] [proxy_fcgi:error] [pid 24928:tid 24934] [client 20.172.5.103:51080] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:08.072454 2025] [proxy_fcgi:error] [pid 24928:tid 24933] [client 20.172.5.103:51080] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:08.245131 2025] [proxy_fcgi:error] [pid 24928:tid 24949] [client 20.172.5.103:51080] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:52:08.943990 2025] [:error] [pid 24928:tid 24932] [client 20.172.5.103:51080] [client 20.172.5.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRtu2Oe2a38O8HjCzurs2gAAAoI"], referer: https://www.google.de/
[Tue Nov 18 02:52:10.459601 2025] [proxy_fcgi:error] [pid 24993:tid 25011] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:52:11.332783 2025] [proxy_fcgi:error] [pid 24993:tid 25019] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:11.836330 2025] [proxy_fcgi:error] [pid 24993:tid 25004] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:12.175754 2025] [proxy_fcgi:error] [pid 24993:tid 25001] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:52:12.358094 2025] [proxy_fcgi:error] [pid 24993:tid 25014] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:52:12.538587 2025] [proxy_fcgi:error] [pid 24993:tid 24998] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:13.018854 2025] [proxy_fcgi:error] [pid 24993:tid 25009] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:52:14.355380 2025] [proxy_fcgi:error] [pid 24993:tid 25006] [client 20.172.5.103:51183] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:52:15.059698 2025] [:error] [pid 24993:tid 25004] [client 20.172.5.103:51183] [client 20.172.5.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRtu39tVbCOW5QnBx1R_dAAAAwk"], referer: https://www.yahoo.com/
[Tue Nov 18 03:23:58.498418 2025] [:error] [pid 39762:tid 39772] [client 91.206.169.102:57376] [client 91.206.169.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/postnews.php"] [unique_id "aRt2TpWSJFResg9YHzgUvwAAAMU"]
[Tue Nov 18 03:23:59.588654 2025] [:error] [pid 39762:tid 39789] [client 91.206.169.102:64428] [client 91.206.169.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRt2T5WSJFResg9YHzgUwAAAANU"]
[Tue Nov 18 03:24:00.641558 2025] [:error] [pid 39762:tid 39780] [client 91.206.169.102:54014] [client 91.206.169.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRt2UJWSJFResg9YHzgUxAAAAMw"]
[Tue Nov 18 04:38:34.152715 2025] [autoindex:error] [pid 29195:tid 29220] [client 35.195.119.58:42728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 05:17:32.445059 2025] [:error] [pid 61393:tid 61472] [client 43.130.150.80:50228] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRuQ7GH9XjlbVPv9gQUQyAAAAJA"]
[Tue Nov 18 05:20:59.128161 2025] [autoindex:error] [pid 61391:tid 61423] [client 91.206.169.102:54917] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 05:20:59.130630 2025] [proxy_fcgi:error] [pid 29195:tid 29213] [client 91.206.169.102:54924] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 18 05:20:59.448563 2025] [proxy_fcgi:error] [pid 61391:tid 61424] [client 91.206.169.102:54917] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 18 05:21:00.858356 2025] [proxy_fcgi:error] [pid 61482:tid 61493] [client 91.206.169.102:57511] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 18 05:21:01.133197 2025] [proxy_fcgi:error] [pid 61393:tid 61479] [client 91.206.169.102:59396] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 18 05:29:06.541024 2025] [proxy_fcgi:error] [pid 42804:tid 42814] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:06.775094 2025] [proxy_fcgi:error] [pid 42804:tid 42826] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:06.914125 2025] [proxy_fcgi:error] [pid 42804:tid 42810] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:07.043442 2025] [proxy_fcgi:error] [pid 42804:tid 42808] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:07.175627 2025] [proxy_fcgi:error] [pid 42804:tid 42822] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:07.308603 2025] [proxy_fcgi:error] [pid 42804:tid 42824] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:07.438227 2025] [proxy_fcgi:error] [pid 42804:tid 42815] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:07.565961 2025] [proxy_fcgi:error] [pid 42804:tid 42806] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:08.002605 2025] [proxy_fcgi:error] [pid 42804:tid 42823] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:08.137332 2025] [proxy_fcgi:error] [pid 42804:tid 42821] [client 130.33.77.13:42884] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:29:08.296988 2025] [:error] [pid 42804:tid 42813] [client 130.33.77.13:42884] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aRuTpPpXARlE6tIuBnlCxQAAAUc"]
[Tue Nov 18 05:29:09.553047 2025] [:error] [pid 42804:tid 42807] [client 130.33.77.13:42992] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aRuTpfpXARlE6tIuBnlCyAAAAUE"]
[Tue Nov 18 05:29:10.572360 2025] [:error] [pid 61393:tid 61461] [client 130.33.77.13:42977] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aRuTpmH9XjlbVPv9gQUTwAAAAIU"]
[Tue Nov 18 05:29:17.156791 2025] [:error] [pid 61393:tid 61456] [client 130.33.77.13:42949] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aRuTrWH9XjlbVPv9gQUTygAAAIA"]
[Tue Nov 18 05:29:18.300199 2025] [:error] [pid 61391:tid 61410] [client 130.33.77.13:42882] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aRuTrowXIKmhlnkP3-dUzwAAAAo"]
[Tue Nov 18 05:29:19.418207 2025] [:error] [pid 61392:tid 61429] [client 130.33.77.13:42976] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aRuTr3Smvb496zZxueLCmwAAAEA"]
[Tue Nov 18 05:29:22.586767 2025] [:error] [pid 29195:tid 29217] [client 130.33.77.13:42955] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aRuTshMeonxy_4yeOTUrKQAAARQ"]
[Tue Nov 18 05:29:25.976206 2025] [:error] [pid 42804:tid 42819] [client 130.33.77.13:42893] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aRuTtfpXARlE6tIuBnlC0wAAAU0"]
[Tue Nov 18 05:29:27.108155 2025] [:error] [pid 42804:tid 42828] [client 130.33.77.13:42994] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless2.php"] [unique_id "aRuTt_pXARlE6tIuBnlC1wAAAVY"]
[Tue Nov 18 05:29:32.971359 2025] [:error] [pid 61391:tid 61408] [client 130.33.77.13:43001] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless2.php"] [unique_id "aRuTvIwXIKmhlnkP3-dU1AAAAAg"]
[Tue Nov 18 05:29:34.530767 2025] [:error] [pid 61391:tid 61404] [client 130.33.77.13:42996] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless2.php"] [unique_id "aRuTvowXIKmhlnkP3-dU1QAAAAQ"]
[Tue Nov 18 05:29:35.694128 2025] [:error] [pid 61392:tid 61432] [client 130.33.77.13:42961] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless2.php"] [unique_id "aRuTv3Smvb496zZxueLCqQAAAEM"]
[Tue Nov 18 05:29:38.336603 2025] [:error] [pid 42804:tid 42825] [client 130.33.77.13:42953] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aRuTwvpXARlE6tIuBnlC4AAAAVM"]
[Tue Nov 18 05:29:39.947149 2025] [:error] [pid 61482:tid 61491] [client 130.33.77.13:42895] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aRuTw_tNHsWZClVWav5AMwAAAMQ"]
[Tue Nov 18 05:29:40.886616 2025] [:error] [pid 61391:tid 61412] [client 130.33.77.13:42991] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aRuTxIwXIKmhlnkP3-dU1wAAAAw"]
[Tue Nov 18 05:29:44.590925 2025] [:error] [pid 61482:tid 61497] [client 130.33.77.13:42990] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aRuTyPtNHsWZClVWav5ANQAAAMo"]
[Tue Nov 18 05:29:47.919452 2025] [:error] [pid 61391:tid 61418] [client 130.33.77.13:42894] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aRuTy4wXIKmhlnkP3-dU3AAAABI"]
[Tue Nov 18 05:29:49.869650 2025] [:error] [pid 42804:tid 42818] [client 130.33.77.13:42981] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aRuTzfpXARlE6tIuBnlC7wAAAUw"]
[Tue Nov 18 05:29:51.435841 2025] [:error] [pid 61482:tid 61502] [client 130.33.77.13:42989] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aRuTz_tNHsWZClVWav5AOQAAAM8"]
[Tue Nov 18 05:29:51.854189 2025] [:error] [pid 61392:tid 61443] [client 130.33.77.13:42950] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aRuTz3Smvb496zZxueLCrwAAAE4"]
[Tue Nov 18 05:29:54.552128 2025] [:error] [pid 61393:tid 61457] [client 130.33.77.13:42972] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRuT0mH9XjlbVPv9gQUT1gAAAIE"]
[Tue Nov 18 05:29:57.012609 2025] [:error] [pid 61391:tid 61401] [client 130.33.77.13:42959] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRuT1YwXIKmhlnkP3-dU4gAAAAE"]
[Tue Nov 18 05:29:58.330513 2025] [:error] [pid 61392:tid 61452] [client 130.33.77.13:43003] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRuT1nSmvb496zZxueLCsgAAAFc"]
[Tue Nov 18 05:30:00.102464 2025] [:error] [pid 61393:tid 61464] [client 130.33.77.13:42967] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aRuT2GH9XjlbVPv9gQUT2wAAAIg"]
[Tue Nov 18 05:30:01.566395 2025] [:error] [pid 61392:tid 61440] [client 130.33.77.13:42834] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aRuT2XSmvb496zZxueLCtQAAAEs"]
[Tue Nov 18 05:30:02.276245 2025] [:error] [pid 42804:tid 42814] [client 130.33.77.13:42891] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aRuT2vpXARlE6tIuBnlC9wAAAUg"]
[Tue Nov 18 05:30:09.852477 2025] [proxy_fcgi:error] [pid 29195:tid 29215] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:09.986061 2025] [proxy_fcgi:error] [pid 29195:tid 29200] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:10.109516 2025] [proxy_fcgi:error] [pid 29195:tid 29210] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:10.226840 2025] [proxy_fcgi:error] [pid 29195:tid 29212] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:10.358617 2025] [proxy_fcgi:error] [pid 29195:tid 29207] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:10.528644 2025] [proxy_fcgi:error] [pid 29195:tid 29202] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:10.693021 2025] [proxy_fcgi:error] [pid 29195:tid 29213] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:10.903631 2025] [proxy_fcgi:error] [pid 29195:tid 29219] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:11.023026 2025] [proxy_fcgi:error] [pid 29195:tid 29203] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:11.141881 2025] [proxy_fcgi:error] [pid 29195:tid 29209] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:11.298883 2025] [proxy_fcgi:error] [pid 29195:tid 29216] [client 130.33.77.13:42966] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:30:11.427100 2025] [:error] [pid 29195:tid 29220] [client 130.33.77.13:42966] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aRuT4xMeonxy_4yeOTUrYwAAARc"]
[Tue Nov 18 05:30:12.705681 2025] [:error] [pid 61391:tid 61419] [client 130.33.77.13:42998] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aRuT5IwXIKmhlnkP3-dU7AAAABM"]
[Tue Nov 18 05:30:14.751342 2025] [:error] [pid 61393:tid 61475] [client 130.33.77.13:42845] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aRuT5mH9XjlbVPv9gQUT4gAAAJM"]
[Tue Nov 18 05:30:17.920012 2025] [:error] [pid 61393:tid 61459] [client 130.33.77.13:42886] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aRuT6WH9XjlbVPv9gQUT4wAAAIM"]
[Tue Nov 18 05:30:25.447053 2025] [:error] [pid 29195:tid 29208] [client 130.33.77.13:42822] [client 130.33.77.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aRuT8RMeonxy_4yeOTUrcAAAAQs"]
[Tue Nov 18 05:30:26.130823 2025] [:error] [pid 61482:tid 61509] [client 130.33.77.13:42951] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aRuT8vtNHsWZClVWav5ATQAAANY"]
[Tue Nov 18 05:30:28.751950 2025] [:error] [pid 29195:tid 29213] [client 130.33.77.13:42999] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aRuT9BMeonxy_4yeOTUrcgAAARA"]
[Tue Nov 18 05:30:30.764961 2025] [:error] [pid 61482:tid 61495] [client 130.33.77.13:42968] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aRuT9vtNHsWZClVWav5AUQAAAMg"]
[Tue Nov 18 05:30:32.627589 2025] [:error] [pid 61391:tid 61413] [client 130.33.77.13:42971] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aRuT-IwXIKmhlnkP3-dVBgAAAA0"]
[Tue Nov 18 05:30:33.666150 2025] [:error] [pid 61391:tid 61420] [client 130.33.77.13:42915] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aRuT-YwXIKmhlnkP3-dVBwAAABQ"]
[Tue Nov 18 05:30:34.321801 2025] [:error] [pid 42804:tid 42809] [client 130.33.77.13:42975] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aRuT-vpXARlE6tIuBnlDJgAAAUM"]
[Tue Nov 18 05:30:36.889564 2025] [:error] [pid 29195:tid 29205] [client 130.33.77.13:42957] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aRuT_BMeonxy_4yeOTUrhAAAAQg"]
[Tue Nov 18 05:30:38.026920 2025] [:error] [pid 42804:tid 42826] [client 130.33.77.13:42983] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/golden.php"] [unique_id "aRuT_vpXARlE6tIuBnlDKAAAAVQ"]
[Tue Nov 18 05:30:39.916646 2025] [:error] [pid 42804:tid 42827] [client 130.33.77.13:43000] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/golden.php"] [unique_id "aRuT__pXARlE6tIuBnlDLwAAAVU"]
[Tue Nov 18 05:30:42.794241 2025] [:error] [pid 42804:tid 42815] [client 130.33.77.13:42914] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/golden.php"] [unique_id "aRuUAvpXARlE6tIuBnlDNgAAAUk"]
[Tue Nov 18 05:30:44.201984 2025] [:error] [pid 61392:tid 61448] [client 130.33.77.13:42940] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/golden.php"] [unique_id "aRuUBHSmvb496zZxueLC2AAAAFM"]
[Tue Nov 18 05:30:46.385633 2025] [:error] [pid 61393:tid 61461] [client 130.33.77.13:42942] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aRuUBmH9XjlbVPv9gQUT-gAAAIU"]
[Tue Nov 18 05:30:47.198641 2025] [:error] [pid 61392:tid 61446] [client 130.33.77.13:42924] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aRuUB3Smvb496zZxueLC2gAAAFE"]
[Tue Nov 18 05:30:48.346820 2025] [:error] [pid 61392:tid 61442] [client 130.33.77.13:42931] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aRuUCHSmvb496zZxueLC2wAAAE0"]
[Tue Nov 18 05:30:49.619381 2025] [:error] [pid 61393:tid 61475] [client 130.33.77.13:42979] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aRuUCWH9XjlbVPv9gQUT_AAAAJM"]
[Tue Nov 18 05:30:50.751802 2025] [:error] [pid 42804:tid 42819] [client 130.33.77.13:42817] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aRuUCvpXARlE6tIuBnlDOwAAAU0"]
[Tue Nov 18 05:30:53.138000 2025] [:error] [pid 61392:tid 61447] [client 130.33.77.13:42880] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aRuUDXSmvb496zZxueLC3gAAAFI"]
[Tue Nov 18 05:30:56.687132 2025] [:error] [pid 61482:tid 61492] [client 130.33.77.13:42988] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aRuUEPtNHsWZClVWav5AXgAAAMU"]
[Tue Nov 18 05:30:58.056175 2025] [:error] [pid 61393:tid 61480] [client 130.33.77.13:42985] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aRuUEmH9XjlbVPv9gQUUAQAAAJg"]
[Tue Nov 18 05:30:58.809385 2025] [:error] [pid 61393:tid 61468] [client 130.33.77.13:42930] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aRuUEmH9XjlbVPv9gQUUAgAAAIw"]
[Tue Nov 18 05:31:00.290420 2025] [:error] [pid 61393:tid 61476] [client 130.33.77.13:42897] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aRuUFGH9XjlbVPv9gQUUAwAAAJQ"]
[Tue Nov 18 05:31:09.155455 2025] [:error] [pid 61392:tid 61442] [client 130.33.77.13:42987] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aRuUHXSmvb496zZxueLC5gAAAE0"]
[Tue Nov 18 05:31:09.908365 2025] [:error] [pid 61391:tid 61409] [client 130.33.77.13:42887] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aRuUHYwXIKmhlnkP3-dVIAAAAAk"]
[Tue Nov 18 05:31:11.364820 2025] [proxy_fcgi:error] [pid 61391:tid 61402] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:11.528635 2025] [proxy_fcgi:error] [pid 61391:tid 61413] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:11.680339 2025] [proxy_fcgi:error] [pid 61391:tid 61404] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:11.836745 2025] [proxy_fcgi:error] [pid 61391:tid 61408] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:11.990675 2025] [proxy_fcgi:error] [pid 61391:tid 61401] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:12.150195 2025] [proxy_fcgi:error] [pid 61391:tid 61411] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:12.312803 2025] [proxy_fcgi:error] [pid 61391:tid 61419] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:12.472255 2025] [proxy_fcgi:error] [pid 61391:tid 61415] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:12.628188 2025] [proxy_fcgi:error] [pid 61391:tid 61407] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:13.961897 2025] [proxy_fcgi:error] [pid 61391:tid 61422] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:14.125822 2025] [proxy_fcgi:error] [pid 61391:tid 61406] [client 130.33.77.13:42921] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:31:15.682932 2025] [:error] [pid 61391:tid 61409] [client 130.33.77.13:42921] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss.php"] [unique_id "aRuUI4wXIKmhlnkP3-dVNAAAAAk"]
[Tue Nov 18 05:31:17.779900 2025] [:error] [pid 61393:tid 61469] [client 130.33.77.13:42824] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss.php"] [unique_id "aRuUJWH9XjlbVPv9gQUUGAAAAI0"]
[Tue Nov 18 05:31:18.887836 2025] [:error] [pid 61393:tid 61457] [client 130.33.77.13:42820] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss.php"] [unique_id "aRuUJmH9XjlbVPv9gQUUHAAAAIE"]
[Tue Nov 18 05:31:20.692772 2025] [:error] [pid 42804:tid 42827] [client 130.33.77.13:42889] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss.php"] [unique_id "aRuUKPpXARlE6tIuBnlDkAAAAVU"]
[Tue Nov 18 05:31:22.763997 2025] [:error] [pid 61393:tid 61466] [client 130.33.77.13:42933] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aRuUKmH9XjlbVPv9gQUUJAAAAIo"]
[Tue Nov 18 05:31:23.980419 2025] [:error] [pid 42804:tid 42815] [client 130.33.77.13:42969] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aRuUK_pXARlE6tIuBnlDmAAAAUk"]
[Tue Nov 18 05:31:27.274813 2025] [:error] [pid 61393:tid 61476] [client 130.33.77.13:42912] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aRuUL2H9XjlbVPv9gQUUOwAAAJQ"]
[Tue Nov 18 05:31:33.014116 2025] [:error] [pid 29195:tid 29219] [client 130.33.77.13:42888] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aRuUNRMeonxy_4yeOTUr8AAAARY"]
[Tue Nov 18 05:31:36.466313 2025] [:error] [pid 61392:tid 61437] [client 130.33.77.13:42890] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aRuUOHSmvb496zZxueLDWQAAAEg"]
[Tue Nov 18 05:31:43.922023 2025] [:error] [pid 61482:tid 61491] [client 130.33.77.13:42827] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aRuUP_tNHsWZClVWav5AvgAAAMQ"]
[Tue Nov 18 05:31:51.227211 2025] [:error] [pid 29195:tid 29204] [client 130.33.77.13:42832] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-class.php"] [unique_id "aRuURxMeonxy_4yeOTUsAgAAAQc"]
[Tue Nov 18 05:32:00.587119 2025] [:error] [pid 42804:tid 42827] [client 130.33.77.13:42908] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-class.php"] [unique_id "aRuUUPpXARlE6tIuBnlDyAAAAVU"]
[Tue Nov 18 05:32:01.119871 2025] [:error] [pid 29195:tid 29206] [client 130.33.77.13:42821] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-class.php"] [unique_id "aRuUURMeonxy_4yeOTUsEQAAAQk"]
[Tue Nov 18 05:32:07.309407 2025] [:error] [pid 61392:tid 61444] [client 130.33.77.13:42906] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-logiin.php"] [unique_id "aRuUV3Smvb496zZxueLDeQAAAE8"]
[Tue Nov 18 05:32:10.200644 2025] [:error] [pid 61482:tid 61493] [client 130.33.77.13:42947] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-logiin.php"] [unique_id "aRuUWvtNHsWZClVWav5A6AAAAMY"]
[Tue Nov 18 05:32:12.288326 2025] [:error] [pid 61482:tid 61511] [client 130.33.77.13:42944] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-logiin.php"] [unique_id "aRuUXPtNHsWZClVWav5A6gAAANg"]
[Tue Nov 18 05:32:13.289968 2025] [:error] [pid 61482:tid 61503] [client 130.33.77.13:42954] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-logiin.php"] [unique_id "aRuUXftNHsWZClVWav5A6wAAANA"]
[Tue Nov 18 05:32:14.321977 2025] [proxy_fcgi:error] [pid 61391:tid 61419] [client 130.33.77.13:42963] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:32:15.315733 2025] [proxy_fcgi:error] [pid 61391:tid 61400] [client 130.33.77.13:42963] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:32:15.457228 2025] [proxy_fcgi:error] [pid 61391:tid 61416] [client 130.33.77.13:42963] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:32:15.594279 2025] [proxy_fcgi:error] [pid 61391:tid 61401] [client 130.33.77.13:42963] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:32:15.713006 2025] [proxy_fcgi:error] [pid 61391:tid 61409] [client 130.33.77.13:42963] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 07:26:55.657156 2025] [autoindex:error] [pid 61392:tid 61452] [client 198.235.24.131:57348] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 08:17:31.764293 2025] [:error] [pid 61391:tid 61417] [client 43.135.144.81:57978] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRu7G4wXIKmhlnkP3-d7BwAAABE"]
[Tue Nov 18 12:26:16.173656 2025] [autoindex:error] [pid 44471:tid 44505] [client 47.90.227.150:44744] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 12:26:16.821736 2025] [autoindex:error] [pid 44472:tid 44555] [client 47.90.227.150:53746] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 12:39:40.978196 2025] [autoindex:error] [pid 44624:tid 44633] [client 34.216.175.253:26137] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 12:39:41.907871 2025] [autoindex:error] [pid 44624:tid 44638] [client 34.216.175.253:11851] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 12:39:42.280689 2025] [autoindex:error] [pid 44624:tid 44643] [client 34.216.175.253:51796] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 12:39:42.652337 2025] [autoindex:error] [pid 44471:tid 44523] [client 34.216.175.253:21959] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 13:43:13.294722 2025] [autoindex:error] [pid 44470:tid 44498] [client 64.44.38.246:38764] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 14:02:07.414907 2025] [proxy_fcgi:error] [pid 44471:tid 44510] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:07.636203 2025] [proxy_fcgi:error] [pid 44471:tid 44515] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:07.852146 2025] [proxy_fcgi:error] [pid 44471:tid 44504] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:08.065483 2025] [proxy_fcgi:error] [pid 44471:tid 44524] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:08.344178 2025] [proxy_fcgi:error] [pid 44471:tid 44519] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:08.559582 2025] [proxy_fcgi:error] [pid 44471:tid 44507] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:08.776681 2025] [proxy_fcgi:error] [pid 44471:tid 44527] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:08.996976 2025] [proxy_fcgi:error] [pid 44471:tid 44517] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:09.674629 2025] [proxy_fcgi:error] [pid 44471:tid 44528] [client 4.206.155.146:62062] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 14:02:09.883008 2025] [:error] [pid 44471:tid 44525] [client 4.206.155.146:62062] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwL4e_6m0bQO14XwtMGQwAAARU"]
[Tue Nov 18 14:02:10.349159 2025] [:error] [pid 44472:tid 44546] [client 4.206.155.146:62119] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwL4oKhGwkiLjv8BQyY9AAAAU8"]
[Tue Nov 18 14:02:10.800392 2025] [:error] [pid 44471:tid 44516] [client 4.206.155.146:62063] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwL4u_6m0bQO14XwtMGRQAAAQw"]
[Tue Nov 18 14:02:11.230997 2025] [:error] [pid 44624:tid 44647] [client 4.206.155.146:62129] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwL4yllffozoBluWCULogAAAZQ"]
[Tue Nov 18 14:17:22.634353 2025] [autoindex:error] [pid 44624:tid 44632] [client 35.185.83.136:38739] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 14:28:58.888045 2025] [autoindex:error] [pid 44624:tid 44635] [client 149.102.254.30:30906] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 14:56:01.301326 2025] [autoindex:error] [pid 44470:tid 44489] [client 35.90.160.77:36296] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 15:18:48.584119 2025] [autoindex:error] [pid 44624:tid 44640] [client 3.85.17.76:36962] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 15:18:49.922086 2025] [autoindex:error] [pid 44470:tid 44476] [client 178.171.65.181:44057] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 16:10:08.008104 2025] [autoindex:error] [pid 44624:tid 44629] [client 35.185.83.136:44759] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 16:14:14.364761 2025] [proxy_fcgi:error] [pid 44472:tid 44555] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:14.574668 2025] [proxy_fcgi:error] [pid 44472:tid 44533] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:14.783786 2025] [proxy_fcgi:error] [pid 44472:tid 44551] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:14.995124 2025] [proxy_fcgi:error] [pid 44472:tid 44552] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:15.211717 2025] [proxy_fcgi:error] [pid 44472:tid 44532] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:15.422169 2025] [proxy_fcgi:error] [pid 44472:tid 44548] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:15.633138 2025] [proxy_fcgi:error] [pid 44472:tid 44540] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:15.842949 2025] [proxy_fcgi:error] [pid 44472:tid 44537] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:16.475101 2025] [proxy_fcgi:error] [pid 44472:tid 44535] [client 4.206.155.146:23523] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 16:14:16.682373 2025] [:error] [pid 44472:tid 44533] [client 4.206.155.146:23523] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwq2IKhGwkiLjv8BQzDQAAAAUI"]
[Tue Nov 18 16:14:17.100706 2025] [:error] [pid 44470:tid 44479] [client 4.206.155.146:23439] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwq2Tv-RLYfULjlgDaeagAAAEQ"]
[Tue Nov 18 16:14:17.515651 2025] [:error] [pid 44624:tid 44629] [client 4.206.155.146:23493] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwq2SllffozoBluWCVCmAAAAYI"]
[Tue Nov 18 16:14:17.926254 2025] [:error] [pid 44472:tid 44537] [client 4.206.155.146:23517] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRwq2YKhGwkiLjv8BQzDQwAAAUY"]
[Tue Nov 18 17:03:12.301076 2025] [proxy_fcgi:error] [pid 1387:tid 1414] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:12.544978 2025] [proxy_fcgi:error] [pid 1387:tid 1407] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:12.867272 2025] [proxy_fcgi:error] [pid 1387:tid 1416] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:13.223471 2025] [proxy_fcgi:error] [pid 1387:tid 1411] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:13.438200 2025] [proxy_fcgi:error] [pid 1387:tid 1393] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:13.680917 2025] [proxy_fcgi:error] [pid 1387:tid 1406] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:13.908331 2025] [proxy_fcgi:error] [pid 1387:tid 1401] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:14.236018 2025] [proxy_fcgi:error] [pid 1387:tid 1415] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:15.089685 2025] [proxy_fcgi:error] [pid 1387:tid 1417] [client 4.206.155.146:40850] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:15.375607 2025] [:error] [pid 1387:tid 1400] [client 4.206.155.146:40850] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRw2U0zBvalKyx3hMvVG0AAAAAc"]
[Tue Nov 18 17:03:15.881345 2025] [:error] [pid 44472:tid 44541] [client 4.206.155.146:40844] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRw2U4KhGwkiLjv8BQzSfAAAAUo"]
[Tue Nov 18 17:03:16.393125 2025] [:error] [pid 44560:tid 44588] [client 4.206.155.146:40928] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRw2VAnbP7etF3q5-5t4qAAAANE"]
[Tue Nov 18 17:03:16.878493 2025] [:error] [pid 44560:tid 44580] [client 4.206.155.146:40953] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aRw2VAnbP7etF3q5-5t4qgAAAMk"]
[Tue Nov 18 17:11:52.193070 2025] [autoindex:error] [pid 44470:tid 44489] [client 204.76.203.25:34648] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 17:43:12.107800 2025] [autoindex:error] [pid 44560:tid 44584] [client 18.215.164.185:59424] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 17:43:12.513857 2025] [autoindex:error] [pid 44624:tid 44634] [client 18.215.164.185:57886] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 17:57:18.098041 2025] [:error] [pid 44472:tid 44541] [client 123.187.240.242:56357] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRxC_oKhGwkiLjv8BQzmZAAAAUo"]
[Tue Nov 18 18:54:15.142875 2025] [autoindex:error] [pid 44471:tid 44526] [client 35.229.83.27:39773] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 19:06:58.066563 2025] [autoindex:error] [pid 44560:tid 44582] [client 3.85.17.76:60988] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 19:06:59.285159 2025] [autoindex:error] [pid 44624:tid 44635] [client 45.95.130.147:37303] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 19:21:14.464935 2025] [autoindex:error] [pid 44471:tid 44508] [client 74.7.227.67:48868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 20:04:46.276473 2025] [autoindex:error] [pid 44624:tid 44649] [client 100.42.185.115:49940] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 21:03:14.216424 2025] [:error] [pid 1387:tid 1411] [client 84.247.191.22:51390] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aRxukkzBvalKyx3hMvWVOAAAABI"], referer: binance.com
[Tue Nov 18 21:03:18.467943 2025] [:error] [pid 1387:tid 1403] [client 84.247.191.22:49889] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/"] [unique_id "aRxulkzBvalKyx3hMvWVPAAAAAo"], referer: binance.com
[Tue Nov 18 21:03:22.197911 2025] [:error] [pid 44624:tid 44636] [client 84.247.191.22:55838] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aRxumillffozoBluWCXFKQAAAYk"], referer: binance.com
[Tue Nov 18 21:10:04.477512 2025] [autoindex:error] [pid 57578:tid 57592] [client 167.235.198.238:37723] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 21:37:31.899322 2025] [:error] [pid 44472:tid 44538] [client 45.134.79.103:61983] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRx2m4KhGwkiLjv8BQwe_gAAAUc"]
[Tue Nov 18 21:37:32.579958 2025] [:error] [pid 3500:tid 3517] [client 45.134.79.103:54412] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRx2nPCbRC7k2D7mjbST6QAAAc8"]
[Tue Nov 18 21:37:33.247401 2025] [:error] [pid 1387:tid 1409] [client 45.134.79.103:59093] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nUzBvalKyx3hMvWeywAAABA"]
[Tue Nov 18 22:16:06.491340 2025] [:error] [pid 44472:tid 44541] [client 110.54.167.135:13150] [client 110.54.167.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.54.167.135, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aRx_poKhGwkiLjv8BQwrMwAAAUo"]
[Tue Nov 18 22:16:06.505819 2025] [proxy_fcgi:error] [pid 44472:tid 44541] [client 110.54.167.135:13150] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 22:37:29.020245 2025] [autoindex:error] [pid 1387:tid 1409] [client 3.85.17.76:56600] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 22:37:31.140364 2025] [autoindex:error] [pid 44624:tid 44642] [client 178.171.47.109:33289] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 22:42:55.024707 2025] [autoindex:error] [pid 44470:tid 44496] [client 138.197.38.49:55300] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 22:42:56.326477 2025] [autoindex:error] [pid 44624:tid 44635] [client 138.197.38.49:55028] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 23:10:23.229161 2025] [:error] [pid 44470:tid 44496] [client 43.159.141.150:41460] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRyMXzv-RLYfULjlgDYczgAAAFU"]
[Tue Nov 18 23:43:26.522089 2025] [autoindex:error] [pid 44560:tid 44575] [client 34.96.47.38:30508] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 23:51:46.469200 2025] [autoindex:error] [pid 1387:tid 1406] [client 3.85.17.76:39834] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 18 23:51:48.980378 2025] [autoindex:error] [pid 44624:tid 44648] [client 45.143.107.223:46857] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 00:29:43.864211 2025] [autoindex:error] [pid 43882:tid 43963] [client 34.23.195.103:56013] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 00:48:11.081157 2025] [:error] [pid 43882:tid 43953] [client 124.156.225.181:33570] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aRyjS95CQQLff3maRMLUFQAAAA0"]
[Wed Nov 19 01:05:23.761316 2025] [autoindex:error] [pid 43880:tid 43893] [client 104.28.154.69:47342] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 01:05:25.969951 2025] [autoindex:error] [pid 3052:tid 3153] [client 108.165.113.254:59744] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 01:05:26.588924 2025] [autoindex:error] [pid 3052:tid 3136] [client 104.28.154.69:46592] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 01:05:27.808403 2025] [autoindex:error] [pid 3052:tid 3151] [client 151.240.183.34:58890] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 02:02:40.880371 2025] [autoindex:error] [pid 43881:tid 43937] [client 34.74.147.5:49013] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 02:07:12.797355 2025] [:error] [pid 43880:tid 43887] [client 43.159.152.4:59234] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRy10O1q1HNbKyNr9SZzwQAAAEI"]
[Wed Nov 19 03:04:42.975226 2025] [:error] [pid 43882:tid 43961] [client 34.19.35.152:59598] [client 34.19.35.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aRzDSt5CQQLff3maRMINxwAAABU"]
[Wed Nov 19 04:53:10.824354 2025] [autoindex:error] [pid 6554:tid 6569] [client 34.148.63.108:33861] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 06:45:20.138484 2025] [:error] [pid 6644:tid 6651] [client 222.79.103.59:47608] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aRz3AE0i6Rf788MB6sbF1QAAAMU"]
[Wed Nov 19 07:30:40.107023 2025] [:error] [pid 6554:tid 6577] [client 18.191.165.250:56873] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR0BoN8rvPWLafJFqmVW-QAAABE"]
[Wed Nov 19 07:30:40.502638 2025] [:error] [pid 6644:tid 6656] [client 18.191.165.250:57005] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR0BoE0i6Rf788MB6sbZ5QAAAMo"]
[Wed Nov 19 07:30:40.891177 2025] [:error] [pid 6555:tid 6595] [client 18.191.165.250:57131] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR0BoEbVJm8eMsGMTCON7AAAAEQ"]
[Wed Nov 19 07:30:41.287827 2025] [:error] [pid 6919:tid 6940] [client 18.191.165.250:57227] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR0BoUYFdN1s_9xJVUmrdQAAARI"]
[Wed Nov 19 07:30:41.679652 2025] [:error] [pid 26664:tid 26668] [client 18.191.165.250:57317] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR0BoYpWc1yoj2P7MeASSwAAAUE"]
[Wed Nov 19 07:51:19.761195 2025] [autoindex:error] [pid 6644:tid 6650] [client 34.148.63.108:32807] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 09:31:49.762604 2025] [autoindex:error] [pid 6554:tid 6564] [client 168.91.46.128:35689] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 09:31:53.247662 2025] [autoindex:error] [pid 26664:tid 26687] [client 168.91.46.128:48695] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 09:31:55.047078 2025] [autoindex:error] [pid 6644:tid 6655] [client 168.91.46.128:42733] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 09:31:57.068498 2025] [autoindex:error] [pid 26664:tid 26674] [client 168.91.46.128:44385] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 10:02:31.000335 2025] [autoindex:error] [pid 26664:tid 26683] [client 74.7.227.102:42384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:50:17.190018 2025] [autoindex:error] [pid 6644:tid 6668] [client 44.249.122.5:56556] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:51:08.983997 2025] [autoindex:error] [pid 6644:tid 6657] [client 104.45.211.239:1537] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:52:05.379060 2025] [autoindex:error] [pid 6644:tid 6647] [client 185.149.195.101:56896] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 12:42:08.233430 2025] [autoindex:error] [pid 26664:tid 26685] [client 185.149.195.101:60692] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 12:46:15.886449 2025] [:error] [pid 6556:tid 6623] [client 182.44.2.148:37477] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aR1Ll5uL7hhgrmdM1mvX1wAAAIU"]
[Wed Nov 19 13:55:25.873130 2025] [autoindex:error] [pid 6556:tid 6637] [client 35.88.126.116:10365] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 13:55:28.383448 2025] [autoindex:error] [pid 6644:tid 6661] [client 104.45.211.239:4096] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 18:41:12.573454 2025] [:error] [pid 6644:tid 6661] [client 106.219.67.172:11440] [client 106.219.67.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.67.172, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aR2eyE0i6Rf788MB6sao0QAAAM8"]
[Wed Nov 19 18:41:12.585301 2025] [proxy_fcgi:error] [pid 6644:tid 6661] [client 106.219.67.172:11440] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 19:08:26.246094 2025] [:error] [pid 6555:tid 6600] [client 182.44.2.148:32847] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR2lKkbVJm8eMsGMTCMnHwAAAEk"]
[Wed Nov 19 20:35:58.313756 2025] [:error] [pid 26664:tid 26671] [client 104.196.176.201:61362] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25ropWc1yoj2P7MeADjQAAAUQ"]
[Thu Nov 20 02:27:15.533956 2025] [autoindex:error] [pid 8030:tid 8057] [client 134.209.160.231:48588] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 02:36:27.757855 2025] [autoindex:error] [pid 8293:tid 8311] [client 138.197.65.80:35762] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 02:38:44.281120 2025] [autoindex:error] [pid 8365:tid 8383] [client 43.131.51.30:54926] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 03:00:15.152512 2025] [:error] [pid 8396:tid 8402] [client 43.152.72.244:60366] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR4Tv4olA09HZQNzyMD78QAAAsQ"]
[Thu Nov 20 04:17:42.456253 2025] [autoindex:error] [pid 10612:tid 10638] [client 20.250.44.10:7438] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 04:17:42.547571 2025] [proxy_fcgi:error] [pid 10612:tid 10642] [client 20.250.44.10:8050] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 20 04:17:42.790458 2025] [proxy_fcgi:error] [pid 10612:tid 10632] [client 20.250.44.10:8050] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 20 04:17:45.516742 2025] [proxy_fcgi:error] [pid 10503:tid 10585] [client 20.250.44.10:8022] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 20 04:17:45.762668 2025] [proxy_fcgi:error] [pid 10503:tid 10580] [client 20.250.44.10:8022] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 20 08:36:10.183203 2025] [autoindex:error] [pid 55340:tid 55357] [client 34.96.44.245:36945] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 08:36:12.914326 2025] [autoindex:error] [pid 55342:tid 55392] [client 34.96.44.245:51887] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 08:36:16.350200 2025] [autoindex:error] [pid 55340:tid 55345] [client 34.96.44.245:21812] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:21.396498 2025] [autoindex:error] [pid 34444:tid 34446] [client 34.34.247.0:31581] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:23.105502 2025] [autoindex:error] [pid 34444:tid 34448] [client 34.34.247.0:31581] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:25.651224 2025] [autoindex:error] [pid 55342:tid 55387] [client 34.34.247.90:5518] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:30.115532 2025] [autoindex:error] [pid 55430:tid 55440] [client 60.240.22.3:41906] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:32.585492 2025] [autoindex:error] [pid 804:tid 817] [client 180.150.95.13:5697] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:35.092309 2025] [autoindex:error] [pid 55430:tid 55457] [client 122.150.153.217:1150] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:39.225229 2025] [autoindex:error] [pid 34405:tid 34428] [client 101.115.235.187:3626] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:42.478808 2025] [autoindex:error] [pid 55340:tid 55367] [client 119.18.2.82:57256] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:45.353386 2025] [autoindex:error] [pid 804:tid 839] [client 181.215.132.78:52903] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:51.176757 2025] [autoindex:error] [pid 55340:tid 55352] [client 181.215.132.78:39285] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:28:57.312198 2025] [autoindex:error] [pid 55430:tid 55450] [client 149.143.166.89:60869] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:29:03.221926 2025] [autoindex:error] [pid 55343:tid 55409] [client 149.143.166.89:46807] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:29:09.934372 2025] [autoindex:error] [pid 55342:tid 55396] [client 172.59.120.217:55494] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:29:17.026534 2025] [autoindex:error] [pid 804:tid 848] [client 172.59.120.217:18048] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:30.049726 2025] [autoindex:error] [pid 55343:tid 55409] [client 34.34.247.177:12273] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:32.076462 2025] [autoindex:error] [pid 55343:tid 55413] [client 34.34.247.177:12273] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:34.057694 2025] [autoindex:error] [pid 55340:tid 55346] [client 34.34.247.127:12279] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:37.642879 2025] [autoindex:error] [pid 34405:tid 34418] [client 103.237.18.2:28592] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:39.060150 2025] [autoindex:error] [pid 55342:tid 55377] [client 122.150.217.67:11222] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:40.526576 2025] [autoindex:error] [pid 55340:tid 55355] [client 103.198.24.89:52091] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:42.250597 2025] [autoindex:error] [pid 55430:tid 55457] [client 115.131.152.234:40244] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:43.851352 2025] [autoindex:error] [pid 34444:tid 34449] [client 117.20.68.234:55176] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:45.470964 2025] [autoindex:error] [pid 34444:tid 34456] [client 181.215.126.48:52043] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:51.131050 2025] [autoindex:error] [pid 55343:tid 55405] [client 181.215.126.48:56093] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 09:59:57.201886 2025] [autoindex:error] [pid 34405:tid 34409] [client 89.187.20.26:33777] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:00:02.680395 2025] [autoindex:error] [pid 55343:tid 55417] [client 89.187.20.26:22173] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:00:09.003401 2025] [autoindex:error] [pid 55430:tid 55433] [client 208.75.181.61:20975] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:00:14.883205 2025] [autoindex:error] [pid 55343:tid 55410] [client 208.75.181.61:45916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:01.020140 2025] [autoindex:error] [pid 34405:tid 34407] [client 34.34.247.71:17690] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:03.044292 2025] [autoindex:error] [pid 34405:tid 34427] [client 34.34.247.71:17690] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:05.086478 2025] [autoindex:error] [pid 55343:tid 55419] [client 34.34.247.55:29095] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:09.562247 2025] [autoindex:error] [pid 804:tid 835] [client 124.171.143.30:57993] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:11.541730 2025] [autoindex:error] [pid 55342:tid 55380] [client 115.186.214.30:62326] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:13.516690 2025] [autoindex:error] [pid 55343:tid 55403] [client 119.18.1.140:44672] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:14.815422 2025] [autoindex:error] [pid 55430:tid 55439] [client 202.171.178.26:55030] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:16.176267 2025] [autoindex:error] [pid 55340:tid 55362] [client 58.161.28.175:44338] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:18.264621 2025] [autoindex:error] [pid 55430:tid 55434] [client 174.140.192.66:54995] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:23.850954 2025] [autoindex:error] [pid 55340:tid 55364] [client 174.140.192.66:47071] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:30.063912 2025] [autoindex:error] [pid 55340:tid 55348] [client 149.143.153.237:57935] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:35.389279 2025] [autoindex:error] [pid 55340:tid 55362] [client 149.143.153.237:57935] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:41.697729 2025] [:error] [pid 804:tid 840] [client 43.166.226.186:53486] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aR53dfaRHpUlPL9O0Lkd0wAAAZA"]
[Thu Nov 20 10:05:41.966204 2025] [autoindex:error] [pid 55340:tid 55364] [client 35.142.114.79:55321] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:05:48.341735 2025] [autoindex:error] [pid 34444:tid 34456] [client 35.142.114.79:37857] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 10:11:34.375072 2025] [autoindex:error] [pid 55340:tid 55362] [client 47.128.122.127:48778] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 12:10:22.830791 2025] [:error] [pid 55342:tid 55391] [client 98.81.111.26:54523] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6Urrg6x32Tvk7fIG-MDAAAAFM"]
[Thu Nov 20 12:10:23.243707 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:52195] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6UrzFpvu8oRK7ATfvJWgAAARc"]
[Thu Nov 20 12:10:23.674842 2025] [:error] [pid 55430:tid 55442] [client 98.81.111.26:59509] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6Ur_PZXaIMEU4pE7uhCwAAAMk"]
[Thu Nov 20 12:10:24.075219 2025] [:error] [pid 55340:tid 55345] [client 98.81.111.26:62213] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6UsPOxD-NeMydTybBKEwAAAAA"]
[Thu Nov 20 12:10:24.491342 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:54433] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6UsPPZXaIMEU4pE7uhVQAAAMI"]
[Thu Nov 20 12:15:52.909695 2025] [:error] [pid 55340:tid 55354] [client 98.81.111.26:64976] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6V-POxD-NeMydTybBNggAAAAk"]
[Thu Nov 20 12:15:53.316070 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:50587] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6V-VNEol4jlmmA_GP0qAAAAUE"]
[Thu Nov 20 12:15:53.722601 2025] [:error] [pid 55343:tid 55407] [client 98.81.111.26:52549] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o9AAAAIg"]
[Thu Nov 20 12:15:54.130936 2025] [:error] [pid 34405:tid 34409] [client 98.81.111.26:55163] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6V-jFpvu8oRK7ATfvNTAAAAQI"]
[Thu Nov 20 12:15:54.540965 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:58465] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR6V-lWlO3EnyVMV7w5pGwAAAIc"]
[Thu Nov 20 12:33:44.348266 2025] [autoindex:error] [pid 55343:tid 55405] [client 54.245.25.242:6351] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 12:39:11.687675 2025] [autoindex:error] [pid 55340:tid 55349] [client 104.45.211.239:2048] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 13:18:02.037028 2025] [autoindex:error] [pid 55343:tid 55402] [client 35.215.74.210:38852] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 14:00:16.872560 2025] [:error] [pid 40508:tid 40512] [client 222.79.104.23:54430] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aR6ucKxXNVCMW_ksxPtDTwAAAoI"]
[Thu Nov 20 14:33:10.443291 2025] [autoindex:error] [pid 55430:tid 55454] [client 35.87.141.153:31075] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 14:42:23.926232 2025] [autoindex:error] [pid 55340:tid 55348] [client 104.45.211.239:9728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 16:09:47.233471 2025] [autoindex:error] [pid 40415:tid 40423] [client 159.89.36.230:57548] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 16:09:48.572063 2025] [autoindex:error] [pid 40508:tid 40531] [client 159.89.36.230:42460] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 16:36:50.541678 2025] [autoindex:error] [pid 55340:tid 55350] [client 34.77.147.25:50774] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 18:07:38.708606 2025] [autoindex:error] [pid 40537:tid 40548] [client 64.225.26.171:55386] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 20:33:36.003060 2025] [:error] [pid 34405:tid 34429] [client 180.102.134.69:43924] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aR8KoDFpvu8oRK7ATfsv_gAAARY"]
[Fri Nov 21 00:14:53.726814 2025] [proxy_fcgi:error] [pid 40508:tid 40512] [client 172.161.90.19:23429] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:53.967877 2025] [proxy_fcgi:error] [pid 40508:tid 40523] [client 172.161.90.19:23429] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:54.927726 2025] [proxy_fcgi:error] [pid 40508:tid 40516] [client 172.161.90.19:23429] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:55.168475 2025] [proxy_fcgi:error] [pid 40508:tid 40527] [client 172.161.90.19:23429] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:55.409064 2025] [proxy_fcgi:error] [pid 40508:tid 40528] [client 172.161.90.19:23429] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:55.645420 2025] [:error] [pid 40508:tid 40524] [client 172.161.90.19:23429] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/0.php"] [unique_id "aR8-f6xXNVCMW_ksxPsMIAAAAo4"]
[Fri Nov 21 00:14:56.145478 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 172.161.90.19:23526] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:56.388395 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 172.161.90.19:23526] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:14:56.624157 2025] [:error] [pid 55343:tid 55409] [client 172.161.90.19:23526] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aR8-gFWlO3EnyVMV7w7tPQAAAIo"]
[Fri Nov 21 00:14:57.098352 2025] [:error] [pid 40445:tid 40497] [client 172.161.90.19:23437] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wikindex.php"] [unique_id "aR8-gVH-MuFcoWRjXpbN6wAAAlY"]
[Fri Nov 21 00:14:57.573406 2025] [:error] [pid 40445:tid 40482] [client 172.161.90.19:23488] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wikindex.php"] [unique_id "aR8-gVH-MuFcoWRjXpbN7QAAAkc"]
[Fri Nov 21 00:14:58.048628 2025] [:error] [pid 40415:tid 40420] [client 172.161.90.19:23527] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wikindex.php"] [unique_id "aR8-gqhjIyLSv09svwPzDAAAAcI"]
[Fri Nov 21 00:14:58.531243 2025] [:error] [pid 55342:tid 55380] [client 172.161.90.19:23433] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wikindex.php"] [unique_id "aR8-grg6x32Tvk7fIG8i5wAAAEg"]
[Fri Nov 21 00:14:59.011211 2025] [:error] [pid 40508:tid 40514] [client 172.161.90.19:23537] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/m.php"] [unique_id "aR8-g6xXNVCMW_ksxPsMJAAAAoQ"]
[Fri Nov 21 00:14:59.486461 2025] [:error] [pid 40508:tid 40532] [client 172.161.90.19:23544] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/m.php"] [unique_id "aR8-g6xXNVCMW_ksxPsMJQAAApY"]
[Fri Nov 21 00:14:59.959135 2025] [:error] [pid 40537:tid 40562] [client 172.161.90.19:23515] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/m.php"] [unique_id "aR8-g6KlsL5kxTa3c1wb4AAAAtU"]
[Fri Nov 21 00:15:00.450754 2025] [:error] [pid 40415:tid 40421] [client 172.161.90.19:23507] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/m.php"] [unique_id "aR8-hKhjIyLSv09svwPzEAAAAcM"]
[Fri Nov 21 00:15:00.928892 2025] [:error] [pid 40508:tid 40512] [client 172.161.90.19:23521] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aR8-hKxXNVCMW_ksxPsMJwAAAoI"]
[Fri Nov 21 00:15:01.400662 2025] [:error] [pid 40508:tid 40521] [client 172.161.90.19:23431] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jagoan.php"] [unique_id "aR8-haxXNVCMW_ksxPsMKAAAAos"]
[Fri Nov 21 00:15:01.875296 2025] [:error] [pid 34405:tid 34419] [client 172.161.90.19:23439] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jagoan.php"] [unique_id "aR8-hTFpvu8oRK7ATftfTAAAAQw"]
[Fri Nov 21 00:15:02.354420 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:23428] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jagoan.php"] [unique_id "aR8-hqxXNVCMW_ksxPsMKgAAAoM"]
[Fri Nov 21 00:15:02.831948 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23541] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/g3.php"] [unique_id "aR8-hqhjIyLSv09svwPzEgAAAdY"]
[Fri Nov 21 00:15:03.312923 2025] [:error] [pid 34405:tid 34407] [client 172.161.90.19:23493] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/g3.php"] [unique_id "aR8-hzFpvu8oRK7ATftfTQAAAQA"]
[Fri Nov 21 00:15:03.794973 2025] [:error] [pid 34405:tid 34420] [client 172.161.90.19:23478] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/g3.php"] [unique_id "aR8-hzFpvu8oRK7ATftfTgAAAQ0"]
[Fri Nov 21 00:15:04.272734 2025] [:error] [pid 40636:tid 40647] [client 172.161.90.19:23443] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/g3.php"] [unique_id "aR8-iAK8BWUoW3xq0HBFRQAAA4c"]
[Fri Nov 21 00:15:04.760458 2025] [:error] [pid 55342:tid 55378] [client 172.161.90.19:23512] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8-iLg6x32Tvk7fIG8i7wAAAEY"]
[Fri Nov 21 00:15:05.233987 2025] [:error] [pid 55342:tid 55374] [client 172.161.90.19:23539] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8-ibg6x32Tvk7fIG8i8AAAAEI"]
[Fri Nov 21 00:15:05.712462 2025] [:error] [pid 55430:tid 55436] [client 172.161.90.19:23434] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8-ifPZXaIMEU4pE7s9lAAAAMM"]
[Fri Nov 21 00:15:06.187764 2025] [:error] [pid 55343:tid 55404] [client 172.161.90.19:23438] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8-ilWlO3EnyVMV7w7tTgAAAIU"]
[Fri Nov 21 00:15:06.682751 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:23501] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8-ilH-MuFcoWRjXpbN_wAAAk0"]
[Fri Nov 21 00:15:07.155956 2025] [:error] [pid 40636:tid 40661] [client 172.161.90.19:23465] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8-iwK8BWUoW3xq0HBFRgAAA5U"]
[Fri Nov 21 00:15:07.659020 2025] [:error] [pid 40508:tid 40514] [client 172.161.90.19:23498] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8-i6xXNVCMW_ksxPsMMgAAAoQ"]
[Fri Nov 21 00:15:08.133195 2025] [:error] [pid 55430:tid 55455] [client 172.161.90.19:23510] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8-jPPZXaIMEU4pE7s9lQAAANY"]
[Fri Nov 21 00:15:08.606563 2025] [:error] [pid 40537:tid 40559] [client 172.161.90.19:23508] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aR8-jKKlsL5kxTa3c1wb5wAAAtI"]
[Fri Nov 21 00:15:09.077446 2025] [:error] [pid 55430:tid 55438] [client 172.161.90.19:23496] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aR8-jfPZXaIMEU4pE7s9mQAAAMU"]
[Fri Nov 21 00:15:09.571636 2025] [:error] [pid 55343:tid 55410] [client 172.161.90.19:23456] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aR8-jVWlO3EnyVMV7w7tZQAAAIs"]
[Fri Nov 21 00:15:10.051568 2025] [:error] [pid 40537:tid 40551] [client 172.161.90.19:23475] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aR8-jqKlsL5kxTa3c1wb6gAAAso"]
[Fri Nov 21 00:15:10.526659 2025] [:error] [pid 40537:tid 40558] [client 172.161.90.19:23432] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aR8-jqKlsL5kxTa3c1wb6wAAAtE"]
[Fri Nov 21 00:15:11.006845 2025] [:error] [pid 55340:tid 55346] [client 172.161.90.19:23430] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aR8-j_OxD-NeMydTybDc9wAAAAE"]
[Fri Nov 21 00:15:11.479347 2025] [:error] [pid 55430:tid 55437] [client 172.161.90.19:23491] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aR8-j_PZXaIMEU4pE7s9mwAAAMQ"]
[Fri Nov 21 00:15:11.955344 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:23548] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aR8-j_OxD-NeMydTybDc-QAAABQ"]
[Fri Nov 21 00:15:12.430703 2025] [:error] [pid 55342:tid 55386] [client 172.161.90.19:23546] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Cok.php"] [unique_id "aR8-kLg6x32Tvk7fIG8i9AAAAE4"]
[Fri Nov 21 00:15:12.907024 2025] [:error] [pid 40445:tid 40478] [client 172.161.90.19:23436] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Cok.php"] [unique_id "aR8-kFH-MuFcoWRjXpbOCAAAAkM"]
[Fri Nov 21 00:15:13.379734 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:23514] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Cok.php"] [unique_id "aR8-kbg6x32Tvk7fIG8i9gAAAEo"]
[Fri Nov 21 00:15:13.911602 2025] [:error] [pid 55430:tid 55451] [client 172.161.90.19:23470] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Cok.php"] [unique_id "aR8-kfPZXaIMEU4pE7s9nAAAANI"]
[Fri Nov 21 00:15:14.386220 2025] [:error] [pid 34405:tid 34431] [client 172.161.90.19:23367] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aR8-kjFpvu8oRK7ATftfUQAAARg"]
[Fri Nov 21 00:15:14.905643 2025] [:error] [pid 55340:tid 55367] [client 172.161.90.19:23506] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aR8-kvOxD-NeMydTybDc-gAAABY"]
[Fri Nov 21 00:15:15.384147 2025] [:error] [pid 40537:tid 40561] [client 172.161.90.19:23516] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aR8-k6KlsL5kxTa3c1wb7gAAAtQ"]
[Fri Nov 21 00:15:15.936216 2025] [:error] [pid 55340:tid 55362] [client 172.161.90.19:23425] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aR8-k_OxD-NeMydTybDc_QAAABE"]
[Fri Nov 21 00:15:16.416721 2025] [:error] [pid 55340:tid 55357] [client 172.161.90.19:23511] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aR8-lPOxD-NeMydTybDc_gAAAAw"]
[Fri Nov 21 00:15:16.893907 2025] [:error] [pid 55340:tid 55368] [client 172.161.90.19:23481] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aR8-lPOxD-NeMydTybDc_wAAABc"]
[Fri Nov 21 00:15:17.380653 2025] [:error] [pid 40537:tid 40549] [client 172.161.90.19:23531] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aR8-laKlsL5kxTa3c1wb8QAAAsg"]
[Fri Nov 21 00:15:17.858422 2025] [:error] [pid 55340:tid 55358] [client 172.161.90.19:23490] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aR8-lfOxD-NeMydTybDdAAAAAA0"]
[Fri Nov 21 00:15:18.343218 2025] [:error] [pid 55340:tid 55345] [client 172.161.90.19:23409] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aR8-lvOxD-NeMydTybDdAQAAAAA"]
[Fri Nov 21 00:15:18.823108 2025] [:error] [pid 55430:tid 55452] [client 172.161.90.19:23424] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aR8-lvPZXaIMEU4pE7s9ngAAANM"]
[Fri Nov 21 00:15:19.294654 2025] [:error] [pid 40415:tid 40428] [client 172.161.90.19:23463] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aR8-l6hjIyLSv09svwPzHAAAAco"]
[Fri Nov 21 00:15:19.766233 2025] [:error] [pid 55342:tid 55387] [client 172.161.90.19:23447] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aR8-l7g6x32Tvk7fIG8i_wAAAE8"]
[Fri Nov 21 00:15:20.237735 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:23532] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lx.php"] [unique_id "aR8-mFH-MuFcoWRjXpbOEgAAAlc"]
[Fri Nov 21 00:15:20.720270 2025] [:error] [pid 40445:tid 40497] [client 172.161.90.19:23377] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lx.php"] [unique_id "aR8-mFH-MuFcoWRjXpbOFAAAAlY"]
[Fri Nov 21 00:15:21.192865 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:23442] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lx.php"] [unique_id "aR8-maxXNVCMW_ksxPsMNgAAAoM"]
[Fri Nov 21 00:15:21.666154 2025] [:error] [pid 40636:tid 40653] [client 172.161.90.19:23533] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lx.php"] [unique_id "aR8-mQK8BWUoW3xq0HBFTAAAA40"]
[Fri Nov 21 00:15:22.138628 2025] [:error] [pid 55430:tid 55441] [client 172.161.90.19:23525] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w1w.php"] [unique_id "aR8-mvPZXaIMEU4pE7s9oQAAAMg"]
[Fri Nov 21 00:15:22.614777 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:23440] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w1w.php"] [unique_id "aR8-mlH-MuFcoWRjXpbOGAAAAlQ"]
[Fri Nov 21 00:15:23.098143 2025] [:error] [pid 40415:tid 40424] [client 172.161.90.19:23504] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w1w.php"] [unique_id "aR8-m6hjIyLSv09svwPzHgAAAcY"]
[Fri Nov 21 00:15:23.578629 2025] [:error] [pid 40508:tid 40521] [client 172.161.90.19:23380] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w1w.php"] [unique_id "aR8-m6xXNVCMW_ksxPsMNwAAAos"]
[Fri Nov 21 00:15:24.105773 2025] [:error] [pid 40508:tid 40517] [client 172.161.90.19:23400] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aR8-nKxXNVCMW_ksxPsMOQAAAoc"]
[Fri Nov 21 00:15:24.580017 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:23362] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aR8-nFH-MuFcoWRjXpbOGQAAAkk"]
[Fri Nov 21 00:15:25.053273 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:23542] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aR8-nVWlO3EnyVMV7w7trAAAAIw"]
[Fri Nov 21 00:15:25.539231 2025] [:error] [pid 40636:tid 40641] [client 172.161.90.19:23500] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aR8-nQK8BWUoW3xq0HBFVAAAA4E"]
[Fri Nov 21 00:15:26.012152 2025] [:error] [pid 34405:tid 34412] [client 172.161.90.19:23484] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cafe.php"] [unique_id "aR8-njFpvu8oRK7ATftfWQAAAQU"]
[Fri Nov 21 00:15:26.487407 2025] [:error] [pid 40445:tid 40479] [client 172.161.90.19:23446] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cafe.php"] [unique_id "aR8-nlH-MuFcoWRjXpbOHQAAAkQ"]
[Fri Nov 21 00:15:26.959474 2025] [:error] [pid 55430:tid 55443] [client 172.161.90.19:23466] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cafe.php"] [unique_id "aR8-nvPZXaIMEU4pE7s9pAAAAMo"]
[Fri Nov 21 00:15:27.434748 2025] [:error] [pid 34405:tid 34413] [client 172.161.90.19:23335] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cafe.php"] [unique_id "aR8-nzFpvu8oRK7ATftfXQAAAQY"]
[Fri Nov 21 00:15:27.908253 2025] [:error] [pid 40636:tid 40656] [client 172.161.90.19:23495] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aR8-nwK8BWUoW3xq0HBFXgAAA5A"]
[Fri Nov 21 00:15:28.386678 2025] [:error] [pid 55343:tid 55399] [client 172.161.90.19:23494] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aR8-oFWlO3EnyVMV7w7trgAAAIA"]
[Fri Nov 21 00:15:28.859019 2025] [:error] [pid 55340:tid 55350] [client 172.161.90.19:23467] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aR8-oPOxD-NeMydTybDdBwAAAAU"]
[Fri Nov 21 00:15:29.334746 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:23535] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aR8-ofOxD-NeMydTybDdCAAAABQ"]
[Fri Nov 21 00:15:29.811502 2025] [:error] [pid 55340:tid 55353] [client 172.161.90.19:23372] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aR8-ofOxD-NeMydTybDdCgAAAAg"]
[Fri Nov 21 00:15:30.341028 2025] [:error] [pid 55342:tid 55381] [client 172.161.90.19:23486] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aR8-org6x32Tvk7fIG8jBQAAAEk"]
[Fri Nov 21 00:15:30.814176 2025] [:error] [pid 55340:tid 55358] [client 172.161.90.19:23426] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aR8-ovOxD-NeMydTybDdDgAAAA0"]
[Fri Nov 21 00:15:31.372233 2025] [:error] [pid 34405:tid 34415] [client 172.161.90.19:23448] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aR8-ozFpvu8oRK7ATftfYwAAAQg"]
[Fri Nov 21 00:15:31.894979 2025] [:error] [pid 40636:tid 40652] [client 172.161.90.19:23402] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aR8-owK8BWUoW3xq0HBFcQAAA4w"]
[Fri Nov 21 00:15:32.387770 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:23482] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aR8-pKxXNVCMW_ksxPsMPwAAApM"]
[Fri Nov 21 00:15:32.859992 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:23534] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aR8-pFH-MuFcoWRjXpbOKQAAAk0"]
[Fri Nov 21 00:15:33.408895 2025] [:error] [pid 55342:tid 55373] [client 172.161.90.19:23444] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aR8-pbg6x32Tvk7fIG8jBgAAAEE"]
[Fri Nov 21 00:15:33.889852 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:23545] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aR8-pVH-MuFcoWRjXpbOLAAAAkg"]
[Fri Nov 21 00:15:34.486061 2025] [:error] [pid 40508:tid 40525] [client 172.161.90.19:23540] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aR8-pqxXNVCMW_ksxPsMQwAAAo8"]
[Fri Nov 21 00:15:34.973909 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:23550] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aR8-pqhjIyLSv09svwPzKQAAAdA"]
[Fri Nov 21 00:15:35.550107 2025] [:error] [pid 40508:tid 40524] [client 172.161.90.19:23487] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aR8-p6xXNVCMW_ksxPsMSgAAAo4"]
[Fri Nov 21 00:15:36.022248 2025] [:error] [pid 55430:tid 55456] [client 172.161.90.19:23523] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aR8-qPPZXaIMEU4pE7s9tAAAANc"]
[Fri Nov 21 00:15:36.592942 2025] [:error] [pid 40415:tid 40439] [client 172.161.90.19:23464] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aR8-qKhjIyLSv09svwPzLQAAAdU"]
[Fri Nov 21 00:15:37.077032 2025] [:error] [pid 34405:tid 34413] [client 172.161.90.19:23538] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aR8-qTFpvu8oRK7ATftfagAAAQY"]
[Fri Nov 21 00:15:37.626897 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:23468] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aR8-qaxXNVCMW_ksxPsMTQAAAoo"]
[Fri Nov 21 00:15:38.172993 2025] [:error] [pid 40415:tid 40421] [client 172.161.90.19:23472] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8-qqhjIyLSv09svwPzMAAAAcM"]
[Fri Nov 21 00:15:38.676086 2025] [:error] [pid 55340:tid 55346] [client 172.161.90.19:23497] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8-qvOxD-NeMydTybDdFQAAAAE"]
[Fri Nov 21 00:15:39.179004 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:23363] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8-q1H-MuFcoWRjXpbOSgAAAkY"]
[Fri Nov 21 00:15:39.697612 2025] [:error] [pid 40445:tid 40496] [client 172.161.90.19:23476] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8-q1H-MuFcoWRjXpbOTAAAAlU"]
[Fri Nov 21 00:15:40.200878 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:23453] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aR8-rFWlO3EnyVMV7w7twQAAAIw"]
[Fri Nov 21 00:15:40.693789 2025] [:error] [pid 40415:tid 40425] [client 172.161.90.19:23383] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aR8-rKhjIyLSv09svwPzNAAAAcc"]
[Fri Nov 21 00:15:41.168395 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:23461] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aR8-raxXNVCMW_ksxPsMUQAAApM"]
[Fri Nov 21 00:15:41.641477 2025] [:error] [pid 40508:tid 40512] [client 172.161.90.19:23366] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aR8-raxXNVCMW_ksxPsMUgAAAoI"]
[Fri Nov 21 00:15:42.124320 2025] [:error] [pid 40537:tid 40550] [client 172.161.90.19:23393] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aR8-rqKlsL5kxTa3c1wcBAAAAsk"]
[Fri Nov 21 00:15:42.754966 2025] [:error] [pid 40537:tid 40552] [client 172.161.90.19:23491] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aR8-rqKlsL5kxTa3c1wcBQAAAss"]
[Fri Nov 21 00:15:43.229179 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:23394] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aR8-rzFpvu8oRK7ATftfbQAAAQk"]
[Fri Nov 21 00:15:43.719469 2025] [:error] [pid 55430:tid 55444] [client 172.161.90.19:23551] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aR8-r_PZXaIMEU4pE7s9xAAAAMs"]
[Fri Nov 21 00:15:44.195231 2025] [:error] [pid 55430:tid 55449] [client 172.161.90.19:23309] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aR8-sPPZXaIMEU4pE7s9xQAAANA"]
[Fri Nov 21 00:15:44.775830 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:23513] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aR8-sFH-MuFcoWRjXpbOVwAAAlg"]
[Fri Nov 21 00:15:45.248469 2025] [:error] [pid 55343:tid 55402] [client 172.161.90.19:23474] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aR8-sVWlO3EnyVMV7w7txwAAAIM"]
[Fri Nov 21 00:15:45.757396 2025] [:error] [pid 40636:tid 40643] [client 172.161.90.19:23339] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aR8-sQK8BWUoW3xq0HBFqgAAA4M"]
[Fri Nov 21 00:15:46.231332 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:23373] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aR8-sqxXNVCMW_ksxPsMWAAAAoo"]
[Fri Nov 21 00:15:46.825716 2025] [:error] [pid 34405:tid 34408] [client 172.161.90.19:23547] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aR8-sjFpvu8oRK7ATftfbwAAAQE"]
[Fri Nov 21 00:15:47.299397 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:23450] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aR8-s1H-MuFcoWRjXpbOXAAAAkE"]
[Fri Nov 21 00:15:47.775625 2025] [:error] [pid 40508:tid 40519] [client 172.161.90.19:23451] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aR8-s6xXNVCMW_ksxPsMWgAAAok"]
[Fri Nov 21 00:15:48.284940 2025] [:error] [pid 55342:tid 55393] [client 172.161.90.19:23379] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8-tLg6x32Tvk7fIG8jLgAAAFU"]
[Fri Nov 21 00:15:48.828409 2025] [:error] [pid 55430:tid 55433] [client 172.161.90.19:23401] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8-tPPZXaIMEU4pE7s9yQAAAMA"]
[Fri Nov 21 00:15:49.308871 2025] [:error] [pid 55340:tid 55355] [client 172.161.90.19:23502] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8-tfOxD-NeMydTybDdHAAAAAo"]
[Fri Nov 21 00:15:49.844873 2025] [:error] [pid 55430:tid 55448] [client 172.161.90.19:23404] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8-tfPZXaIMEU4pE7s9ygAAAM8"]
[Fri Nov 21 00:15:50.328101 2025] [:error] [pid 40415:tid 40442] [client 172.161.90.19:23517] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8-tqhjIyLSv09svwPzOQAAAdg"]
[Fri Nov 21 00:15:50.842717 2025] [:error] [pid 40636:tid 40640] [client 172.161.90.19:23411] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8-tgK8BWUoW3xq0HBFvwAAA4A"]
[Fri Nov 21 00:15:51.314929 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:23435] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8-t1H-MuFcoWRjXpbOYwAAAkI"]
[Fri Nov 21 00:15:51.797995 2025] [:error] [pid 55340:tid 55366] [client 172.161.90.19:23489] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8-t_OxD-NeMydTybDdHQAAABU"]
[Fri Nov 21 00:15:52.283566 2025] [:error] [pid 40537:tid 40560] [client 172.161.90.19:23427] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8-uKKlsL5kxTa3c1wcCgAAAtM"]
[Fri Nov 21 00:15:52.774694 2025] [:error] [pid 40445:tid 40493] [client 172.161.90.19:23413] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8-uFH-MuFcoWRjXpbOZgAAAlI"]
[Fri Nov 21 00:15:53.289165 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:23543] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8-uVH-MuFcoWRjXpbOaQAAAlc"]
[Fri Nov 21 00:15:53.855414 2025] [:error] [pid 40415:tid 40429] [client 172.161.90.19:23503] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8-uahjIyLSv09svwPzOgAAAcs"]
[Fri Nov 21 00:15:54.338095 2025] [:error] [pid 40636:tid 40664] [client 172.161.90.19:23446] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8-ugK8BWUoW3xq0HBFwQAAA5g"]
[Fri Nov 21 00:15:54.852154 2025] [:error] [pid 55340:tid 55354] [client 172.161.90.19:23480] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8-uvOxD-NeMydTybDdHwAAAAk"]
[Fri Nov 21 00:15:55.564927 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23462] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8-u6hjIyLSv09svwPzOwAAAdY"]
[Fri Nov 21 00:15:57.262148 2025] [proxy_fcgi:error] [pid 40415:tid 40433] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:57.505709 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:57.749755 2025] [proxy_fcgi:error] [pid 40415:tid 40441] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:58.019595 2025] [proxy_fcgi:error] [pid 40415:tid 40431] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:58.297928 2025] [proxy_fcgi:error] [pid 40415:tid 40438] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:58.541912 2025] [proxy_fcgi:error] [pid 40415:tid 40434] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:58.783351 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:59.023437 2025] [proxy_fcgi:error] [pid 40415:tid 40428] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:59.276036 2025] [proxy_fcgi:error] [pid 40415:tid 40422] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:59.519681 2025] [proxy_fcgi:error] [pid 40415:tid 40424] [client 172.161.90.19:23418] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:15:59.759476 2025] [:error] [pid 40415:tid 40436] [client 172.161.90.19:23418] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aR8-v6hjIyLSv09svwPzTQAAAdI"]
[Fri Nov 21 00:16:00.345112 2025] [:error] [pid 55340:tid 55349] [client 172.161.90.19:23298] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/termps.php"] [unique_id "aR8-wPOxD-NeMydTybDdIAAAAAQ"]
[Fri Nov 21 00:16:00.844096 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:23445] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/termps.php"] [unique_id "aR8-wKhjIyLSv09svwPzTwAAAdM"]
[Fri Nov 21 00:16:01.353442 2025] [:error] [pid 55343:tid 55407] [client 172.161.90.19:23313] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/termps.php"] [unique_id "aR8-wVWlO3EnyVMV7w7t8AAAAIg"]
[Fri Nov 21 00:16:01.850087 2025] [:error] [pid 34405:tid 34431] [client 172.161.90.19:23416] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/termps.php"] [unique_id "aR8-wTFpvu8oRK7ATftfdQAAARg"]
[Fri Nov 21 00:16:02.326458 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:23304] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aR8-wlH-MuFcoWRjXpbOdAAAAk0"]
[Fri Nov 21 00:16:02.826791 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:23397] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aR8-wlH-MuFcoWRjXpbOdQAAAlg"]
[Fri Nov 21 00:16:03.302853 2025] [:error] [pid 55343:tid 55410] [client 172.161.90.19:23421] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aR8-w1WlO3EnyVMV7w7t-wAAAIs"]
[Fri Nov 21 00:16:03.794467 2025] [:error] [pid 55430:tid 55448] [client 172.161.90.19:23410] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aR8-w_PZXaIMEU4pE7s91AAAAM8"]
[Fri Nov 21 00:16:04.304884 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:23390] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aR8-xKxXNVCMW_ksxPsMZgAAApI"]
[Fri Nov 21 00:16:04.825057 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:23528] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aR8-xKxXNVCMW_ksxPsMaAAAAoA"]
[Fri Nov 21 00:16:05.299915 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:23483] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aR8-xaxXNVCMW_ksxPsMaQAAApA"]
[Fri Nov 21 00:16:05.929430 2025] [:error] [pid 40636:tid 40644] [client 172.161.90.19:23454] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aR8-xQK8BWUoW3xq0HBF0wAAA4Q"]
[Fri Nov 21 00:16:06.433216 2025] [:error] [pid 40636:tid 40641] [client 172.161.90.19:23473] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aR8-xgK8BWUoW3xq0HBF1QAAA4E"]
[Fri Nov 21 00:16:06.921541 2025] [:error] [pid 55340:tid 55347] [client 172.161.90.19:23469] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aR8-xvOxD-NeMydTybDdLQAAAAI"]
[Fri Nov 21 00:16:07.433896 2025] [:error] [pid 55342:tid 55381] [client 172.161.90.19:23236] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aR8-x7g6x32Tvk7fIG8jQAAAAEk"]
[Fri Nov 21 00:16:07.926023 2025] [:error] [pid 55340:tid 55348] [client 172.161.90.19:23370] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aR8-x_OxD-NeMydTybDdLwAAAAM"]
[Fri Nov 21 00:16:08.417815 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23492] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aR8-yKhjIyLSv09svwPzXQAAAdY"]
[Fri Nov 21 00:16:08.912943 2025] [:error] [pid 55430:tid 55454] [client 172.161.90.19:23302] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aR8-yPPZXaIMEU4pE7s91wAAANU"]
[Fri Nov 21 00:16:09.408179 2025] [:error] [pid 40445:tid 40485] [client 172.161.90.19:23392] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aR8-yVH-MuFcoWRjXpbOeAAAAko"]
[Fri Nov 21 00:16:09.885249 2025] [:error] [pid 40537:tid 40557] [client 172.161.90.19:23479] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aR8-yaKlsL5kxTa3c1wcDwAAAtA"]
[Fri Nov 21 00:16:10.357368 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:23499] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aR8-yvPZXaIMEU4pE7s92AAAANE"]
[Fri Nov 21 00:16:10.830184 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:23405] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aR8-ylH-MuFcoWRjXpbOewAAAlc"]
[Fri Nov 21 00:16:11.361293 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:23441] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aR8-y1H-MuFcoWRjXpbOfQAAAlQ"]
[Fri Nov 21 00:16:11.901121 2025] [:error] [pid 55343:tid 55417] [client 172.161.90.19:23382] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aR8-y1WlO3EnyVMV7w7uMwAAAJI"]
[Fri Nov 21 00:16:12.416802 2025] [:error] [pid 55342:tid 55391] [client 172.161.90.19:23342] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8-zLg6x32Tvk7fIG8jRAAAAFM"]
[Fri Nov 21 00:16:13.024503 2025] [:error] [pid 55342:tid 55384] [client 172.161.90.19:23455] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8-zbg6x32Tvk7fIG8jRwAAAEw"]
[Fri Nov 21 00:16:13.627743 2025] [:error] [pid 40415:tid 40426] [client 172.161.90.19:23509] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8-zahjIyLSv09svwPzXgAAAcg"]
[Fri Nov 21 00:16:14.156751 2025] [:error] [pid 55340:tid 55351] [client 172.161.90.19:23423] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8-zvOxD-NeMydTybDdMQAAAAY"]
[Fri Nov 21 00:16:15.041813 2025] [:error] [pid 40445:tid 40485] [client 172.161.90.19:23420] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8-z1H-MuFcoWRjXpbOgQAAAko"]
[Fri Nov 21 00:16:15.911419 2025] [:error] [pid 55342:tid 55386] [client 172.161.90.19:23332] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8-z7g6x32Tvk7fIG8jSQAAAE4"]
[Fri Nov 21 00:16:16.808482 2025] [:error] [pid 34405:tid 34418] [client 172.161.90.19:23328] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8-0DFpvu8oRK7ATftfigAAAQs"]
[Fri Nov 21 00:16:18.334231 2025] [:error] [pid 40415:tid 40438] [client 172.161.90.19:23399] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8-0qhjIyLSv09svwPzYgAAAdQ"]
[Fri Nov 21 00:16:19.100383 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:23412] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8-0zFpvu8oRK7ATftfmQAAAQk"]
[Fri Nov 21 00:16:19.623419 2025] [:error] [pid 40445:tid 40490] [client 172.161.90.19:23360] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8-01H-MuFcoWRjXpbOhwAAAk8"]
[Fri Nov 21 00:16:20.122979 2025] [:error] [pid 55343:tid 55404] [client 172.161.90.19:23386] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8-1FWlO3EnyVMV7w7uPQAAAIU"]
[Fri Nov 21 00:16:20.622346 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:23308] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8-1FH-MuFcoWRjXpbOkAAAAkI"]
[Fri Nov 21 00:16:21.108297 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:23381] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-1VH-MuFcoWRjXpbOlQAAAkE"]
[Fri Nov 21 00:16:21.721380 2025] [:error] [pid 55430:tid 55436] [client 172.161.90.19:23530] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-1fPZXaIMEU4pE7s93QAAAMM"]
[Fri Nov 21 00:16:22.207582 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:23522] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-1vOxD-NeMydTybDdNgAAABQ"]
[Fri Nov 21 00:16:22.710208 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:23369] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-1lH-MuFcoWRjXpbOngAAAks"]
[Fri Nov 21 00:16:23.238391 2025] [:error] [pid 55340:tid 55348] [client 172.161.90.19:23549] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aR8-1_OxD-NeMydTybDdOgAAAAM"]
[Fri Nov 21 00:16:23.763256 2025] [:error] [pid 55340:tid 55354] [client 172.161.90.19:23329] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aR8-1_OxD-NeMydTybDdOwAAAAk"]
[Fri Nov 21 00:16:24.271906 2025] [:error] [pid 40537:tid 40545] [client 172.161.90.19:23301] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aR8-2KKlsL5kxTa3c1wcEwAAAsQ"]
[Fri Nov 21 00:16:24.806866 2025] [:error] [pid 40537:tid 40558] [client 172.161.90.19:23368] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aR8-2KKlsL5kxTa3c1wcFAAAAtE"]
[Fri Nov 21 00:16:25.295325 2025] [:error] [pid 55340:tid 55346] [client 172.161.90.19:23322] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aR8-2fOxD-NeMydTybDdQAAAAAE"]
[Fri Nov 21 00:16:25.806792 2025] [:error] [pid 55342:tid 55381] [client 172.161.90.19:23387] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aR8-2bg6x32Tvk7fIG8jXwAAAEk"]
[Fri Nov 21 00:16:26.331706 2025] [:error] [pid 55342:tid 55388] [client 172.161.90.19:23398] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aR8-2rg6x32Tvk7fIG8jYAAAAFA"]
[Fri Nov 21 00:16:26.815376 2025] [:error] [pid 40537:tid 40544] [client 172.161.90.19:23307] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aR8-2qKlsL5kxTa3c1wcFQAAAsM"]
[Fri Nov 21 00:16:27.288059 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:23386] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8-21H-MuFcoWRjXpbOoQAAAlg"]
[Fri Nov 21 00:16:27.767389 2025] [:error] [pid 55340:tid 55356] [client 172.161.90.19:23353] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8-2_OxD-NeMydTybDdQgAAAAs"]
[Fri Nov 21 00:16:28.248800 2025] [:error] [pid 55340:tid 55362] [client 172.161.90.19:23408] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8-3POxD-NeMydTybDdQwAAABE"]
[Fri Nov 21 00:16:28.737114 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:23391] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8-3FH-MuFcoWRjXpbOowAAAlA"]
[Fri Nov 21 00:16:29.211531 2025] [:error] [pid 40445:tid 40487] [client 172.161.90.19:23458] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8-3VH-MuFcoWRjXpbOpQAAAkw"]
[Fri Nov 21 00:16:29.715415 2025] [:error] [pid 55342:tid 55383] [client 172.161.90.19:23417] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8-3bg6x32Tvk7fIG8jYQAAAEs"]
[Fri Nov 21 00:16:30.214057 2025] [:error] [pid 55340:tid 55349] [client 172.161.90.19:23262] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8-3vOxD-NeMydTybDdSQAAAAQ"]
[Fri Nov 21 00:16:30.690250 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23497] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8-3qhjIyLSv09svwPzZgAAAdY"]
[Fri Nov 21 00:16:31.169055 2025] [:error] [pid 34405:tid 34425] [client 172.161.90.19:23257] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aR8-3zFpvu8oRK7ATftf4QAAARI"]
[Fri Nov 21 00:16:31.642851 2025] [:error] [pid 40636:tid 40662] [client 172.161.90.19:23449] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aR8-3wK8BWUoW3xq0HBF3gAAA5Y"]
[Fri Nov 21 00:16:32.133388 2025] [:error] [pid 34405:tid 34413] [client 172.161.90.19:23452] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aR8-4DFpvu8oRK7ATftf5QAAAQY"]
[Fri Nov 21 00:16:32.604662 2025] [:error] [pid 34405:tid 34409] [client 172.161.90.19:23519] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aR8-4DFpvu8oRK7ATftf5wAAAQI"]
[Fri Nov 21 00:16:33.088082 2025] [:error] [pid 55342:tid 55391] [client 172.161.90.19:23477] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8-4bg6x32Tvk7fIG8jZgAAAFM"]
[Fri Nov 21 00:16:33.568340 2025] [:error] [pid 40537:tid 40562] [client 172.161.90.19:23333] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8-4aKlsL5kxTa3c1wcGwAAAtU"]
[Fri Nov 21 00:16:34.041564 2025] [:error] [pid 55342:tid 55379] [client 172.161.90.19:23419] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8-4rg6x32Tvk7fIG8jZwAAAEc"]
[Fri Nov 21 00:16:34.514815 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:23485] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8-4qxXNVCMW_ksxPsMfwAAApI"]
[Fri Nov 21 00:16:34.987525 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:23389] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8-4lH-MuFcoWRjXpbOqQAAAks"]
[Fri Nov 21 00:16:35.469010 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:23296] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8-41H-MuFcoWRjXpbOqgAAAlQ"]
[Fri Nov 21 00:16:35.975468 2025] [:error] [pid 55340:tid 55350] [client 172.161.90.19:23312] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8-4_OxD-NeMydTybDdTwAAAAU"]
[Fri Nov 21 00:16:36.455325 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:23406] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8-5FH-MuFcoWRjXpbOrAAAAkI"]
[Fri Nov 21 00:16:36.936271 2025] [:error] [pid 40445:tid 40480] [client 172.161.90.19:23403] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aR8-5FH-MuFcoWRjXpbOrwAAAkU"]
[Fri Nov 21 00:16:37.408476 2025] [:error] [pid 34405:tid 34424] [client 172.161.90.19:23396] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aR8-5TFpvu8oRK7ATftf7wAAARE"]
[Fri Nov 21 00:16:37.879482 2025] [:error] [pid 40415:tid 40433] [client 172.161.90.19:23321] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aR8-5ahjIyLSv09svwPzgwAAAc8"]
[Fri Nov 21 00:16:38.363757 2025] [:error] [pid 55430:tid 55441] [client 172.161.90.19:23415] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aR8-5vPZXaIMEU4pE7s95AAAAMg"]
[Fri Nov 21 00:16:38.836740 2025] [:error] [pid 55430:tid 55437] [client 172.161.90.19:23348] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aR8-5vPZXaIMEU4pE7s95QAAAMQ"]
[Fri Nov 21 00:16:39.360121 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:23325] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aR8-51H-MuFcoWRjXpbOtAAAAlA"]
[Fri Nov 21 00:16:39.832608 2025] [:error] [pid 40415:tid 40418] [client 172.161.90.19:23350] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aR8-56hjIyLSv09svwPzkAAAAcA"]
[Fri Nov 21 00:16:40.346849 2025] [:error] [pid 34405:tid 34428] [client 172.161.90.19:23264] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aR8-6DFpvu8oRK7ATftf8QAAARU"]
[Fri Nov 21 00:16:40.822632 2025] [:error] [pid 40445:tid 40496] [client 172.161.90.19:23233] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-6FH-MuFcoWRjXpbOtgAAAlU"]
[Fri Nov 21 00:16:41.305184 2025] [:error] [pid 55340:tid 55345] [client 172.161.90.19:23375] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-6fOxD-NeMydTybDdVgAAAAA"]
[Fri Nov 21 00:16:41.787967 2025] [:error] [pid 55430:tid 55451] [client 172.161.90.19:23297] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-6fPZXaIMEU4pE7s95gAAANI"]
[Fri Nov 21 00:16:42.263780 2025] [:error] [pid 40537:tid 40552] [client 172.161.90.19:23459] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-6qKlsL5kxTa3c1wcIQAAAss"]
[Fri Nov 21 00:16:42.736614 2025] [:error] [pid 40537:tid 40559] [client 172.161.90.19:23457] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-6qKlsL5kxTa3c1wcIgAAAtI"]
[Fri Nov 21 00:16:43.235617 2025] [:error] [pid 55342:tid 55383] [client 172.161.90.19:23378] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-67g6x32Tvk7fIG8jbgAAAEs"]
[Fri Nov 21 00:16:43.718362 2025] [:error] [pid 40508:tid 40523] [client 172.161.90.19:23385] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-66xXNVCMW_ksxPsMhwAAAo0"]
[Fri Nov 21 00:16:44.218712 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:23351] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aR8-7FH-MuFcoWRjXpbOuwAAAkA"]
[Fri Nov 21 00:16:44.734417 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:23268] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-7FH-MuFcoWRjXpbOvAAAAkg"]
[Fri Nov 21 00:16:45.217130 2025] [:error] [pid 55343:tid 55400] [client 172.161.90.19:23270] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-7VWlO3EnyVMV7w7uXgAAAIE"]
[Fri Nov 21 00:16:45.710844 2025] [:error] [pid 34405:tid 34413] [client 172.161.90.19:23273] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-7TFpvu8oRK7ATftf9wAAAQY"]
[Fri Nov 21 00:16:46.186340 2025] [:error] [pid 40636:tid 40662] [client 172.161.90.19:23259] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aR8-7gK8BWUoW3xq0HBF7wAAA5Y"]
[Fri Nov 21 00:16:46.664502 2025] [:error] [pid 40537:tid 40544] [client 172.161.90.19:23260] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8-7qKlsL5kxTa3c1wcJQAAAsM"]
[Fri Nov 21 00:16:47.161410 2025] [:error] [pid 40445:tid 40485] [client 172.161.90.19:23336] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8-71H-MuFcoWRjXpbOvwAAAko"]
[Fri Nov 21 00:16:47.651160 2025] [:error] [pid 40636:tid 40661] [client 172.161.90.19:23218] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8-7wK8BWUoW3xq0HBF8AAAA5U"]
[Fri Nov 21 00:16:48.144744 2025] [:error] [pid 55340:tid 55358] [client 172.161.90.19:23316] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8-8POxD-NeMydTybDdWgAAAA0"]
[Fri Nov 21 00:16:48.616429 2025] [:error] [pid 40508:tid 40533] [client 172.161.90.19:23275] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aR8-8KxXNVCMW_ksxPsMjAAAApc"]
[Fri Nov 21 00:16:49.095668 2025] [:error] [pid 40415:tid 40432] [client 172.161.90.19:23345] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aR8-8ahjIyLSv09svwPzygAAAc4"]
[Fri Nov 21 00:16:49.608752 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:23395] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aR8-8axXNVCMW_ksxPsMjQAAApI"]
[Fri Nov 21 00:16:50.079950 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:23327] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aR8-8lWlO3EnyVMV7w7uYwAAAIw"]
[Fri Nov 21 00:16:50.556270 2025] [:error] [pid 40636:tid 40649] [client 172.161.90.19:23306] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aR8-8gK8BWUoW3xq0HBF8wAAA4k"]
[Fri Nov 21 00:16:51.029645 2025] [:error] [pid 40415:tid 40422] [client 172.161.90.19:23374] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aR8-86hjIyLSv09svwPz1gAAAcQ"]
[Fri Nov 21 00:16:51.523013 2025] [:error] [pid 55342:tid 55393] [client 172.161.90.19:23323] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aR8-87g6x32Tvk7fIG8jfQAAAFU"]
[Fri Nov 21 00:16:51.997900 2025] [:error] [pid 40537:tid 40562] [client 172.161.90.19:23414] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aR8-86KlsL5kxTa3c1wcKQAAAtU"]
[Fri Nov 21 00:16:52.476514 2025] [:error] [pid 40636:tid 40648] [client 172.161.90.19:23355] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aR8-9AK8BWUoW3xq0HBF9gAAA4g"]
[Fri Nov 21 00:16:52.957318 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:23255] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aR8-9FH-MuFcoWRjXpbOxwAAAlM"]
[Fri Nov 21 00:16:53.429614 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:23235] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aR8-9axXNVCMW_ksxPsMkAAAApA"]
[Fri Nov 21 00:16:54.005345 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:23352] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aR8-9jFpvu8oRK7ATftf_QAAAQk"]
[Fri Nov 21 00:16:54.518743 2025] [:error] [pid 40415:tid 40426] [client 172.161.90.19:23524] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aR8-9qhjIyLSv09svwPz6AAAAcg"]
[Fri Nov 21 00:16:55.036127 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:23299] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aR8-91H-MuFcoWRjXpbOyAAAAlg"]
[Fri Nov 21 00:16:55.533120 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:23245] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aR8-96xXNVCMW_ksxPsMkwAAAoM"]
[Fri Nov 21 00:16:56.020856 2025] [:error] [pid 55343:tid 55406] [client 172.161.90.19:23344] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aR8--FWlO3EnyVMV7w7uZAAAAIc"]
[Fri Nov 21 00:16:56.498745 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:23471] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8--KxXNVCMW_ksxPsMlgAAApg"]
[Fri Nov 21 00:16:57.006449 2025] [:error] [pid 40508:tid 40515] [client 172.161.90.19:23518] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8--axXNVCMW_ksxPsMmAAAAoU"]
[Fri Nov 21 00:16:57.479844 2025] [:error] [pid 55343:tid 55401] [client 172.161.90.19:23460] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8--VWlO3EnyVMV7w7uZgAAAII"]
[Fri Nov 21 00:16:57.953524 2025] [:error] [pid 55343:tid 55419] [client 172.161.90.19:23242] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8--VWlO3EnyVMV7w7uZwAAAJQ"]
[Fri Nov 21 00:16:58.425895 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:23286] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aR8--rg6x32Tvk7fIG8jhAAAAFI"]
[Fri Nov 21 00:16:58.928830 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:23529] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aR8--qxXNVCMW_ksxPsMmwAAApI"]
[Fri Nov 21 00:16:59.411914 2025] [proxy_fcgi:error] [pid 40508:tid 40512] [client 172.161.90.19:23187] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:17:00.618592 2025] [proxy_fcgi:error] [pid 40508:tid 40513] [client 172.161.90.19:23187] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:17:02.343537 2025] [proxy_fcgi:error] [pid 40508:tid 40534] [client 172.161.90.19:23187] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:17:02.826405 2025] [proxy_fcgi:error] [pid 40508:tid 40515] [client 172.161.90.19:23187] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:17:03.068418 2025] [proxy_fcgi:error] [pid 40508:tid 40514] [client 172.161.90.19:23187] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:17:03.305798 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:23187] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR8-_6xXNVCMW_ksxPsMrgAAApM"]
[Fri Nov 21 00:17:03.777760 2025] [:error] [pid 55430:tid 55443] [client 172.161.90.19:23305] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR8-__PZXaIMEU4pE7s9-QAAAMo"]
[Fri Nov 21 00:17:04.254579 2025] [:error] [pid 40415:tid 40433] [client 172.161.90.19:23315] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR8_AKhjIyLSv09svwPz7QAAAc8"]
[Fri Nov 21 00:17:04.733792 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:23252] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR8_AKxXNVCMW_ksxPsMtAAAApA"]
[Fri Nov 21 00:17:05.229996 2025] [:error] [pid 55430:tid 55457] [client 172.161.90.19:23365] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aR8_AfPZXaIMEU4pE7s9-wAAANg"]
[Fri Nov 21 00:17:05.702444 2025] [:error] [pid 55430:tid 55435] [client 172.161.90.19:23272] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aR8_AfPZXaIMEU4pE7s9_QAAAMI"]
[Fri Nov 21 00:17:06.188590 2025] [:error] [pid 55340:tid 55354] [client 172.161.90.19:23354] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aR8_AvOxD-NeMydTybDdeAAAAAk"]
[Fri Nov 21 00:17:06.661985 2025] [:error] [pid 40508:tid 40523] [client 172.161.90.19:23240] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aR8_AqxXNVCMW_ksxPsMtwAAAo0"]
[Fri Nov 21 00:17:07.200692 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:23292] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR8_A6xXNVCMW_ksxPsMuQAAApg"]
[Fri Nov 21 00:17:07.681705 2025] [:error] [pid 55343:tid 55419] [client 172.161.90.19:23285] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR8_A1WlO3EnyVMV7w7ucAAAAJQ"]
[Fri Nov 21 00:17:08.155645 2025] [:error] [pid 40445:tid 40490] [client 172.161.90.19:23244] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR8_BFH-MuFcoWRjXpbO3QAAAk8"]
[Fri Nov 21 00:17:08.629673 2025] [:error] [pid 40537:tid 40561] [client 172.161.90.19:23303] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR8_BKKlsL5kxTa3c1wcNwAAAtQ"]
[Fri Nov 21 00:17:09.133939 2025] [:error] [pid 40537:tid 40546] [client 172.161.90.19:23170] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/article.php"] [unique_id "aR8_BaKlsL5kxTa3c1wcOAAAAsU"]
[Fri Nov 21 00:17:09.618845 2025] [:error] [pid 55430:tid 55441] [client 172.161.90.19:23250] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/article.php"] [unique_id "aR8_BfPZXaIMEU4pE7s-AwAAAMg"]
[Fri Nov 21 00:17:10.093025 2025] [:error] [pid 40537:tid 40563] [client 172.161.90.19:23364] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/article.php"] [unique_id "aR8_BqKlsL5kxTa3c1wcOgAAAtY"]
[Fri Nov 21 00:17:10.565369 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:23318] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/article.php"] [unique_id "aR8_BqxXNVCMW_ksxPsMvAAAApM"]
[Fri Nov 21 00:17:11.038488 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:23359] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8_B1H-MuFcoWRjXpbO3gAAAkY"]
[Fri Nov 21 00:17:11.508166 2025] [:error] [pid 55430:tid 55456] [client 172.161.90.19:23276] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8_B_PZXaIMEU4pE7s-BQAAANc"]
[Fri Nov 21 00:17:11.981251 2025] [:error] [pid 40415:tid 40438] [client 172.161.90.19:23356] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8_B6hjIyLSv09svwPz-AAAAdQ"]
[Fri Nov 21 00:17:12.463921 2025] [:error] [pid 55340:tid 55364] [client 172.161.90.19:23311] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aR8_CPOxD-NeMydTybDdgAAAABM"]
[Fri Nov 21 00:17:12.937037 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:23290] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8_CKhjIyLSv09svwPz-QAAAdA"]
[Fri Nov 21 00:17:13.409357 2025] [:error] [pid 55340:tid 55355] [client 172.161.90.19:23314] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8_CfOxD-NeMydTybDdhAAAAAo"]
[Fri Nov 21 00:17:13.892931 2025] [:error] [pid 40415:tid 40433] [client 172.161.90.19:23293] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8_CahjIyLSv09svwPz-wAAAc8"]
[Fri Nov 21 00:17:14.372462 2025] [:error] [pid 55430:tid 55447] [client 172.161.90.19:23347] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aR8_CvPZXaIMEU4pE7s-CQAAAM4"]
[Fri Nov 21 00:17:14.846173 2025] [:error] [pid 55430:tid 55446] [client 172.161.90.19:23376] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8_CvPZXaIMEU4pE7s-CgAAAM0"]
[Fri Nov 21 00:17:15.345149 2025] [:error] [pid 55430:tid 55457] [client 172.161.90.19:23232] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8_C_PZXaIMEU4pE7s-DAAAANg"]
[Fri Nov 21 00:17:15.817327 2025] [:error] [pid 40415:tid 40419] [client 172.161.90.19:23288] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8_C6hjIyLSv09svwPz_wAAAcE"]
[Fri Nov 21 00:17:16.296231 2025] [:error] [pid 40415:tid 40431] [client 172.161.90.19:23253] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aR8_DKhjIyLSv09svwP0AAAAAc0"]
[Fri Nov 21 00:17:16.768420 2025] [:error] [pid 55430:tid 55455] [client 172.161.90.19:23407] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aR8_DPPZXaIMEU4pE7s-EAAAANY"]
[Fri Nov 21 00:17:17.242406 2025] [:error] [pid 40636:tid 40661] [client 172.161.90.19:23274] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aR8_DQK8BWUoW3xq0HBF_gAAA5U"]
[Fri Nov 21 00:17:17.717207 2025] [:error] [pid 55342:tid 55385] [client 172.161.90.19:23358] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aR8_Dbg6x32Tvk7fIG8jiQAAAE0"]
[Fri Nov 21 00:17:18.189660 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:23238] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aR8_DqxXNVCMW_ksxPsMxAAAAoo"]
[Fri Nov 21 00:17:18.663133 2025] [:error] [pid 40445:tid 40489] [client 172.161.90.19:23361] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aR8_DlH-MuFcoWRjXpbO5AAAAk4"]
[Fri Nov 21 00:17:19.155357 2025] [:error] [pid 34405:tid 34421] [client 172.161.90.19:23384] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aR8_DzFpvu8oRK7ATftgEgAAAQ4"]
[Fri Nov 21 00:17:19.646469 2025] [:error] [pid 40537:tid 40558] [client 172.161.90.19:23330] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aR8_D6KlsL5kxTa3c1wcQwAAAtE"]
[Fri Nov 21 00:17:20.119693 2025] [:error] [pid 40415:tid 40432] [client 172.161.90.19:23182] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aR8_EKhjIyLSv09svwP0BgAAAc4"]
[Fri Nov 21 00:17:20.609265 2025] [:error] [pid 34405:tid 34429] [client 172.161.90.19:23185] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aR8_EDFpvu8oRK7ATftgFwAAARY"]
[Fri Nov 21 00:17:21.082077 2025] [:error] [pid 34405:tid 34418] [client 172.161.90.19:23256] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aR8_ETFpvu8oRK7ATftgGwAAAQs"]
[Fri Nov 21 00:17:21.611199 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:23239] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aR8_EahjIyLSv09svwP0CgAAAdA"]
[Fri Nov 21 00:17:22.085486 2025] [:error] [pid 40636:tid 40640] [client 172.161.90.19:23168] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aR8_EgK8BWUoW3xq0HBGAgAAA4A"]
[Fri Nov 21 00:17:22.583119 2025] [:error] [pid 40508:tid 40512] [client 172.161.90.19:23263] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8_EqxXNVCMW_ksxPsMywAAAoI"]
[Fri Nov 21 00:17:23.057891 2025] [:error] [pid 40415:tid 40425] [client 172.161.90.19:23178] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8_E6hjIyLSv09svwP0CwAAAcc"]
[Fri Nov 21 00:17:23.531417 2025] [:error] [pid 40636:tid 40652] [client 172.161.90.19:23266] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8_EwK8BWUoW3xq0HBGBwAAA4w"]
[Fri Nov 21 00:17:24.003859 2025] [:error] [pid 40636:tid 40660] [client 172.161.90.19:23173] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8_FAK8BWUoW3xq0HBGCQAAA5Q"]
[Fri Nov 21 00:17:24.489253 2025] [:error] [pid 55343:tid 55401] [client 172.161.90.19:23234] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8_FFWlO3EnyVMV7w7ufAAAAII"]
[Fri Nov 21 00:17:24.964709 2025] [:error] [pid 55342:tid 55383] [client 172.161.90.19:23138] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8_FLg6x32Tvk7fIG8jigAAAEs"]
[Fri Nov 21 00:17:25.439718 2025] [:error] [pid 55340:tid 55369] [client 172.161.90.19:23175] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8_FfOxD-NeMydTybDdhwAAABg"]
[Fri Nov 21 00:17:25.912622 2025] [:error] [pid 40537:tid 40560] [client 172.161.90.19:23300] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8_FaKlsL5kxTa3c1wcUAAAAtM"]
[Fri Nov 21 00:17:26.388557 2025] [:error] [pid 55340:tid 55363] [client 172.161.90.19:23203] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aR8_FvOxD-NeMydTybDdiQAAABI"]
[Fri Nov 21 00:17:26.863031 2025] [:error] [pid 40537:tid 40555] [client 172.161.90.19:23346] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8_FqKlsL5kxTa3c1wcUQAAAs4"]
[Fri Nov 21 00:17:27.340820 2025] [:error] [pid 40537:tid 40564] [client 172.161.90.19:23206] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8_F6KlsL5kxTa3c1wcVQAAAtc"]
[Fri Nov 21 00:17:27.839028 2025] [:error] [pid 40415:tid 40439] [client 172.161.90.19:23246] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8_F6hjIyLSv09svwP0FQAAAdU"]
[Fri Nov 21 00:17:28.312173 2025] [:error] [pid 55340:tid 55356] [client 172.161.90.19:23341] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8_GPOxD-NeMydTybDdkAAAAAs"]
[Fri Nov 21 00:17:28.826562 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23176] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8_GKhjIyLSv09svwP0GQAAAdY"]
[Fri Nov 21 00:17:29.304935 2025] [:error] [pid 40415:tid 40438] [client 172.161.90.19:23388] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8_GahjIyLSv09svwP0GwAAAdQ"]
[Fri Nov 21 00:17:29.783971 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:23338] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8_GaxXNVCMW_ksxPsM0QAAAoo"]
[Fri Nov 21 00:17:30.260520 2025] [:error] [pid 55343:tid 55405] [client 172.161.90.19:23294] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8_GlWlO3EnyVMV7w7ugAAAAIY"]
[Fri Nov 21 00:17:30.749522 2025] [:error] [pid 55343:tid 55409] [client 172.161.90.19:23340] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8_GlWlO3EnyVMV7w7uggAAAIo"]
[Fri Nov 21 00:17:31.234009 2025] [:error] [pid 55343:tid 55400] [client 172.161.90.19:23281] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8_G1WlO3EnyVMV7w7ugwAAAIE"]
[Fri Nov 21 00:17:31.715966 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:23324] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8_G6xXNVCMW_ksxPsM1QAAApM"]
[Fri Nov 21 00:17:32.187654 2025] [:error] [pid 34405:tid 34411] [client 172.161.90.19:23349] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aR8_HDFpvu8oRK7ATftgQgAAAQQ"]
[Fri Nov 21 00:17:32.659965 2025] [:error] [pid 55343:tid 55421] [client 172.161.90.19:23317] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aR8_HFWlO3EnyVMV7w7uhgAAAJY"]
[Fri Nov 21 00:17:33.160720 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:23183] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aR8_HVH-MuFcoWRjXpbO7QAAAkY"]
[Fri Nov 21 00:17:33.635054 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:23282] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aR8_HVWlO3EnyVMV7w7uiAAAAIw"]
[Fri Nov 21 00:17:34.125655 2025] [:error] [pid 40537:tid 40559] [client 172.161.90.19:23265] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR8_HqKlsL5kxTa3c1wcYQAAAtI"]
[Fri Nov 21 00:17:34.599746 2025] [:error] [pid 55430:tid 55457] [client 172.161.90.19:23422] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aR8_HvPZXaIMEU4pE7s-GQAAANg"]
[Fri Nov 21 00:17:35.095922 2025] [:error] [pid 55430:tid 55438] [client 172.161.90.19:23202] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aR8_H_PZXaIMEU4pE7s-HQAAAMU"]
[Fri Nov 21 00:17:35.591935 2025] [:error] [pid 34405:tid 34429] [client 172.161.90.19:23186] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aR8_HzFpvu8oRK7ATftgRgAAARY"]
[Fri Nov 21 00:17:36.130857 2025] [:error] [pid 55342:tid 55372] [client 172.161.90.19:23208] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8_ILg6x32Tvk7fIG8jjwAAAEA"]
[Fri Nov 21 00:17:36.646271 2025] [:error] [pid 55343:tid 55409] [client 172.161.90.19:23123] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8_IFWlO3EnyVMV7w7ukAAAAIo"]
[Fri Nov 21 00:17:37.131599 2025] [:error] [pid 40508:tid 40511] [client 172.161.90.19:23331] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8_IaxXNVCMW_ksxPsM2AAAAoE"]
[Fri Nov 21 00:17:37.615581 2025] [:error] [pid 40508:tid 40527] [client 172.161.90.19:23279] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8_IaxXNVCMW_ksxPsM2wAAApE"]
[Fri Nov 21 00:17:38.110912 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:23132] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aR8_IqhjIyLSv09svwP0HgAAAdM"]
[Fri Nov 21 00:17:38.590907 2025] [:error] [pid 55343:tid 55413] [client 172.161.90.19:23213] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8_IlWlO3EnyVMV7w7ulgAAAI4"]
[Fri Nov 21 00:17:39.069531 2025] [:error] [pid 34405:tid 34424] [client 172.161.90.19:23171] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8_IzFpvu8oRK7ATftgSwAAARE"]
[Fri Nov 21 00:17:39.547487 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:23334] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8_I1H-MuFcoWRjXpbO7wAAAkA"]
[Fri Nov 21 00:17:40.024286 2025] [:error] [pid 40537:tid 40561] [client 172.161.90.19:23177] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8_JKKlsL5kxTa3c1wcZwAAAtQ"]
[Fri Nov 21 00:17:40.497461 2025] [:error] [pid 40415:tid 40419] [client 172.161.90.19:23246] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8_JKhjIyLSv09svwP0HwAAAcE"]
[Fri Nov 21 00:17:40.972963 2025] [:error] [pid 40415:tid 40422] [client 172.161.90.19:23357] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8_JKhjIyLSv09svwP0IAAAAcQ"]
[Fri Nov 21 00:17:41.470127 2025] [:error] [pid 55342:tid 55389] [client 172.161.90.19:23291] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8_Jbg6x32Tvk7fIG8jkwAAAFE"]
[Fri Nov 21 00:17:41.942014 2025] [:error] [pid 40537:tid 40546] [client 172.161.90.19:23402] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8_JaKlsL5kxTa3c1wcaQAAAsU"]
[Fri Nov 21 00:17:42.444004 2025] [:error] [pid 55340:tid 55352] [client 172.161.90.19:23194] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8_JvOxD-NeMydTybDdmAAAAAc"]
[Fri Nov 21 00:17:42.928892 2025] [:error] [pid 55343:tid 55399] [client 172.161.90.19:23113] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8_JlWlO3EnyVMV7w7umgAAAIA"]
[Fri Nov 21 00:17:43.427054 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:23115] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8_J1H-MuFcoWRjXpbO8wAAAlc"]
[Fri Nov 21 00:17:43.899344 2025] [:error] [pid 55430:tid 55452] [client 172.161.90.19:23520] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8_J_PZXaIMEU4pE7s-IwAAANM"]
[Fri Nov 21 00:17:44.392453 2025] [:error] [pid 55342:tid 55373] [client 172.161.90.19:23179] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aR8_KLg6x32Tvk7fIG8jlwAAAEE"]
[Fri Nov 21 00:17:44.868172 2025] [:error] [pid 40508:tid 40527] [client 172.161.90.19:23247] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aR8_KKxXNVCMW_ksxPsM6AAAApE"]
[Fri Nov 21 00:17:45.345169 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:23319] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aR8_Kbg6x32Tvk7fIG8jmgAAAEo"]
[Fri Nov 21 00:17:45.817112 2025] [:error] [pid 34405:tid 34429] [client 172.161.90.19:23207] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aR8_KTFpvu8oRK7ATftgVAAAARY"]
[Fri Nov 21 00:17:46.290547 2025] [:error] [pid 40415:tid 40428] [client 172.161.90.19:23180] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aR8_KqhjIyLSv09svwP0IwAAAco"]
[Fri Nov 21 00:17:46.763429 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:23220] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aR8_KlH-MuFcoWRjXpbO9gAAAkk"]
[Fri Nov 21 00:17:47.263141 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23277] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8_K6hjIyLSv09svwP0JgAAAdY"]
[Fri Nov 21 00:17:47.745993 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:23251] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8_K1H-MuFcoWRjXpbO-AAAAlQ"]
[Fri Nov 21 00:17:48.324858 2025] [:error] [pid 40445:tid 40482] [client 172.161.90.19:23254] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8_LFH-MuFcoWRjXpbO-wAAAkc"]
[Fri Nov 21 00:17:48.873581 2025] [:error] [pid 55343:tid 55418] [client 172.161.90.19:23337] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8_LFWlO3EnyVMV7w7uoQAAAJM"]
[Fri Nov 21 00:17:49.379877 2025] [:error] [pid 40445:tid 40490] [client 172.161.90.19:23128] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aR8_LVH-MuFcoWRjXpbO_QAAAk8"]
[Fri Nov 21 00:17:49.876567 2025] [:error] [pid 55430:tid 55433] [client 172.161.90.19:23343] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR8_LfPZXaIMEU4pE7s-JgAAAMA"]
[Fri Nov 21 00:17:50.366619 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:23055] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aR8_LqhjIyLSv09svwP0KwAAAdM"]
[Fri Nov 21 00:17:50.838594 2025] [:error] [pid 55430:tid 55443] [client 172.161.90.19:23196] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aR8_LvPZXaIMEU4pE7s-KAAAAMo"]
[Fri Nov 21 00:17:51.316559 2025] [:error] [pid 55342:tid 55392] [client 172.161.90.19:23184] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aR8_L7g6x32Tvk7fIG8jrQAAAFQ"]
[Fri Nov 21 00:17:51.798217 2025] [:error] [pid 55430:tid 55439] [client 172.161.90.19:23310] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aR8_L_PZXaIMEU4pE7s-KgAAAMY"]
[Fri Nov 21 00:17:52.271541 2025] [:error] [pid 34405:tid 34427] [client 172.161.90.19:23197] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qqq.php"] [unique_id "aR8_MDFpvu8oRK7ATftgXgAAARQ"]
[Fri Nov 21 00:17:52.749142 2025] [:error] [pid 55342:tid 55378] [client 172.161.90.19:23243] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qqq.php"] [unique_id "aR8_MLg6x32Tvk7fIG8jsAAAAEY"]
[Fri Nov 21 00:17:53.231803 2025] [:error] [pid 34405:tid 34423] [client 172.161.90.19:23193] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qqq.php"] [unique_id "aR8_MTFpvu8oRK7ATftgXwAAARA"]
[Fri Nov 21 00:17:53.764187 2025] [:error] [pid 55340:tid 55346] [client 172.161.90.19:23229] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qqq.php"] [unique_id "aR8_MfOxD-NeMydTybDdngAAAAE"]
[Fri Nov 21 00:17:54.242140 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:23189] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aR8_MjFpvu8oRK7ATftgYAAAAQk"]
[Fri Nov 21 00:17:54.724442 2025] [:error] [pid 40415:tid 40429] [client 172.161.90.19:23464] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aR8_MqhjIyLSv09svwP0MQAAAcs"]
[Fri Nov 21 00:17:55.206906 2025] [:error] [pid 40415:tid 40441] [client 172.161.90.19:23295] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aR8_M6hjIyLSv09svwP0NAAAAdc"]
[Fri Nov 21 00:17:55.682263 2025] [:error] [pid 55343:tid 55413] [client 172.161.90.19:23224] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aR8_M1WlO3EnyVMV7w7upgAAAI4"]
[Fri Nov 21 00:17:56.181136 2025] [:error] [pid 55340:tid 55364] [client 172.161.90.19:23112] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR8_NPOxD-NeMydTybDdnwAAABM"]
[Fri Nov 21 00:17:56.678635 2025] [:error] [pid 34405:tid 34410] [client 172.161.90.19:23261] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aR8_NDFpvu8oRK7ATftgYQAAAQM"]
[Fri Nov 21 00:17:57.150341 2025] [:error] [pid 40508:tid 40531] [client 172.161.90.19:23271] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aR8_NaxXNVCMW_ksxPsM7wAAApU"]
[Fri Nov 21 00:17:57.625193 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:23280] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aR8_NVH-MuFcoWRjXpbPAQAAAlg"]
[Fri Nov 21 00:17:58.118607 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:23122] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8_Nrg6x32Tvk7fIG8jtgAAAEU"]
[Fri Nov 21 00:17:58.590171 2025] [:error] [pid 55430:tid 55456] [client 172.161.90.19:23169] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8_NvPZXaIMEU4pE7s-LwAAANc"]
[Fri Nov 21 00:17:59.073852 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:23278] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8_N1H-MuFcoWRjXpbPBAAAAkk"]
[Fri Nov 21 00:17:59.546219 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:23502] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8_N1H-MuFcoWRjXpbPBwAAAkE"]
[Fri Nov 21 00:18:00.093509 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:23108] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8_OFH-MuFcoWRjXpbPCgAAAlA"]
[Fri Nov 21 00:18:00.572344 2025] [:error] [pid 55342:tid 55380] [client 172.161.90.19:23048] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8_OLg6x32Tvk7fIG8juAAAAEg"]
[Fri Nov 21 00:18:01.050567 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:23237] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8_OVH-MuFcoWRjXpbPCwAAAkI"]
[Fri Nov 21 00:18:01.527532 2025] [:error] [pid 55340:tid 55351] [client 172.161.90.19:23044] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8_OfOxD-NeMydTybDdpwAAAAY"]
[Fri Nov 21 00:18:02.002146 2025] [:error] [pid 34405:tid 34430] [client 172.161.90.19:23227] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8_OjFpvu8oRK7ATftgZgAAARc"]
[Fri Nov 21 00:18:02.474138 2025] [:error] [pid 40445:tid 40479] [client 172.161.90.19:23258] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8_OlH-MuFcoWRjXpbPDwAAAkQ"]
[Fri Nov 21 00:18:02.976848 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:23130] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8_OlH-MuFcoWRjXpbPEAAAAlM"]
[Fri Nov 21 00:18:04.647627 2025] [:error] [pid 34405:tid 34420] [client 172.161.90.19:23215] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR8_PDFpvu8oRK7ATftgcgAAAQ0"]
[Fri Nov 21 00:18:06.634815 2025] [:error] [pid 55340:tid 55368] [client 172.161.90.19:23228] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR8_PvOxD-NeMydTybDdsgAAABc"]
[Fri Nov 21 00:18:07.114823 2025] [:error] [pid 40415:tid 40441] [client 172.161.90.19:23152] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR8_P6hjIyLSv09svwP0QQAAAdc"]
[Fri Nov 21 00:18:07.588276 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:23059] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR8_P1H-MuFcoWRjXpbPGwAAAkg"]
[Fri Nov 21 00:18:08.076535 2025] [:error] [pid 40636:tid 40663] [client 172.161.90.19:23195] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR8_QAK8BWUoW3xq0HBGJAAAA5c"]
[Fri Nov 21 00:18:08.549931 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:23172] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aR8_QKxXNVCMW_ksxPsM9QAAAoA"]
[Fri Nov 21 00:18:09.023650 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:23192] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aR8_QaxXNVCMW_ksxPsM9gAAAoM"]
[Fri Nov 21 00:18:09.495424 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:23121] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aR8_QaxXNVCMW_ksxPsM9wAAAoo"]
[Fri Nov 21 00:18:09.969057 2025] [:error] [pid 40537:tid 40552] [client 172.161.90.19:23188] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aR8_QaKlsL5kxTa3c1wcbQAAAss"]
[Fri Nov 21 00:18:10.456375 2025] [:error] [pid 40636:tid 40653] [client 172.161.90.19:23249] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aR8_QgK8BWUoW3xq0HBGJgAAA40"]
[Fri Nov 21 00:18:10.938085 2025] [:error] [pid 40445:tid 40490] [client 172.161.90.19:23207] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aR8_QlH-MuFcoWRjXpbPJQAAAk8"]
[Fri Nov 21 00:18:11.411602 2025] [:error] [pid 40508:tid 40533] [client 172.161.90.19:23106] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aR8_Q6xXNVCMW_ksxPsM-gAAApc"]
[Fri Nov 21 00:18:11.883156 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:23139] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aR8_Q1H-MuFcoWRjXpbPJwAAAkg"]
[Fri Nov 21 00:18:12.360006 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:23127] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aR8_RFH-MuFcoWRjXpbPKQAAAkY"]
[Fri Nov 21 00:18:12.831960 2025] [:error] [pid 40537:tid 40558] [client 172.161.90.19:23289] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aR8_RKKlsL5kxTa3c1wccQAAAtE"]
[Fri Nov 21 00:18:13.335979 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:23181] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aR8_Rbg6x32Tvk7fIG8jwQAAAFI"]
[Fri Nov 21 00:18:13.811493 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:23326] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aR8_RaxXNVCMW_ksxPsM_QAAApg"]
[Fri Nov 21 00:18:14.290490 2025] [:error] [pid 40537:tid 40543] [client 172.161.90.19:23124] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR8_RqKlsL5kxTa3c1wcdQAAAsI"]
[Fri Nov 21 00:18:14.763745 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:23120] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR8_RlH-MuFcoWRjXpbPLgAAAk0"]
[Fri Nov 21 00:18:15.240088 2025] [:error] [pid 55342:tid 55375] [client 172.161.90.19:23191] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aR8_R7g6x32Tvk7fIG8jwwAAAEM"]
[Fri Nov 21 00:18:15.714341 2025] [:error] [pid 40537:tid 40542] [client 172.161.90.19:23174] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aR8_R6KlsL5kxTa3c1wcdgAAAsE"]
[Fri Nov 21 00:18:16.191358 2025] [:error] [pid 55430:tid 55440] [client 172.161.90.19:23221] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aR8_SPPZXaIMEU4pE7s-OwAAAMc"]
[Fri Nov 21 00:18:16.664024 2025] [:error] [pid 40445:tid 40496] [client 172.161.90.19:23157] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aR8_SFH-MuFcoWRjXpbPMQAAAlU"]
[Fri Nov 21 00:18:17.139373 2025] [:error] [pid 55343:tid 55399] [client 172.161.90.19:23061] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bge.php"] [unique_id "aR8_SVWlO3EnyVMV7w7usgAAAIA"]
[Fri Nov 21 00:18:17.613848 2025] [:error] [pid 40537:tid 40546] [client 172.161.90.19:23320] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bge.php"] [unique_id "aR8_SaKlsL5kxTa3c1wceAAAAsU"]
[Fri Nov 21 00:18:18.086723 2025] [:error] [pid 34405:tid 34415] [client 172.161.90.19:23147] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bge.php"] [unique_id "aR8_SjFpvu8oRK7ATftgiAAAAQg"]
[Fri Nov 21 00:18:18.583470 2025] [:error] [pid 40537:tid 40562] [client 172.161.90.19:23269] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bge.php"] [unique_id "aR8_SqKlsL5kxTa3c1wceQAAAtU"]
[Fri Nov 21 00:18:19.056519 2025] [:error] [pid 40537:tid 40554] [client 172.161.90.19:23201] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ifm.php"] [unique_id "aR8_S6KlsL5kxTa3c1wcewAAAs0"]
[Fri Nov 21 00:18:19.576532 2025] [:error] [pid 34405:tid 34418] [client 172.161.90.19:23117] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ifm.php"] [unique_id "aR8_SzFpvu8oRK7ATftgiQAAAQs"]
[Fri Nov 21 00:18:20.048384 2025] [:error] [pid 55430:tid 55435] [client 172.161.90.19:23107] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ifm.php"] [unique_id "aR8_TPPZXaIMEU4pE7s-QQAAAMI"]
[Fri Nov 21 00:18:20.525314 2025] [:error] [pid 40415:tid 40423] [client 172.161.90.19:23150] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ifm.php"] [unique_id "aR8_TKhjIyLSv09svwP0UAAAAcU"]
[Fri Nov 21 00:18:20.999626 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:23211] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww5.php"] [unique_id "aR8_TDFpvu8oRK7ATftgkQAAAQk"]
[Fri Nov 21 00:18:21.562794 2025] [:error] [pid 40508:tid 40524] [client 172.161.90.19:23205] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww5.php"] [unique_id "aR8_TaxXNVCMW_ksxPsNAQAAAo4"]
[Fri Nov 21 00:18:22.038495 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:23241] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww5.php"] [unique_id "aR8_TlH-MuFcoWRjXpbPQgAAAlQ"]
[Fri Nov 21 00:18:22.529173 2025] [:error] [pid 40636:tid 40657] [client 172.161.90.19:22988] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww5.php"] [unique_id "aR8_TgK8BWUoW3xq0HBGKwAAA5E"]
[Fri Nov 21 00:18:23.001738 2025] [:error] [pid 40508:tid 40532] [client 172.161.90.19:23505] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thxt.php"] [unique_id "aR8_T6xXNVCMW_ksxPsNGgAAApY"]
[Fri Nov 21 00:18:23.475778 2025] [:error] [pid 55430:tid 55449] [client 172.161.90.19:23118] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thxt.php"] [unique_id "aR8_T_PZXaIMEU4pE7s-TQAAANA"]
[Fri Nov 21 00:18:23.966311 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:23217] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thxt.php"] [unique_id "aR8_T6hjIyLSv09svwP0ZQAAAdY"]
[Fri Nov 21 00:18:24.484562 2025] [:error] [pid 55342:tid 55380] [client 172.161.90.19:23267] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thxt.php"] [unique_id "aR8_ULg6x32Tvk7fIG8j2gAAAEg"]
[Fri Nov 21 00:18:24.956799 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:23214] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kairolin.php"] [unique_id "aR8_UFH-MuFcoWRjXpbPUgAAAlg"]
[Fri Nov 21 00:18:25.454531 2025] [:error] [pid 40445:tid 40492] [client 172.161.90.19:23145] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kairolin.php"] [unique_id "aR8_UVH-MuFcoWRjXpbPVAAAAlE"]
[Fri Nov 21 00:18:25.932014 2025] [:error] [pid 40415:tid 40422] [client 172.161.90.19:23223] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kairolin.php"] [unique_id "aR8_UahjIyLSv09svwP0aAAAAcQ"]
[Fri Nov 21 00:18:26.407801 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:23140] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kairolin.php"] [unique_id "aR8_UqhjIyLSv09svwP0agAAAdA"]
[Fri Nov 21 00:18:26.888905 2025] [:error] [pid 34405:tid 34426] [client 172.161.90.19:23093] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aR8_UjFpvu8oRK7ATftgrQAAARM"]
[Fri Nov 21 00:18:27.364068 2025] [:error] [pid 55340:tid 55354] [client 172.161.90.19:23371] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aR8_U_OxD-NeMydTybDdwgAAAAk"]
[Fri Nov 21 00:18:27.849144 2025] [:error] [pid 40415:tid 40424] [client 172.161.90.19:23209] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aR8_U6hjIyLSv09svwP0bAAAAcY"]
[Fri Nov 21 00:18:28.326885 2025] [:error] [pid 40636:tid 40656] [client 172.161.90.19:23308] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aR8_VAK8BWUoW3xq0HBGMgAAA5A"]
[Fri Nov 21 02:40:41.570258 2025] [autoindex:error] [pid 13805:tid 13812] [client 37.27.59.176:43400] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 03:04:04.016225 2025] [:error] [pid 28937:tid 28959] [client 123.187.240.242:57179] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aR9mJPtbT10GL1y3DOaZkgAAANQ"]
[Fri Nov 21 08:01:06.816536 2025] [autoindex:error] [pid 13325:tid 13352] [client 34.227.26.141:36746] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 08:10:38.752924 2025] [autoindex:error] [pid 46194:tid 46209] [client 159.89.47.0:42952] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 09:32:17.031875 2025] [:error] [pid 13327:tid 13389] [client 213.21.239.4:51628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aR_BIfBXf-8B6mFkLePMxwAAAIQ"]
[Fri Nov 21 10:29:24.938850 2025] [:error] [pid 17882:tid 17899] [client 103.211.133.191:7378] [client 103.211.133.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.133.191, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aR_OhIwFFssEn348h95d9QAAAU8"]
[Fri Nov 21 10:29:24.951186 2025] [proxy_fcgi:error] [pid 17882:tid 17899] [client 103.211.133.191:7378] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 10:29:44.150687 2025] [:error] [pid 13327:tid 13391] [client 202.67.44.3:21031] [client 202.67.44.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.67.44.3, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aR_OmPBXf-8B6mFkLePUBAAAAIY"]
[Fri Nov 21 10:29:44.166381 2025] [proxy_fcgi:error] [pid 13327:tid 13391] [client 202.67.44.3:21031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 12:51:14.560003 2025] [autoindex:error] [pid 46237:tid 46258] [client 205.210.31.230:60088] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 14:26:04.149016 2025] [:error] [pid 13326:tid 13359] [client 213.21.239.4:41230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSAF_Nh942-HkDIkOWp4fQAAAEE"]
[Fri Nov 21 14:31:47.306228 2025] [:error] [pid 25554:tid 25580] [client 43.167.239.66:38858] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSAHUx-NtB-9AzFZrk4ItAAAARY"]
[Fri Nov 21 14:41:27.501999 2025] [autoindex:error] [pid 25431:tid 25505] [client 66.249.64.7:63357] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 14:49:02.974140 2025] [autoindex:error] [pid 25430:tid 25470] [client 100.24.208.151:48704] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 14:49:03.386794 2025] [autoindex:error] [pid 25430:tid 25462] [client 100.24.208.151:19973] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 15:03:58.659856 2025] [:error] [pid 25430:tid 25478] [client 213.21.239.4:36500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSAO3qpnWJcWt_4foXkepwAAAFI"]
[Fri Nov 21 15:19:13.662905 2025] [autoindex:error] [pid 25431:tid 25487] [client 40.77.167.58:11590] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 15:25:13.893747 2025] [:error] [pid 25429:tid 25445] [client 213.21.239.4:39906] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAT2T4rZbRSr7vu-NOMtAAAAAw"]
[Fri Nov 21 15:29:39.047254 2025] [:error] [pid 25430:tid 25473] [client 58.49.233.126:45423] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSAU46pnWJcWt_4foXkpSgAAAE0"]
[Fri Nov 21 16:03:01.390441 2025] [:error] [pid 25431:tid 25502] [client 213.21.239.4:43016] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.svn/wc.db"] [unique_id "aSActcklhXxmoIExII02nAAAAI8"]
[Fri Nov 21 17:16:39.786848 2025] [autoindex:error] [pid 25430:tid 25463] [client 204.3.38.17:40447] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 17:16:42.660564 2025] [autoindex:error] [pid 25554:tid 25581] [client 45.94.247.7:42153] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 17:16:50.134565 2025] [autoindex:error] [pid 25430:tid 25484] [client 31.98.120.156:40315] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 17:16:53.432838 2025] [autoindex:error] [pid 25554:tid 25570] [client 209.141.59.132:38154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 17:42:57.921777 2025] [autoindex:error] [pid 25521:tid 25531] [client 213.21.239.4:47760] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 18:33:10.605958 2025] [autoindex:error] [pid 25431:tid 25499] [client 213.21.239.4:48148] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 18:45:39.666194 2025] [:error] [pid 25521:tid 25541] [client 104.28.208.82:31532] [client 104.28.208.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.82, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aSBC0_hXnBMilDddn3UeGgAAANI"]
[Fri Nov 21 18:45:39.675973 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 104.28.208.82:31532] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:43.148733 2025] [autoindex:error] [pid 25430:tid 25468] [client 37.19.210.85:37226] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:44.992269 2025] [autoindex:error] [pid 46939:tid 46963] [client 207.182.30.27:31399] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:46.197954 2025] [autoindex:error] [pid 25521:tid 25525] [client 37.19.210.85:34559] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:47.255167 2025] [autoindex:error] [pid 25521:tid 25540] [client 68.65.223.42:24543] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:48.971303 2025] [autoindex:error] [pid 25429:tid 25447] [client 37.19.210.85:24134] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:50.935260 2025] [autoindex:error] [pid 25429:tid 25452] [client 199.250.188.33:12243] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:51.441688 2025] [autoindex:error] [pid 25554:tid 25581] [client 37.19.210.85:38191] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:23:52.465365 2025] [autoindex:error] [pid 25521:tid 25534] [client 207.182.30.27:51755] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 23:06:15.976828 2025] [:error] [pid 25521:tid 25528] [client 43.156.202.34:38820] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSB_5_hXnBMilDddn3WGJQAAAMU"]
[Sat Nov 22 01:51:17.648805 2025] [autoindex:error] [pid 50057:tid 50083] [client 84.246.85.11:47863] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 01:51:18.161922 2025] [autoindex:error] [pid 9180:tid 9186] [client 84.246.85.11:51743] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 01:51:18.932527 2025] [autoindex:error] [pid 50057:tid 50081] [client 84.246.85.11:45065] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 01:57:51.184682 2025] [autoindex:error] [pid 49641:tid 49824] [client 18.222.238.120:49028] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Sat Nov 22 01:57:51.186170 2025] [autoindex:error] [pid 49643:tid 49930] [client 18.222.238.120:49030] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 01:57:51.764803 2025] [autoindex:error] [pid 49643:tid 49935] [client 18.222.238.120:45146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Sat Nov 22 01:57:51.765323 2025] [autoindex:error] [pid 49643:tid 49942] [client 18.222.238.120:45134] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.cientifica.com.au/
[Sat Nov 22 04:17:22.959033 2025] [:error] [pid 53477:tid 53500] [client 203.2.64.59:50486] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSDI0n7Lu30Ku9O40aKrLQAAABM"]
[Sat Nov 22 05:49:22.836842 2025] [:error] [pid 53479:tid 53546] [client 189.34.145.184:23779] [client 189.34.145.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.34.145.184, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDeYm6cicFF3Aas-oR4rgAAAIo"]
[Sat Nov 22 05:49:22.850839 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 189.34.145.184:23779] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:35:16.951024 2025] [autoindex:error] [pid 53477:tid 53487] [client 78.138.99.187:9733] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 06:35:17.496994 2025] [autoindex:error] [pid 25856:tid 25868] [client 78.138.99.187:9876] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 06:35:19.291226 2025] [autoindex:error] [pid 53477:tid 53500] [client 8.219.64.236:52872] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 06:35:22.241023 2025] [autoindex:error] [pid 53566:tid 53577] [client 8.219.64.236:47065] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 06:35:23.979688 2025] [autoindex:error] [pid 25856:tid 25870] [client 8.219.64.236:31116] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 06:35:25.698751 2025] [autoindex:error] [pid 25856:tid 25865] [client 8.219.64.236:3344] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 22 08:04:18.783817 2025] [autoindex:error] [pid 9547:tid 9553] [client 62.141.44.236:34354] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 10:08:32.742051 2025] [:error] [pid 25856:tid 25873] [client 43.157.179.227:56780] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSEbIBsTP0wy94zKUvEtvAAAAQ8"]
[Sat Nov 22 10:10:40.307413 2025] [autoindex:error] [pid 53477:tid 53487] [client 216.73.216.122:33008] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 12:04:55.616203 2025] [autoindex:error] [pid 53478:tid 53530] [client 47.254.90.143:50040] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 14:55:47.253485 2025] [autoindex:error] [pid 53478:tid 53512] [client 74.7.243.205:48000] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 14:57:54.307045 2025] [autoindex:error] [pid 53477:tid 53502] [client 213.21.239.4:50552] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 15:40:20.925068 2025] [:error] [pid 25856:tid 25882] [client 85.215.194.205:61219] [client 85.215.194.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSFo5BsTP0wy94zKUvGGEAAAARg"]
[Sat Nov 22 15:40:21.445861 2025] [:error] [pid 53479:tid 53557] [client 85.215.194.205:51273] [client 85.215.194.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aSFo5W6cicFF3Aas-oRNlgAAAJU"]
[Sat Nov 22 15:40:21.964936 2025] [:error] [pid 9547:tid 9553] [client 85.215.194.205:64318] [client 85.215.194.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSFo5dClOR5qk7DoMeFzzgAAAUA"]
[Sat Nov 22 16:48:36.026772 2025] [:error] [pid 53477:tid 53487] [client 223.244.35.77:39303] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSF45H7Lu30Ku9O40aKbbQAAAAY"]
[Sat Nov 22 16:59:23.279577 2025] [:error] [pid 25856:tid 25865] [client 43.130.57.46:52200] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSF7axsTP0wy94zKUvGcUAAAAQc"]
[Sat Nov 22 17:55:02.004581 2025] [autoindex:error] [pid 53566:tid 53571] [client 66.249.64.8:52473] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:58:56.148092 2025] [autoindex:error] [pid 44259:tid 44263] [client 100.24.16.229:49610] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:58:56.553695 2025] [autoindex:error] [pid 9547:tid 9554] [client 100.24.16.229:56392] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:32:06.619361 2025] [autoindex:error] [pid 25856:tid 25868] [client 79.174.91.209:59863] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:32:07.752119 2025] [autoindex:error] [pid 44259:tid 44262] [client 79.174.91.209:26660] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:32:08.878659 2025] [autoindex:error] [pid 44259:tid 44275] [client 79.174.91.209:26177] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:32:10.038567 2025] [autoindex:error] [pid 53477:tid 53501] [client 79.174.91.209:17889] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 22:18:26.960032 2025] [autoindex:error] [pid 25856:tid 25873] [client 192.36.109.118:40225] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:27:13.878122 2025] [autoindex:error] [pid 9547:tid 9577] [client 213.21.239.4:45544] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:44:43.751291 2025] [autoindex:error] [pid 53478:tid 53514] [client 13.219.182.140:48728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:44:44.511398 2025] [autoindex:error] [pid 53479:tid 53542] [client 185.135.212.174:48678] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:44:46.126461 2025] [autoindex:error] [pid 53479:tid 53556] [client 69.203.23.122:60665] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 02:13:50.129651 2025] [:error] [pid 39713:tid 39725] [client 216.126.225.91:50366] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSH9XkUgrb325CIAjPqrvgAAAAQ"]
[Sun Nov 23 02:29:02.771495 2025] [proxy_fcgi:error] [pid 8816:tid 8891] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 02:29:02.961641 2025] [proxy_fcgi:error] [pid 8816:tid 8892] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 02:29:03.434342 2025] [proxy_fcgi:error] [pid 8816:tid 8903] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 02:29:03.633031 2025] [proxy_fcgi:error] [pid 8816:tid 8886] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 02:29:04.040922 2025] [proxy_fcgi:error] [pid 8816:tid 8897] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 02:29:04.230523 2025] [proxy_fcgi:error] [pid 8816:tid 8884] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 02:29:04.685528 2025] [proxy_fcgi:error] [pid 8816:tid 8907] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 02:29:04.923120 2025] [proxy_fcgi:error] [pid 8816:tid 8905] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 02:29:05.113286 2025] [proxy_fcgi:error] [pid 8816:tid 8890] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 02:29:05.334046 2025] [proxy_fcgi:error] [pid 8816:tid 8895] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 02:29:05.524053 2025] [proxy_fcgi:error] [pid 8816:tid 8888] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 02:29:05.714034 2025] [proxy_fcgi:error] [pid 8816:tid 8904] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 02:29:05.915153 2025] [proxy_fcgi:error] [pid 8816:tid 8898] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 02:29:06.295290 2025] [proxy_fcgi:error] [pid 8816:tid 8910] [client 132.196.92.11:9913] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 02:29:06.484684 2025] [:error] [pid 8816:tid 8908] [client 132.196.92.11:9913] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSIA8pb4RIAN-_BXnHl_ZAAAAJc"], referer: https://www.google.de/
[Sun Nov 23 02:29:07.854514 2025] [:error] [pid 39718:tid 39769] [client 132.196.92.11:44787] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSIA8wQ3B_uDoeItNmN-2gAAAFQ"], referer: https://duckduckgo.com/
[Sun Nov 23 02:29:08.965186 2025] [proxy_fcgi:error] [pid 39719:tid 39798] [client 132.196.92.11:9560] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 02:29:09.367633 2025] [proxy_fcgi:error] [pid 39719:tid 39791] [client 132.196.92.11:9560] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 02:29:10.508431 2025] [:error] [pid 39719:tid 39792] [client 132.196.92.11:9560] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSIA9hmP4k0tY5Yex-XeAAAAARA"], referer: https://duckduckgo.com/
[Sun Nov 23 02:29:11.991323 2025] [proxy_fcgi:error] [pid 8816:tid 8891] [client 132.196.92.11:43417] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 02:29:12.403739 2025] [proxy_fcgi:error] [pid 8816:tid 8888] [client 132.196.92.11:43417] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 02:29:13.517013 2025] [:error] [pid 8816:tid 8910] [client 132.196.92.11:43417] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSIA-Zb4RIAN-_BXnHl_egAAAJg"], referer: https://www.google.de/
[Sun Nov 23 02:29:14.813434 2025] [proxy_fcgi:error] [pid 8816:tid 8890] [client 132.196.92.11:9587] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 02:29:15.234218 2025] [proxy_fcgi:error] [pid 8816:tid 8910] [client 132.196.92.11:9587] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 02:29:16.377357 2025] [:error] [pid 8816:tid 8896] [client 132.196.92.11:9587] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSIA_Jb4RIAN-_BXnHl_jwAAAIs"], referer: https://www.google.co.uk/
[Sun Nov 23 02:29:17.996500 2025] [proxy_fcgi:error] [pid 8816:tid 8903] [client 132.196.92.11:35909] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 02:29:18.373918 2025] [:error] [pid 8816:tid 8885] [client 132.196.92.11:35909] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSIA_pb4RIAN-_BXnHl_lgAAAIE"], referer: https://www.google.de/
[Sun Nov 23 02:29:19.814915 2025] [proxy_fcgi:error] [pid 39942:tid 40012] [client 132.196.92.11:9857] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 02:29:21.246388 2025] [:error] [pid 39942:tid 39995] [client 132.196.92.11:9857] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSIBAaNupsOsQf9D2gx1xwAAAUE"], referer: https://www.google.com/
[Sun Nov 23 02:29:22.497037 2025] [proxy_fcgi:error] [pid 39713:tid 39731] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 02:29:22.687342 2025] [proxy_fcgi:error] [pid 39713:tid 39742] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 02:29:23.715776 2025] [proxy_fcgi:error] [pid 39713:tid 39740] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 02:29:24.033962 2025] [proxy_fcgi:error] [pid 39713:tid 39738] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 02:29:24.616287 2025] [proxy_fcgi:error] [pid 39713:tid 39739] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 02:29:24.807021 2025] [proxy_fcgi:error] [pid 39713:tid 39726] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 02:29:25.425647 2025] [proxy_fcgi:error] [pid 39713:tid 39727] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 02:29:26.002464 2025] [proxy_fcgi:error] [pid 39713:tid 39730] [client 132.196.92.11:9566] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 02:29:28.335476 2025] [:error] [pid 39713:tid 39738] [client 132.196.92.11:9566] [client 132.196.92.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 132.196.92.11, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSIBCEUgrb325CIAjPqxHgAAABE"], referer: https://duckduckgo.com/
[Sun Nov 23 02:55:19.895093 2025] [proxy_fcgi:error] [pid 39718:tid 39768] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:20.246081 2025] [proxy_fcgi:error] [pid 39718:tid 39752] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:21.186959 2025] [proxy_fcgi:error] [pid 39718:tid 39756] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:21.611272 2025] [proxy_fcgi:error] [pid 39718:tid 39760] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:22.001898 2025] [proxy_fcgi:error] [pid 39718:tid 39754] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:22.398126 2025] [proxy_fcgi:error] [pid 39718:tid 39762] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:22.773193 2025] [proxy_fcgi:error] [pid 39718:tid 39771] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:23.121602 2025] [proxy_fcgi:error] [pid 39718:tid 39756] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:23.868134 2025] [proxy_fcgi:error] [pid 39718:tid 39766] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:26.615067 2025] [proxy_fcgi:error] [pid 39718:tid 39770] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:26.960984 2025] [proxy_fcgi:error] [pid 39718:tid 39767] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:27.313763 2025] [proxy_fcgi:error] [pid 39718:tid 39758] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:27.663577 2025] [proxy_fcgi:error] [pid 39718:tid 39773] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:28.011202 2025] [proxy_fcgi:error] [pid 39718:tid 39754] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:28.361019 2025] [proxy_fcgi:error] [pid 39718:tid 39757] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:28.711891 2025] [proxy_fcgi:error] [pid 39718:tid 39749] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:29.063252 2025] [proxy_fcgi:error] [pid 39718:tid 39771] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:29.410980 2025] [proxy_fcgi:error] [pid 39718:tid 39763] [client 45.146.54.137:62385] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:36.813122 2025] [:error] [pid 39718:tid 39757] [client 45.146.54.137:62385] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSIHKAQ3B_uDoeItNmOIlwAAAEg"]
[Sun Nov 23 02:55:38.544313 2025] [:error] [pid 39942:tid 40007] [client 45.146.54.134:63075] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSIHKqNupsOsQf9D2gyALQAAAUw"]
[Sun Nov 23 02:55:40.272204 2025] [proxy_fcgi:error] [pid 39942:tid 39997] [client 216.73.163.121:29547] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:41.319366 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.121:29547] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSIHLaNupsOsQf9D2gyAOwAAAUU"]
[Sun Nov 23 02:55:42.740971 2025] [proxy_fcgi:error] [pid 8816:tid 8889] [client 216.73.163.130:39333] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:43.076350 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.130:39333] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSIHL5b4RIAN-_BXnHmNMQAAAJc"]
[Sun Nov 23 02:55:44.139452 2025] [proxy_fcgi:error] [pid 8816:tid 8896] [client 216.73.163.156:48023] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:45.919847 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.156:48023] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSIHMZb4RIAN-_BXnHmNQQAAAII"]
[Sun Nov 23 02:55:46.996398 2025] [:error] [pid 39719:tid 39800] [client 216.73.163.120:51341] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSIHMhmP4k0tY5Yex-XnrAAAARg"]
[Sun Nov 23 02:55:47.796253 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.123:44423] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSIHM5b4RIAN-_BXnHmNRAAAAIA"]
[Sun Nov 23 02:55:48.632713 2025] [:error] [pid 39718:tid 39754] [client 216.73.163.146:45607] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSIHNAQ3B_uDoeItNmOIsQAAAEU"]
[Sun Nov 23 02:55:49.441110 2025] [:error] [pid 39942:tid 40005] [client 216.73.163.151:27873] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSIHNaNupsOsQf9D2gyARQAAAUo"]
[Sun Nov 23 02:55:50.196543 2025] [:error] [pid 8816:tid 8908] [client 45.146.54.136:62599] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSIHNpb4RIAN-_BXnHmNRwAAAJc"]
[Sun Nov 23 02:55:51.385445 2025] [:error] [pid 39719:tid 39795] [client 45.146.54.132:20455] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSIHNxmP4k0tY5Yex-XnuAAAARM"]
[Sun Nov 23 02:55:52.146446 2025] [proxy_fcgi:error] [pid 39719:tid 39792] [client 45.146.54.131:59085] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:52.921349 2025] [:error] [pid 39719:tid 39787] [client 45.146.54.131:59085] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aSIHOBmP4k0tY5Yex-XnvQAAAQs"]
[Sun Nov 23 02:55:54.440717 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.136:43037] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSIHOqNupsOsQf9D2gyASAAAAU4"]
[Sun Nov 23 02:55:55.607367 2025] [:error] [pid 39719:tid 39795] [client 216.73.163.142:45495] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSIHOxmP4k0tY5Yex-XnxgAAARM"]
[Sun Nov 23 02:55:56.370561 2025] [proxy_fcgi:error] [pid 39942:tid 39995] [client 216.73.163.151:46689] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:56.716882 2025] [:error] [pid 39942:tid 40012] [client 216.73.163.151:46689] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSIHPKNupsOsQf9D2gyASwAAAVE"]
[Sun Nov 23 02:55:57.468192 2025] [proxy_fcgi:error] [pid 39942:tid 40008] [client 216.73.163.153:56913] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:58.563159 2025] [proxy_fcgi:error] [pid 39942:tid 40015] [client 216.73.163.153:56913] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:55:59.699375 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.153:56913] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSIHP6NupsOsQf9D2gyAVAAAAUU"]
[Sun Nov 23 02:56:00.433215 2025] [proxy_fcgi:error] [pid 39942:tid 40013] [client 216.73.163.138:21679] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:00.792402 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.138:21679] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSIHQKNupsOsQf9D2gyAWAAAAU4"]
[Sun Nov 23 02:56:01.555741 2025] [proxy_fcgi:error] [pid 39718:tid 39757] [client 216.73.163.123:62027] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:02.252733 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.123:62027] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSIHQgQ3B_uDoeItNmOIvgAAAFU"]
[Sun Nov 23 02:56:03.394721 2025] [:error] [pid 39718:tid 39767] [client 45.146.54.133:27095] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSIHQwQ3B_uDoeItNmOIwQAAAFI"]
[Sun Nov 23 02:56:04.462744 2025] [proxy_fcgi:error] [pid 8816:tid 8891] [client 216.73.163.160:52761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:04.810483 2025] [proxy_fcgi:error] [pid 8816:tid 8892] [client 216.73.163.160:52761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:05.520502 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.160:52761] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSIHRZb4RIAN-_BXnHmNbAAAAIY"]
[Sun Nov 23 02:56:07.645706 2025] [:error] [pid 39942:tid 40009] [client 45.146.54.134:52135] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSIHR6NupsOsQf9D2gyAYwAAAU4"]
[Sun Nov 23 02:56:08.709758 2025] [:error] [pid 39713:tid 39742] [client 216.73.163.130:38797] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSIHSEUgrb325CIAjPq5rAAAABU"]
[Sun Nov 23 02:56:09.426189 2025] [:error] [pid 39942:tid 40017] [client 45.146.54.132:55333] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSIHSaNupsOsQf9D2gyAZgAAAVY"]
[Sun Nov 23 02:56:10.136312 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.146:26841] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSIHShmP4k0tY5Yex-Xn2wAAAQY"]
[Sun Nov 23 02:56:11.658853 2025] [proxy_fcgi:error] [pid 8816:tid 8885] [client 216.73.163.149:44141] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:12.057748 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.149:44141] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSIHTJb4RIAN-_BXnHmNdwAAAI4"]
[Sun Nov 23 02:56:12.839909 2025] [:error] [pid 39718:tid 39767] [client 216.73.163.138:25259] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSIHTAQ3B_uDoeItNmOIywAAAFI"]
[Sun Nov 23 02:56:13.578855 2025] [:error] [pid 8816:tid 8884] [client 45.146.54.133:31069] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSIHTZb4RIAN-_BXnHmNeAAAAIA"]
[Sun Nov 23 02:56:15.535469 2025] [proxy_fcgi:error] [pid 39713:tid 39730] [client 216.73.163.157:33891] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:16.318976 2025] [proxy_fcgi:error] [pid 39713:tid 39725] [client 216.73.163.157:33891] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:17.842932 2025] [:error] [pid 39713:tid 39723] [client 216.73.163.157:33891] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSIHUUUgrb325CIAjPq50gAAAAI"]
[Sun Nov 23 02:56:19.849500 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.122:35753] [client 216.73.163.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.122, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSIHU0Ugrb325CIAjPq53AAAAA0"]
[Sun Nov 23 02:56:20.198269 2025] [proxy_fcgi:error] [pid 39713:tid 39735] [client 216.73.163.122:35753] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:22.492440 2025] [proxy_fcgi:error] [pid 39713:tid 39737] [client 216.73.163.122:35753] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:22.851039 2025] [proxy_fcgi:error] [pid 39713:tid 39739] [client 216.73.163.122:35753] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:24.674858 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.122:35753] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSIHWEUgrb325CIAjPq56QAAAAw"]
[Sun Nov 23 02:56:26.116607 2025] [proxy_fcgi:error] [pid 39718:tid 39772] [client 216.73.163.158:25335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:26.506882 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.158:25335] [client 216.73.163.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.158, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSIHWgQ3B_uDoeItNmOI1QAAAEI"]
[Sun Nov 23 02:56:27.211176 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.158:25335] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSIHWwQ3B_uDoeItNmOI2AAAAEg"]
[Sun Nov 23 02:56:29.409324 2025] [proxy_fcgi:error] [pid 39719:tid 39786] [client 45.146.54.138:20507] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:31.384203 2025] [proxy_fcgi:error] [pid 39719:tid 39779] [client 45.146.54.138:20507] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:32.151733 2025] [:error] [pid 39719:tid 39795] [client 45.146.54.138:20507] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSIHYBmP4k0tY5Yex-XoAAAAARM"]
[Sun Nov 23 02:56:32.888121 2025] [proxy_fcgi:error] [pid 39713:tid 39739] [client 216.73.163.146:52921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:34.075954 2025] [proxy_fcgi:error] [pid 39713:tid 39726] [client 216.73.163.146:52921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:34.786928 2025] [proxy_fcgi:error] [pid 39713:tid 39731] [client 216.73.163.146:52921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:35.534945 2025] [proxy_fcgi:error] [pid 39713:tid 39734] [client 216.73.163.146:52921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:35.890723 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.146:52921] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSIHY0Ugrb325CIAjPq5_AAAAA4"]
[Sun Nov 23 02:56:36.644633 2025] [proxy_fcgi:error] [pid 39942:tid 40019] [client 216.73.163.141:33959] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:37.022440 2025] [proxy_fcgi:error] [pid 39942:tid 40012] [client 216.73.163.141:33959] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:37.434395 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.141:33959] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSIHZaNupsOsQf9D2gyArwAAAU8"]
[Sun Nov 23 02:56:38.603675 2025] [proxy_fcgi:error] [pid 39942:tid 40001] [client 216.73.163.155:48883] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:39.346025 2025] [:error] [pid 39942:tid 39994] [client 216.73.163.155:48883] [client 216.73.163.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.155, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSIHZ6NupsOsQf9D2gyAuAAAAUA"]
[Sun Nov 23 02:56:39.694203 2025] [:error] [pid 39942:tid 40018] [client 216.73.163.155:48883] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSIHZ6NupsOsQf9D2gyAuQAAAVc"]
[Sun Nov 23 02:56:46.333429 2025] [proxy_fcgi:error] [pid 39718:tid 39763] [client 216.73.163.136:42197] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:48.558232 2025] [proxy_fcgi:error] [pid 39718:tid 39761] [client 216.73.163.136:42197] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:49.019836 2025] [:error] [pid 39718:tid 39758] [client 216.73.163.136:42197] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSIHcQQ3B_uDoeItNmOI_wAAAEk"]
[Sun Nov 23 02:56:49.744817 2025] [proxy_fcgi:error] [pid 39942:tid 40008] [client 216.73.163.159:28963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:51.882028 2025] [:error] [pid 39942:tid 40003] [client 216.73.163.159:28963] [client 216.73.163.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.159, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSIHc6NupsOsQf9D2gyAyQAAAUg"]
[Sun Nov 23 02:56:52.235356 2025] [proxy_fcgi:error] [pid 39942:tid 40000] [client 216.73.163.159:28963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:52.615735 2025] [proxy_fcgi:error] [pid 39942:tid 40009] [client 216.73.163.159:28963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:52.962209 2025] [proxy_fcgi:error] [pid 39942:tid 40007] [client 216.73.163.159:28963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:53.310688 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.159:28963] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSIHdaNupsOsQf9D2gyAzQAAAUs"]
[Sun Nov 23 02:56:54.122240 2025] [proxy_fcgi:error] [pid 39713:tid 39721] [client 216.73.163.157:52285] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:54.474185 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.157:52285] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSIHdkUgrb325CIAjPq6EQAAAAQ"]
[Sun Nov 23 02:56:55.697991 2025] [proxy_fcgi:error] [pid 39719:tid 39796] [client 216.73.163.142:26345] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:56.063754 2025] [:error] [pid 39719:tid 39800] [client 216.73.163.142:26345] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSIHeBmP4k0tY5Yex-XoLgAAARg"]
[Sun Nov 23 02:56:57.472670 2025] [proxy_fcgi:error] [pid 39718:tid 39768] [client 216.73.163.145:41347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:57.818332 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.145:41347] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSIHeQQ3B_uDoeItNmOJCAAAAEY"]
[Sun Nov 23 02:56:58.847208 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.158:43163] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSIHegQ3B_uDoeItNmOJCQAAAE8"]
[Sun Nov 23 02:56:59.643835 2025] [proxy_fcgi:error] [pid 8816:tid 8884] [client 216.73.163.140:53735] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:56:59.990201 2025] [proxy_fcgi:error] [pid 8816:tid 8905] [client 216.73.163.140:53735] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:02.208663 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.140:53735] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSIHfpb4RIAN-_BXnHmOCAAAAJU"]
[Sun Nov 23 02:57:04.407047 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.123:56795] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSIHgJb4RIAN-_BXnHmODAAAAIM"]
[Sun Nov 23 02:57:06.447434 2025] [:error] [pid 39718:tid 39761] [client 45.146.54.135:51509] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSIHggQ3B_uDoeItNmOJFQAAAEw"]
[Sun Nov 23 02:57:07.152145 2025] [proxy_fcgi:error] [pid 8816:tid 8894] [client 216.73.163.120:23281] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:07.864505 2025] [proxy_fcgi:error] [pid 8816:tid 8898] [client 216.73.163.120:23281] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:08.252002 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.120:23281] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSIHhJb4RIAN-_BXnHmOGAAAAIg"]
[Sun Nov 23 02:57:08.962770 2025] [proxy_fcgi:error] [pid 8816:tid 8885] [client 216.73.163.150:44353] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:09.725477 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.150:44353] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSIHhZb4RIAN-_BXnHmOHgAAAIs"]
[Sun Nov 23 02:57:12.159737 2025] [:error] [pid 39718:tid 39754] [client 216.73.163.146:59397] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSIHiAQ3B_uDoeItNmOJHAAAAEU"]
[Sun Nov 23 02:57:13.230526 2025] [proxy_fcgi:error] [pid 39942:tid 40019] [client 216.73.163.121:63759] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:14.313632 2025] [proxy_fcgi:error] [pid 39942:tid 40018] [client 216.73.163.121:63759] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:15.045996 2025] [proxy_fcgi:error] [pid 39942:tid 40010] [client 216.73.163.121:63759] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:15.468180 2025] [:error] [pid 39942:tid 40002] [client 216.73.163.121:63759] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSIHi6NupsOsQf9D2gyA-AAAAUc"]
[Sun Nov 23 02:57:16.171039 2025] [:error] [pid 39719:tid 39783] [client 216.73.163.142:48915] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSIHjBmP4k0tY5Yex-XoQwAAAQc"]
[Sun Nov 23 02:57:16.917036 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.152:29599] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSIHjKNupsOsQf9D2gyA-wAAAUs"]
[Sun Nov 23 02:57:17.654685 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.159:61931] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSIHjaNupsOsQf9D2gyA_QAAAUQ"]
[Sun Nov 23 02:57:18.450638 2025] [proxy_fcgi:error] [pid 8816:tid 8891] [client 216.73.163.151:60065] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:18.826123 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.151:60065] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSIHjpb4RIAN-_BXnHmOKwAAAIA"]
[Sun Nov 23 02:57:19.546435 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.157:22009] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSIHj6NupsOsQf9D2gyBAQAAAU8"]
[Sun Nov 23 02:57:20.290773 2025] [proxy_fcgi:error] [pid 39719:tid 39784] [client 216.73.163.141:49891] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:21.063756 2025] [:error] [pid 39719:tid 39788] [client 216.73.163.141:49891] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSIHkRmP4k0tY5Yex-XoSwAAAQw"]
[Sun Nov 23 02:57:21.852474 2025] [:error] [pid 39718:tid 39762] [client 216.73.163.150:21163] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSIHkQQ3B_uDoeItNmOJKQAAAE0"]
[Sun Nov 23 02:57:22.543911 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.132:42073] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSIHkkUgrb325CIAjPq6LwAAABA"]
[Sun Nov 23 02:57:23.280845 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.147:59553] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSIHk5b4RIAN-_BXnHmOMwAAAJU"]
[Sun Nov 23 02:57:24.360245 2025] [:error] [pid 39719:tid 39787] [client 45.146.54.134:62205] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSIHlBmP4k0tY5Yex-XoTgAAAQs"]
[Sun Nov 23 02:57:25.845740 2025] [:error] [pid 39718:tid 39761] [client 216.73.163.147:44651] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSIHlQQ3B_uDoeItNmOJLgAAAEw"]
[Sun Nov 23 02:57:26.602569 2025] [proxy_fcgi:error] [pid 39713:tid 39734] [client 216.73.163.133:27253] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:27.696422 2025] [proxy_fcgi:error] [pid 39713:tid 39736] [client 216.73.163.133:27253] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:28.041301 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.133:27253] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSIHmEUgrb325CIAjPq6RAAAAAQ"]
[Sun Nov 23 02:57:29.112797 2025] [proxy_fcgi:error] [pid 8816:tid 8902] [client 216.73.163.120:63903] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:30.018654 2025] [proxy_fcgi:error] [pid 8816:tid 8904] [client 216.73.163.120:63903] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:33.807021 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.120:63903] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSIHnZb4RIAN-_BXnHmOQgAAAIs"]
[Sun Nov 23 02:57:35.691601 2025] [:error] [pid 39718:tid 39750] [client 216.73.163.139:56187] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSIHnwQ3B_uDoeItNmOJPAAAAEE"]
[Sun Nov 23 02:57:36.381385 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.152:40573] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSIHoBmP4k0tY5Yex-XoVwAAAQI"]
[Sun Nov 23 02:57:38.694961 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.119:28049] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSIHoqNupsOsQf9D2gyBEgAAAUU"]
[Sun Nov 23 02:57:40.276675 2025] [proxy_fcgi:error] [pid 39942:tid 39997] [client 216.73.163.139:64975] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:40.637237 2025] [proxy_fcgi:error] [pid 39942:tid 40015] [client 216.73.163.139:64975] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:41.044101 2025] [proxy_fcgi:error] [pid 39942:tid 40017] [client 216.73.163.139:64975] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:41.402977 2025] [proxy_fcgi:error] [pid 39942:tid 40009] [client 216.73.163.139:64975] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:43.286630 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.139:64975] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSIHp6NupsOsQf9D2gyBKAAAAUE"]
[Sun Nov 23 02:57:44.070349 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.135:57803] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSIHqKNupsOsQf9D2gyBLQAAAVY"]
[Sun Nov 23 02:57:44.798416 2025] [:error] [pid 39719:tid 39800] [client 216.73.163.121:51547] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSIHqBmP4k0tY5Yex-XoXwAAARg"]
[Sun Nov 23 02:57:45.509917 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.122:30419] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSIHqZb4RIAN-_BXnHmOSAAAAJM"]
[Sun Nov 23 02:57:46.471751 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.155:42069] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSIHqkUgrb325CIAjPq6WQAAAAc"]
[Sun Nov 23 02:57:47.164923 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.134:59073] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSIHqxmP4k0tY5Yex-XoZQAAAQA"]
[Sun Nov 23 02:57:48.264410 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.147:61599] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSIHrEUgrb325CIAjPq6XQAAABY"]
[Sun Nov 23 02:57:49.013636 2025] [:error] [pid 39719:tid 39783] [client 216.73.163.154:23219] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSIHrRmP4k0tY5Yex-XoaAAAAQc"]
[Sun Nov 23 02:57:49.732289 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.132:55405] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSIHrRmP4k0tY5Yex-XoaQAAARc"]
[Sun Nov 23 02:57:50.440676 2025] [:error] [pid 8816:tid 8898] [client 216.73.163.158:60917] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSIHrpb4RIAN-_BXnHmOTAAAAI0"]
[Sun Nov 23 02:57:52.514041 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.160:51357] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSIHsJb4RIAN-_BXnHmOUAAAAJA"]
[Sun Nov 23 02:57:53.697357 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.118:32211] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSIHsaNupsOsQf9D2gyBPQAAAVI"]
[Sun Nov 23 02:57:54.435973 2025] [proxy_fcgi:error] [pid 39719:tid 39794] [client 216.73.163.143:38123] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:55.136977 2025] [:error] [pid 39719:tid 39779] [client 216.73.163.143:38123] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSIHsxmP4k0tY5Yex-XodwAAAQM"]
[Sun Nov 23 02:57:56.719380 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.135:54921] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSIHtKNupsOsQf9D2gyBQgAAAUU"]
[Sun Nov 23 02:57:58.318362 2025] [proxy_fcgi:error] [pid 39942:tid 40001] [client 45.146.54.135:52649] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:57:58.662402 2025] [:error] [pid 39942:tid 39995] [client 45.146.54.135:52649] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSIHtqNupsOsQf9D2gyBSAAAAUE"]
[Sun Nov 23 02:57:59.864231 2025] [proxy_fcgi:error] [pid 39713:tid 39728] [client 45.131.194.123:27079] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:00.605185 2025] [proxy_fcgi:error] [pid 39713:tid 39721] [client 45.131.194.123:27079] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:00.975785 2025] [proxy_fcgi:error] [pid 39713:tid 39739] [client 45.131.194.123:27079] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:01.339884 2025] [:error] [pid 39713:tid 39730] [client 45.131.194.123:27079] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSIHuUUgrb325CIAjPq6eAAAAAk"]
[Sun Nov 23 02:58:02.029886 2025] [proxy_fcgi:error] [pid 39942:tid 40014] [client 45.146.54.132:30333] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:02.393121 2025] [:error] [pid 39942:tid 39995] [client 45.146.54.132:30333] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSIHuqNupsOsQf9D2gyBVAAAAUE"]
[Sun Nov 23 02:58:03.856928 2025] [proxy_fcgi:error] [pid 39713:tid 39724] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:04.218812 2025] [proxy_fcgi:error] [pid 39713:tid 39726] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:04.572986 2025] [proxy_fcgi:error] [pid 39713:tid 39725] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:06.414819 2025] [proxy_fcgi:error] [pid 39713:tid 39729] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:06.762338 2025] [proxy_fcgi:error] [pid 39713:tid 39742] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:07.515882 2025] [proxy_fcgi:error] [pid 39713:tid 39723] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:08.614988 2025] [proxy_fcgi:error] [pid 39713:tid 39741] [client 216.73.163.138:61683] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:08.961927 2025] [:error] [pid 39713:tid 39732] [client 216.73.163.138:61683] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSIHwEUgrb325CIAjPq6kAAAAAs"]
[Sun Nov 23 02:58:09.750145 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.135:42831] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSIHwZb4RIAN-_BXnHmOZQAAAIE"]
[Sun Nov 23 02:58:10.470002 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.141:56913] [client 216.73.163.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.141, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aSIHwpb4RIAN-_BXnHmOaAAAAI8"]
[Sun Nov 23 02:58:10.475892 2025] [proxy_fcgi:error] [pid 8816:tid 8900] [client 216.73.163.141:56913] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:10.825670 2025] [proxy_fcgi:error] [pid 8816:tid 8892] [client 216.73.163.141:56913] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:11.209851 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.141:56913] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSIHw5b4RIAN-_BXnHmOawAAAII"]
[Sun Nov 23 02:58:12.378415 2025] [proxy_fcgi:error] [pid 8816:tid 8889] [client 45.146.54.132:20061] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:12.744112 2025] [:error] [pid 8816:tid 8890] [client 45.146.54.132:20061] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSIHxJb4RIAN-_BXnHmOdAAAAIY"]
[Sun Nov 23 02:58:13.532310 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.138:29577] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSIHxZb4RIAN-_BXnHmOeAAAAJA"]
[Sun Nov 23 02:58:16.861698 2025] [:error] [pid 39718:tid 39753] [client 45.146.54.137:25615] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSIHyAQ3B_uDoeItNmOJeQAAAEQ"]
[Sun Nov 23 02:58:17.596171 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.132:49231] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aSIHyQQ3B_uDoeItNmOJewAAAFE"]
[Sun Nov 23 02:58:19.526760 2025] [proxy_fcgi:error] [pid 39942:tid 40008] [client 216.73.163.154:49011] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:20.224272 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.154:49011] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSIHzKNupsOsQf9D2gyBeQAAAUw"]
[Sun Nov 23 02:58:21.751275 2025] [proxy_fcgi:error] [pid 8816:tid 8896] [client 216.73.163.119:46995] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:22.531322 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.119:46995] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSIHzpb4RIAN-_BXnHmOjgAAAIg"]
[Sun Nov 23 02:58:24.373731 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.121:43229] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSIH0EUgrb325CIAjPq6ngAAAAc"]
[Sun Nov 23 02:58:25.475376 2025] [proxy_fcgi:error] [pid 8816:tid 8910] [client 216.73.163.146:30547] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:25.826984 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.146:30547] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSIH0Zb4RIAN-_BXnHmOlgAAAIw"]
[Sun Nov 23 02:58:26.620193 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.136:38811] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSIH0qNupsOsQf9D2gyBgwAAAUY"]
[Sun Nov 23 02:58:28.057791 2025] [proxy_fcgi:error] [pid 39942:tid 40017] [client 216.73.163.138:44445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:28.411358 2025] [proxy_fcgi:error] [pid 39942:tid 39999] [client 216.73.163.138:44445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:29.146853 2025] [proxy_fcgi:error] [pid 39942:tid 40008] [client 216.73.163.138:44445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:30.871069 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.138:44445] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSIH1qNupsOsQf9D2gyBkQAAAUw"]
[Sun Nov 23 02:58:31.653098 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.142:42745] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSIH1xmP4k0tY5Yex-XosAAAAQY"]
[Sun Nov 23 02:58:33.502025 2025] [proxy_fcgi:error] [pid 39719:tid 39794] [client 216.73.163.116:62267] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:33.854330 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.116:62267] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSIH2RmP4k0tY5Yex-XotgAAAQA"]
[Sun Nov 23 02:58:34.581233 2025] [:error] [pid 39713:tid 39741] [client 216.73.163.140:62587] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSIH2kUgrb325CIAjPq6pwAAABQ"]
[Sun Nov 23 02:58:35.400647 2025] [:error] [pid 8816:tid 8894] [client 45.146.54.134:34443] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSIH25b4RIAN-_BXnHmOoAAAAIk"]
[Sun Nov 23 02:58:37.718224 2025] [proxy_fcgi:error] [pid 39718:tid 39763] [client 216.73.163.116:21685] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:38.111798 2025] [:error] [pid 39718:tid 39759] [client 216.73.163.116:21685] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSIH3gQ3B_uDoeItNmOJoAAAAEo"]
[Sun Nov 23 02:58:39.274648 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.138:27803] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSIH36NupsOsQf9D2gyBmgAAAU8"]
[Sun Nov 23 02:58:40.092017 2025] [proxy_fcgi:error] [pid 39942:tid 40008] [client 216.73.163.153:46729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:40.490717 2025] [proxy_fcgi:error] [pid 39942:tid 40007] [client 216.73.163.153:46729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:41.184868 2025] [proxy_fcgi:error] [pid 39942:tid 39995] [client 216.73.163.153:46729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:42.570807 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.153:46729] [client 216.73.163.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.153, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/js/wp-login.php"] [unique_id "aSIH4qNupsOsQf9D2gyBpQAAAUQ"]
[Sun Nov 23 02:58:43.307987 2025] [:error] [pid 39942:tid 40019] [client 216.73.163.153:46729] File does not exist: /home/cientificacom/public_html/worm.PhP
[Sun Nov 23 02:58:43.737053 2025] [proxy_fcgi:error] [pid 39942:tid 39997] [client 216.73.163.153:46729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:44.190654 2025] [proxy_fcgi:error] [pid 39942:tid 40013] [client 216.73.163.153:46729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:45.415381 2025] [:error] [pid 39942:tid 40003] [client 216.73.163.153:46729] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSIH5aNupsOsQf9D2gyBqwAAAUg"]
[Sun Nov 23 02:58:46.162588 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.137:36677] [client 216.73.163.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.137, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSIH5pb4RIAN-_BXnHmOtAAAAJU"]
[Sun Nov 23 02:58:47.771333 2025] [proxy_fcgi:error] [pid 8816:tid 8900] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:48.168016 2025] [proxy_fcgi:error] [pid 8816:tid 8896] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:49.403036 2025] [proxy_fcgi:error] [pid 8816:tid 8899] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:50.153101 2025] [proxy_fcgi:error] [pid 8816:tid 8903] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:51.291021 2025] [proxy_fcgi:error] [pid 8816:tid 8888] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:53.885031 2025] [proxy_fcgi:error] [pid 8816:tid 8906] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:54.251120 2025] [proxy_fcgi:error] [pid 8816:tid 8895] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:56.060093 2025] [proxy_fcgi:error] [pid 8816:tid 8884] [client 216.73.163.137:36677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:56.827041 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.137:36677] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSIH8Jb4RIAN-_BXnHmO4AAAAIg"]
[Sun Nov 23 02:58:58.283938 2025] [proxy_fcgi:error] [pid 39719:tid 39776] [client 216.73.163.155:33011] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:58:58.627997 2025] [:error] [pid 39719:tid 39794] [client 216.73.163.155:33011] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSIH8hmP4k0tY5Yex-Xo2wAAARI"]
[Sun Nov 23 02:58:59.719394 2025] [proxy_fcgi:error] [pid 39942:tid 40017] [client 216.73.163.119:33515] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:00.074839 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.119:33515] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSIH9KNupsOsQf9D2gyBtQAAAVA"]
[Sun Nov 23 02:59:01.516061 2025] [proxy_fcgi:error] [pid 8816:tid 8886] [client 45.146.54.139:47745] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:02.344289 2025] [proxy_fcgi:error] [pid 8816:tid 8905] [client 45.146.54.139:47745] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:03.104118 2025] [proxy_fcgi:error] [pid 8816:tid 8886] [client 45.146.54.139:47745] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:03.525038 2025] [proxy_fcgi:error] [pid 8816:tid 8910] [client 45.146.54.139:47745] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:04.241366 2025] [:error] [pid 8816:tid 8896] [client 45.146.54.139:47745] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSIH-Jb4RIAN-_BXnHmO_AAAAIs"]
[Sun Nov 23 02:59:05.068337 2025] [proxy_fcgi:error] [pid 39942:tid 39999] [client 216.73.163.130:38903] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:05.417406 2025] [proxy_fcgi:error] [pid 39942:tid 40003] [client 216.73.163.130:38903] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:05.762499 2025] [:error] [pid 39942:tid 40005] [client 216.73.163.130:38903] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSIH-aNupsOsQf9D2gyBxgAAAUo"]
[Sun Nov 23 02:59:06.894630 2025] [:error] [pid 39942:tid 40018] [client 216.73.163.121:30143] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSIH-qNupsOsQf9D2gyBygAAAVc"]
[Sun Nov 23 02:59:08.035484 2025] [proxy_fcgi:error] [pid 39718:tid 39760] [client 216.73.163.121:36177] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:09.147536 2025] [proxy_fcgi:error] [pid 39718:tid 39773] [client 216.73.163.121:36177] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:09.502264 2025] [proxy_fcgi:error] [pid 39718:tid 39772] [client 216.73.163.121:36177] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:09.907693 2025] [:error] [pid 39718:tid 39750] [client 216.73.163.121:36177] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSIH_QQ3B_uDoeItNmOJwQAAAEE"]
[Sun Nov 23 02:59:10.662073 2025] [:error] [pid 39713:tid 39735] [client 45.146.54.133:51157] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSIH_kUgrb325CIAjPq6ygAAAA4"]
[Sun Nov 23 02:59:13.360358 2025] [proxy_fcgi:error] [pid 39713:tid 39726] [client 216.73.163.132:34927] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:14.165958 2025] [:error] [pid 39713:tid 39730] [client 216.73.163.132:34927] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSIIAkUgrb325CIAjPq60gAAAAk"]
[Sun Nov 23 02:59:15.253159 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.154:54163] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tiny.php"] [unique_id "aSIIA5b4RIAN-_BXnHmPEwAAAI8"]
[Sun Nov 23 02:59:16.354693 2025] [proxy_fcgi:error] [pid 39718:tid 39769] [client 216.73.163.133:49627] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:16.699873 2025] [proxy_fcgi:error] [pid 39718:tid 39772] [client 216.73.163.133:49627] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:17.061360 2025] [:error] [pid 39718:tid 39754] [client 216.73.163.133:49627] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSIIBQQ3B_uDoeItNmOJzAAAAEU"]
[Sun Nov 23 02:59:18.782193 2025] [proxy_fcgi:error] [pid 8816:tid 8885] [client 216.73.163.145:21445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:19.161948 2025] [proxy_fcgi:error] [pid 8816:tid 8899] [client 216.73.163.145:21445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:20.491965 2025] [proxy_fcgi:error] [pid 8816:tid 8905] [client 216.73.163.145:21445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:21.535113 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.145:21445] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSIICZb4RIAN-_BXnHmPMwAAAIA"]
[Sun Nov 23 02:59:22.366521 2025] [proxy_fcgi:error] [pid 39942:tid 39994] [client 216.73.163.143:34259] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:23.658432 2025] [:error] [pid 39942:tid 40018] [client 216.73.163.143:34259] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSIIC6NupsOsQf9D2gyB3wAAAVc"]
[Sun Nov 23 02:59:24.766381 2025] [proxy_fcgi:error] [pid 39719:tid 39783] [client 216.73.163.131:22717] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:26.447180 2025] [proxy_fcgi:error] [pid 39719:tid 39781] [client 216.73.163.131:22717] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:27.303208 2025] [proxy_fcgi:error] [pid 39719:tid 39794] [client 216.73.163.131:22717] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:28.007471 2025] [:error] [pid 39719:tid 39790] [client 216.73.163.131:22717] [client 216.73.163.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.131, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSIIEBmP4k0tY5Yex-XpBgAAAQ4"]
[Sun Nov 23 02:59:29.916116 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.131:22717] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSIIERmP4k0tY5Yex-XpDQAAARc"]
[Sun Nov 23 02:59:30.617563 2025] [proxy_fcgi:error] [pid 8816:tid 8897] [client 45.146.54.134:44903] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:30.984698 2025] [:error] [pid 8816:tid 8905] [client 45.146.54.134:44903] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSIIEpb4RIAN-_BXnHmPSgAAAJQ"]
[Sun Nov 23 02:59:31.704179 2025] [proxy_fcgi:error] [pid 8816:tid 8901] [client 216.73.163.133:28769] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:32.522699 2025] [proxy_fcgi:error] [pid 8816:tid 8903] [client 216.73.163.133:28769] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:33.226935 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.133:28769] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSIIFZb4RIAN-_BXnHmPVAAAAI8"]
[Sun Nov 23 02:59:34.402215 2025] [proxy_fcgi:error] [pid 39718:tid 39759] [client 216.73.163.133:34129] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:34.796633 2025] [proxy_fcgi:error] [pid 39718:tid 39764] [client 216.73.163.133:34129] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:35.556709 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.133:34129] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSIIFwQ3B_uDoeItNmOJ5QAAAEI"]
[Sun Nov 23 02:59:36.636780 2025] [:error] [pid 39942:tid 40005] [client 216.73.163.155:38007] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSIIGKNupsOsQf9D2gyB9QAAAUo"]
[Sun Nov 23 02:59:37.356332 2025] [proxy_fcgi:error] [pid 39713:tid 39726] [client 45.146.54.133:43321] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:37.702659 2025] [proxy_fcgi:error] [pid 39713:tid 39745] [client 45.146.54.133:43321] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:38.414896 2025] [:error] [pid 39713:tid 39722] [client 45.146.54.133:43321] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSIIGkUgrb325CIAjPq69AAAAAE"]
[Sun Nov 23 02:59:39.136816 2025] [proxy_fcgi:error] [pid 8816:tid 8887] [client 216.73.163.120:26275] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:39.906656 2025] [proxy_fcgi:error] [pid 8816:tid 8884] [client 216.73.163.120:26275] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:40.254142 2025] [:error] [pid 8816:tid 8910] [client 216.73.163.120:26275] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSIIHJb4RIAN-_BXnHmPYgAAAJg"]
[Sun Nov 23 02:59:41.344805 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.120:58397] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSIIHRmP4k0tY5Yex-XpGQAAAQI"]
[Sun Nov 23 02:59:42.108912 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.152:51255] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSIIHpb4RIAN-_BXnHmPYwAAAIQ"]
[Sun Nov 23 02:59:43.950275 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.157:32911] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSIIH6NupsOsQf9D2gyCBwAAAUs"]
[Sun Nov 23 02:59:44.764918 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.157:63227] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSIIIEUgrb325CIAjPq6_AAAAAc"]
[Sun Nov 23 02:59:45.508398 2025] [:error] [pid 39718:tid 39759] [client 216.73.163.157:61775] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSIIIQQ3B_uDoeItNmOJ6wAAAEo"]
[Sun Nov 23 02:59:46.291950 2025] [:error] [pid 39942:tid 40014] [client 216.73.163.131:49061] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSIIIqNupsOsQf9D2gyCDgAAAVM"]
[Sun Nov 23 02:59:47.795340 2025] [:error] [pid 39942:tid 40015] [client 216.73.163.143:25777] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSIII6NupsOsQf9D2gyCFAAAAVQ"]
[Sun Nov 23 02:59:48.488347 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.123:53817] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSIIJKNupsOsQf9D2gyCFwAAAVI"]
[Sun Nov 23 02:59:49.204835 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.135:47481] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSIIJZb4RIAN-_BXnHmPbAAAAIA"]
[Sun Nov 23 02:59:50.442884 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.154:28845] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSIIJqNupsOsQf9D2gyCHwAAAUw"]
[Sun Nov 23 02:59:51.998659 2025] [:error] [pid 39719:tid 39794] [client 216.73.163.139:20717] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSIIJxmP4k0tY5Yex-XpKAAAARI"]
[Sun Nov 23 02:59:52.716109 2025] [proxy_fcgi:error] [pid 39718:tid 39767] [client 216.73.163.143:55615] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:54.249677 2025] [:error] [pid 39718:tid 39759] [client 216.73.163.143:55615] [client 216.73.163.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.143, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSIIKgQ3B_uDoeItNmOJ-AAAAEo"]
[Sun Nov 23 02:59:56.842469 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.143:55615] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSIILAQ3B_uDoeItNmOJ_wAAAEY"]
[Sun Nov 23 02:59:57.599019 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.139:43131] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSIILUUgrb325CIAjPq6_wAAAAM"]
[Sun Nov 23 02:59:59.440300 2025] [proxy_fcgi:error] [pid 39719:tid 39800] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:59:59.794369 2025] [proxy_fcgi:error] [pid 39719:tid 39793] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:02.422120 2025] [proxy_fcgi:error] [pid 39719:tid 39792] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:02.779525 2025] [proxy_fcgi:error] [pid 39719:tid 39787] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:04.449767 2025] [proxy_fcgi:error] [pid 39719:tid 39800] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:04.868887 2025] [proxy_fcgi:error] [pid 39719:tid 39786] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:05.280352 2025] [proxy_fcgi:error] [pid 39719:tid 39795] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:05.640675 2025] [proxy_fcgi:error] [pid 39719:tid 39791] [client 216.73.163.144:61255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:05.996911 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.144:61255] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSIINRmP4k0tY5Yex-XpRAAAARA"]
[Sun Nov 23 03:00:06.737329 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.140:43557] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSIINqNupsOsQf9D2gyCQwAAAU8"]
[Sun Nov 23 03:00:07.538216 2025] [:error] [pid 39942:tid 40018] [client 216.73.163.132:63699] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSIIN6NupsOsQf9D2gyCRQAAAVc"]
[Sun Nov 23 03:00:10.083738 2025] [proxy_fcgi:error] [pid 39718:tid 39771] [client 216.73.163.134:37733] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:10.451022 2025] [proxy_fcgi:error] [pid 39718:tid 39750] [client 216.73.163.134:37733] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:11.160630 2025] [proxy_fcgi:error] [pid 39718:tid 39773] [client 216.73.163.134:37733] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:11.988165 2025] [:error] [pid 39718:tid 39765] [client 216.73.163.134:37733] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSIIOwQ3B_uDoeItNmOKEAAAAFA"]
[Sun Nov 23 03:00:12.732363 2025] [:error] [pid 39718:tid 39768] [client 216.73.163.131:65513] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSIIPAQ3B_uDoeItNmOKEwAAAFM"]
[Sun Nov 23 03:00:13.468435 2025] [:error] [pid 39942:tid 40014] [client 216.73.163.135:51099] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSIIPaNupsOsQf9D2gyCUQAAAVM"]
[Sun Nov 23 03:00:15.807045 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.141:35737] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSIIP6NupsOsQf9D2gyCWAAAAUQ"]
[Sun Nov 23 03:00:16.892824 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.137:29627] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSIIQJb4RIAN-_BXnHmPrgAAAIc"]
[Sun Nov 23 03:00:18.340692 2025] [:error] [pid 39942:tid 40005] [client 216.73.163.156:30319] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSIIQqNupsOsQf9D2gyCXQAAAUo"]
[Sun Nov 23 03:00:24.272256 2025] [:error] [pid 8816:tid 8898] [client 216.73.163.156:43291] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSIISJb4RIAN-_BXnHmPxwAAAI0"]
[Sun Nov 23 03:00:24.996603 2025] [proxy_fcgi:error] [pid 39713:tid 39743] [client 216.73.163.152:44815] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:25.731235 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.152:44815] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSIISUUgrb325CIAjPq7HAAAAAc"]
[Sun Nov 23 03:00:27.230684 2025] [proxy_fcgi:error] [pid 8816:tid 8890] [client 216.73.163.118:57333] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:28.325357 2025] [proxy_fcgi:error] [pid 8816:tid 8887] [client 216.73.163.118:57333] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:28.678427 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.118:57333] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSIITJb4RIAN-_BXnHmP3AAAAIw"]
[Sun Nov 23 03:00:30.167525 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.158:34939] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSIITpb4RIAN-_BXnHmP4wAAAJM"]
[Sun Nov 23 03:00:32.322031 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.156:62525] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSIIUJb4RIAN-_BXnHmP6gAAAJQ"]
[Sun Nov 23 03:00:34.862466 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.118:33155] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSIIUgQ3B_uDoeItNmOKLAAAAE8"]
[Sun Nov 23 03:00:35.985563 2025] [proxy_fcgi:error] [pid 39713:tid 39734] [client 216.73.163.122:45101] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:36.331698 2025] [:error] [pid 39713:tid 39730] [client 216.73.163.122:45101] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSIIVEUgrb325CIAjPq7KQAAAAk"]
[Sun Nov 23 03:00:37.085382 2025] [:error] [pid 39719:tid 39784] [client 45.146.54.132:60683] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSIIVRmP4k0tY5Yex-XpWAAAAQg"]
[Sun Nov 23 03:00:41.025229 2025] [:error] [pid 39942:tid 39997] [client 216.73.163.158:22203] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSIIWaNupsOsQf9D2gyCdgAAAUI"]
[Sun Nov 23 03:00:41.760596 2025] [proxy_fcgi:error] [pid 39942:tid 40016] [client 216.73.163.123:44189] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:43.298790 2025] [proxy_fcgi:error] [pid 39942:tid 40015] [client 216.73.163.123:44189] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:43.653039 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.123:44189] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSIIW6NupsOsQf9D2gyCgQAAAUY"]
[Sun Nov 23 03:00:45.128200 2025] [proxy_fcgi:error] [pid 39718:tid 39756] [client 216.73.163.155:62213] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:45.914649 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.155:62213] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSIIXQQ3B_uDoeItNmOKNgAAAFE"]
[Sun Nov 23 03:00:46.628866 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.158:32479] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSIIXkUgrb325CIAjPq7OAAAAA4"]
[Sun Nov 23 03:00:48.172717 2025] [:error] [pid 39718:tid 39763] [client 45.146.54.131:61881] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSIIYAQ3B_uDoeItNmOKOwAAAE4"]
[Sun Nov 23 03:00:50.064200 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.121:44367] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSIIYgQ3B_uDoeItNmOKQQAAAEI"]
[Sun Nov 23 03:00:50.765778 2025] [:error] [pid 39713:tid 39731] [client 216.73.163.139:27125] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSIIYkUgrb325CIAjPq7PgAAAAo"]
[Sun Nov 23 03:00:51.821621 2025] [proxy_fcgi:error] [pid 39719:tid 39784] [client 216.73.163.121:33925] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:53.620107 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.121:33925] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSIIZRmP4k0tY5Yex-XpbgAAARc"]
[Sun Nov 23 03:00:55.077998 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.144:43673] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSIIZxmP4k0tY5Yex-XpdQAAARA"]
[Sun Nov 23 03:00:55.770620 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.152:23537] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSIIZxmP4k0tY5Yex-XpeQAAAQA"]
[Sun Nov 23 03:00:56.968982 2025] [proxy_fcgi:error] [pid 8816:tid 8908] [client 45.146.54.134:37895] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:00:57.315870 2025] [:error] [pid 8816:tid 8897] [client 45.146.54.134:37895] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSIIaZb4RIAN-_BXnHmQDAAAAIw"]
[Sun Nov 23 03:00:58.441848 2025] [:error] [pid 39713:tid 39732] [client 216.73.163.139:52767] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSIIakUgrb325CIAjPq7SQAAAAs"]
[Sun Nov 23 03:01:00.999634 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.121:32701] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSIIbJb4RIAN-_BXnHmQFgAAAIA"]
[Sun Nov 23 03:01:02.125146 2025] [proxy_fcgi:error] [pid 8816:tid 8892] [client 216.73.163.142:32215] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:02.501306 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.142:32215] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSIIbpb4RIAN-_BXnHmQGwAAAJY"]
[Sun Nov 23 03:01:03.933987 2025] [:error] [pid 39718:tid 39753] [client 45.146.54.135:47793] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSIIbwQ3B_uDoeItNmOKTQAAAEQ"]
[Sun Nov 23 03:01:06.400359 2025] [:error] [pid 39942:tid 40019] [client 216.73.163.147:53825] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSIIcqNupsOsQf9D2gyCogAAAVg"]
[Sun Nov 23 03:01:07.495436 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.144:36377] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSIIc0Ugrb325CIAjPq7UwAAAAQ"]
[Sun Nov 23 03:01:08.252382 2025] [:error] [pid 39719:tid 39796] [client 216.73.163.158:42787] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSIIdBmP4k0tY5Yex-XpnQAAARQ"]
[Sun Nov 23 03:01:08.969661 2025] [:error] [pid 39719:tid 39789] [client 45.146.54.133:57113] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSIIdBmP4k0tY5Yex-XpnwAAAQ0"]
[Sun Nov 23 03:01:12.622438 2025] [:error] [pid 39719:tid 39797] [client 45.146.54.133:20857] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSIIeBmP4k0tY5Yex-XprQAAARU"]
[Sun Nov 23 03:01:15.357387 2025] [:error] [pid 39942:tid 40000] [client 45.146.54.138:45093] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSIIe6NupsOsQf9D2gyCtAAAAUU"]
[Sun Nov 23 03:01:16.794098 2025] [proxy_fcgi:error] [pid 39719:tid 39794] [client 216.73.163.139:42869] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:17.140312 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.139:42869] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSIIfRmP4k0tY5Yex-XpuQAAAQo"]
[Sun Nov 23 03:01:18.963801 2025] [:error] [pid 39713:tid 39740] [client 216.73.163.117:24203] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSIIfkUgrb325CIAjPq7agAAABM"]
[Sun Nov 23 03:01:19.715898 2025] [proxy_fcgi:error] [pid 39942:tid 39994] [client 216.73.163.155:30945] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:21.807306 2025] [:error] [pid 39942:tid 40002] [client 216.73.163.155:30945] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSIIgaNupsOsQf9D2gyCyQAAAUc"]
[Sun Nov 23 03:01:22.854780 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.135:61035] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSIIgqNupsOsQf9D2gyCzQAAAUY"]
[Sun Nov 23 03:01:23.988674 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.123:33945] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSIIgwQ3B_uDoeItNmOKZwAAAE8"]
[Sun Nov 23 03:01:25.389752 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.153:34775] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSIIhaNupsOsQf9D2gyC0gAAAUQ"]
[Sun Nov 23 03:01:29.154443 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.157:45763] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSIIiaNupsOsQf9D2gyC3gAAAUY"]
[Sun Nov 23 03:01:29.926757 2025] [:error] [pid 39719:tid 39784] [client 45.146.54.139:37667] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSIIiRmP4k0tY5Yex-XpyAAAAQg"]
[Sun Nov 23 03:01:32.884824 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.155:20509] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSIIjKNupsOsQf9D2gyC5QAAAVI"]
[Sun Nov 23 03:01:33.617584 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.143:27643] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSIIjZb4RIAN-_BXnHmQWQAAAI4"]
[Sun Nov 23 03:01:35.099697 2025] [:error] [pid 8816:tid 8900] [client 45.131.194.122:61469] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSIIj5b4RIAN-_BXnHmQYAAAAI8"]
[Sun Nov 23 03:01:35.800594 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.146:64307] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSIIj5b4RIAN-_BXnHmQYgAAAII"]
[Sun Nov 23 03:01:36.501192 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.135:55705] [client 216.73.163.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.135, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSIIkJb4RIAN-_BXnHmQZgAAAIY"]
[Sun Nov 23 03:01:36.513945 2025] [proxy_fcgi:error] [pid 8816:tid 8890] [client 216.73.163.135:55705] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:36.883555 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.135:55705] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSIIkJb4RIAN-_BXnHmQZwAAAIg"]
[Sun Nov 23 03:01:38.371811 2025] [proxy_fcgi:error] [pid 39942:tid 40009] [client 216.73.163.123:56827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:38.714950 2025] [:error] [pid 39942:tid 40019] [client 216.73.163.123:56827] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSIIkqNupsOsQf9D2gyC6wAAAVg"]
[Sun Nov 23 03:01:39.495702 2025] [:error] [pid 39719:tid 39786] [client 45.146.54.133:26281] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSIIkxmP4k0tY5Yex-Xp1gAAAQo"]
[Sun Nov 23 03:01:40.190275 2025] [proxy_fcgi:error] [pid 39713:tid 39743] [client 216.73.163.155:23215] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:43.275531 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.155:23215] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSIIl0Ugrb325CIAjPq7mwAAABA"]
[Sun Nov 23 03:01:43.998013 2025] [:error] [pid 39713:tid 39729] [client 45.146.54.134:40689] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSIIl0Ugrb325CIAjPq7oAAAAAg"]
[Sun Nov 23 03:01:45.506361 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.134:65059] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSIImaNupsOsQf9D2gyC-wAAAUw"]
[Sun Nov 23 03:01:47.299611 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.149:26137] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSIIm6NupsOsQf9D2gyC_QAAAUY"]
[Sun Nov 23 03:01:48.012220 2025] [proxy_fcgi:error] [pid 39942:tid 40017] [client 45.146.54.134:29731] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:48.365133 2025] [:error] [pid 39942:tid 39998] [client 45.146.54.134:29731] [client 45.146.54.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.134, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSIInKNupsOsQf9D2gyC_wAAAUM"]
[Sun Nov 23 03:01:49.152229 2025] [:error] [pid 39942:tid 39995] [client 45.146.54.134:29731] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSIInaNupsOsQf9D2gyDBQAAAUE"]
[Sun Nov 23 03:01:51.317015 2025] [:error] [pid 39942:tid 40000] [client 45.146.54.131:22543] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSIIn6NupsOsQf9D2gyDEAAAAUU"]
[Sun Nov 23 03:01:52.072409 2025] [proxy_fcgi:error] [pid 39713:tid 39730] [client 216.73.163.149:22281] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:52.468438 2025] [:error] [pid 39713:tid 39742] [client 216.73.163.149:22281] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSIIoEUgrb325CIAjPq7qQAAABU"]
[Sun Nov 23 03:01:53.160873 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.157:50753] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSIIoZb4RIAN-_BXnHmQiAAAAI4"]
[Sun Nov 23 03:01:53.918245 2025] [proxy_fcgi:error] [pid 39713:tid 39724] [client 216.73.163.142:48313] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:55.030672 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.142:48313] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSIIo0Ugrb325CIAjPq7rwAAABY"]
[Sun Nov 23 03:01:56.479032 2025] [:error] [pid 39713:tid 39731] [client 216.73.163.148:48777] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSIIpEUgrb325CIAjPq7tQAAAAo"]
[Sun Nov 23 03:01:57.295127 2025] [proxy_fcgi:error] [pid 39942:tid 40016] [client 45.146.54.132:37279] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:58.058770 2025] [proxy_fcgi:error] [pid 39942:tid 40010] [client 45.146.54.132:37279] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:01:58.825879 2025] [:error] [pid 39942:tid 39998] [client 45.146.54.132:37279] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSIIpqNupsOsQf9D2gyDJQAAAUM"]
[Sun Nov 23 03:01:59.540379 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.159:53349] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSIIp5b4RIAN-_BXnHmQnAAAAI4"]
[Sun Nov 23 03:02:00.610223 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.146:31027] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSIIqKNupsOsQf9D2gyDKQAAAUU"]
[Sun Nov 23 03:02:01.356401 2025] [proxy_fcgi:error] [pid 8816:tid 8892] [client 216.73.163.141:42127] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:03.553323 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.141:42127] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSIIq5b4RIAN-_BXnHmQqQAAAJU"]
[Sun Nov 23 03:02:04.999374 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.134:55147] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "cientifica.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSIIrAQ3B_uDoeItNmOKmQAAAE8"]
[Sun Nov 23 03:02:05.342289 2025] [:error] [pid 39718:tid 39769] [client 216.73.163.134:55147] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSIIrQQ3B_uDoeItNmOKmgAAAFQ"]
[Sun Nov 23 03:02:06.764279 2025] [:error] [pid 8816:tid 8898] [client 45.146.54.132:52497] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSIIrpb4RIAN-_BXnHmQsQAAAI0"]
[Sun Nov 23 03:02:07.506090 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.116:45691] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSIIr6NupsOsQf9D2gyDYwAAAU8"]
[Sun Nov 23 03:02:09.085609 2025] [proxy_fcgi:error] [pid 39719:tid 39786] [client 216.73.163.134:31621] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:10.552599 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.134:31621] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSIIshmP4k0tY5Yex-XqDwAAARA"]
[Sun Nov 23 03:02:12.175362 2025] [:error] [pid 39942:tid 40012] [client 216.73.163.118:33553] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSIItKNupsOsQf9D2gyDbwAAAVE"]
[Sun Nov 23 03:02:13.362416 2025] [:error] [pid 39718:tid 39759] [client 45.146.54.138:24971] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSIItQQ3B_uDoeItNmOKswAAAEo"]
[Sun Nov 23 03:02:14.121138 2025] [proxy_fcgi:error] [pid 39713:tid 39727] [client 216.73.163.160:51191] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:15.953674 2025] [:error] [pid 39713:tid 39744] [client 216.73.163.160:51191] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSIIt0Ugrb325CIAjPq76AAAABc"]
[Sun Nov 23 03:02:17.036198 2025] [:error] [pid 39719:tid 39787] [client 45.146.54.138:51985] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSIIuRmP4k0tY5Yex-XqFwAAAQs"]
[Sun Nov 23 03:02:17.734067 2025] [proxy_fcgi:error] [pid 39718:tid 39769] [client 216.73.163.136:44791] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:18.098667 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.136:44791] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSIIugQ3B_uDoeItNmOKyAAAAEM"]
[Sun Nov 23 03:02:18.797606 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.120:44559] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSIIupb4RIAN-_BXnHmQ0QAAAIk"]
[Sun Nov 23 03:02:20.360016 2025] [:error] [pid 39718:tid 39770] [client 45.131.194.122:42465] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSIIvAQ3B_uDoeItNmOKzgAAAFU"]
[Sun Nov 23 03:02:22.160190 2025] [proxy_fcgi:error] [pid 39713:tid 39735] [client 45.146.54.135:53471] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:22.521667 2025] [:error] [pid 39713:tid 39726] [client 45.146.54.135:53471] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSIIvkUgrb325CIAjPq7-wAAAAU"]
[Sun Nov 23 03:02:23.222930 2025] [:error] [pid 39719:tid 39783] [client 45.146.54.132:59233] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSIIvxmP4k0tY5Yex-XqIwAAAQc"]
[Sun Nov 23 03:02:25.790484 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.159:20385] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSIIwUUgrb325CIAjPq8BQAAABA"]
[Sun Nov 23 03:02:27.321243 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.160:21121] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSIIwxmP4k0tY5Yex-XqLQAAAQo"]
[Sun Nov 23 03:02:28.029838 2025] [proxy_fcgi:error] [pid 39718:tid 39758] [client 216.73.163.141:54203] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:29.171524 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.141:54203] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSIIxQQ3B_uDoeItNmOK3wAAAEM"]
[Sun Nov 23 03:02:29.875191 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.145:27793] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSIIxaNupsOsQf9D2gyDqwAAAUw"]
[Sun Nov 23 03:02:30.978151 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.132:63607] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSIIxqNupsOsQf9D2gyDsAAAAUQ"]
[Sun Nov 23 03:02:31.728119 2025] [proxy_fcgi:error] [pid 8816:tid 8900] [client 216.73.163.118:55685] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:33.539668 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.118:55685] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSIIyZb4RIAN-_BXnHmQ7wAAAJY"]
[Sun Nov 23 03:02:34.239393 2025] [proxy_fcgi:error] [pid 39942:tid 39995] [client 216.73.163.153:25649] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:34.994335 2025] [:error] [pid 39942:tid 40004] [client 216.73.163.153:25649] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSIIyqNupsOsQf9D2gyDtQAAAUk"]
[Sun Nov 23 03:02:35.677172 2025] [:error] [pid 39718:tid 39771] [client 216.73.163.131:21595] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSIIywQ3B_uDoeItNmOK6gAAAFY"]
[Sun Nov 23 03:02:36.735948 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.122:25909] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSIIzJb4RIAN-_BXnHmQ9gAAAIY"]
[Sun Nov 23 03:02:37.508536 2025] [:error] [pid 39719:tid 39779] [client 216.73.163.138:59829] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSIIzRmP4k0tY5Yex-XqaAAAAQM"]
[Sun Nov 23 03:02:38.980388 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.117:53195] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSIIzpb4RIAN-_BXnHmRBgAAAIk"]
[Sun Nov 23 03:02:40.125604 2025] [:error] [pid 39719:tid 39789] [client 216.73.163.120:41483] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSII0BmP4k0tY5Yex-XqcQAAAQ0"]
[Sun Nov 23 03:02:40.821524 2025] [:error] [pid 8816:tid 8900] [client 45.146.54.137:25799] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSII0Jb4RIAN-_BXnHmRCwAAAI8"]
[Sun Nov 23 03:02:41.512329 2025] [:error] [pid 8816:tid 8889] [client 45.146.54.139:33569] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSII0Zb4RIAN-_BXnHmRDQAAAIU"]
[Sun Nov 23 03:02:43.385768 2025] [:error] [pid 39942:tid 40008] [client 45.146.54.138:45347] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSII06NupsOsQf9D2gyD2gAAAU0"]
[Sun Nov 23 03:02:45.870639 2025] [:error] [pid 39719:tid 39792] [client 45.146.54.132:21021] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSII1RmP4k0tY5Yex-XqewAAARA"]
[Sun Nov 23 03:02:47.588319 2025] [:error] [pid 39718:tid 39756] [client 45.131.194.122:26141] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSII1wQ3B_uDoeItNmOK_gAAAEc"]
[Sun Nov 23 03:02:48.755276 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.155:32015] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSII2AQ3B_uDoeItNmOLBgAAAFc"]
[Sun Nov 23 03:02:51.134234 2025] [proxy_fcgi:error] [pid 39718:tid 39755] [client 216.73.163.154:35215] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:53.134086 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.154:35215] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSII3QQ3B_uDoeItNmOLFgAAAFU"]
[Sun Nov 23 03:02:53.909483 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.134:31777] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSII3Zb4RIAN-_BXnHmRGwAAAJQ"]
[Sun Nov 23 03:02:55.086272 2025] [proxy_fcgi:error] [pid 8816:tid 8884] [client 216.73.163.150:34045] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:02:55.491848 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.150:34045] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSII35b4RIAN-_BXnHmRJQAAAJc"]
[Sun Nov 23 03:02:57.778029 2025] [:error] [pid 39713:tid 39744] [client 45.146.54.136:30719] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSII4UUgrb325CIAjPq8LQAAABc"]
[Sun Nov 23 03:02:59.583104 2025] [proxy_fcgi:error] [pid 39942:tid 40010] [client 216.73.163.156:41281] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:00.026871 2025] [:error] [pid 39942:tid 39998] [client 216.73.163.156:41281] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSII5KNupsOsQf9D2gyEAgAAAUM"]
[Sun Nov 23 03:03:01.556234 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.150:34621] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSII5aNupsOsQf9D2gyEBgAAAVA"]
[Sun Nov 23 03:03:02.267394 2025] [proxy_fcgi:error] [pid 8816:tid 8898] [client 45.146.54.134:28191] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:02.634696 2025] [:error] [pid 8816:tid 8904] [client 45.146.54.134:28191] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSII5pb4RIAN-_BXnHmRPAAAAJM"]
[Sun Nov 23 03:03:03.675739 2025] [:error] [pid 39713:tid 39738] [client 216.73.163.116:52569] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSII50Ugrb325CIAjPq8OQAAABE"]
[Sun Nov 23 03:03:05.498774 2025] [proxy_fcgi:error] [pid 39942:tid 40002] [client 216.73.163.131:62211] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:05.876101 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.131:62211] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSII6aNupsOsQf9D2gyEGAAAAUw"]
[Sun Nov 23 03:03:07.752505 2025] [:error] [pid 39713:tid 39725] [client 45.146.54.132:55557] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSII60Ugrb325CIAjPq8SwAAAAQ"]
[Sun Nov 23 03:03:08.450236 2025] [proxy_fcgi:error] [pid 39713:tid 39721] [client 216.73.163.152:48501] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:08.799719 2025] [:error] [pid 39713:tid 39741] [client 216.73.163.152:48501] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSII7EUgrb325CIAjPq8TwAAABQ"]
[Sun Nov 23 03:03:09.554791 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.118:50397] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSII7aNupsOsQf9D2gyEJAAAAU4"]
[Sun Nov 23 03:03:10.269687 2025] [proxy_fcgi:error] [pid 39719:tid 39790] [client 216.73.163.140:52363] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:10.986092 2025] [:error] [pid 39719:tid 39785] [client 216.73.163.140:52363] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSII7hmP4k0tY5Yex-XqowAAAQk"]
[Sun Nov 23 03:03:11.739334 2025] [:error] [pid 39719:tid 39795] [client 216.73.163.134:30737] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSII7xmP4k0tY5Yex-XqpQAAARM"]
[Sun Nov 23 03:03:14.655303 2025] [:error] [pid 39713:tid 39739] [client 45.146.54.138:62333] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSII8kUgrb325CIAjPq8XAAAABI"]
[Sun Nov 23 03:03:15.361451 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.135:45797] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSII85b4RIAN-_BXnHmRZwAAAIE"]
[Sun Nov 23 03:03:16.428591 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.120:21921] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSII9EUgrb325CIAjPq8YQAAAA8"]
[Sun Nov 23 03:03:17.170539 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.119:58497] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSII9aNupsOsQf9D2gyEKQAAAU8"]
[Sun Nov 23 03:03:17.869125 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.129:44951] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSII9QQ3B_uDoeItNmOLMQAAAEI"]
[Sun Nov 23 03:03:18.578521 2025] [:error] [pid 39718:tid 39759] [client 45.146.54.131:64997] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSII9gQ3B_uDoeItNmOLNAAAAEo"]
[Sun Nov 23 03:03:20.751899 2025] [:error] [pid 39718:tid 39765] [client 216.73.163.130:52017] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSII-AQ3B_uDoeItNmOLPAAAAFA"]
[Sun Nov 23 03:03:21.441863 2025] [:error] [pid 39719:tid 39797] [client 45.146.54.132:55701] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSII-RmP4k0tY5Yex-XqwAAAARU"]
[Sun Nov 23 03:03:22.482813 2025] [proxy_fcgi:error] [pid 39713:tid 39733] [client 45.146.54.138:49025] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:22.838432 2025] [:error] [pid 39713:tid 39728] [client 45.146.54.138:49025] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSII-kUgrb325CIAjPq8hgAAAAc"]
[Sun Nov 23 03:03:23.530888 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.131:52283] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSII-xmP4k0tY5Yex-XqxQAAAQQ"]
[Sun Nov 23 03:03:25.878830 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.157:60139] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSII_Zb4RIAN-_BXnHmRfgAAAJM"]
[Sun Nov 23 03:03:26.630890 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.141:56083] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSII_gQ3B_uDoeItNmOLQQAAAFE"]
[Sun Nov 23 03:03:29.914621 2025] [:error] [pid 39713:tid 39727] [client 216.73.163.154:46633] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSIJAUUgrb325CIAjPq8lwAAAAY"]
[Sun Nov 23 03:03:30.656230 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.138:39157] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSIJAhmP4k0tY5Yex-Xq0AAAARE"]
[Sun Nov 23 03:03:32.154913 2025] [:error] [pid 39718:tid 39762] [client 216.73.163.151:43733] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSIJBAQ3B_uDoeItNmOLUAAAAE0"]
[Sun Nov 23 03:03:33.789305 2025] [:error] [pid 39718:tid 39751] [client 45.146.54.137:26499] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSIJBQQ3B_uDoeItNmOLWAAAAEI"]
[Sun Nov 23 03:03:34.884050 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.145:28439] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSIJBqNupsOsQf9D2gyEPgAAAU8"]
[Sun Nov 23 03:03:35.681239 2025] [:error] [pid 39942:tid 39999] [client 45.131.194.122:63105] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSIJB6NupsOsQf9D2gyEQQAAAUQ"]
[Sun Nov 23 03:03:36.383000 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.140:60237] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSIJCEUgrb325CIAjPq8nwAAAAw"]
[Sun Nov 23 03:03:38.301972 2025] [:error] [pid 8816:tid 8889] [client 45.146.54.138:24743] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSIJCpb4RIAN-_BXnHmRlwAAAIU"]
[Sun Nov 23 03:03:39.051336 2025] [proxy_fcgi:error] [pid 8816:tid 8888] [client 216.73.163.147:24911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:39.393458 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.147:24911] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSIJC5b4RIAN-_BXnHmRmwAAAIc"]
[Sun Nov 23 03:03:43.183344 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.121:63981] [client 216.73.163.121] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "216.73.163.131_64f59efb87dbdb06a869cf4460d83cf1b25c83f5"): Internal error (specific information not available) [hostname "cientifica.com.au"] [uri "/img/prettyPhoto/dark_square/install.php"] [unique_id "aSIJDAQ3B_uDoeItNmOLXgAAAEQ"]
[Sun Nov 23 03:03:43.190371 2025] [proxy_fcgi:error] [pid 39718:tid 39761] [client 216.73.163.121:63981] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:43.532132 2025] [:error] [pid 39718:tid 39749] [client 216.73.163.121:63981] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSIJDwQ3B_uDoeItNmOLYQAAAEA"]
[Sun Nov 23 03:03:44.263837 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.140:47547] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSIJEEUgrb325CIAjPq8pgAAABY"]
[Sun Nov 23 03:03:45.376916 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.146:60339] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSIJEZb4RIAN-_BXnHmRrQAAAIg"]
[Sun Nov 23 03:03:48.700456 2025] [proxy_fcgi:error] [pid 39718:tid 39758] [client 216.73.163.117:51805] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 03:03:51.276413 2025] [:error] [pid 39718:tid 39749] [client 216.73.163.117:51805] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSIJFwQ3B_uDoeItNmOLcgAAAEA"]
[Sun Nov 23 03:03:52.344824 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.120:41215] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSIJGJb4RIAN-_BXnHmRvQAAAIU"]
[Sun Nov 23 03:03:53.808393 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.131:40479] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSIJGaNupsOsQf9D2gyEWgAAAUY"]
[Sun Nov 23 03:03:55.453164 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.139:59097] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSIJG0Ugrb325CIAjPq8tgAAAAc"]
[Sun Nov 23 03:03:56.153124 2025] [:error] [pid 39718:tid 39766] [client 45.146.54.131:25701] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSIJHAQ3B_uDoeItNmOLuQAAAFE"]
[Sun Nov 23 03:07:36.545173 2025] [:error] [pid 39719:tid 39788] [client 43.130.57.46:44362] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSIJ-BmP4k0tY5Yex-XsqgAAAQw"]
[Sun Nov 23 03:13:05.820513 2025] [:error] [pid 39713:tid 39735] [client 103.171.5.144:36889] [client 103.171.5.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.5.144, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSILQUUgrb325CIAjPq_HwAAAA4"]
[Sun Nov 23 03:13:05.832500 2025] [proxy_fcgi:error] [pid 39713:tid 39735] [client 103.171.5.144:36889] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:01:35.745844 2025] [autoindex:error] [pid 38738:tid 38761] [client 35.205.123.189:52912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 06:25:57.437066 2025] [autoindex:error] [pid 38738:tid 38745] [client 74.7.243.216:52816] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 08:29:56.268815 2025] [autoindex:error] [pid 38738:tid 38750] [client 188.241.83.70:58521] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 08:29:56.620455 2025] [:error] [pid 38738:tid 38760] [client 188.241.83.70:58521] [client 188.241.83.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.241.83.70, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSJVhAytc6TL9XavPmMP6gAAABI"]
[Sun Nov 23 08:29:56.633212 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 188.241.83.70:58521] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:29:57.011808 2025] [:error] [pid 38738:tid 38761] [client 188.241.83.70:58521] [client 188.241.83.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cientifica.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSJVhQytc6TL9XavPmMP6wAAABM"]
[Sun Nov 23 10:06:37.244293 2025] [autoindex:error] [pid 44652:tid 44712] [client 46.148.206.226:57357] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 23 10:06:37.805821 2025] [autoindex:error] [pid 38739:tid 38788] [client 46.148.206.226:57397] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 23 10:06:38.404495 2025] [autoindex:error] [pid 38739:tid 38780] [client 46.148.206.226:57437] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 23 10:06:38.968271 2025] [autoindex:error] [pid 38824:tid 38848] [client 46.148.206.226:57479] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Nov 23 12:20:11.608796 2025] [:error] [pid 38824:tid 38850] [client 45.138.16.215:62820] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/postnews.php"] [unique_id "aSKLe08WZjXLvbHTHPdFnQAAANc"]
[Sun Nov 23 12:20:12.142503 2025] [:error] [pid 38738:tid 38761] [client 45.138.16.215:62855] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aSKLfAytc6TL9XavPmNiIgAAABM"]
[Sun Nov 23 12:20:12.668311 2025] [:error] [pid 38738:tid 38747] [client 45.138.16.215:62890] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aSKLfAytc6TL9XavPmNiJAAAAAU"]
[Sun Nov 23 14:37:30.887096 2025] [autoindex:error] [pid 38740:tid 38815] [client 35.209.68.128:2016] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Nov 23 16:02:51.470440 2025] [autoindex:error] [pid 38740:tid 38804] [client 66.249.64.9:52057] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:03:05.762373 2025] [autoindex:error] [pid 38738:tid 38761] [client 34.151.74.146:51614] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 17:01:27.475317 2025] [proxy_fcgi:error] [pid 17534:tid 17553] [client 167.71.203.246:59079] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 18:26:41.202091 2025] [:error] [pid 16066:tid 16092] [client 182.44.10.67:44694] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSLhYfq-c47Q5mW5E9Go3wAAAZc"]
[Sun Nov 23 18:57:42.821416 2025] [autoindex:error] [pid 38824:tid 38849] [client 149.88.17.162:8492] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 23:08:06.677580 2025] [autoindex:error] [pid 14602:tid 14636] [client 161.115.234.171:57819] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Sun Nov 23 23:08:15.101759 2025] [autoindex:error] [pid 17534:tid 17558] [client 161.115.234.148:47683] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Sun Nov 23 23:08:53.353789 2025] [autoindex:error] [pid 38739:tid 38776] [client 161.115.234.158:37939] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 00:25:21.944281 2025] [autoindex:error] [pid 1454:tid 1525] [client 93.158.91.19:54837] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 00:29:22.751247 2025] [autoindex:error] [pid 1589:tid 1615] [client 51.77.95.18:54957] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 01:07:35.586988 2025] [:error] [pid 8337:tid 8347] [client 113.141.91.58:36718] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSM_V-Smps4S2j95D5hx9wAAAAg"]
[Mon Nov 24 01:44:52.130964 2025] [autoindex:error] [pid 1589:tid 1595] [client 35.153.207.183:50576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 01:51:59.264688 2025] [autoindex:error] [pid 8337:tid 8351] [client 35.153.207.183:60970] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.lionsgate.com/
[Mon Nov 24 03:01:15.938393 2025] [:error] [pid 1453:tid 1487] [client 122.162.149.39:26976] [client 122.162.149.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.162.149.39, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSNZ-xUBCt7LU0bO_GBocAAAAIM"]
[Mon Nov 24 03:01:15.949323 2025] [proxy_fcgi:error] [pid 1453:tid 1487] [client 122.162.149.39:26976] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 03:05:15.682758 2025] [proxy_fcgi:error] [pid 8337:tid 8341] [client 167.71.203.246:59457] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 03:46:38.293318 2025] [:error] [pid 1452:tid 1479] [client 193.37.33.236:32891] [client 193.37.33.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.236, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aSNknhKZkEEyVNVXr_nolgAAAFY"]
[Mon Nov 24 03:46:38.303713 2025] [proxy_fcgi:error] [pid 1452:tid 1479] [client 193.37.33.236:32891] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 04:29:53.578016 2025] [:error] [pid 12999:tid 13015] [client 43.128.67.187:51280] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSNuwVtj_teEYJ8vu7H2yQAAAMw"]
[Mon Nov 24 07:14:49.978600 2025] [:error] [pid 12911:tid 12950] [client 182.42.110.255:39885] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSOVaUDMbk9464jnIl4M4wAAAEg"]
[Mon Nov 24 08:15:55.805175 2025] [:error] [pid 48601:tid 48662] [client 103.65.237.124:54288] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aSOju4MM4MaVTk74-AYmDwAAAgU"]
[Mon Nov 24 10:35:22.503165 2025] [autoindex:error] [pid 48599:tid 48613] [client 43.132.167.136:37020] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 14:32:27.605355 2025] [:error] [pid 49900:tid 49921] [client 136.144.19.245:23867] [client 136.144.19.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aSP7-zCyPLrvg06aorno2AAAABM"]
[Mon Nov 24 14:32:28.085542 2025] [:error] [pid 16441:tid 16467] [client 104.234.19.6:52765] [client 104.234.19.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/txets.php"] [unique_id "aSP7_Iq_bc5MOa9Hfln69QAAAJc"]
[Mon Nov 24 14:32:28.568670 2025] [:error] [pid 9630:tid 9651] [client 104.234.19.7:25613] [client 104.234.19.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aSP7_CrSgUgPGkizt2rE-wAAAFM"]
[Mon Nov 24 19:51:15.905407 2025] [:error] [pid 16441:tid 16445] [client 104.207.58.245:15985] [client 104.207.58.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aSRGs4q_bc5MOa9HflltUQAAAIE"]
[Mon Nov 24 19:51:19.043251 2025] [:error] [pid 16593:tid 16609] [client 216.26.237.253:28811] [client 216.26.237.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aSRGtxVGznHBJI2LKpRZHQAAAo4"]
[Mon Nov 24 19:51:20.194449 2025] [:error] [pid 48600:tid 48630] [client 104.207.54.183:11763] [client 104.207.54.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.svn/wc.db"] [unique_id "aSRGuPtOzSUAQvWVjBeScQAAAcA"]
[Mon Nov 24 20:48:18.295661 2025] [:error] [pid 49900:tid 49907] [client 43.157.179.227:58322] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSRUEjCyPLrvg06aork9sAAAAAU"]
[Mon Nov 24 21:45:38.661402 2025] [:error] [pid 48601:tid 48679] [client 193.32.126.212:54818] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSRhgoMM4MaVTk74-AbnCQAAAhY"]
[Mon Nov 24 21:45:39.155222 2025] [:error] [pid 48601:tid 48675] [client 193.32.126.212:55451] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSRhg4MM4MaVTk74-AbnGAAAAhI"]
[Mon Nov 24 21:45:39.649085 2025] [:error] [pid 48601:tid 48658] [client 193.32.126.212:55890] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhg4MM4MaVTk74-AbnJQAAAgE"]
[Mon Nov 24 22:04:17.047792 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 52.191.198.92:22589] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Nov 24 22:04:17.075035 2025] [autoindex:error] [pid 48600:tid 48653] [client 52.191.198.92:22534] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:04:17.332686 2025] [proxy_fcgi:error] [pid 48600:tid 48648] [client 52.191.198.92:22589] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Nov 24 22:04:23.981755 2025] [proxy_fcgi:error] [pid 16516:tid 16538] [client 52.191.198.92:22543] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Nov 24 22:04:24.468946 2025] [proxy_fcgi:error] [pid 16516:tid 16520] [client 52.191.198.92:22543] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Nov 24 22:31:06.866143 2025] [:error] [pid 48599:tid 48603] [client 124.156.226.179:39732] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSRsKpzvu6PDJiRKE3JZKgAAAYA"]
[Mon Nov 24 23:20:27.352259 2025] [:error] [pid 49900:tid 49925] [client 213.21.239.4:50306] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/css../.git/config"] [unique_id "aSR3uzCyPLrvg06aorlfMwAAABc"]
[Mon Nov 24 23:20:27.354862 2025] [:error] [pid 48599:tid 48623] [client 213.21.239.4:50324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/application/.git/config"] [unique_id "aSR3u5zvu6PDJiRKE3JiYwAAAZQ"]
[Mon Nov 24 23:20:27.356391 2025] [:error] [pid 48599:tid 48609] [client 213.21.239.4:50336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/admin/.git/config"] [unique_id "aSR3u5zvu6PDJiRKE3JiZAAAAYY"]
[Mon Nov 24 23:20:27.357165 2025] [:error] [pid 48599:tid 48606] [client 213.21.239.4:50332] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/backup/.git/config"] [unique_id "aSR3u5zvu6PDJiRKE3JiZQAAAYM"]
[Mon Nov 24 23:20:27.357227 2025] [:error] [pid 16441:tid 16458] [client 213.21.239.4:50352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/content../.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm3xgAAAI4"]
[Mon Nov 24 23:20:27.359243 2025] [:error] [pid 16441:tid 16463] [client 213.21.239.4:50410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/assets../.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm3yAAAAJM"]
[Mon Nov 24 23:20:27.363202 2025] [:error] [pid 9630:tid 9640] [client 213.21.239.4:50366] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/common/.git/config"] [unique_id "aSR3uyrSgUgPGkizt2pRqQAAAEg"]
[Mon Nov 24 23:20:27.364104 2025] [:error] [pid 16441:tid 16448] [client 213.21.239.4:50426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/.git/config;.."] [unique_id "aSR3u4q_bc5MOa9Hflm3yQAAAIQ"]
[Mon Nov 24 23:20:27.366065 2025] [:error] [pid 16593:tid 16595] [client 213.21.239.4:50406] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/;/.git/config"] [unique_id "aSR3uxVGznHBJI2LKpR6hQAAAoA"]
[Mon Nov 24 23:20:27.366957 2025] [:error] [pid 16441:tid 16457] [client 213.21.239.4:50454] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/static../.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm3ygAAAI0"]
[Mon Nov 24 23:20:27.367819 2025] [:error] [pid 16441:tid 16451] [client 213.21.239.4:50440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/.git/config;"] [unique_id "aSR3u4q_bc5MOa9Hflm3ywAAAIc"]
[Mon Nov 24 23:20:27.370081 2025] [:error] [pid 16441:tid 16468] [client 213.21.239.4:50466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/api/.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm3zAAAAJg"]
[Mon Nov 24 23:20:27.371445 2025] [:error] [pid 16441:tid 16455] [client 213.21.239.4:50450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica../.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm3zQAAAIs"]
[Mon Nov 24 23:20:27.375330 2025] [:error] [pid 16441:tid 16467] [client 213.21.239.4:50468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/database/.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm3zwAAAJc"]
[Mon Nov 24 23:20:27.375454 2025] [:error] [pid 9630:tid 9637] [client 213.21.239.4:50388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/app/.git/config"] [unique_id "aSR3uyrSgUgPGkizt2pRqgAAAEU"]
[Mon Nov 24 23:20:27.376375 2025] [:error] [pid 16441:tid 16445] [client 213.21.239.4:50510] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/.git/%0Aconfig"] [unique_id "aSR3u4q_bc5MOa9Hflm30AAAAIE"]
[Mon Nov 24 23:20:27.379008 2025] [:error] [pid 16441:tid 16460] [client 213.21.239.4:50508] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/dev/.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm30QAAAJA"]
[Mon Nov 24 23:20:27.381919 2025] [:error] [pid 16516:tid 16530] [client 213.21.239.4:50506] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/developer/.git/config"] [unique_id "aSR3u_qZbniwaNwL8XkbzQAAAQs"]
[Mon Nov 24 23:20:27.383272 2025] [:error] [pid 16441:tid 16444] [client 213.21.239.4:50308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/..;/.git/config"] [unique_id "aSR3u4q_bc5MOa9Hflm30gAAAIA"]
[Mon Nov 24 23:20:27.386069 2025] [:error] [pid 16516:tid 16543] [client 213.21.239.4:50498] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica/.git/config"] [unique_id "aSR3u_qZbniwaNwL8XkbzgAAARg"]
[Mon Nov 24 23:20:30.718685 2025] [:error] [pid 16593:tid 16605] [client 213.21.239.4:50652] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/config"] [unique_id "aSR3vhVGznHBJI2LKpR6iwAAAoo"]
[Mon Nov 24 23:20:30.720531 2025] [:error] [pid 48601:tid 48681] [client 213.21.239.4:50638] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/config;"] [unique_id "aSR3voMM4MaVTk74-Ab7JQAAAhg"]
[Mon Nov 24 23:20:30.721245 2025] [:error] [pid 16549:tid 16557] [client 213.21.239.4:50668] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/..;/.git/config"] [unique_id "aSR3vqeWW19A99PUw_d1zAAAAUU"]
[Mon Nov 24 23:20:30.723033 2025] [:error] [pid 48599:tid 48612] [client 213.21.239.4:50658] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/%0Aconfig"] [unique_id "aSR3vpzvu6PDJiRKE3JicQAAAYk"]
[Mon Nov 24 23:20:30.724085 2025] [:error] [pid 49900:tid 49907] [client 213.21.239.4:50680] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git;/config"] [unique_id "aSR3vjCyPLrvg06aorlfOgAAAAU"]
[Mon Nov 24 23:20:30.725126 2025] [:error] [pid 16593:tid 16606] [client 213.21.239.4:50678] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/config;.."] [unique_id "aSR3vhVGznHBJI2LKpR6jAAAAos"]
[Mon Nov 24 23:20:30.739315 2025] [:error] [pid 16441:tid 16463] [client 213.21.239.4:50728] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/;/.git/config"] [unique_id "aSR3voq_bc5MOa9Hflm33wAAAJM"]
[Mon Nov 24 23:20:30.743450 2025] [:error] [pid 48601:tid 48663] [client 213.21.239.4:50828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/static../.git/config"] [unique_id "aSR3voMM4MaVTk74-Ab7KQAAAgY"]
[Mon Nov 24 23:20:30.745010 2025] [:error] [pid 48599:tid 48605] [client 213.21.239.4:50760] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au../.git/config"] [unique_id "aSR3vpzvu6PDJiRKE3JicwAAAYI"]
[Mon Nov 24 23:20:30.747214 2025] [:error] [pid 16593:tid 16614] [client 213.21.239.4:50838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/..;/.git/config"] [unique_id "aSR3vhVGznHBJI2LKpR6jgAAApM"]
[Mon Nov 24 23:20:30.747464 2025] [:error] [pid 16593:tid 16613] [client 213.21.239.4:50846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSR3vhVGznHBJI2LKpR6jwAAApI"]
[Mon Nov 24 23:20:30.749028 2025] [:error] [pid 16516:tid 16520] [client 213.21.239.4:50830] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSR3vvqZbniwaNwL8Xkb1gAAAQE"]
[Mon Nov 24 23:20:30.750654 2025] [:error] [pid 48599:tid 48604] [client 213.21.239.4:50850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config;"] [unique_id "aSR3vpzvu6PDJiRKE3JidAAAAYE"]
[Mon Nov 24 23:20:30.750972 2025] [:error] [pid 16516:tid 16524] [client 213.21.239.4:50858] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config;.."] [unique_id "aSR3vvqZbniwaNwL8Xkb1wAAAQU"]
[Mon Nov 24 23:20:30.755079 2025] [:error] [pid 16549:tid 16576] [client 213.21.239.4:50906] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/images../.git/config"] [unique_id "aSR3vqeWW19A99PUw_d1zgAAAVc"]
[Mon Nov 24 23:20:30.756016 2025] [:error] [pid 48599:tid 48608] [client 213.21.239.4:50880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/;/.git/config"] [unique_id "aSR3vpzvu6PDJiRKE3JidQAAAYU"]
[Mon Nov 24 23:20:30.760114 2025] [:error] [pid 16549:tid 16569] [client 213.21.239.4:50910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/img../.git/config"] [unique_id "aSR3vqeWW19A99PUw_d1zwAAAVE"]
[Mon Nov 24 23:20:30.761627 2025] [:error] [pid 16549:tid 16574] [client 213.21.239.4:50924] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/lib../.git/config"] [unique_id "aSR3vqeWW19A99PUw_d10AAAAVU"]
[Mon Nov 24 23:20:30.762095 2025] [:error] [pid 48600:tid 48640] [client 213.21.239.4:50922] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/js../.git/config"] [unique_id "aSR3vvtOzSUAQvWVjBewqwAAAco"]
[Mon Nov 24 23:20:30.763237 2025] [:error] [pid 48599:tid 48621] [client 213.21.239.4:50938] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/live/.git/config"] [unique_id "aSR3vpzvu6PDJiRKE3JidgAAAZI"]
[Mon Nov 24 23:20:30.765150 2025] [:error] [pid 48688:tid 48716] [client 213.21.239.4:50892] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/git/.git/config"] [unique_id "aSR3vhm2q1FkzLam7A3iYQAAAlg"]
[Mon Nov 24 23:20:30.765584 2025] [:error] [pid 48601:tid 48672] [client 213.21.239.4:50950] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/message-api/.git/config"] [unique_id "aSR3voMM4MaVTk74-Ab7KgAAAg8"]
[Mon Nov 24 23:20:30.766625 2025] [:error] [pid 16516:tid 16536] [client 213.21.239.4:50874] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.git;/config"] [unique_id "aSR3vvqZbniwaNwL8Xkb2AAAARE"]
[Mon Nov 24 23:20:30.767169 2025] [:error] [pid 16516:tid 16525] [client 213.21.239.4:50956] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/m/.git/config"] [unique_id "aSR3vvqZbniwaNwL8Xkb2QAAAQY"]
[Mon Nov 24 23:20:30.768474 2025] [:error] [pid 16516:tid 16529] [client 213.21.239.4:50876] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.git;/config;"] [unique_id "aSR3vvqZbniwaNwL8Xkb2gAAAQo"]
[Mon Nov 24 23:20:32.736181 2025] [:error] [pid 9630:tid 9641] [client 213.21.239.4:47008] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git;/config"] [unique_id "aSR3wCrSgUgPGkizt2pRswAAAEk"]
[Mon Nov 24 23:20:32.781491 2025] [:error] [pid 48601:tid 48657] [client 213.21.239.4:47032] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.git;/config;"] [unique_id "aSR3wIMM4MaVTk74-Ab7LAAAAgA"]
[Mon Nov 24 23:20:32.783457 2025] [:error] [pid 16441:tid 16444] [client 213.21.239.4:47018] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.git;/config"] [unique_id "aSR3wIq_bc5MOa9Hflm34AAAAIA"]
[Mon Nov 24 23:20:33.704049 2025] [:error] [pid 48601:tid 48660] [client 213.21.239.4:47076] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au../config"] [unique_id "aSR3wYMM4MaVTk74-Ab7MwAAAgM"]
[Mon Nov 24 23:20:33.707384 2025] [:error] [pid 16593:tid 16603] [client 213.21.239.4:47140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/new/.git/config"] [unique_id "aSR3wRVGznHBJI2LKpR6kQAAAog"]
[Mon Nov 24 23:20:33.707384 2025] [:error] [pid 16441:tid 16461] [client 213.21.239.4:47136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/config;.."] [unique_id "aSR3wYq_bc5MOa9Hflm34gAAAJE"]
[Mon Nov 24 23:20:33.711119 2025] [:error] [pid 49900:tid 49916] [client 213.21.239.4:47158] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git;/config"] [unique_id "aSR3wTCyPLrvg06aorlfPQAAAA4"]
[Mon Nov 24 23:20:33.715229 2025] [:error] [pid 9630:tid 9652] [client 213.21.239.4:47202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/prod/.git/config"] [unique_id "aSR3wSrSgUgPGkizt2pRtQAAAFQ"]
[Mon Nov 24 23:20:33.716265 2025] [:error] [pid 16593:tid 16616] [client 213.21.239.4:47212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/public/.git/config"] [unique_id "aSR3wRVGznHBJI2LKpR6lAAAApU"]
[Mon Nov 24 23:20:33.717759 2025] [:error] [pid 16593:tid 16617] [client 213.21.239.4:47214] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/;/.git/config"] [unique_id "aSR3wRVGznHBJI2LKpR6lQAAApY"]
[Mon Nov 24 23:20:33.722778 2025] [:error] [pid 49900:tid 49925] [client 213.21.239.4:47232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSR3wTCyPLrvg06aorlfPwAAABc"]
[Mon Nov 24 23:20:33.725228 2025] [:error] [pid 49900:tid 49909] [client 213.21.239.4:47240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/../.git/config"] [unique_id "aSR3wTCyPLrvg06aorlfQAAAAAc"]
[Mon Nov 24 23:20:33.725513 2025] [:error] [pid 49900:tid 49917] [client 213.21.239.4:47238] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/static../.git/config"] [unique_id "aSR3wTCyPLrvg06aorlfQQAAAA8"]
[Mon Nov 24 23:20:33.726620 2025] [:error] [pid 16516:tid 16520] [client 213.21.239.4:47254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/config;"] [unique_id "aSR3wfqZbniwaNwL8Xkb3QAAAQE"]
[Mon Nov 24 23:20:33.727943 2025] [:error] [pid 49900:tid 49920] [client 213.21.239.4:47258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/qa/.git/config"] [unique_id "aSR3wTCyPLrvg06aorlfQgAAABI"]
[Mon Nov 24 23:20:33.731453 2025] [:error] [pid 49900:tid 49913] [client 213.21.239.4:47270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/..;/.git/config"] [unique_id "aSR3wTCyPLrvg06aorlfRQAAAAs"]
[Mon Nov 24 23:20:33.734619 2025] [:error] [pid 9630:tid 9635] [client 213.21.239.4:47300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config;"] [unique_id "aSR3wSrSgUgPGkizt2pRtgAAAEM"]
[Mon Nov 24 23:20:33.734664 2025] [:error] [pid 16593:tid 16605] [client 213.21.239.4:47308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/%0Aconfig"] [unique_id "aSR3wRVGznHBJI2LKpR6lwAAAoo"]
[Mon Nov 24 23:20:33.738119 2025] [:error] [pid 16593:tid 16606] [client 213.21.239.4:47318] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au../.git/config"] [unique_id "aSR3wRVGznHBJI2LKpR6mAAAAos"]
[Mon Nov 24 23:20:33.738482 2025] [:error] [pid 48600:tid 48636] [client 213.21.239.4:47328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/..;/.git/config"] [unique_id "aSR3wftOzSUAQvWVjBewsAAAAcY"]
[Mon Nov 24 23:20:33.740998 2025] [:error] [pid 16593:tid 16619] [client 213.21.239.4:47340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git/config"] [unique_id "aSR3wRVGznHBJI2LKpR6mQAAApg"]
[Mon Nov 24 23:20:33.744296 2025] [:error] [pid 16549:tid 16552] [client 213.21.239.4:47354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSR3waeWW19A99PUw_d11gAAAUA"]
[Mon Nov 24 23:20:33.745500 2025] [:error] [pid 48600:tid 48644] [client 213.21.239.4:47358] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/config"] [unique_id "aSR3wftOzSUAQvWVjBewsQAAAc4"]
[Mon Nov 24 23:20:33.746099 2025] [:error] [pid 16593:tid 16613] [client 213.21.239.4:47386] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/../config"] [unique_id "aSR3wRVGznHBJI2LKpR6mgAAApI"]
[Mon Nov 24 23:20:33.746269 2025] [:error] [pid 48600:tid 48641] [client 213.21.239.4:47338] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config"] [unique_id "aSR3wftOzSUAQvWVjBewsgAAAcs"]
[Mon Nov 24 23:20:35.697053 2025] [:error] [pid 48599:tid 48617] [client 213.21.239.4:47414] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.git;/config"] [unique_id "aSR3w5zvu6PDJiRKE3JidwAAAY4"]
[Mon Nov 24 23:20:35.702027 2025] [:error] [pid 48600:tid 48637] [client 213.21.239.4:47422] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/;/.git/config"] [unique_id "aSR3w_tOzSUAQvWVjBewtwAAAcc"]
[Mon Nov 24 23:20:35.704714 2025] [:error] [pid 48601:tid 48680] [client 213.21.239.4:47436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config;.."] [unique_id "aSR3w4MM4MaVTk74-Ab7NQAAAhc"]
[Mon Nov 24 23:20:35.725427 2025] [:error] [pid 16516:tid 16522] [client 213.21.239.4:47438] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au../config"] [unique_id "aSR3w_qZbniwaNwL8Xkb4QAAAQM"]
[Mon Nov 24 23:20:35.731854 2025] [:error] [pid 48688:tid 48708] [client 213.21.239.4:47460] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/.git;/config"] [unique_id "aSR3wxm2q1FkzLam7A3iaAAAAlA"]
[Mon Nov 24 23:20:35.755306 2025] [:error] [pid 48688:tid 48692] [client 213.21.239.4:47514] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/../config"] [unique_id "aSR3wxm2q1FkzLam7A3iawAAAkA"]
[Mon Nov 24 23:20:35.759973 2025] [:error] [pid 48688:tid 48709] [client 213.21.239.4:47516] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config"] [unique_id "aSR3wxm2q1FkzLam7A3ibAAAAlE"]
[Mon Nov 24 23:20:35.762647 2025] [:error] [pid 48688:tid 48695] [client 213.21.239.4:47524] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cientifica.com.au/config"] [unique_id "aSR3wxm2q1FkzLam7A3ibQAAAkM"]
[Mon Nov 24 23:20:36.699471 2025] [:error] [pid 48600:tid 48638] [client 213.21.239.4:47542] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/static../.git/config"] [unique_id "aSR3xPtOzSUAQvWVjBewugAAAcg"]
[Mon Nov 24 23:20:36.709372 2025] [:error] [pid 49900:tid 49902] [client 213.21.239.4:47602] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/staging/.git/config"] [unique_id "aSR3xDCyPLrvg06aorlfRgAAAAA"]
[Mon Nov 24 23:20:36.710390 2025] [:error] [pid 48600:tid 48639] [client 213.21.239.4:47626] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/static../.git/config"] [unique_id "aSR3xPtOzSUAQvWVjBewvAAAAck"]
[Mon Nov 24 23:20:36.713316 2025] [:error] [pid 16593:tid 16619] [client 213.21.239.4:47632] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/uat/.git/config"] [unique_id "aSR3xBVGznHBJI2LKpR6nAAAApg"]
[Mon Nov 24 23:20:36.714148 2025] [:error] [pid 16593:tid 16606] [client 213.21.239.4:47616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSR3xBVGznHBJI2LKpR6nQAAAos"]
[Mon Nov 24 23:20:36.714608 2025] [:error] [pid 48688:tid 48699] [client 213.21.239.4:47660] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSR3xBm2q1FkzLam7A3ibwAAAkc"]
[Mon Nov 24 23:20:36.716136 2025] [:error] [pid 48600:tid 48648] [client 213.21.239.4:47644] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/web/.git/config"] [unique_id "aSR3xPtOzSUAQvWVjBewvQAAAdI"]
[Mon Nov 24 23:20:36.716987 2025] [:error] [pid 48688:tid 48713] [client 213.21.239.4:47672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSR3xBm2q1FkzLam7A3icAAAAlU"]
[Mon Nov 24 23:20:37.725170 2025] [:error] [pid 48601:tid 48679] [client 213.21.239.4:47676] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.git;/config"] [unique_id "aSR3xYMM4MaVTk74-Ab7PAAAAhY"]
[Mon Nov 24 23:59:04.260269 2025] [autoindex:error] [pid 16441:tid 16445] [client 74.7.243.205:57970] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 01:37:15.847515 2025] [autoindex:error] [pid 48601:tid 48676] [client 52.191.198.92:19587] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 01:37:15.864016 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 52.191.198.92:19594] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 01:37:16.138565 2025] [proxy_fcgi:error] [pid 48599:tid 48608] [client 52.191.198.92:19594] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 01:37:21.559917 2025] [proxy_fcgi:error] [pid 16516:tid 16526] [client 52.191.198.92:20269] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 01:37:21.940144 2025] [proxy_fcgi:error] [pid 16516:tid 16521] [client 52.191.198.92:20269] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 02:08:17.776419 2025] [:error] [pid 48688:tid 48697] [client 43.128.67.187:50226] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSSfERm2q1FkzLam7A39DQAAAkU"]
[Tue Nov 25 02:22:52.499659 2025] [:error] [pid 16516:tid 16538] [client 193.37.32.5:24429] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aSSifPqZbniwaNwL8XkztwAAARM"]
[Tue Nov 25 02:22:52.678697 2025] [:error] [pid 48688:tid 48708] [client 193.37.32.53:40415] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aSSifBm2q1FkzLam7A3_qQAAAlA"]
[Tue Nov 25 02:22:52.856386 2025] [:error] [pid 48688:tid 48707] [client 193.37.32.37:21675] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aSSifBm2q1FkzLam7A3_qgAAAk8"]
[Tue Nov 25 02:22:53.033938 2025] [:error] [pid 48688:tid 48710] [client 193.37.32.46:22291] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aSSifRm2q1FkzLam7A3_qwAAAlI"]
[Tue Nov 25 02:22:53.214023 2025] [:error] [pid 9630:tid 9653] [client 193.37.32.18:64047] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/image/5PJcpMFsD8B.php"] [unique_id "aSSifSrSgUgPGkizt2p7-wAAAFU"]
[Tue Nov 25 02:22:53.393077 2025] [:error] [pid 16549:tid 16564] [client 193.37.32.32:56037] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/export.php"] [unique_id "aSSifaeWW19A99PUw_eOrwAAAUw"]
[Tue Nov 25 02:22:53.571072 2025] [:error] [pid 16441:tid 16460] [client 193.37.32.7:41691] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/network_xo.php"] [unique_id "aSSifYq_bc5MOa9HflnvpQAAAJA"]
[Tue Nov 25 02:22:58.751027 2025] [:error] [pid 49900:tid 49916] [client 193.37.32.39:25785] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aSSigjCyPLrvg06aormEFwAAAA4"]
[Tue Nov 25 02:22:58.928584 2025] [:error] [pid 16441:tid 16455] [client 193.37.32.11:60475] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aSSigoq_bc5MOa9HflnvqQAAAIs"]
[Tue Nov 25 02:22:59.107003 2025] [:error] [pid 48601:tid 48674] [client 193.37.32.38:41723] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aSSig4MM4MaVTk74-AYcVgAAAhE"]
[Tue Nov 25 02:23:00.647171 2025] [:error] [pid 48601:tid 48673] [client 193.37.32.37:26227] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aSSihIMM4MaVTk74-AYcWAAAAhA"]
[Tue Nov 25 02:23:00.826163 2025] [:error] [pid 49900:tid 49921] [client 193.37.32.9:62315] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/makeasmtp.php"] [unique_id "aSSihDCyPLrvg06aormEGwAAABM"]
[Tue Nov 25 02:23:01.010343 2025] [:error] [pid 16516:tid 16543] [client 193.37.32.18:34469] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aSSihfqZbniwaNwL8XkzuQAAARg"]
[Tue Nov 25 02:23:01.191333 2025] [:error] [pid 9630:tid 9652] [client 193.37.32.32:46545] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/222.php"] [unique_id "aSSihSrSgUgPGkizt2p7_QAAAFQ"]
[Tue Nov 25 02:23:01.371646 2025] [:error] [pid 49900:tid 49913] [client 193.37.32.48:49255] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aSSihTCyPLrvg06aormEHwAAAAs"]
[Tue Nov 25 02:23:01.551499 2025] [:error] [pid 16441:tid 16463] [client 193.37.32.40:34503] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/updates.php"] [unique_id "aSSihYq_bc5MOa9HflnvrAAAAJM"]
[Tue Nov 25 02:23:01.728851 2025] [:error] [pid 16441:tid 16447] [client 193.37.32.130:38429] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSSihYq_bc5MOa9HflnvrgAAAIM"]
[Tue Nov 25 02:23:01.909789 2025] [:error] [pid 9630:tid 9638] [client 193.37.32.38:43991] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/form.php"] [unique_id "aSSihSrSgUgPGkizt2p7_gAAAEY"]
[Tue Nov 25 02:23:02.087064 2025] [:error] [pid 16549:tid 16556] [client 193.37.32.24:25415] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aSSihqeWW19A99PUw_eOsQAAAUQ"]
[Tue Nov 25 02:23:02.265780 2025] [:error] [pid 16549:tid 16555] [client 193.37.32.50:57511] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aSSihqeWW19A99PUw_eOsgAAAUM"]
[Tue Nov 25 02:23:02.443751 2025] [:error] [pid 9630:tid 9640] [client 193.37.32.35:38937] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/asasx.php"] [unique_id "aSSihirSgUgPGkizt2p7_wAAAEg"]
[Tue Nov 25 02:23:02.622397 2025] [:error] [pid 9630:tid 9650] [client 193.37.32.30:42661] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aSSihirSgUgPGkizt2p8AAAAAFI"]
[Tue Nov 25 02:23:02.803068 2025] [:error] [pid 16441:tid 16456] [client 193.37.32.49:62099] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aSSihoq_bc5MOa9HflnvsAAAAIw"]
[Tue Nov 25 02:23:02.980825 2025] [:error] [pid 16441:tid 16465] [client 193.37.32.32:42931] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ad.php"] [unique_id "aSSihoq_bc5MOa9HflnvsQAAAJU"]
[Tue Nov 25 02:23:03.161213 2025] [:error] [pid 48600:tid 48637] [client 193.37.32.37:24043] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/moderation.php"] [unique_id "aSSih_tOzSUAQvWVjBfGLQAAAcc"]
[Tue Nov 25 02:23:03.338721 2025] [:error] [pid 16516:tid 16533] [client 193.37.32.34:55813] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aSSih_qZbniwaNwL8XkzugAAAQ4"]
[Tue Nov 25 02:23:08.584953 2025] [:error] [pid 49900:tid 49917] [client 193.37.32.9:53653] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aSSijDCyPLrvg06aormEIwAAAA8"]
[Tue Nov 25 02:23:08.763603 2025] [:error] [pid 9630:tid 9637] [client 193.37.32.36:55615] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/jindex.php"] [unique_id "aSSijCrSgUgPGkizt2p8AwAAAEU"]
[Tue Nov 25 02:23:08.942408 2025] [:error] [pid 9630:tid 9645] [client 193.37.32.37:44117] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aSSijCrSgUgPGkizt2p8BAAAAE0"]
[Tue Nov 25 02:23:09.120085 2025] [:error] [pid 48600:tid 48646] [client 193.37.32.34:22223] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSSijftOzSUAQvWVjBfGLwAAAdA"]
[Tue Nov 25 02:23:09.298409 2025] [:error] [pid 48601:tid 48681] [client 193.37.32.40:26579] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aSSijYMM4MaVTk74-AYcWgAAAhg"]
[Tue Nov 25 02:23:09.476055 2025] [:error] [pid 9630:tid 9639] [client 193.37.32.48:42141] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/leaf.php"] [unique_id "aSSijSrSgUgPGkizt2p8BgAAAEc"]
[Tue Nov 25 02:23:09.658080 2025] [:error] [pid 48601:tid 48677] [client 193.37.32.44:35149] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/past.php"] [unique_id "aSSijYMM4MaVTk74-AYcWwAAAhQ"]
[Tue Nov 25 02:23:09.836005 2025] [:error] [pid 16516:tid 16542] [client 193.37.32.53:20639] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/z.php"] [unique_id "aSSijfqZbniwaNwL8XkzvAAAARc"]
[Tue Nov 25 02:23:10.014108 2025] [:error] [pid 16516:tid 16523] [client 193.37.32.50:59467] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aSSijvqZbniwaNwL8XkzvQAAAQQ"]
[Tue Nov 25 02:23:10.191817 2025] [:error] [pid 49900:tid 49921] [client 193.37.32.11:22195] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aSSijjCyPLrvg06aormEJAAAABM"]
[Tue Nov 25 02:23:15.371009 2025] [:error] [pid 48601:tid 48670] [client 193.37.32.46:40225] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aSSik4MM4MaVTk74-AYcXgAAAg0"]
[Tue Nov 25 02:23:15.550112 2025] [:error] [pid 16593:tid 16603] [client 193.37.32.39:61589] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aSSikxVGznHBJI2LKpSThAAAAog"]
[Tue Nov 25 02:23:15.727165 2025] [:error] [pid 16593:tid 16612] [client 193.37.32.26:24153] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aSSikxVGznHBJI2LKpSThQAAApE"]
[Tue Nov 25 02:23:15.904381 2025] [:error] [pid 16441:tid 16462] [client 193.37.32.29:46231] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sim.php"] [unique_id "aSSik4q_bc5MOa9HflnvvAAAAJI"]
[Tue Nov 25 02:23:16.080776 2025] [:error] [pid 48601:tid 48674] [client 193.37.32.48:26287] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSSilIMM4MaVTk74-AYcYgAAAhE"]
[Tue Nov 25 02:23:16.257781 2025] [:error] [pid 48688:tid 48693] [client 193.37.32.23:22235] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/core.php"] [unique_id "aSSilBm2q1FkzLam7A3_vgAAAkE"]
[Tue Nov 25 02:23:21.435846 2025] [:error] [pid 49900:tid 49923] [client 193.37.32.21:59961] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSSimTCyPLrvg06aormEKgAAABU"]
[Tue Nov 25 02:23:21.612742 2025] [:error] [pid 9630:tid 9650] [client 193.37.32.40:48953] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aSSimSrSgUgPGkizt2p8DQAAAFI"]
[Tue Nov 25 02:23:21.789129 2025] [:error] [pid 9630:tid 9635] [client 193.37.32.41:21881] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSSimSrSgUgPGkizt2p8DgAAAEM"]
[Tue Nov 25 02:23:21.966516 2025] [:error] [pid 48601:tid 48672] [client 193.37.32.7:48435] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/class-config.php"] [unique_id "aSSimYMM4MaVTk74-AYcdgAAAg8"]
[Tue Nov 25 02:23:22.144934 2025] [:error] [pid 9630:tid 9637] [client 193.37.32.50:56767] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSSimirSgUgPGkizt2p8DwAAAEU"]
[Tue Nov 25 02:23:22.323332 2025] [:error] [pid 48600:tid 48641] [client 193.37.32.48:36599] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aSSimvtOzSUAQvWVjBfGOwAAAcs"]
[Tue Nov 25 02:23:22.500178 2025] [:error] [pid 9630:tid 9656] [client 193.37.32.37:65253] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSSimirSgUgPGkizt2p8EQAAAFg"]
[Tue Nov 25 02:23:22.678276 2025] [:error] [pid 49900:tid 49922] [client 193.37.32.50:52283] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/back.php"] [unique_id "aSSimjCyPLrvg06aormEKwAAABQ"]
[Tue Nov 25 02:23:22.856481 2025] [:error] [pid 48600:tid 48637] [client 193.37.32.18:43585] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSSimvtOzSUAQvWVjBfGPAAAAcc"]
[Tue Nov 25 02:23:23.051042 2025] [:error] [pid 16549:tid 16568] [client 193.37.32.30:23597] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSSim6eWW19A99PUw_eOtQAAAVA"]
[Tue Nov 25 02:23:23.227780 2025] [:error] [pid 49900:tid 49917] [client 193.37.32.53:59433] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aSSimzCyPLrvg06aormELAAAAA8"]
[Tue Nov 25 02:23:23.406287 2025] [:error] [pid 16441:tid 16452] [client 193.37.32.24:24527] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aSSim4q_bc5MOa9HflnvwAAAAIg"]
[Tue Nov 25 02:23:23.583325 2025] [:error] [pid 16549:tid 16553] [client 193.37.32.8:35629] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSSim6eWW19A99PUw_eOtgAAAUE"]
[Tue Nov 25 02:23:28.763498 2025] [:error] [pid 16593:tid 16619] [client 193.37.32.130:36215] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wsa.php"] [unique_id "aSSioBVGznHBJI2LKpSTnAAAApg"]
[Tue Nov 25 02:23:28.945048 2025] [:error] [pid 16593:tid 16608] [client 193.37.32.41:37879] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aSSioBVGznHBJI2LKpSTnQAAAo0"]
[Tue Nov 25 02:23:29.126800 2025] [:error] [pid 49900:tid 49909] [client 193.37.32.29:50701] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-l0gin.php"] [unique_id "aSSioTCyPLrvg06aormENgAAAAc"]
[Tue Nov 25 02:23:29.303734 2025] [:error] [pid 16549:tid 16561] [client 193.37.32.18:43051] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aSSioaeWW19A99PUw_eOuAAAAUk"]
[Tue Nov 25 02:23:29.481381 2025] [:error] [pid 16441:tid 16449] [client 193.37.32.47:42629] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aSSioYq_bc5MOa9Hflnv4QAAAIU"]
[Tue Nov 25 02:23:34.669959 2025] [:error] [pid 48601:tid 48668] [client 193.37.32.24:30489] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aSSipoMM4MaVTk74-AYceQAAAgs"]
[Tue Nov 25 02:23:34.849461 2025] [:error] [pid 49900:tid 49906] [client 193.37.32.5:25227] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aSSipjCyPLrvg06aormEXwAAAAQ"]
[Tue Nov 25 02:23:35.028455 2025] [:error] [pid 48600:tid 48647] [client 193.37.32.15:36341] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/autoload_classmap/function.php"] [unique_id "aSSip_tOzSUAQvWVjBfGRAAAAdE"]
[Tue Nov 25 02:23:35.208886 2025] [:error] [pid 16549:tid 16577] [client 193.37.32.10:30095] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aSSip6eWW19A99PUw_eOugAAAVg"]
[Tue Nov 25 02:23:35.388517 2025] [:error] [pid 16593:tid 16599] [client 193.37.32.5:39407] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/cgi-bin/"] [unique_id "aSSipxVGznHBJI2LKpSTowAAAoQ"]
[Tue Nov 25 02:23:35.569243 2025] [:error] [pid 9630:tid 9648] [client 193.37.32.16:21373] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aSSipyrSgUgPGkizt2p8HAAAAFA"]
[Tue Nov 25 02:23:35.749860 2025] [:error] [pid 16549:tid 16564] [client 193.37.32.34:44513] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSSip6eWW19A99PUw_eOvAAAAUw"]
[Tue Nov 25 02:23:35.929998 2025] [:error] [pid 16441:tid 16455] [client 193.37.32.26:48359] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aSSip4q_bc5MOa9Hflnv5AAAAIs"]
[Tue Nov 25 02:23:41.107937 2025] [:error] [pid 16441:tid 16454] [client 193.37.32.43:29653] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSSirYq_bc5MOa9Hflnv6wAAAIo"]
[Tue Nov 25 02:23:41.286343 2025] [:error] [pid 9630:tid 9632] [client 193.37.32.35:30091] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aSSirSrSgUgPGkizt2p8LgAAAEA"]
[Tue Nov 25 02:23:46.466503 2025] [:error] [pid 16593:tid 16613] [client 193.37.32.21:36135] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aSSishVGznHBJI2LKpSTpgAAApI"]
[Tue Nov 25 02:23:46.647603 2025] [:error] [pid 49900:tid 49925] [client 193.37.32.5:33855] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/nf_tracking.php"] [unique_id "aSSisjCyPLrvg06aormEZAAAABc"]
[Tue Nov 25 02:23:51.829943 2025] [:error] [pid 48688:tid 48714] [client 193.37.32.24:35239] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSSitxm2q1FkzLam7A3_8AAAAlY"]
[Tue Nov 25 02:23:52.005968 2025] [:error] [pid 48599:tid 48621] [client 193.37.32.18:57581] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comments/"] [unique_id "aSSiuJzvu6PDJiRKE3J_GAAAAZI"]
[Tue Nov 25 02:23:52.184659 2025] [:error] [pid 48601:tid 48674] [client 193.37.32.15:58619] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/"] [unique_id "aSSiuIMM4MaVTk74-AYclAAAAhE"]
[Tue Nov 25 02:23:52.364123 2025] [:error] [pid 48601:tid 48660] [client 193.37.32.48:20313] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/natural.php"] [unique_id "aSSiuIMM4MaVTk74-AYclQAAAgM"]
[Tue Nov 25 02:23:52.544600 2025] [:error] [pid 48601:tid 48662] [client 193.37.32.30:43461] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aSSiuIMM4MaVTk74-AYclgAAAgU"]
[Tue Nov 25 02:23:52.721918 2025] [:error] [pid 48601:tid 48666] [client 193.37.32.53:30237] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aSSiuIMM4MaVTk74-AYclwAAAgk"]
[Tue Nov 25 02:23:52.900471 2025] [:error] [pid 48688:tid 48694] [client 193.37.32.50:52949] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aSSiuBm2q1FkzLam7A3_8wAAAkI"]
[Tue Nov 25 02:23:53.077983 2025] [:error] [pid 16549:tid 16568] [client 193.37.32.7:52649] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSSiuaeWW19A99PUw_eOwQAAAVA"]
[Tue Nov 25 02:23:53.256387 2025] [:error] [pid 48600:tid 48645] [client 193.37.32.11:45059] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSSiuftOzSUAQvWVjBfGWwAAAc8"]
[Tue Nov 25 02:23:53.433144 2025] [:error] [pid 16441:tid 16454] [client 193.37.32.29:51311] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSSiuYq_bc5MOa9Hflnv9AAAAIo"]
[Tue Nov 25 02:23:53.614908 2025] [:error] [pid 16516:tid 16524] [client 193.37.32.8:33989] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aSSiufqZbniwaNwL8Xkz0gAAAQU"]
[Tue Nov 25 02:23:53.790919 2025] [:error] [pid 16549:tid 16553] [client 193.37.32.47:24811] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/worksec.php"] [unique_id "aSSiuaeWW19A99PUw_eOwgAAAUE"]
[Tue Nov 25 02:23:53.969002 2025] [:error] [pid 16516:tid 16534] [client 193.37.32.9:36517] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aSSiufqZbniwaNwL8Xkz1AAAAQ8"]
[Tue Nov 25 02:23:54.147013 2025] [:error] [pid 16549:tid 16552] [client 193.37.32.18:44077] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aSSiuqeWW19A99PUw_eOwwAAAUA"]
[Tue Nov 25 02:23:54.325700 2025] [:error] [pid 49900:tid 49913] [client 193.37.32.23:28665] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/function.php"] [unique_id "aSSiujCyPLrvg06aormEZwAAAAs"]
[Tue Nov 25 02:23:54.503226 2025] [:error] [pid 16593:tid 16603] [client 193.37.32.20:50317] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSSiuhVGznHBJI2LKpSTpwAAAog"]
[Tue Nov 25 02:23:54.680679 2025] [:error] [pid 9630:tid 9632] [client 193.37.32.47:32197] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/"] [unique_id "aSSiuirSgUgPGkizt2p8PAAAAEA"]
[Tue Nov 25 02:23:54.859303 2025] [:error] [pid 9630:tid 9641] [client 193.37.32.21:54087] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/fast.php"] [unique_id "aSSiuirSgUgPGkizt2p8PQAAAEk"]
[Tue Nov 25 02:23:55.039397 2025] [:error] [pid 16593:tid 16596] [client 193.37.32.16:33369] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aSSiuxVGznHBJI2LKpSTqAAAAoE"]
[Tue Nov 25 02:23:55.220129 2025] [:error] [pid 49900:tid 49920] [client 193.37.32.40:24703] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aSSiuzCyPLrvg06aormEaQAAABI"]
[Tue Nov 25 02:23:55.398674 2025] [:error] [pid 48599:tid 48614] [client 193.37.32.38:41927] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aSSiu5zvu6PDJiRKE3J_GQAAAYs"]
[Tue Nov 25 02:23:55.581634 2025] [:error] [pid 16441:tid 16468] [client 193.37.32.33:63023] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aSSiu4q_bc5MOa9Hflnv9QAAAJg"]
[Tue Nov 25 02:23:55.761011 2025] [:error] [pid 16441:tid 16452] [client 193.37.32.43:57309] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ioxi002.PhP7"] [unique_id "aSSiu4q_bc5MOa9Hflnv9gAAAIg"]
[Tue Nov 25 02:23:55.940144 2025] [:error] [pid 9630:tid 9649] [client 193.37.32.38:53793] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/about.php7"] [unique_id "aSSiuyrSgUgPGkizt2p8PgAAAFE"]
[Tue Nov 25 02:23:56.127832 2025] [:error] [pid 16516:tid 16540] [client 193.37.32.45:58805] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aSSivPqZbniwaNwL8Xkz1QAAARU"]
[Tue Nov 25 02:23:56.308918 2025] [:error] [pid 9630:tid 9645] [client 193.37.32.22:23953] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/function/function.php"] [unique_id "aSSivCrSgUgPGkizt2p8PwAAAE0"]
[Tue Nov 25 02:23:56.496751 2025] [:error] [pid 48601:tid 48679] [client 193.37.32.28:23267] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aSSivIMM4MaVTk74-AYcmAAAAhY"]
[Tue Nov 25 02:23:56.676658 2025] [:error] [pid 9630:tid 9633] [client 193.37.32.46:25857] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSSivCrSgUgPGkizt2p8QAAAAEE"]
[Tue Nov 25 02:23:56.856046 2025] [:error] [pid 9630:tid 9654] [client 193.37.32.42:44057] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSSivCrSgUgPGkizt2p8QgAAAFY"]
[Tue Nov 25 02:23:57.037331 2025] [:error] [pid 48601:tid 48675] [client 193.37.32.33:32417] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSSivYMM4MaVTk74-AYcmgAAAhI"]
[Tue Nov 25 02:23:57.216487 2025] [:error] [pid 49900:tid 49912] [client 193.37.32.53:33813] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSivTCyPLrvg06aormEawAAAAo"]
[Tue Nov 25 02:23:57.394130 2025] [:error] [pid 48601:tid 48678] [client 193.37.32.42:26919] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-"] [unique_id "aSSivYMM4MaVTk74-AYcmwAAAhU"]
[Tue Nov 25 02:23:57.571987 2025] [:error] [pid 49900:tid 49917] [client 193.37.32.37:54133] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-error.php"] [unique_id "aSSivTCyPLrvg06aormEbAAAAA8"]
[Tue Nov 25 02:24:02.750400 2025] [:error] [pid 48601:tid 48662] [client 193.37.32.24:63427] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aSSiwoMM4MaVTk74-AYcpAAAAgU"]
[Tue Nov 25 02:24:07.928997 2025] [:error] [pid 48688:tid 48696] [client 193.37.32.23:24407] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSSixxm2q1FkzLam7A3__AAAAkQ"]
[Tue Nov 25 02:24:08.108380 2025] [:error] [pid 48601:tid 48658] [client 193.37.32.38:40817] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aSSiyIMM4MaVTk74-AYcqQAAAgE"]
[Tue Nov 25 02:24:08.287460 2025] [:error] [pid 49900:tid 49918] [client 193.37.32.40:47491] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aSSiyDCyPLrvg06aormEcgAAABA"]
[Tue Nov 25 02:24:13.464066 2025] [:error] [pid 16516:tid 16532] [client 193.37.32.30:63143] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aSSizfqZbniwaNwL8Xkz3wAAAQ0"]
[Tue Nov 25 02:24:23.649663 2025] [:error] [pid 9630:tid 9636] [client 193.37.32.34:60301] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aSSi1yrSgUgPGkizt2p8awAAAEQ"]
[Tue Nov 25 02:24:23.829863 2025] [:error] [pid 48599:tid 48605] [client 193.37.32.48:28203] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aSSi15zvu6PDJiRKE3J_JgAAAYI"]
[Tue Nov 25 02:24:24.011472 2025] [:error] [pid 9630:tid 9656] [client 193.37.32.28:63387] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aSSi2CrSgUgPGkizt2p8bQAAAFg"]
[Tue Nov 25 02:24:24.188085 2025] [:error] [pid 16516:tid 16538] [client 193.37.32.19:57537] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aSSi2PqZbniwaNwL8Xkz4QAAARM"]
[Tue Nov 25 02:24:24.367318 2025] [:error] [pid 16441:tid 16454] [client 193.37.32.43:57345] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSSi2Iq_bc5MOa9HflnwTgAAAIo"]
[Tue Nov 25 02:24:24.546187 2025] [:error] [pid 16441:tid 16456] [client 193.37.32.37:32957] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aSSi2Iq_bc5MOa9HflnwUAAAAIw"]
[Tue Nov 25 02:24:24.736983 2025] [:error] [pid 49900:tid 49923] [client 193.37.32.12:55433] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aSSi2DCyPLrvg06aormEdQAAABU"]
[Tue Nov 25 02:24:24.913694 2025] [:error] [pid 16549:tid 16554] [client 193.37.32.6:59553] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aSSi2KeWW19A99PUw_eOyAAAAUI"]
[Tue Nov 25 02:24:25.090585 2025] [:error] [pid 9630:tid 9633] [client 193.37.32.23:21125] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSSi2SrSgUgPGkizt2p8bwAAAEE"]
[Tue Nov 25 02:24:25.312335 2025] [:error] [pid 48688:tid 48704] [client 193.37.32.24:24257] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aSSi2Rm2q1FkzLam7A0ABgAAAkw"]
[Tue Nov 25 02:24:25.490175 2025] [:error] [pid 48601:tid 48661] [client 193.37.32.49:63911] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSSi2YMM4MaVTk74-AYctgAAAgQ"]
[Tue Nov 25 02:24:25.667403 2025] [:error] [pid 16516:tid 16522] [client 193.37.32.12:45169] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aSSi2fqZbniwaNwL8Xkz4gAAAQM"]
[Tue Nov 25 02:24:30.850587 2025] [:error] [pid 48601:tid 48670] [client 193.37.32.50:34303] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aSSi3oMM4MaVTk74-AYctwAAAg0"]
[Tue Nov 25 02:24:31.027064 2025] [:error] [pid 48599:tid 48626] [client 193.37.32.35:24183] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aSSi35zvu6PDJiRKE3J_KgAAAZc"]
[Tue Nov 25 02:24:31.204231 2025] [:error] [pid 48599:tid 48609] [client 193.37.32.18:20907] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aSSi35zvu6PDJiRKE3J_KwAAAYY"]
[Tue Nov 25 02:24:31.381406 2025] [:error] [pid 48601:tid 48663] [client 193.37.32.22:61889] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aSSi34MM4MaVTk74-AYcuAAAAgY"]
[Tue Nov 25 02:24:31.558021 2025] [:error] [pid 48688:tid 48705] [client 193.37.32.22:62667] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aSSi3xm2q1FkzLam7A0ACgAAAk0"]
[Tue Nov 25 02:24:36.735561 2025] [:error] [pid 48601:tid 48673] [client 193.37.32.9:48099] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aSSi5IMM4MaVTk74-AYcuQAAAhA"]
[Tue Nov 25 02:24:36.911976 2025] [:error] [pid 16549:tid 16571] [client 193.37.32.22:38431] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/"] [unique_id "aSSi5KeWW19A99PUw_eOzQAAAVI"]
[Tue Nov 25 02:24:42.091244 2025] [:error] [pid 16516:tid 16535] [client 193.37.32.8:24679] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aSSi6vqZbniwaNwL8Xkz5gAAARA"]
[Tue Nov 25 02:24:42.283094 2025] [:error] [pid 48688:tid 48699] [client 193.37.32.34:30231] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aSSi6hm2q1FkzLam7A0ADQAAAkc"]
[Tue Nov 25 02:24:42.462152 2025] [:error] [pid 16593:tid 16618] [client 193.37.32.45:47741] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/"] [unique_id "aSSi6hVGznHBJI2LKpSTtwAAApc"]
[Tue Nov 25 02:24:47.641970 2025] [:error] [pid 48599:tid 48607] [client 193.37.32.24:38169] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aSSi75zvu6PDJiRKE3J_LgAAAYQ"]
[Tue Nov 25 02:24:47.821736 2025] [:error] [pid 9630:tid 9649] [client 193.37.32.47:65433] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aSSi7yrSgUgPGkizt2p8eAAAAFE"]
[Tue Nov 25 02:24:48.004208 2025] [:error] [pid 9630:tid 9656] [client 193.37.32.42:22203] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/images/selam.php"] [unique_id "aSSi8CrSgUgPGkizt2p8eQAAAFg"]
[Tue Nov 25 02:24:48.185659 2025] [:error] [pid 48600:tid 48631] [client 193.37.32.21:55367] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aSSi8PtOzSUAQvWVjBfGfgAAAcE"]
[Tue Nov 25 02:24:48.363654 2025] [:error] [pid 48600:tid 48639] [client 193.37.32.26:61695] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aSSi8PtOzSUAQvWVjBfGfwAAAck"]
[Tue Nov 25 02:24:48.546134 2025] [:error] [pid 48600:tid 48634] [client 193.37.32.32:27367] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-config-sample.php"] [unique_id "aSSi8PtOzSUAQvWVjBfGgAAAAcQ"]
[Tue Nov 25 02:24:48.730974 2025] [:error] [pid 16516:tid 16528] [client 193.37.32.10:52191] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aSSi8PqZbniwaNwL8Xkz5wAAAQk"]
[Tue Nov 25 02:24:48.910266 2025] [:error] [pid 49900:tid 49924] [client 193.37.32.39:31057] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aSSi8DCyPLrvg06aormEgAAAABY"]
[Tue Nov 25 02:24:49.089684 2025] [:error] [pid 49900:tid 49910] [client 193.37.32.49:61967] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/css/"] [unique_id "aSSi8TCyPLrvg06aormEgQAAAAg"]
[Tue Nov 25 02:24:49.268997 2025] [:error] [pid 49900:tid 49922] [client 193.37.32.24:27623] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSSi8TCyPLrvg06aormEggAAABQ"]
[Tue Nov 25 02:24:54.448760 2025] [:error] [pid 48688:tid 48702] [client 193.37.32.46:43807] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aSSi9hm2q1FkzLam7A0AIwAAAko"]
[Tue Nov 25 02:24:59.630146 2025] [:error] [pid 16549:tid 16574] [client 193.37.32.19:50461] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aSSi-6eWW19A99PUw_eO1AAAAVU"]
[Tue Nov 25 02:24:59.811424 2025] [:error] [pid 49900:tid 49918] [client 193.37.32.46:41243] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aSSi-zCyPLrvg06aormEiQAAABA"]
[Tue Nov 25 02:24:59.989905 2025] [:error] [pid 49900:tid 49920] [client 193.37.32.5:56203] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aSSi-zCyPLrvg06aormEigAAABI"]
[Tue Nov 25 02:25:05.231646 2025] [:error] [pid 48601:tid 48658] [client 193.37.32.18:32069] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aSSjAYMM4MaVTk74-AYcvwAAAgE"]
[Tue Nov 25 02:25:05.409023 2025] [:error] [pid 48601:tid 48661] [client 193.37.32.40:25669] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aSSjAYMM4MaVTk74-AYcwAAAAgQ"]
[Tue Nov 25 02:25:05.588661 2025] [:error] [pid 16441:tid 16467] [client 193.37.32.30:55679] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-links.php"] [unique_id "aSSjAYq_bc5MOa9HflnwbAAAAJc"]
[Tue Nov 25 02:25:05.769020 2025] [:error] [pid 48688:tid 48707] [client 193.37.32.48:39767] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aSSjARm2q1FkzLam7A0ANgAAAk8"]
[Tue Nov 25 02:25:05.948156 2025] [:error] [pid 16441:tid 16462] [client 193.37.32.6:43587] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aSSjAYq_bc5MOa9HflnwbwAAAJI"]
[Tue Nov 25 02:25:06.126540 2025] [:error] [pid 16441:tid 16457] [client 193.37.32.5:24257] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aSSjAoq_bc5MOa9HflnwcgAAAI0"]
[Tue Nov 25 02:25:06.306070 2025] [:error] [pid 49900:tid 49918] [client 193.37.32.33:46649] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aSSjAjCyPLrvg06aormElAAAABA"]
[Tue Nov 25 02:25:06.488530 2025] [:error] [pid 48599:tid 48620] [client 193.37.32.36:62839] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aSSjApzvu6PDJiRKE3J_NQAAAZE"]
[Tue Nov 25 02:25:06.666219 2025] [:error] [pid 48601:tid 48659] [client 193.37.32.39:52407] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/"] [unique_id "aSSjAoMM4MaVTk74-AYcwQAAAgI"]
[Tue Nov 25 02:25:06.844708 2025] [:error] [pid 49900:tid 49906] [client 193.37.32.35:45569] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aSSjAjCyPLrvg06aormEmgAAAAQ"]
[Tue Nov 25 02:25:07.024362 2025] [:error] [pid 48601:tid 48670] [client 193.37.32.48:23217] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSSjA4MM4MaVTk74-AYcwgAAAg0"]
[Tue Nov 25 02:25:12.203723 2025] [:error] [pid 48688:tid 48704] [client 193.37.32.24:64395] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aSSjCBm2q1FkzLam7A0AQAAAAkw"]
[Tue Nov 25 02:25:12.383374 2025] [:error] [pid 48599:tid 48627] [client 193.37.32.26:51995] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/fm.php/sts.php"] [unique_id "aSSjCJzvu6PDJiRKE3J_NgAAAZg"]
[Tue Nov 25 02:25:12.563710 2025] [:error] [pid 48688:tid 48713] [client 193.37.32.5:63511] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aSSjCBm2q1FkzLam7A0AQgAAAlU"]
[Tue Nov 25 02:25:12.741860 2025] [:error] [pid 16516:tid 16523] [client 193.37.32.41:58689] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSSjCPqZbniwaNwL8Xkz_AAAAQQ"]
[Tue Nov 25 02:25:12.920772 2025] [:error] [pid 48688:tid 48706] [client 193.37.32.45:50835] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSSjCBm2q1FkzLam7A0AQwAAAk4"]
[Tue Nov 25 02:25:13.099020 2025] [:error] [pid 16593:tid 16614] [client 193.37.32.48:20945] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aSSjCRVGznHBJI2LKpSTwgAAApM"]
[Tue Nov 25 02:25:13.279445 2025] [:error] [pid 48599:tid 48619] [client 193.37.32.36:27421] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSSjCZzvu6PDJiRKE3J_OAAAAZA"]
[Tue Nov 25 02:25:13.459596 2025] [:error] [pid 9630:tid 9642] [client 193.37.32.36:27507] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/av.php"] [unique_id "aSSjCSrSgUgPGkizt2p8jAAAAEo"]
[Tue Nov 25 02:25:13.640414 2025] [:error] [pid 48599:tid 48616] [client 193.37.32.39:46497] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSSjCZzvu6PDJiRKE3J_OQAAAY0"]
[Tue Nov 25 02:25:13.817098 2025] [:error] [pid 9630:tid 9648] [client 193.37.32.35:58463] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aSSjCSrSgUgPGkizt2p8jgAAAFA"]
[Tue Nov 25 02:25:18.994969 2025] [:error] [pid 16441:tid 16463] [client 193.37.32.8:42593] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aSSjDoq_bc5MOa9HflnwkwAAAJM"]
[Tue Nov 25 02:25:19.173470 2025] [:error] [pid 48600:tid 48651] [client 193.37.32.35:55573] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aSSjD_tOzSUAQvWVjBfGkQAAAdU"]
[Tue Nov 25 02:25:19.351628 2025] [:error] [pid 48601:tid 48666] [client 193.37.32.5:47425] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSSjD4MM4MaVTk74-AYc8gAAAgk"]
[Tue Nov 25 02:25:19.533449 2025] [:error] [pid 49900:tid 49919] [client 193.37.32.9:57903] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aSSjDzCyPLrvg06aormExwAAABE"]
[Tue Nov 25 02:25:19.712703 2025] [:error] [pid 16441:tid 16454] [client 193.37.32.7:29179] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aSSjD4q_bc5MOa9HflnwlQAAAIo"]
[Tue Nov 25 02:25:19.891925 2025] [:error] [pid 9630:tid 9636] [client 193.37.32.46:31157] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aSSjDyrSgUgPGkizt2p8lgAAAEQ"]
[Tue Nov 25 02:25:20.068312 2025] [:error] [pid 9630:tid 9642] [client 193.37.32.14:46123] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSSjECrSgUgPGkizt2p8lwAAAEo"]
[Tue Nov 25 02:25:20.250913 2025] [:error] [pid 16516:tid 16543] [client 193.37.32.7:43201] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aSSjEPqZbniwaNwL8Xk0MgAAARg"]
[Tue Nov 25 02:25:25.436091 2025] [:error] [pid 48601:tid 48681] [client 193.37.32.11:64231] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aSSjFYMM4MaVTk74-AYc_gAAAhg"]
[Tue Nov 25 02:25:25.616947 2025] [:error] [pid 16593:tid 16614] [client 193.37.32.42:31211] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aSSjFRVGznHBJI2LKpST_AAAApM"]
[Tue Nov 25 02:25:25.797220 2025] [:error] [pid 16593:tid 16605] [client 193.37.32.26:54701] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSSjFRVGznHBJI2LKpST_QAAAoo"]
[Tue Nov 25 02:25:25.987335 2025] [:error] [pid 9630:tid 9638] [client 193.37.32.39:37479] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/license.php"] [unique_id "aSSjFSrSgUgPGkizt2p8nwAAAEY"]
[Tue Nov 25 02:26:06.965829 2025] [:error] [pid 48599:tid 48609] [client 193.37.32.19:43083] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aSSjPpzvu6PDJiRKE3J_jgAAAYY"]
[Tue Nov 25 02:26:07.139672 2025] [:error] [pid 48600:tid 48641] [client 193.37.32.37:30821] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-signup.php"] [unique_id "aSSjP_tOzSUAQvWVjBfGrAAAAcs"]
[Tue Nov 25 02:26:07.316138 2025] [:error] [pid 48601:tid 48676] [client 193.37.32.130:28459] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aSSjP4MM4MaVTk74-AYdOgAAAhM"]
[Tue Nov 25 02:26:12.491844 2025] [:error] [pid 16593:tid 16598] [client 193.37.32.19:36319] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aSSjRBVGznHBJI2LKpSULQAAAoM"]
[Tue Nov 25 02:26:17.668225 2025] [:error] [pid 16441:tid 16457] [client 193.37.32.51:30851] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aSSjSYq_bc5MOa9HflnxEQAAAI0"]
[Tue Nov 25 02:26:17.844261 2025] [:error] [pid 16441:tid 16453] [client 193.37.32.46:33655] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aSSjSYq_bc5MOa9HflnxEwAAAIk"]
[Tue Nov 25 02:26:18.023811 2025] [:error] [pid 48601:tid 48666] [client 193.37.32.51:23369] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aSSjSoMM4MaVTk74-AYdSQAAAgk"]
[Tue Nov 25 02:26:18.200348 2025] [:error] [pid 48601:tid 48660] [client 193.37.32.22:62067] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSSjSoMM4MaVTk74-AYdTAAAAgM"]
[Tue Nov 25 02:26:18.382680 2025] [:error] [pid 16441:tid 16458] [client 193.37.32.22:63349] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/"] [unique_id "aSSjSoq_bc5MOa9HflnxFgAAAI4"]
[Tue Nov 25 02:26:18.559797 2025] [:error] [pid 48601:tid 48676] [client 193.37.32.20:50033] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aSSjSoMM4MaVTk74-AYdUQAAAhM"]
[Tue Nov 25 02:26:23.739177 2025] [:error] [pid 9630:tid 9644] [client 193.37.32.10:27909] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aSSjTyrSgUgPGkizt2p80wAAAEw"]
[Tue Nov 25 02:26:23.915168 2025] [:error] [pid 9630:tid 9642] [client 193.37.32.24:29753] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aSSjTyrSgUgPGkizt2p81AAAAEo"]
[Tue Nov 25 02:26:24.091300 2025] [:error] [pid 9630:tid 9652] [client 193.37.32.29:50201] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aSSjUCrSgUgPGkizt2p81QAAAFQ"]
[Tue Nov 25 02:26:24.267864 2025] [:error] [pid 48601:tid 48673] [client 193.37.32.23:28965] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSSjUIMM4MaVTk74-AYdYwAAAhA"]
[Tue Nov 25 02:26:24.444687 2025] [:error] [pid 16441:tid 16458] [client 193.37.32.15:28249] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aSSjUIq_bc5MOa9HflnxJgAAAI4"]
[Tue Nov 25 02:26:24.621358 2025] [:error] [pid 16549:tid 16575] [client 193.37.32.38:25521] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aSSjUKeWW19A99PUw_ePFwAAAVY"]
[Tue Nov 25 02:26:24.802166 2025] [:error] [pid 16441:tid 16464] [client 193.37.32.50:31865] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aSSjUIq_bc5MOa9HflnxJwAAAJQ"]
[Tue Nov 25 02:26:24.978451 2025] [:error] [pid 49900:tid 49924] [client 193.37.32.29:21593] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aSSjUDCyPLrvg06aormFCAAAABY"]
[Tue Nov 25 02:26:25.155697 2025] [:error] [pid 49900:tid 49923] [client 193.37.32.39:22315] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bk/"] [unique_id "aSSjUTCyPLrvg06aormFCQAAABU"]
[Tue Nov 25 02:26:25.332665 2025] [:error] [pid 16441:tid 16467] [client 193.37.32.26:25327] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSSjUYq_bc5MOa9HflnxKQAAAJc"]
[Tue Nov 25 02:26:25.509829 2025] [:error] [pid 16441:tid 16465] [client 193.37.32.26:37399] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSSjUYq_bc5MOa9HflnxKgAAAJU"]
[Tue Nov 25 02:26:25.687041 2025] [:error] [pid 9630:tid 9632] [client 193.37.32.24:55027] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aSSjUSrSgUgPGkizt2p82AAAAEA"]
[Tue Nov 25 02:26:25.863466 2025] [:error] [pid 9630:tid 9647] [client 193.37.32.40:43693] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aSSjUSrSgUgPGkizt2p82QAAAE8"]
[Tue Nov 25 02:26:26.040564 2025] [:error] [pid 48601:tid 48675] [client 193.37.32.38:47415] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aSSjUoMM4MaVTk74-AYdZQAAAhI"]
[Tue Nov 25 02:26:26.216489 2025] [:error] [pid 16516:tid 16527] [client 193.37.32.23:61367] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aSSjUvqZbniwaNwL8Xk0agAAAQg"]
[Tue Nov 25 02:26:26.392452 2025] [:error] [pid 16516:tid 16530] [client 193.37.32.5:47549] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aSSjUvqZbniwaNwL8Xk0bAAAAQs"]
[Tue Nov 25 02:26:26.568961 2025] [:error] [pid 16549:tid 16576] [client 193.37.32.47:53889] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSSjUqeWW19A99PUw_ePGAAAAVc"]
[Tue Nov 25 02:26:26.745598 2025] [:error] [pid 16549:tid 16553] [client 193.37.32.28:52897] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSSjUqeWW19A99PUw_ePGQAAAUE"]
[Tue Nov 25 02:26:26.941075 2025] [:error] [pid 16549:tid 16573] [client 193.37.32.42:51925] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen/function.php"] [unique_id "aSSjUqeWW19A99PUw_ePGgAAAVQ"]
[Tue Nov 25 02:26:27.116378 2025] [:error] [pid 49900:tid 49914] [client 193.37.32.36:33205] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aSSjUzCyPLrvg06aormFDAAAAAw"]
[Tue Nov 25 02:26:27.293307 2025] [:error] [pid 49900:tid 49907] [client 193.37.32.21:60957] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aSSjUzCyPLrvg06aormFDQAAAAU"]
[Tue Nov 25 02:26:27.470596 2025] [:error] [pid 48600:tid 48634] [client 193.37.32.12:28943] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aSSjU_tOzSUAQvWVjBfGuAAAAcQ"]
[Tue Nov 25 02:26:27.647984 2025] [:error] [pid 16593:tid 16607] [client 193.37.32.37:24811] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aSSjUxVGznHBJI2LKpSUNgAAAow"]
[Tue Nov 25 02:26:27.824851 2025] [:error] [pid 48601:tid 48678] [client 193.37.32.23:47005] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSSjU4MM4MaVTk74-AYdaAAAAhU"]
[Tue Nov 25 02:26:28.001472 2025] [:error] [pid 48600:tid 48650] [client 193.37.32.37:46223] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aSSjVPtOzSUAQvWVjBfGuQAAAdQ"]
[Tue Nov 25 02:26:28.177420 2025] [:error] [pid 49900:tid 49902] [client 193.37.32.50:28495] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aSSjVDCyPLrvg06aormFDgAAAAA"]
[Tue Nov 25 02:26:28.353508 2025] [:error] [pid 16593:tid 16608] [client 193.37.32.45:54469] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/options.php"] [unique_id "aSSjVBVGznHBJI2LKpSUOAAAAo0"]
[Tue Nov 25 02:26:28.527918 2025] [:error] [pid 16593:tid 16597] [client 193.37.32.12:24965] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-files.php"] [unique_id "aSSjVBVGznHBJI2LKpSUOQAAAoI"]
[Tue Nov 25 02:26:28.702420 2025] [:error] [pid 48601:tid 48659] [client 193.37.32.24:39413] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSSjVIMM4MaVTk74-AYdaQAAAgI"]
[Tue Nov 25 02:26:28.879245 2025] [:error] [pid 16549:tid 16561] [client 193.37.32.9:37097] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aSSjVKeWW19A99PUw_ePGwAAAUk"]
[Tue Nov 25 02:26:29.055368 2025] [:error] [pid 16441:tid 16464] [client 193.37.32.8:26817] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aSSjVYq_bc5MOa9HflnxNQAAAJQ"]
[Tue Nov 25 02:26:29.233125 2025] [:error] [pid 48600:tid 48641] [client 193.37.32.10:27133] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aSSjVftOzSUAQvWVjBfGvgAAAcs"]
[Tue Nov 25 02:26:34.410431 2025] [:error] [pid 49900:tid 49910] [client 193.37.32.29:22983] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aSSjWjCyPLrvg06aormFEwAAAAg"]
[Tue Nov 25 02:26:34.586386 2025] [:error] [pid 48688:tid 48713] [client 193.37.32.42:34563] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSSjWhm2q1FkzLam7A0AzgAAAlU"]
[Tue Nov 25 02:26:34.765450 2025] [:error] [pid 16441:tid 16467] [client 193.37.32.35:28465] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSSjWoq_bc5MOa9HflnxXwAAAJc"]
[Tue Nov 25 02:26:34.942662 2025] [:error] [pid 48600:tid 48650] [client 193.37.32.35:37979] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSSjWvtOzSUAQvWVjBfGyAAAAdQ"]
[Tue Nov 25 02:26:35.119374 2025] [:error] [pid 48599:tid 48605] [client 193.37.32.42:23921] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aSSjW5zvu6PDJiRKE3J_qQAAAYI"]
[Tue Nov 25 02:26:35.295952 2025] [:error] [pid 16549:tid 16563] [client 193.37.32.41:39887] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aSSjW6eWW19A99PUw_ePHAAAAUs"]
[Tue Nov 25 02:26:35.473383 2025] [:error] [pid 16549:tid 16577] [client 193.37.32.47:49975] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/function.php"] [unique_id "aSSjW6eWW19A99PUw_ePHQAAAVg"]
[Tue Nov 25 02:26:35.649964 2025] [:error] [pid 49900:tid 49922] [client 193.37.32.11:49941] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aSSjWzCyPLrvg06aormFFgAAABQ"]
[Tue Nov 25 02:26:35.828414 2025] [:error] [pid 48601:tid 48676] [client 193.37.32.130:57255] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-header.php"] [unique_id "aSSjW4MM4MaVTk74-AYdigAAAhM"]
[Tue Nov 25 02:26:36.004333 2025] [:error] [pid 49900:tid 49903] [client 193.37.32.46:37807] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index2.php"] [unique_id "aSSjXDCyPLrvg06aormFGAAAAAE"]
[Tue Nov 25 02:26:36.181811 2025] [:error] [pid 16593:tid 16597] [client 193.37.32.51:37867] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSSjXBVGznHBJI2LKpSUTQAAAoI"]
[Tue Nov 25 02:26:36.358072 2025] [:error] [pid 16516:tid 16542] [client 193.37.32.42:44277] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aSSjXPqZbniwaNwL8Xk0dQAAARc"]
[Tue Nov 25 02:26:36.533795 2025] [:error] [pid 48688:tid 48696] [client 193.37.32.24:32543] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aSSjXBm2q1FkzLam7A0A0AAAAkQ"]
[Tue Nov 25 02:26:36.711191 2025] [:error] [pid 16441:tid 16463] [client 193.37.32.26:33749] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aSSjXIq_bc5MOa9HflnxYwAAAJM"]
[Tue Nov 25 02:26:36.887050 2025] [:error] [pid 48599:tid 48625] [client 193.37.32.20:42141] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aSSjXJzvu6PDJiRKE3J_tAAAAZY"]
[Tue Nov 25 02:26:37.063159 2025] [:error] [pid 48688:tid 48700] [client 193.37.32.37:25297] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aSSjXRm2q1FkzLam7A0A0QAAAkg"]
[Tue Nov 25 02:26:37.238063 2025] [:error] [pid 9630:tid 9647] [client 193.37.32.41:47529] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aSSjXSrSgUgPGkizt2p87gAAAE8"]
[Tue Nov 25 02:26:42.415828 2025] [:error] [pid 9630:tid 9653] [client 193.37.32.42:59751] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aSSjYirSgUgPGkizt2p9DQAAAFU"]
[Tue Nov 25 02:26:42.593194 2025] [:error] [pid 16549:tid 16568] [client 193.37.32.42:57205] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSSjYqeWW19A99PUw_ePLQAAAVA"]
[Tue Nov 25 02:26:42.769757 2025] [:error] [pid 48599:tid 48625] [client 193.37.32.33:59951] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aSSjYpzvu6PDJiRKE3J_wwAAAZY"]
[Tue Nov 25 02:26:42.946389 2025] [:error] [pid 48600:tid 48649] [client 193.37.32.15:50303] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aSSjYvtOzSUAQvWVjBfG4QAAAdM"]
[Tue Nov 25 02:26:43.122183 2025] [:error] [pid 16441:tid 16453] [client 193.37.32.43:34425] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aSSjY4q_bc5MOa9HflnxjwAAAIk"]
[Tue Nov 25 02:26:43.302157 2025] [:error] [pid 48688:tid 48694] [client 193.37.32.18:49145] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aSSjYxm2q1FkzLam7A0A4gAAAkI"]
[Tue Nov 25 02:26:43.498009 2025] [:error] [pid 16593:tid 16615] [client 193.37.32.35:47769] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSSjYxVGznHBJI2LKpSUUAAAApQ"]
[Tue Nov 25 02:26:43.709747 2025] [:error] [pid 16441:tid 16463] [client 193.37.32.22:31853] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aSSjY4q_bc5MOa9HflnxmwAAAJM"]
[Tue Nov 25 02:26:43.884922 2025] [:error] [pid 16441:tid 16444] [client 193.37.32.36:47609] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/product.php"] [unique_id "aSSjY4q_bc5MOa9HflnxnQAAAIA"]
[Tue Nov 25 02:26:49.061491 2025] [:error] [pid 48599:tid 48622] [client 193.37.32.24:59595] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aSSjaZzvu6PDJiRKE3J_1gAAAZM"]
[Tue Nov 25 02:26:49.238369 2025] [:error] [pid 16549:tid 16569] [client 193.37.32.12:58047] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aSSjaaeWW19A99PUw_ePNQAAAVE"]
[Tue Nov 25 02:26:49.415394 2025] [:error] [pid 16593:tid 16602] [client 193.37.32.47:54171] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSSjaRVGznHBJI2LKpSUVwAAAoc"]
[Tue Nov 25 02:26:49.590686 2025] [:error] [pid 48688:tid 48699] [client 193.37.32.24:63123] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aSSjaRm2q1FkzLam7A0A9wAAAkc"]
[Tue Nov 25 02:26:49.765985 2025] [:error] [pid 16441:tid 16464] [client 193.37.32.9:37393] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aSSjaYq_bc5MOa9HflnxqwAAAJQ"]
[Tue Nov 25 02:26:49.958613 2025] [:error] [pid 16441:tid 16445] [client 193.37.32.21:22689] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aSSjaYq_bc5MOa9HflnxrQAAAIE"]
[Tue Nov 25 02:26:50.134288 2025] [:error] [pid 9630:tid 9636] [client 193.37.32.46:47721] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aSSjairSgUgPGkizt2p9IwAAAEQ"]
[Tue Nov 25 02:26:50.311216 2025] [:error] [pid 9630:tid 9633] [client 193.37.32.7:42171] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSSjairSgUgPGkizt2p9JAAAAEE"]
[Tue Nov 25 02:26:50.488460 2025] [:error] [pid 49900:tid 49923] [client 193.37.32.32:29173] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aSSjajCyPLrvg06aormFQgAAABU"]
[Tue Nov 25 02:26:50.664102 2025] [:error] [pid 49900:tid 49915] [client 193.37.32.7:62561] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aSSjajCyPLrvg06aormFQwAAAA0"]
[Tue Nov 25 02:26:50.842133 2025] [:error] [pid 48688:tid 48713] [client 193.37.32.38:46753] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aSSjahm2q1FkzLam7A0BAgAAAlU"]
[Tue Nov 25 02:26:51.020385 2025] [:error] [pid 16441:tid 16454] [client 193.37.32.10:25337] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/"] [unique_id "aSSja4q_bc5MOa9HflnxsQAAAIo"]
[Tue Nov 25 02:26:51.196805 2025] [:error] [pid 9630:tid 9641] [client 193.37.32.9:34945] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aSSjayrSgUgPGkizt2p9JwAAAEk"]
[Tue Nov 25 02:26:51.379377 2025] [:error] [pid 48601:tid 48662] [client 193.37.32.130:29385] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSSja4MM4MaVTk74-AYdpAAAAgU"]
[Tue Nov 25 02:26:51.556001 2025] [:error] [pid 16441:tid 16459] [client 193.37.32.33:41633] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aSSja4q_bc5MOa9HflnxswAAAI8"]
[Tue Nov 25 02:26:51.733163 2025] [:error] [pid 48601:tid 48663] [client 193.37.32.34:53971] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aSSja4MM4MaVTk74-AYdpQAAAgY"]
[Tue Nov 25 02:26:51.910134 2025] [:error] [pid 48601:tid 48657] [client 193.37.32.49:53519] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSSja4MM4MaVTk74-AYdpgAAAgA"]
[Tue Nov 25 02:26:52.085514 2025] [:error] [pid 16593:tid 16600] [client 193.37.32.48:38495] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aSSjbBVGznHBJI2LKpSUXwAAAoU"]
[Tue Nov 25 02:26:52.262891 2025] [:error] [pid 16441:tid 16463] [client 193.37.32.30:32113] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSSjbIq_bc5MOa9HflnxtAAAAJM"]
[Tue Nov 25 02:26:52.443190 2025] [:error] [pid 48601:tid 48679] [client 193.37.32.37:29625] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aSSjbIMM4MaVTk74-AYdqAAAAhY"]
[Tue Nov 25 02:26:52.618269 2025] [:error] [pid 16549:tid 16564] [client 193.37.32.130:43335] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/option-old.php"] [unique_id "aSSjbKeWW19A99PUw_ePNwAAAUw"]
[Tue Nov 25 02:26:52.796494 2025] [:error] [pid 16441:tid 16449] [client 193.37.32.43:64013] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aSSjbIq_bc5MOa9HflnxugAAAIU"]
[Tue Nov 25 02:26:52.972754 2025] [:error] [pid 16593:tid 16615] [client 193.37.32.46:50319] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aSSjbBVGznHBJI2LKpSUYQAAApQ"]
[Tue Nov 25 02:26:53.148004 2025] [:error] [pid 16549:tid 16574] [client 193.37.32.22:30703] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aSSjbaeWW19A99PUw_ePOAAAAVU"]
[Tue Nov 25 02:26:58.325441 2025] [:error] [pid 9630:tid 9637] [client 193.37.32.24:20073] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/woh.php"] [unique_id "aSSjcirSgUgPGkizt2p9NwAAAEU"]
[Tue Nov 25 02:26:58.501754 2025] [:error] [pid 16549:tid 16560] [client 193.37.32.14:35907] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/navigation/"] [unique_id "aSSjcqeWW19A99PUw_ePVwAAAUg"]
[Tue Nov 25 02:26:58.676169 2025] [:error] [pid 16549:tid 16553] [client 193.37.32.20:26323] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aSSjcqeWW19A99PUw_ePWgAAAUE"]
[Tue Nov 25 02:26:58.851196 2025] [:error] [pid 48688:tid 48699] [client 193.37.32.6:45831] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shelp.php"] [unique_id "aSSjchm2q1FkzLam7A0BGwAAAkc"]
[Tue Nov 25 02:26:59.027647 2025] [:error] [pid 48688:tid 48716] [client 193.37.32.42:50619] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSSjcxm2q1FkzLam7A0BHAAAAlg"]
[Tue Nov 25 02:26:59.203302 2025] [:error] [pid 48600:tid 48631] [client 193.37.32.14:65281] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSSjc_tOzSUAQvWVjBfHCQAAAcE"]
[Tue Nov 25 02:26:59.379270 2025] [:error] [pid 49900:tid 49912] [client 193.37.32.34:45445] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSSjczCyPLrvg06aormFSgAAAAo"]
[Tue Nov 25 02:26:59.557488 2025] [:error] [pid 9630:tid 9638] [client 193.37.32.35:43685] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aSSjcyrSgUgPGkizt2p9OQAAAEY"]
[Tue Nov 25 02:26:59.734257 2025] [:error] [pid 48688:tid 48692] [client 193.37.32.29:59241] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aSSjcxm2q1FkzLam7A0BHgAAAkA"]
[Tue Nov 25 02:26:59.911157 2025] [:error] [pid 48599:tid 48616] [client 193.37.32.45:55859] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aSSjc5zvu6PDJiRKE3J_5QAAAY0"]
[Tue Nov 25 02:27:05.089323 2025] [:error] [pid 9630:tid 9648] [client 193.37.32.34:50137] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aSSjeSrSgUgPGkizt2p9PAAAAFA"]
[Tue Nov 25 02:27:05.267506 2025] [:error] [pid 16516:tid 16542] [client 193.37.32.19:36947] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aSSjefqZbniwaNwL8Xk0kwAAARc"]
[Tue Nov 25 02:27:05.444224 2025] [:error] [pid 48599:tid 48627] [client 193.37.32.47:40293] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aSSjeZzvu6PDJiRKE3J_6QAAAZg"]
[Tue Nov 25 02:27:05.620432 2025] [:error] [pid 16516:tid 16523] [client 193.37.32.49:55793] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSSjefqZbniwaNwL8Xk0lAAAAQQ"]
[Tue Nov 25 02:27:05.796988 2025] [:error] [pid 49900:tid 49922] [client 193.37.32.44:65139] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSSjeTCyPLrvg06aormFTwAAABQ"]
[Tue Nov 25 02:27:15.974402 2025] [:error] [pid 49900:tid 49924] [client 193.37.32.38:26853] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aSSjgzCyPLrvg06aormFUQAAABY"]
[Tue Nov 25 02:27:16.150813 2025] [:error] [pid 49900:tid 49921] [client 193.37.32.9:50557] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aSSjhDCyPLrvg06aormFUgAAABM"]
[Tue Nov 25 02:27:16.327917 2025] [:error] [pid 49900:tid 49902] [client 193.37.32.12:53803] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aSSjhDCyPLrvg06aormFUwAAAAA"]
[Tue Nov 25 02:27:21.505210 2025] [:error] [pid 16593:tid 16606] [client 193.37.32.11:37539] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aSSjiRVGznHBJI2LKpSUcwAAAos"]
[Tue Nov 25 02:27:23.042749 2025] [:error] [pid 16441:tid 16449] [client 193.37.32.14:41623] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aSSji4q_bc5MOa9HflnxzQAAAIU"]
[Tue Nov 25 02:27:23.219428 2025] [:error] [pid 9630:tid 9640] [client 193.37.32.9:62717] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aSSjiyrSgUgPGkizt2p9PgAAAEg"]
[Tue Nov 25 02:27:23.395041 2025] [:error] [pid 16441:tid 16454] [client 193.37.32.49:40801] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aSSji4q_bc5MOa9HflnxzgAAAIo"]
[Tue Nov 25 02:27:23.570628 2025] [:error] [pid 16441:tid 16458] [client 193.37.32.11:28987] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aSSji4q_bc5MOa9HflnxzwAAAI4"]
[Tue Nov 25 02:27:23.746589 2025] [:error] [pid 9630:tid 9653] [client 193.37.32.42:40529] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aSSjiyrSgUgPGkizt2p9PwAAAFU"]
[Tue Nov 25 02:27:33.924393 2025] [:error] [pid 16549:tid 16561] [client 193.37.32.16:55379] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aSSjlaeWW19A99PUw_ePlgAAAUk"]
[Tue Nov 25 02:27:34.114637 2025] [:error] [pid 16441:tid 16459] [client 193.37.32.5:40471] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aSSjloq_bc5MOa9Hflnx3AAAAI8"]
[Tue Nov 25 02:27:34.290161 2025] [:error] [pid 9630:tid 9647] [client 193.37.32.5:30069] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aSSjlirSgUgPGkizt2p9SAAAAE8"]
[Tue Nov 25 02:27:34.467079 2025] [:error] [pid 48599:tid 48606] [client 193.37.32.35:45697] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aSSjlpzvu6PDJiRKE3J_7QAAAYM"]
[Tue Nov 25 02:27:34.642506 2025] [:error] [pid 48688:tid 48707] [client 193.37.32.51:23319] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aSSjlhm2q1FkzLam7A0BJQAAAk8"]
[Tue Nov 25 02:27:34.818509 2025] [:error] [pid 48599:tid 48604] [client 193.37.32.23:30725] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aSSjlpzvu6PDJiRKE3J_7gAAAYE"]
[Tue Nov 25 02:27:34.996467 2025] [:error] [pid 49900:tid 49918] [client 193.37.32.18:36833] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "aSSjljCyPLrvg06aormFWwAAABA"]
[Tue Nov 25 02:27:35.172938 2025] [:error] [pid 48599:tid 48608] [client 193.37.32.7:31581] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aSSjl5zvu6PDJiRKE3J_8AAAAYU"]
[Tue Nov 25 02:27:35.350390 2025] [:error] [pid 49900:tid 49912] [client 193.37.32.42:31089] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSSjlzCyPLrvg06aormFXAAAAAo"]
[Tue Nov 25 02:27:35.527204 2025] [:error] [pid 48600:tid 48643] [client 193.37.32.34:47001] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aSSjl_tOzSUAQvWVjBfHHwAAAc0"]
[Tue Nov 25 02:27:45.705443 2025] [:error] [pid 48600:tid 48637] [client 193.37.32.23:24787] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ss.php"] [unique_id "aSSjoftOzSUAQvWVjBfHKAAAAcc"]
[Tue Nov 25 02:27:45.881866 2025] [:error] [pid 48599:tid 48620] [client 193.37.32.9:43729] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aSSjoZzvu6PDJiRKE3J_9QAAAZE"]
[Tue Nov 25 02:27:46.057785 2025] [:error] [pid 9630:tid 9649] [client 193.37.32.48:40893] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aSSjoirSgUgPGkizt2p9SwAAAFE"]
[Tue Nov 25 02:27:46.233955 2025] [:error] [pid 48599:tid 48616] [client 193.37.32.5:37023] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aSSjopzvu6PDJiRKE3J_9gAAAY0"]
[Tue Nov 25 02:27:46.409671 2025] [:error] [pid 48599:tid 48625] [client 193.37.32.8:39105] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aSSjopzvu6PDJiRKE3J_9wAAAZY"]
[Tue Nov 25 02:27:46.585969 2025] [:error] [pid 9630:tid 9632] [client 193.37.32.14:43885] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aSSjoirSgUgPGkizt2p9TAAAAEA"]
[Tue Nov 25 02:27:46.761592 2025] [:error] [pid 9630:tid 9637] [client 193.37.32.21:44203] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSSjoirSgUgPGkizt2p9TQAAAEU"]
[Tue Nov 25 02:27:51.938239 2025] [:error] [pid 16549:tid 16572] [client 193.37.32.21:49139] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aSSjp6eWW19A99PUw_ePsgAAAVM"]
[Tue Nov 25 02:27:52.114889 2025] [:error] [pid 9630:tid 9656] [client 193.37.32.14:29961] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aSSjqCrSgUgPGkizt2p9TwAAAFg"]
[Tue Nov 25 02:27:57.291484 2025] [:error] [pid 48601:tid 48681] [client 193.37.32.49:65287] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSSjrYMM4MaVTk74-AYd0AAAAhg"]
[Tue Nov 25 02:28:02.468160 2025] [:error] [pid 9630:tid 9645] [client 193.37.32.44:22793] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/public_html/404.php"] [unique_id "aSSjsirSgUgPGkizt2p9UgAAAE0"]
[Tue Nov 25 02:28:02.643114 2025] [:error] [pid 9630:tid 9640] [client 193.37.32.33:25605] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/database.php"] [unique_id "aSSjsirSgUgPGkizt2p9UwAAAEg"]
[Tue Nov 25 02:28:07.823359 2025] [:error] [pid 48600:tid 48634] [client 193.37.32.37:22459] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/elish.php"] [unique_id "aSSjt_tOzSUAQvWVjBfHLgAAAcQ"]
[Tue Nov 25 02:28:12.999235 2025] [:error] [pid 16549:tid 16557] [client 193.37.32.9:34167] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSSjvKeWW19A99PUw_eP0AAAAUU"]
[Tue Nov 25 02:28:13.175814 2025] [:error] [pid 16516:tid 16534] [client 193.37.32.49:36169] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aSSjvfqZbniwaNwL8Xk0xQAAAQ8"]
[Tue Nov 25 02:28:13.355930 2025] [:error] [pid 16593:tid 16597] [client 193.37.32.40:62677] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/"] [unique_id "aSSjvRVGznHBJI2LKpSUigAAAoI"]
[Tue Nov 25 02:28:13.531085 2025] [:error] [pid 49900:tid 49911] [client 193.37.32.29:50573] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aSSjvTCyPLrvg06aormFcwAAAAk"]
[Tue Nov 25 02:28:13.706413 2025] [:error] [pid 16516:tid 16533] [client 193.37.32.6:47001] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/popularfx/template-parts/"] [unique_id "aSSjvfqZbniwaNwL8Xk0xgAAAQ4"]
[Tue Nov 25 02:28:13.881515 2025] [:error] [pid 48599:tid 48619] [client 193.37.32.10:39191] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about-cong.php"] [unique_id "aSSjvZzvu6PDJiRKE3KAAwAAAZA"]
[Tue Nov 25 02:28:19.062067 2025] [:error] [pid 16441:tid 16457] [client 193.37.32.7:22675] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aSSjw4q_bc5MOa9Hflnx7AAAAI0"]
[Tue Nov 25 02:28:19.239397 2025] [:error] [pid 16593:tid 16609] [client 193.37.32.12:48635] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/wp.php"] [unique_id "aSSjwxVGznHBJI2LKpSUjAAAAo4"]
[Tue Nov 25 02:28:19.416662 2025] [:error] [pid 16516:tid 16524] [client 193.37.32.29:36629] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-rocket-config/"] [unique_id "aSSjw_qZbniwaNwL8Xk0yAAAAQU"]
[Tue Nov 25 02:28:19.593897 2025] [:error] [pid 16593:tid 16599] [client 193.37.32.11:54349] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/list-reusable-blocks/"] [unique_id "aSSjwxVGznHBJI2LKpSUjQAAAoQ"]
[Tue Nov 25 02:28:19.769759 2025] [:error] [pid 48599:tid 48624] [client 193.37.32.53:54553] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aSSjw5zvu6PDJiRKE3KABwAAAZU"]
[Tue Nov 25 02:28:24.945309 2025] [:error] [pid 48601:tid 48679] [client 193.37.32.35:54221] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aSSjyIMM4MaVTk74-AYd2QAAAhY"]
[Tue Nov 25 02:28:25.121148 2025] [:error] [pid 48601:tid 48667] [client 193.37.32.14:51919] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSSjyYMM4MaVTk74-AYd2gAAAgo"]
[Tue Nov 25 02:28:30.297056 2025] [:error] [pid 48600:tid 48645] [client 193.37.32.30:33459] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSSjzvtOzSUAQvWVjBfHOAAAAc8"]
[Tue Nov 25 02:28:30.472302 2025] [:error] [pid 48688:tid 48704] [client 193.37.32.45:34127] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aSSjzhm2q1FkzLam7A0BMwAAAkw"]
[Tue Nov 25 02:28:30.647353 2025] [:error] [pid 16441:tid 16467] [client 193.37.32.43:23187] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aSSjzoq_bc5MOa9Hflnx8AAAAJc"]
[Tue Nov 25 02:28:30.858027 2025] [:error] [pid 48688:tid 48702] [client 193.37.32.11:46411] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sama.php"] [unique_id "aSSjzhm2q1FkzLam7A0BNQAAAko"]
[Tue Nov 25 02:28:31.033705 2025] [:error] [pid 48688:tid 48714] [client 193.37.32.51:59821] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aSSjzxm2q1FkzLam7A0BNgAAAlY"]
[Tue Nov 25 02:28:36.209943 2025] [:error] [pid 16549:tid 16567] [client 193.37.32.50:60921] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/gosmtp/"] [unique_id "aSSj1KeWW19A99PUw_eP2gAAAU8"]
[Tue Nov 25 02:28:36.426992 2025] [:error] [pid 49900:tid 49915] [client 193.37.32.37:52919] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/"] [unique_id "aSSj1DCyPLrvg06aormFggAAAA0"]
[Tue Nov 25 02:28:38.144314 2025] [:error] [pid 16549:tid 16553] [client 193.37.32.7:20941] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSSj1qeWW19A99PUw_eP2wAAAUE"]
[Tue Nov 25 02:28:38.319899 2025] [:error] [pid 9630:tid 9635] [client 193.37.32.51:62969] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aSSj1irSgUgPGkizt2p9ZAAAAEM"]
[Tue Nov 25 02:28:38.497366 2025] [:error] [pid 48601:tid 48660] [client 193.37.32.37:22429] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aSSj1oMM4MaVTk74-AYd3wAAAgM"]
[Tue Nov 25 02:28:38.675448 2025] [:error] [pid 49900:tid 49921] [client 193.37.32.32:38891] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSSj1jCyPLrvg06aormFhAAAABM"]
[Tue Nov 25 02:28:38.854455 2025] [:error] [pid 48599:tid 48621] [client 193.37.32.33:43059] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSSj1pzvu6PDJiRKE3KAJwAAAZI"]
[Tue Nov 25 02:28:39.031951 2025] [:error] [pid 48601:tid 48663] [client 193.37.32.14:31765] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aSSj14MM4MaVTk74-AYd4AAAAgY"]
[Tue Nov 25 02:28:39.211127 2025] [:error] [pid 48601:tid 48674] [client 193.37.32.44:20817] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aSSj14MM4MaVTk74-AYd4QAAAhE"]
[Tue Nov 25 02:28:39.388728 2025] [:error] [pid 16516:tid 16527] [client 193.37.32.15:54367] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aSSj1_qZbniwaNwL8Xk00gAAAQg"]
[Tue Nov 25 02:28:49.564558 2025] [:error] [pid 16441:tid 16448] [client 193.37.32.38:34929] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aSSj4Yq_bc5MOa9Hflnx_wAAAIQ"]
[Tue Nov 25 02:28:49.741456 2025] [:error] [pid 16441:tid 16463] [client 193.37.32.24:29629] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aSSj4Yq_bc5MOa9HflnyAAAAAJM"]
[Tue Nov 25 02:28:54.917564 2025] [:error] [pid 16441:tid 16451] [client 193.37.32.37:28587] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aSSj5oq_bc5MOa9HflnyAwAAAIc"]
[Tue Nov 25 02:28:55.123397 2025] [:error] [pid 16441:tid 16462] [client 193.37.32.29:38267] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/script-modules/about.php"] [unique_id "aSSj54q_bc5MOa9HflnyBAAAAJI"]
[Tue Nov 25 02:28:55.298834 2025] [:error] [pid 48599:tid 48622] [client 193.37.32.19:48061] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSSj55zvu6PDJiRKE3KARgAAAZM"]
[Tue Nov 25 02:28:55.474324 2025] [:error] [pid 16441:tid 16464] [client 193.37.32.30:35839] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aSSj54q_bc5MOa9HflnyBQAAAJQ"]
[Tue Nov 25 02:28:55.650535 2025] [:error] [pid 49900:tid 49913] [client 193.37.32.37:49411] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aSSj5zCyPLrvg06aormFlwAAAAs"]
[Tue Nov 25 02:28:55.827452 2025] [:error] [pid 48601:tid 48659] [client 193.37.32.28:22381] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/newuser.php"] [unique_id "aSSj54MM4MaVTk74-AYd6AAAAgI"]
[Tue Nov 25 02:28:56.003149 2025] [:error] [pid 16441:tid 16468] [client 193.37.32.48:48727] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Exception/"] [unique_id "aSSj6Iq_bc5MOa9HflnyBgAAAJg"]
[Tue Nov 25 02:29:01.178607 2025] [:error] [pid 48600:tid 48635] [client 193.37.32.34:39037] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/ty.php"] [unique_id "aSSj7ftOzSUAQvWVjBfHQAAAAcU"]
[Tue Nov 25 02:29:01.358356 2025] [:error] [pid 9630:tid 9639] [client 193.37.32.38:47907] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aSSj7SrSgUgPGkizt2p9awAAAEc"]
[Tue Nov 25 02:29:01.533278 2025] [:error] [pid 48599:tid 48627] [client 193.37.32.28:44111] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-date/"] [unique_id "aSSj7Zzvu6PDJiRKE3KATgAAAZg"]
[Tue Nov 25 02:29:06.709456 2025] [:error] [pid 48601:tid 48663] [client 193.37.32.19:41079] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aSSj8oMM4MaVTk74-AYd6wAAAgY"]
[Tue Nov 25 02:29:06.883628 2025] [:error] [pid 9630:tid 9638] [client 193.37.32.37:42393] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aSSj8irSgUgPGkizt2p9dwAAAEY"]
[Tue Nov 25 02:29:12.064007 2025] [:error] [pid 48600:tid 48632] [client 193.37.32.50:20827] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSSj-PtOzSUAQvWVjBfHRQAAAcI"]
[Tue Nov 25 02:29:12.245914 2025] [:error] [pid 48688:tid 48706] [client 193.37.32.45:50543] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/blocks/"] [unique_id "aSSj-Bm2q1FkzLam7A0BSgAAAk4"]
[Tue Nov 25 02:29:12.437203 2025] [:error] [pid 49900:tid 49902] [client 193.37.32.32:54173] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/fonts/ibm-plex-mono/"] [unique_id "aSSj-DCyPLrvg06aormFoQAAAAA"]
[Tue Nov 25 02:29:12.615900 2025] [:error] [pid 48600:tid 48653] [client 193.37.32.33:49663] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Auth/admin.php"] [unique_id "aSSj-PtOzSUAQvWVjBfHRgAAAdc"]
[Tue Nov 25 02:29:12.792028 2025] [:error] [pid 49900:tid 49912] [client 193.37.32.8:20715] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/filester/assets/css/cc.php"] [unique_id "aSSj-DCyPLrvg06aormFogAAAAo"]
[Tue Nov 25 02:29:12.973010 2025] [:error] [pid 48601:tid 48674] [client 193.37.32.18:48397] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/modern/assets/images/"] [unique_id "aSSj-IMM4MaVTk74-AYd7AAAAhE"]
[Tue Nov 25 02:29:18.147740 2025] [:error] [pid 48600:tid 48632] [client 193.37.32.51:25455] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Utility/admin.php"] [unique_id "aSSj_vtOzSUAQvWVjBfHWQAAAcI"]
[Tue Nov 25 02:29:18.324203 2025] [:error] [pid 16441:tid 16455] [client 193.37.32.16:42571] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/22x.php"] [unique_id "aSSj_oq_bc5MOa9HflnyIwAAAIs"]
[Tue Nov 25 02:29:18.499324 2025] [:error] [pid 16441:tid 16452] [client 193.37.32.24:56543] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wolf.php"] [unique_id "aSSj_oq_bc5MOa9HflnyJAAAAIg"]
[Tue Nov 25 02:29:18.674790 2025] [:error] [pid 16549:tid 16569] [client 193.37.32.15:58205] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aSSj_qeWW19A99PUw_eP-wAAAVE"]
[Tue Nov 25 02:29:23.853409 2025] [:error] [pid 49900:tid 49902] [client 193.37.32.26:59447] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/plupload/"] [unique_id "aSSkAzCyPLrvg06aormFqwAAAAA"]
[Tue Nov 25 02:29:24.028880 2025] [:error] [pid 48688:tid 48714] [client 193.37.32.35:48153] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/1.php"] [unique_id "aSSkBBm2q1FkzLam7A0BUAAAAlY"]
[Tue Nov 25 02:29:24.205070 2025] [:error] [pid 16549:tid 16562] [client 193.37.32.26:59143] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aSSkBKeWW19A99PUw_eP_wAAAUo"]
[Tue Nov 25 02:29:24.380469 2025] [:error] [pid 48688:tid 48698] [client 193.37.32.53:35885] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aSSkBBm2q1FkzLam7A0BUQAAAkY"]
[Tue Nov 25 02:29:24.555942 2025] [:error] [pid 16441:tid 16466] [client 193.37.32.23:29633] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/Mencintai.php"] [unique_id "aSSkBIq_bc5MOa9HflnyJwAAAJY"]
[Tue Nov 25 02:29:29.733074 2025] [:error] [pid 9630:tid 9656] [client 193.37.32.10:63505] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/bbn.php"] [unique_id "aSSkCSrSgUgPGkizt2p9nAAAAFg"]
[Tue Nov 25 02:29:34.909668 2025] [:error] [pid 9630:tid 9646] [client 193.37.32.5:35611] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/easy-bootstrap-shortcode-pro/1.php"] [unique_id "aSSkDirSgUgPGkizt2p9pQAAAE4"]
[Tue Nov 25 02:29:40.086826 2025] [:error] [pid 16593:tid 16598] [client 193.37.32.39:38219] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aSSkFBVGznHBJI2LKpSUpAAAAoM"]
[Tue Nov 25 02:29:41.672953 2025] [:error] [pid 16441:tid 16459] [client 193.37.32.53:53575] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aSSkFYq_bc5MOa9HflnyOgAAAI8"]
[Tue Nov 25 02:29:41.847729 2025] [:error] [pid 48599:tid 48621] [client 193.37.32.48:63381] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/public/admin.php"] [unique_id "aSSkFZzvu6PDJiRKE3KAXgAAAZI"]
[Tue Nov 25 02:29:42.026275 2025] [:error] [pid 48688:tid 48698] [client 193.37.32.20:39657] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/web/shell.php"] [unique_id "aSSkFhm2q1FkzLam7A0BXgAAAkY"]
[Tue Nov 25 02:29:42.203898 2025] [:error] [pid 16441:tid 16448] [client 193.37.32.44:25019] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aSSkFoq_bc5MOa9HflnyOwAAAIQ"]
[Tue Nov 25 02:29:42.379080 2025] [:error] [pid 16516:tid 16519] [client 193.37.32.20:26961] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wpai-woocommerce-add-on/models/import/about.php"] [unique_id "aSSkFvqZbniwaNwL8Xk07wAAAQA"]
[Tue Nov 25 02:29:42.555705 2025] [:error] [pid 49900:tid 49921] [client 193.37.32.26:46573] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/public_html/admin.php"] [unique_id "aSSkFjCyPLrvg06aormFuAAAABM"]
[Tue Nov 25 02:29:42.731174 2025] [:error] [pid 48688:tid 48696] [client 193.37.32.42:21165] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aSSkFhm2q1FkzLam7A0BXwAAAkQ"]
[Tue Nov 25 02:29:42.907741 2025] [:error] [pid 48601:tid 48670] [client 193.37.32.32:24653] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/Divi/et-pagebuilder/about.php"] [unique_id "aSSkFoMM4MaVTk74-AYd8QAAAg0"]
[Tue Nov 25 02:29:48.084660 2025] [:error] [pid 48599:tid 48608] [client 193.37.32.42:36821] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aSSkHJzvu6PDJiRKE3KAYgAAAYU"]
[Tue Nov 25 02:29:48.260451 2025] [:error] [pid 48600:tid 48633] [client 193.37.32.49:49297] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/img/portfolio/about.php"] [unique_id "aSSkHPtOzSUAQvWVjBfHYwAAAcM"]
[Tue Nov 25 02:29:48.436516 2025] [:error] [pid 16441:tid 16453] [client 193.37.32.21:24889] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/img/single/about.php"] [unique_id "aSSkHIq_bc5MOa9HflnyRgAAAIk"]
[Tue Nov 25 02:29:48.611979 2025] [:error] [pid 48599:tid 48603] [client 193.37.32.53:48793] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/img/full/admin.php"] [unique_id "aSSkHJzvu6PDJiRKE3KAYwAAAYA"]
[Tue Nov 25 02:29:53.790125 2025] [:error] [pid 9630:tid 9633] [client 193.37.32.6:29203] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-install.php"] [unique_id "aSSkISrSgUgPGkizt2p9vQAAAEE"]
[Tue Nov 25 02:29:58.966929 2025] [:error] [pid 48688:tid 48707] [client 193.37.32.29:30401] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sql.php"] [unique_id "aSSkJhm2q1FkzLam7A0BZQAAAk8"]
[Tue Nov 25 02:29:59.143099 2025] [:error] [pid 48599:tid 48625] [client 193.37.32.24:26419] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/service.php"] [unique_id "aSSkJ5zvu6PDJiRKE3KAZAAAAZY"]
[Tue Nov 25 02:29:59.321736 2025] [:error] [pid 48688:tid 48713] [client 193.37.32.8:56889] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/nux.php"] [unique_id "aSSkJxm2q1FkzLam7A0BZgAAAlU"]
[Tue Nov 25 02:29:59.499907 2025] [:error] [pid 48601:tid 48663] [client 193.37.32.33:62765] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aSSkJ4MM4MaVTk74-AYd-QAAAgY"]
[Tue Nov 25 02:30:04.677727 2025] [:error] [pid 16593:tid 16605] [client 193.37.32.39:57281] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aSSkLBVGznHBJI2LKpSUqQAAAoo"]
[Tue Nov 25 02:30:04.855680 2025] [:error] [pid 48600:tid 48635] [client 193.37.32.130:38687] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aSSkLPtOzSUAQvWVjBfHawAAAcU"]
[Tue Nov 25 02:30:05.031912 2025] [:error] [pid 16516:tid 16537] [client 193.37.32.8:49639] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/buy.php"] [unique_id "aSSkLfqZbniwaNwL8Xk0-wAAARI"]
[Tue Nov 25 02:30:05.208583 2025] [:error] [pid 48688:tid 48711] [client 193.37.32.48:25359] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aSSkLRm2q1FkzLam7A0BagAAAlM"]
[Tue Nov 25 02:30:05.384656 2025] [:error] [pid 48600:tid 48638] [client 193.37.32.20:33775] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aSSkLftOzSUAQvWVjBfHbAAAAcg"]
[Tue Nov 25 02:30:05.559843 2025] [:error] [pid 9630:tid 9654] [client 193.37.32.130:25891] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/database.php"] [unique_id "aSSkLSrSgUgPGkizt2p9vgAAAFY"]
[Tue Nov 25 02:30:05.736569 2025] [:error] [pid 16516:tid 16540] [client 193.37.32.18:27439] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/obfuscate.php"] [unique_id "aSSkLfqZbniwaNwL8Xk0_AAAARU"]
[Tue Nov 25 02:30:05.911932 2025] [:error] [pid 16441:tid 16467] [client 193.37.32.11:34897] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/mabar88/inc/assets/images/lock.php"] [unique_id "aSSkLYq_bc5MOa9HflnyWAAAAJc"]
[Tue Nov 25 02:30:06.096180 2025] [:error] [pid 16441:tid 16448] [client 193.37.32.6:31477] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aSSkLoq_bc5MOa9HflnyWQAAAIQ"]
[Tue Nov 25 02:30:06.272221 2025] [:error] [pid 16441:tid 16455] [client 193.37.32.41:25461] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aSSkLoq_bc5MOa9HflnyWgAAAIs"]
[Tue Nov 25 02:30:06.448496 2025] [:error] [pid 48601:tid 48676] [client 193.37.32.48:50163] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aSSkLoMM4MaVTk74-AYd_gAAAhM"]
[Tue Nov 25 02:30:06.624505 2025] [:error] [pid 48599:tid 48612] [client 193.37.32.35:20757] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aSSkLpzvu6PDJiRKE3KAZQAAAYk"]
[Tue Nov 25 02:30:06.799815 2025] [:error] [pid 16441:tid 16464] [client 193.37.32.48:46019] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aSSkLoq_bc5MOa9HflnyWwAAAJQ"]
[Tue Nov 25 02:30:06.975256 2025] [:error] [pid 16441:tid 16468] [client 193.37.32.23:24399] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSSkLoq_bc5MOa9HflnyXAAAAJg"]
[Tue Nov 25 02:30:12.160455 2025] [:error] [pid 48599:tid 48606] [client 193.37.32.21:21503] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aSSkNJzvu6PDJiRKE3KAZgAAAYM"]
[Tue Nov 25 02:30:12.339011 2025] [:error] [pid 48599:tid 48617] [client 193.37.32.8:37301] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aSSkNJzvu6PDJiRKE3KAZwAAAY4"]
[Tue Nov 25 02:30:17.516234 2025] [:error] [pid 16549:tid 16565] [client 193.37.32.21:61339] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/hexa.php"] [unique_id "aSSkOaeWW19A99PUw_eQIQAAAU0"]
[Tue Nov 25 02:30:17.691492 2025] [:error] [pid 16593:tid 16603] [client 193.37.32.130:64089] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aSSkORVGznHBJI2LKpSUrgAAAog"]
[Tue Nov 25 02:30:17.867360 2025] [:error] [pid 48600:tid 48642] [client 193.37.32.16:52611] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aSSkOftOzSUAQvWVjBfHbgAAAcw"]
[Tue Nov 25 02:30:23.044620 2025] [:error] [pid 48600:tid 48646] [client 193.37.32.43:62905] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aSSkP_tOzSUAQvWVjBfHcwAAAdA"]
[Tue Nov 25 02:30:23.220452 2025] [:error] [pid 16516:tid 16531] [client 193.37.32.7:29733] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aSSkP_qZbniwaNwL8Xk1BAAAAQw"]
[Tue Nov 25 02:30:23.395925 2025] [:error] [pid 16549:tid 16572] [client 193.37.32.7:41481] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aSSkP6eWW19A99PUw_eQJgAAAVM"]
[Tue Nov 25 02:30:23.574402 2025] [:error] [pid 16549:tid 16577] [client 193.37.32.43:24177] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aSSkP6eWW19A99PUw_eQJwAAAVg"]
[Tue Nov 25 02:30:23.759127 2025] [:error] [pid 48688:tid 48699] [client 193.37.32.48:47299] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aSSkPxm2q1FkzLam7A0BdgAAAkc"]
[Tue Nov 25 02:30:23.934921 2025] [:error] [pid 48601:tid 48674] [client 193.37.32.42:51501] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aSSkP4MM4MaVTk74-AYeBgAAAhE"]
[Tue Nov 25 02:30:24.319844 2025] [:error] [pid 48688:tid 48697] [client 193.37.32.11:28443] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/templates/glass/about.php"] [unique_id "aSSkQBm2q1FkzLam7A0BdwAAAkU"]
[Tue Nov 25 02:30:24.496618 2025] [:error] [pid 9630:tid 9635] [client 193.37.32.43:60271] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aSSkQCrSgUgPGkizt2p9ywAAAEM"]
[Tue Nov 25 02:30:24.672565 2025] [:error] [pid 9630:tid 9641] [client 193.37.32.39:24427] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aSSkQCrSgUgPGkizt2p9zAAAAEk"]
[Tue Nov 25 02:30:29.851331 2025] [:error] [pid 48600:tid 48642] [client 193.37.32.53:64093] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aSSkRftOzSUAQvWVjBfHeQAAAcw"]
[Tue Nov 25 02:30:30.027582 2025] [:error] [pid 16516:tid 16540] [client 193.37.32.49:37981] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aSSkRvqZbniwaNwL8Xk1BwAAARU"]
[Tue Nov 25 02:30:30.202642 2025] [:error] [pid 48600:tid 48645] [client 193.37.32.40:29327] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aSSkRvtOzSUAQvWVjBfHegAAAc8"]
[Tue Nov 25 02:30:30.379034 2025] [:error] [pid 48688:tid 48702] [client 193.37.32.36:25595] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aSSkRhm2q1FkzLam7A0BewAAAko"]
[Tue Nov 25 02:30:35.560661 2025] [:error] [pid 9630:tid 9636] [client 193.37.32.33:61651] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aSSkSyrSgUgPGkizt2p91QAAAEQ"]
[Tue Nov 25 02:30:40.737564 2025] [:error] [pid 48600:tid 48647] [client 193.37.32.50:25759] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/miansha.php"] [unique_id "aSSkUPtOzSUAQvWVjBfHggAAAdE"]
[Tue Nov 25 02:30:40.912317 2025] [:error] [pid 48600:tid 48642] [client 193.37.32.42:60785] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/user.php"] [unique_id "aSSkUPtOzSUAQvWVjBfHgwAAAcw"]
[Tue Nov 25 02:30:46.088875 2025] [:error] [pid 48599:tid 48617] [client 193.37.32.23:60243] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aSSkVpzvu6PDJiRKE3KAgQAAAY4"]
[Tue Nov 25 02:30:46.266283 2025] [:error] [pid 9630:tid 9647] [client 193.37.32.19:52833] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/mainhosting/past.php"] [unique_id "aSSkVirSgUgPGkizt2p92QAAAE8"]
[Tue Nov 25 02:30:46.442264 2025] [:error] [pid 48601:tid 48680] [client 193.37.32.36:63101] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/load.php"] [unique_id "aSSkVoMM4MaVTk74-AYeHgAAAhc"]
[Tue Nov 25 02:30:46.618948 2025] [:error] [pid 48688:tid 48713] [client 193.37.32.23:21221] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aSSkVhm2q1FkzLam7A0BhQAAAlU"]
[Tue Nov 25 02:30:46.797217 2025] [:error] [pid 48601:tid 48662] [client 193.37.32.22:57985] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/"] [unique_id "aSSkVoMM4MaVTk74-AYeHwAAAgU"]
[Tue Nov 25 02:36:21.820903 2025] [:error] [pid 16549:tid 16553] [client 182.42.105.144:43295] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSSlpaeWW19A99PUw_eQ8wAAAUE"]
[Tue Nov 25 03:27:12.080825 2025] [autoindex:error] [pid 58751:tid 58760] [client 185.180.141.68:48655] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 03:27:27.079667 2025] [autoindex:error] [pid 58647:tid 58670] [client 185.180.141.68:45139] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 05:07:45.532633 2025] [proxy_fcgi:error] [pid 14688:tid 14706] [client 4.233.64.129:51790] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:45.873095 2025] [proxy_fcgi:error] [pid 14688:tid 14707] [client 4.233.64.129:51790] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:46.124336 2025] [proxy_fcgi:error] [pid 14688:tid 14714] [client 4.233.64.129:51790] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:46.616685 2025] [proxy_fcgi:error] [pid 14688:tid 14690] [client 4.233.64.129:51790] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:46.872996 2025] [proxy_fcgi:error] [pid 14688:tid 14711] [client 4.233.64.129:51790] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:47.148966 2025] [proxy_fcgi:error] [pid 14688:tid 14710] [client 4.233.64.129:51790] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:47.437506 2025] [:error] [pid 14688:tid 14695] [client 4.233.64.129:51790] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSTJI29vYrBoEsiDnizduQAAAQU"]
[Tue Nov 25 05:07:49.057271 2025] [proxy_fcgi:error] [pid 14168:tid 14192] [client 4.233.64.129:9504] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:07:49.533457 2025] [:error] [pid 14168:tid 14180] [client 4.233.64.129:9504] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTJJfR-ZDU0QEgAIItqbgAAAMk"]
[Tue Nov 25 05:07:53.365938 2025] [:error] [pid 14078:tid 14146] [client 4.233.64.129:60014] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTJKdVXYbb0ii_rVoJGmgAAAIk"]
[Tue Nov 25 05:08:01.705284 2025] [:error] [pid 14076:tid 14092] [client 4.233.64.129:51732] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTJMXsB4Gz6Qw-pvBsImAAAAAs"]
[Tue Nov 25 05:08:04.282851 2025] [:error] [pid 14688:tid 14714] [client 4.233.64.129:48595] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTJNG9vYrBoEsiDnizd4QAAARg"]
[Tue Nov 25 05:08:07.353018 2025] [:error] [pid 14078:tid 14137] [client 4.233.64.129:48599] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aSTJN9VXYbb0ii_rVoJGowAAAIA"]
[Tue Nov 25 05:08:11.127166 2025] [:error] [pid 14078:tid 14142] [client 4.233.64.129:51756] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aSTJO9VXYbb0ii_rVoJGpgAAAIU"]
[Tue Nov 25 05:08:12.305676 2025] [:error] [pid 14078:tid 14147] [client 4.233.64.129:59973] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aSTJPNVXYbb0ii_rVoJGpwAAAIo"]
[Tue Nov 25 05:08:15.115972 2025] [:error] [pid 14168:tid 14195] [client 4.233.64.129:48583] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aSTJP_R-ZDU0QEgAIItqhQAAANg"]
[Tue Nov 25 05:08:17.712290 2025] [:error] [pid 14076:tid 14082] [client 4.233.64.129:48590] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSTJQXsB4Gz6Qw-pvBsInwAAAAE"]
[Tue Nov 25 05:08:24.152649 2025] [:error] [pid 14076:tid 14093] [client 4.233.64.129:52378] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSTJSHsB4Gz6Qw-pvBsIowAAAAw"]
[Tue Nov 25 05:08:26.199835 2025] [:error] [pid 14688:tid 14705] [client 4.233.64.129:62673] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSTJSm9vYrBoEsiDnizd-gAAAQ8"]
[Tue Nov 25 05:08:29.119181 2025] [:error] [pid 14168:tid 14184] [client 4.233.64.129:52412] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSTJTfR-ZDU0QEgAIItqlwAAAM0"]
[Tue Nov 25 05:08:32.033128 2025] [:error] [pid 14078:tid 14148] [client 4.233.64.129:48631] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer.php"] [unique_id "aSTJUNVXYbb0ii_rVoJGtQAAAIs"]
[Tue Nov 25 05:08:43.514046 2025] [:error] [pid 14078:tid 14161] [client 4.233.64.129:51723] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer.php"] [unique_id "aSTJW9VXYbb0ii_rVoJGxgAAAJg"]
[Tue Nov 25 05:09:00.643762 2025] [:error] [pid 14077:tid 14122] [client 4.233.64.129:56766] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSTJbBG9n7UHEkwDTyhM0AAAAEw"]
[Tue Nov 25 05:09:03.931966 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 4.233.64.129:56763] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:04.169480 2025] [:error] [pid 14077:tid 14132] [client 4.233.64.129:56763] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSTJcBG9n7UHEkwDTyhM1AAAAFY"]
[Tue Nov 25 05:09:10.804890 2025] [:error] [pid 14688:tid 14711] [client 4.233.64.129:58608] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSTJdm9vYrBoEsiDnizeFAAAARU"]
[Tue Nov 25 05:09:12.743831 2025] [proxy_fcgi:error] [pid 14688:tid 14704] [client 4.233.64.129:62699] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:13.009390 2025] [proxy_fcgi:error] [pid 14688:tid 14698] [client 4.233.64.129:62699] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:13.254386 2025] [proxy_fcgi:error] [pid 14688:tid 14701] [client 4.233.64.129:62699] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:14.172608 2025] [proxy_fcgi:error] [pid 14688:tid 14708] [client 4.233.64.129:62699] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:14.721036 2025] [proxy_fcgi:error] [pid 14688:tid 14711] [client 4.233.64.129:62699] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:15.422755 2025] [proxy_fcgi:error] [pid 14688:tid 14701] [client 4.233.64.129:62699] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:09:15.678674 2025] [:error] [pid 14688:tid 14700] [client 4.233.64.129:62699] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTJe29vYrBoEsiDnizeLgAAAQo"]
[Tue Nov 25 05:09:18.344156 2025] [:error] [pid 14168:tid 14193] [client 4.233.64.129:9252] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTJfvR-ZDU0QEgAIItq2AAAANY"]
[Tue Nov 25 05:09:21.842737 2025] [:error] [pid 14078:tid 14153] [client 4.233.64.129:56707] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTJgdVXYbb0ii_rVoJG7AAAAJA"]
[Tue Nov 25 05:09:24.199819 2025] [:error] [pid 14688:tid 14690] [client 4.233.64.129:62661] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTJhG9vYrBoEsiDnizeSAAAAQA"]
[Tue Nov 25 05:09:26.764137 2025] [:error] [pid 14168:tid 14176] [client 4.233.64.129:58580] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSTJhvR-ZDU0QEgAIItq4AAAAMU"]
[Tue Nov 25 05:09:30.262626 2025] [:error] [pid 14688:tid 14707] [client 4.233.64.129:48606] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSTJim9vYrBoEsiDnizeTAAAARE"]
[Tue Nov 25 05:09:31.591461 2025] [:error] [pid 14077:tid 14115] [client 4.233.64.129:56711] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSTJixG9n7UHEkwDTyhM6wAAAEU"]
[Tue Nov 25 05:09:46.337962 2025] [:error] [pid 14076:tid 14087] [client 4.233.64.129:58610] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSTJmnsB4Gz6Qw-pvBsI5gAAAAY"]
[Tue Nov 25 05:09:49.351462 2025] [:error] [pid 14078:tid 14140] [client 4.233.64.129:56740] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSTJndVXYbb0ii_rVoJHJAAAAIM"]
[Tue Nov 25 05:09:51.000600 2025] [:error] [pid 14077:tid 14123] [client 4.233.64.129:62711] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSTJnhG9n7UHEkwDTyhNDAAAAE0"]
[Tue Nov 25 05:09:53.144653 2025] [:error] [pid 14078:tid 14149] [client 4.233.64.129:62705] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSTJodVXYbb0ii_rVoJHJQAAAIw"]
[Tue Nov 25 05:09:56.377134 2025] [:error] [pid 14078:tid 14161] [client 4.233.64.129:56714] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSTJpNVXYbb0ii_rVoJHKgAAAJg"]
[Tue Nov 25 05:09:57.520215 2025] [:error] [pid 14077:tid 14122] [client 4.233.64.129:49247] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aSTJpRG9n7UHEkwDTyhNEwAAAEw"]
[Tue Nov 25 05:10:01.488343 2025] [:error] [pid 14688:tid 14700] [client 4.233.64.129:59885] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aSTJqW9vYrBoEsiDnizeeAAAAQo"]
[Tue Nov 25 05:10:03.503898 2025] [:error] [pid 14688:tid 14696] [client 4.233.64.129:49256] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aSTJq29vYrBoEsiDnizeewAAAQY"]
[Tue Nov 25 05:10:13.466009 2025] [:error] [pid 14688:tid 14697] [client 4.233.64.129:47786] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aSTJtW9vYrBoEsiDnizefwAAAQc"]
[Tue Nov 25 05:10:17.880928 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:18.120116 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:18.359307 2025] [proxy_fcgi:error] [pid 14076:tid 14082] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:18.610045 2025] [proxy_fcgi:error] [pid 14076:tid 14096] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:19.359495 2025] [proxy_fcgi:error] [pid 14076:tid 14099] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:19.858160 2025] [proxy_fcgi:error] [pid 14076:tid 14093] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:20.098414 2025] [proxy_fcgi:error] [pid 14076:tid 14092] [client 4.233.64.129:47855] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:10:20.613696 2025] [:error] [pid 14076:tid 14104] [client 4.233.64.129:47855] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aSTJvHsB4Gz6Qw-pvBsJBgAAABc"]
[Tue Nov 25 05:10:23.190887 2025] [:error] [pid 14168:tid 14181] [client 4.233.64.129:44792] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aSTJv_R-ZDU0QEgAIItrtAAAAMo"]
[Tue Nov 25 05:10:26.976701 2025] [:error] [pid 14688:tid 14702] [client 4.233.64.129:9944] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aSTJwm9vYrBoEsiDnizekgAAAQw"]
[Tue Nov 25 05:10:30.320499 2025] [:error] [pid 14078:tid 14157] [client 4.233.64.129:55482] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aSTJxtVXYbb0ii_rVoJHRgAAAJQ"]
[Tue Nov 25 05:10:33.834725 2025] [:error] [pid 14078:tid 14155] [client 4.233.64.129:64050] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/multi.php"] [unique_id "aSTJydVXYbb0ii_rVoJHSgAAAJI"]
[Tue Nov 25 05:10:40.748696 2025] [:error] [pid 14078:tid 14152] [client 4.233.64.129:64020] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/multi.php"] [unique_id "aSTJ0NVXYbb0ii_rVoJHTwAAAI8"]
[Tue Nov 25 05:10:43.812845 2025] [:error] [pid 14077:tid 14131] [client 4.233.64.129:53636] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/multi.php"] [unique_id "aSTJ0xG9n7UHEkwDTyhNUQAAAFU"]
[Tue Nov 25 05:10:49.287645 2025] [:error] [pid 14077:tid 14117] [client 4.233.64.129:55439] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSTJ2RG9n7UHEkwDTyhNUwAAAEc"]
[Tue Nov 25 05:10:53.868697 2025] [:error] [pid 14168:tid 14185] [client 4.233.64.129:57429] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSTJ3fR-ZDU0QEgAIItsJwAAAM4"]
[Tue Nov 25 05:10:58.099606 2025] [:error] [pid 14078:tid 14152] [client 4.233.64.129:9665] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSTJ4tVXYbb0ii_rVoJHkAAAAI8"]
[Tue Nov 25 05:10:59.557219 2025] [:error] [pid 14077:tid 14113] [client 4.233.64.129:9669] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSTJ4xG9n7UHEkwDTyhNqQAAAEM"]
[Tue Nov 25 05:11:01.296300 2025] [:error] [pid 14688:tid 14713] [client 4.233.64.129:57430] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSTJ5W9vYrBoEsiDnize3wAAARc"]
[Tue Nov 25 05:11:04.140859 2025] [:error] [pid 14688:tid 14696] [client 4.233.64.129:59444] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSTJ6G9vYrBoEsiDnize5QAAAQY"]
[Tue Nov 25 05:11:08.096918 2025] [:error] [pid 14688:tid 14705] [client 4.233.64.129:60861] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSTJ7G9vYrBoEsiDnize6AAAAQ8"]
[Tue Nov 25 05:11:11.027443 2025] [:error] [pid 14168:tid 14179] [client 4.233.64.129:9636] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSTJ7_R-ZDU0QEgAIItsPgAAAMg"]
[Tue Nov 25 05:11:14.759365 2025] [:error] [pid 14078:tid 14150] [client 4.233.64.129:44689] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sk.php"] [unique_id "aSTJ8tVXYbb0ii_rVoJHoQAAAI0"]
[Tue Nov 25 05:11:15.840481 2025] [:error] [pid 14688:tid 14692] [client 4.233.64.129:56310] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sk.php"] [unique_id "aSTJ829vYrBoEsiDnize7AAAAQI"]
[Tue Nov 25 05:11:17.622076 2025] [:error] [pid 14077:tid 14118] [client 4.233.64.129:47841] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sk.php"] [unique_id "aSTJ9RG9n7UHEkwDTyhNuQAAAEg"]
[Tue Nov 25 05:11:18.564163 2025] [:error] [pid 14168:tid 14183] [client 4.233.64.129:56282] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sk.php"] [unique_id "aSTJ9vR-ZDU0QEgAIItsRwAAAMw"]
[Tue Nov 25 05:11:21.187768 2025] [proxy_fcgi:error] [pid 14076:tid 14083] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:21.470509 2025] [proxy_fcgi:error] [pid 14076:tid 14090] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:21.955159 2025] [proxy_fcgi:error] [pid 14076:tid 14093] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:22.681017 2025] [proxy_fcgi:error] [pid 14076:tid 14092] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:22.999249 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:23.317131 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:23.617245 2025] [proxy_fcgi:error] [pid 14076:tid 14098] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:23.877248 2025] [proxy_fcgi:error] [pid 14076:tid 14104] [client 4.233.64.129:60551] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:11:24.115344 2025] [:error] [pid 14076:tid 14088] [client 4.233.64.129:60551] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTJ_HsB4Gz6Qw-pvBsJLwAAAAc"]
[Tue Nov 25 05:11:26.983682 2025] [:error] [pid 14168:tid 14182] [client 4.233.64.129:47209] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTJ_vR-ZDU0QEgAIItsUgAAAMs"]
[Tue Nov 25 05:11:30.777059 2025] [:error] [pid 14168:tid 14190] [client 4.233.64.129:47170] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTKAvR-ZDU0QEgAIItsVwAAANM"]
[Tue Nov 25 05:11:38.182839 2025] [:error] [pid 14688:tid 14690] [client 4.233.64.129:10053] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTKCm9vYrBoEsiDnizfBAAAAQA"]
[Tue Nov 25 05:12:48.804323 2025] [proxy_fcgi:error] [pid 14688:tid 14693] [client 4.233.64.129:9452] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:49.286156 2025] [proxy_fcgi:error] [pid 14688:tid 14711] [client 4.233.64.129:9452] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:49.544601 2025] [proxy_fcgi:error] [pid 14688:tid 14695] [client 4.233.64.129:9452] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:49.796688 2025] [:error] [pid 14688:tid 14692] [client 4.233.64.129:9452] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSTKUW9vYrBoEsiDnizfhAAAAQI"]
[Tue Nov 25 05:12:51.603777 2025] [proxy_fcgi:error] [pid 14168:tid 14191] [client 4.233.64.129:9460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:51.870787 2025] [proxy_fcgi:error] [pid 14168:tid 14185] [client 4.233.64.129:9460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:52.131161 2025] [proxy_fcgi:error] [pid 14168:tid 14172] [client 4.233.64.129:9460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:53.996863 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 4.233.64.129:9460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:54.232478 2025] [:error] [pid 14168:tid 14173] [client 4.233.64.129:9460] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSTKVvR-ZDU0QEgAIIttMAAAAMI"]
[Tue Nov 25 05:12:59.467215 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 4.233.64.129:44079] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:59.709162 2025] [proxy_fcgi:error] [pid 14168:tid 14172] [client 4.233.64.129:44079] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:12:59.950703 2025] [:error] [pid 14168:tid 14186] [client 4.233.64.129:44079] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSTKW_R-ZDU0QEgAIIttOQAAAM8"]
[Tue Nov 25 05:13:06.639040 2025] [:error] [pid 14168:tid 14171] [client 4.233.64.129:44078] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSTKYvR-ZDU0QEgAIIttRAAAAMA"]
[Tue Nov 25 05:13:14.636272 2025] [:error] [pid 14076:tid 14103] [client 4.233.64.129:9420] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSTKansB4Gz6Qw-pvBsJgAAAABY"]
[Tue Nov 25 05:13:25.229347 2025] [:error] [pid 14688:tid 14691] [client 4.233.64.129:9781] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usage-file.php"] [unique_id "aSTKdW9vYrBoEsiDnizfmQAAAQE"]
[Tue Nov 25 05:13:28.313255 2025] [:error] [pid 14168:tid 14185] [client 4.233.64.129:51789] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usage-file.php"] [unique_id "aSTKePR-ZDU0QEgAIIttbAAAAM4"]
[Tue Nov 25 05:13:33.260529 2025] [:error] [pid 14168:tid 14186] [client 4.233.64.129:44032] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSTKffR-ZDU0QEgAIIttcgAAAM8"]
[Tue Nov 25 05:13:39.340226 2025] [:error] [pid 14168:tid 14186] [client 4.233.64.129:9515] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Js.php"] [unique_id "aSTKg_R-ZDU0QEgAIIttfgAAAM8"]
[Tue Nov 25 05:13:48.539616 2025] [:error] [pid 14077:tid 14119] [client 4.233.64.129:9732] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Js.php"] [unique_id "aSTKjBG9n7UHEkwDTyhORAAAAEk"]
[Tue Nov 25 05:13:50.083880 2025] [:error] [pid 14076:tid 14100] [client 4.233.64.129:51809] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aSTKjnsB4Gz6Qw-pvBsJkwAAABM"]
[Tue Nov 25 05:13:51.760799 2025] [:error] [pid 14168:tid 14178] [client 4.233.64.129:9530] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aSTKj_R-ZDU0QEgAIIttkAAAAMc"]
[Tue Nov 25 05:14:28.718038 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 4.233.64.129:48523] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:28.970662 2025] [proxy_fcgi:error] [pid 14168:tid 14176] [client 4.233.64.129:48523] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:29.216037 2025] [proxy_fcgi:error] [pid 14168:tid 14181] [client 4.233.64.129:48523] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:29.456929 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 4.233.64.129:48523] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 06:01:55.948582 2025] [autoindex:error] [pid 14168:tid 14191] [client 91.206.169.102:59935] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 06:01:55.975389 2025] [proxy_fcgi:error] [pid 1103:tid 1118] [client 91.206.169.102:59886] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 06:01:56.247712 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 91.206.169.102:59935] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 06:01:57.324271 2025] [proxy_fcgi:error] [pid 1103:tid 1109] [client 91.206.169.102:64974] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 06:01:57.594828 2025] [proxy_fcgi:error] [pid 1103:tid 1131] [client 91.206.169.102:52996] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Nov 25 06:04:11.718570 2025] [:error] [pid 1103:tid 1131] [client 147.185.41.135:43732] [client 147.185.41.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSTWW40LETdqOlq63sQEqwAAAVY"]
[Tue Nov 25 06:17:21.649275 2025] [autoindex:error] [pid 14076:tid 14098] [client 198.235.24.75:57638] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 06:33:10.248107 2025] [autoindex:error] [pid 14078:tid 14146] [client 185.39.19.34:50868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Nov 25 06:33:10.815148 2025] [autoindex:error] [pid 14168:tid 14185] [client 185.39.19.34:50996] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Nov 25 06:33:11.389702 2025] [autoindex:error] [pid 14076:tid 14090] [client 185.39.19.34:51321] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Nov 25 06:33:11.966560 2025] [autoindex:error] [pid 14168:tid 14173] [client 185.39.19.34:51533] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Nov 25 07:51:32.215352 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 20.119.245.186:10892] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:51:32.423488 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 20.119.245.186:10892] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:51:33.819284 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 20.119.245.186:10892] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:51:34.027389 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 20.119.245.186:10892] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:51:34.245064 2025] [:error] [pid 14078:tid 14150] [client 20.119.245.186:10892] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSTvhtVXYbb0ii_rVoJt1wAAAI0"]
[Tue Nov 25 07:51:36.067601 2025] [:error] [pid 14077:tid 14115] [client 20.119.245.186:8779] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSTviBG9n7UHEkwDTyhzxAAAAEU"]
[Tue Nov 25 07:51:41.981421 2025] [:error] [pid 14077:tid 14131] [client 20.119.245.186:4821] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSTvjRG9n7UHEkwDTyhzywAAAFU"]
[Tue Nov 25 07:51:54.156246 2025] [:error] [pid 1103:tid 1132] [client 20.119.245.186:8188] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSTvmo0LETdqOlq63sQu5gAAAVc"]
[Tue Nov 25 07:51:56.610513 2025] [:error] [pid 14076:tid 14082] [client 20.119.245.186:13067] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSTvnHsB4Gz6Qw-pvBsspAAAAAE"]
[Tue Nov 25 07:51:58.165537 2025] [:error] [pid 14078:tid 14141] [client 20.119.245.186:2267] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSTvntVXYbb0ii_rVoJt6gAAAIQ"]
[Tue Nov 25 07:52:01.133202 2025] [:error] [pid 14168:tid 14179] [client 20.119.245.186:3205] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSTvofR-ZDU0QEgAIIucvwAAAMg"]
[Tue Nov 25 07:52:02.927237 2025] [:error] [pid 14168:tid 14175] [client 20.119.245.186:7535] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSTvovR-ZDU0QEgAIIucwQAAAMQ"]
[Tue Nov 25 07:52:04.562124 2025] [:error] [pid 14168:tid 14193] [client 20.119.245.186:9586] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSTvpPR-ZDU0QEgAIIucygAAANY"]
[Tue Nov 25 07:52:06.106795 2025] [:error] [pid 14168:tid 14173] [client 20.119.245.186:1570] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSTvpvR-ZDU0QEgAIIuczQAAAMI"]
[Tue Nov 25 07:52:08.723307 2025] [:error] [pid 1103:tid 1114] [client 20.119.245.186:8879] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSTvqI0LETdqOlq63sQvGAAAAUU"]
[Tue Nov 25 07:52:09.965814 2025] [:error] [pid 14076:tid 14101] [client 20.119.245.186:5000] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSTvqXsB4Gz6Qw-pvBsstAAAABQ"]
[Tue Nov 25 07:52:11.888723 2025] [:error] [pid 14078:tid 14145] [client 20.119.245.186:8840] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSTvq9VXYbb0ii_rVoJt8gAAAIg"]
[Tue Nov 25 07:52:15.609526 2025] [:error] [pid 14077:tid 14120] [client 20.119.245.186:9441] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSTvrxG9n7UHEkwDTyh0HQAAAEo"]
[Tue Nov 25 07:52:20.545366 2025] [:error] [pid 14168:tid 14183] [client 20.119.245.186:9457] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSTvtPR-ZDU0QEgAIIuc1wAAAMw"]
[Tue Nov 25 07:52:22.121822 2025] [:error] [pid 14168:tid 14172] [client 20.119.245.186:6612] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSTvtvR-ZDU0QEgAIIuc2QAAAME"]
[Tue Nov 25 07:52:24.607330 2025] [:error] [pid 14076:tid 14100] [client 20.119.245.186:5639] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSTvuHsB4Gz6Qw-pvBssvwAAABM"]
[Tue Nov 25 07:52:25.889163 2025] [:error] [pid 14077:tid 14130] [client 20.119.245.186:8182] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSTvuRG9n7UHEkwDTyh0JQAAAFQ"]
[Tue Nov 25 07:52:26.838608 2025] [:error] [pid 14168:tid 14179] [client 20.119.245.186:1609] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSTvuvR-ZDU0QEgAIIuc3wAAAMg"]
[Tue Nov 25 07:52:28.444907 2025] [:error] [pid 14077:tid 14119] [client 20.119.245.186:8859] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aSTvvBG9n7UHEkwDTyh0JwAAAEk"]
[Tue Nov 25 07:52:31.384688 2025] [:error] [pid 14077:tid 14131] [client 20.119.245.186:9557] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aSTvvxG9n7UHEkwDTyh0KQAAAFU"]
[Tue Nov 25 07:52:34.463297 2025] [proxy_fcgi:error] [pid 14688:tid 14709] [client 20.119.245.186:5638] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:52:34.799722 2025] [proxy_fcgi:error] [pid 14688:tid 14693] [client 20.119.245.186:5638] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:52:35.085389 2025] [proxy_fcgi:error] [pid 14688:tid 14713] [client 20.119.245.186:5638] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:52:35.296785 2025] [proxy_fcgi:error] [pid 14688:tid 14696] [client 20.119.245.186:5638] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:52:35.559024 2025] [proxy_fcgi:error] [pid 14688:tid 14707] [client 20.119.245.186:5638] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:52:35.780909 2025] [proxy_fcgi:error] [pid 14688:tid 14702] [client 20.119.245.186:5638] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:52:35.986259 2025] [:error] [pid 14688:tid 14695] [client 20.119.245.186:5638] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSTvw29vYrBoEsiDniwKLAAAAQU"]
[Tue Nov 25 07:52:37.310097 2025] [:error] [pid 14077:tid 14129] [client 20.119.245.186:5648] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSTvxRG9n7UHEkwDTyh0NQAAAFM"]
[Tue Nov 25 07:52:38.637962 2025] [:error] [pid 14168:tid 14190] [client 20.119.245.186:8156] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSTvxvR-ZDU0QEgAIIuc6gAAANM"]
[Tue Nov 25 07:52:39.746960 2025] [:error] [pid 14076:tid 14086] [client 20.119.245.186:5650] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSTvx3sB4Gz6Qw-pvBsswwAAAAU"]
[Tue Nov 25 07:52:42.460368 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:3107] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSTvyhG9n7UHEkwDTyh0NwAAAEE"]
[Tue Nov 25 07:52:46.959644 2025] [:error] [pid 14078:tid 14139] [client 20.119.245.186:10680] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSTvztVXYbb0ii_rVoJuCgAAAII"]
[Tue Nov 25 07:52:47.792278 2025] [:error] [pid 14078:tid 14151] [client 20.119.245.186:10567] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSTvz9VXYbb0ii_rVoJuDAAAAI4"]
[Tue Nov 25 07:52:50.255343 2025] [:error] [pid 1103:tid 1113] [client 20.119.245.186:6490] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSTv0o0LETdqOlq63sQvMwAAAUQ"]
[Tue Nov 25 07:52:51.714429 2025] [:error] [pid 1103:tid 1132] [client 20.119.245.186:9422] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSTv040LETdqOlq63sQvNAAAAVc"]
[Tue Nov 25 07:52:55.234442 2025] [:error] [pid 1103:tid 1126] [client 20.119.245.186:1541] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSTv140LETdqOlq63sQvTAAAAVE"]
[Tue Nov 25 07:52:57.776432 2025] [:error] [pid 1103:tid 1131] [client 20.119.245.186:9408] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSTv2Y0LETdqOlq63sQvUQAAAVY"]
[Tue Nov 25 07:53:04.017212 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:11910] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSTv4BG9n7UHEkwDTyh0VQAAAEE"]
[Tue Nov 25 07:53:04.819869 2025] [:error] [pid 1103:tid 1130] [client 20.119.245.186:9599] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTv4I0LETdqOlq63sQvVAAAAVU"]
[Tue Nov 25 07:53:05.889753 2025] [:error] [pid 14168:tid 14175] [client 20.119.245.186:1637] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTv4fR-ZDU0QEgAIIuc_AAAAMQ"]
[Tue Nov 25 07:53:07.267469 2025] [:error] [pid 14077:tid 14119] [client 20.119.245.186:10742] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTv4xG9n7UHEkwDTyh0WwAAAEk"]
[Tue Nov 25 07:53:10.155830 2025] [:error] [pid 1103:tid 1119] [client 20.119.245.186:5634] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSTv5o0LETdqOlq63sQvYQAAAUo"]
[Tue Nov 25 07:53:12.203692 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:7048] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSTv6BG9n7UHEkwDTyh0ZQAAAEE"]
[Tue Nov 25 07:53:14.387802 2025] [:error] [pid 14077:tid 14128] [client 20.119.245.186:5667] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSTv6hG9n7UHEkwDTyh0aQAAAFI"]
[Tue Nov 25 07:53:15.838854 2025] [:error] [pid 14168:tid 14184] [client 20.119.245.186:10713] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSTv6_R-ZDU0QEgAIIudAwAAAM0"]
[Tue Nov 25 07:53:17.855990 2025] [:error] [pid 14078:tid 14146] [client 20.119.245.186:4084] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSTv7dVXYbb0ii_rVoJuNgAAAIk"]
[Tue Nov 25 07:53:21.271932 2025] [:error] [pid 14688:tid 14691] [client 20.119.245.186:7053] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSTv8W9vYrBoEsiDniwKMwAAAQE"]
[Tue Nov 25 07:53:23.381537 2025] [:error] [pid 14688:tid 14713] [client 20.119.245.186:9537] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSTv829vYrBoEsiDniwKNwAAARc"]
[Tue Nov 25 07:53:24.791118 2025] [:error] [pid 14077:tid 14117] [client 20.119.245.186:8834] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSTv9BG9n7UHEkwDTyh0egAAAEc"]
[Tue Nov 25 07:53:28.238242 2025] [:error] [pid 14078:tid 14153] [client 20.119.245.186:5685] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSTv-NVXYbb0ii_rVoJuQAAAAJA"]
[Tue Nov 25 07:53:29.815415 2025] [:error] [pid 14168:tid 14187] [client 20.119.245.186:1577] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSTv-fR-ZDU0QEgAIIudDwAAANA"]
[Tue Nov 25 07:53:30.682424 2025] [:error] [pid 14077:tid 14121] [client 20.119.245.186:4748] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSTv-hG9n7UHEkwDTyh0igAAAEs"]
[Tue Nov 25 07:53:31.924298 2025] [:error] [pid 1103:tid 1120] [client 20.119.245.186:1482] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSTv-40LETdqOlq63sQveAAAAUs"]
[Tue Nov 25 07:53:35.088625 2025] [proxy_fcgi:error] [pid 14077:tid 14116] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:35.296492 2025] [proxy_fcgi:error] [pid 14077:tid 14122] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:35.504464 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:35.713158 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:35.978915 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:36.198901 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:36.408754 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:36.715242 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:36.934243 2025] [proxy_fcgi:error] [pid 14077:tid 14118] [client 20.119.245.186:1241] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:53:37.139701 2025] [:error] [pid 14077:tid 14117] [client 20.119.245.186:1241] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTwARG9n7UHEkwDTyh0nwAAAEc"]
[Tue Nov 25 07:53:39.874550 2025] [:error] [pid 1103:tid 1130] [client 20.119.245.186:1655] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTwA40LETdqOlq63sQvgAAAAVU"]
[Tue Nov 25 07:53:42.770671 2025] [:error] [pid 14078:tid 14160] [client 20.119.245.186:8298] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTwBtVXYbb0ii_rVoJuXAAAAJc"]
[Tue Nov 25 07:53:48.658232 2025] [:error] [pid 14077:tid 14130] [client 20.119.245.186:1658] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTwDBG9n7UHEkwDTyh0rAAAAFQ"]
[Tue Nov 25 07:53:51.783892 2025] [:error] [pid 1103:tid 1120] [client 20.119.245.186:3106] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSTwD40LETdqOlq63sQvhQAAAUs"]
[Tue Nov 25 07:54:01.712718 2025] [:error] [pid 14168:tid 14180] [client 20.119.245.186:3132] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aSTwGfR-ZDU0QEgAIIudOAAAAMk"]
[Tue Nov 25 07:54:06.056853 2025] [:error] [pid 1103:tid 1122] [client 20.119.245.186:5107] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aSTwHo0LETdqOlq63sQvlAAAAU0"]
[Tue Nov 25 07:54:08.690801 2025] [:error] [pid 14076:tid 14094] [client 20.119.245.186:4939] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSTwIHsB4Gz6Qw-pvBstKQAAAA0"]
[Tue Nov 25 07:54:10.495839 2025] [:error] [pid 14076:tid 14093] [client 20.119.245.186:4218] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSTwInsB4Gz6Qw-pvBstLQAAAAw"]
[Tue Nov 25 07:54:11.763266 2025] [:error] [pid 14168:tid 14180] [client 20.119.245.186:3836] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSTwI_R-ZDU0QEgAIIudSwAAAMk"]
[Tue Nov 25 07:54:12.441921 2025] [:error] [pid 14078:tid 14149] [client 20.119.245.186:5111] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSTwJNVXYbb0ii_rVoJulAAAAIw"]
[Tue Nov 25 07:54:13.602852 2025] [:error] [pid 14077:tid 14124] [client 20.119.245.186:4186] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfu.php"] [unique_id "aSTwJRG9n7UHEkwDTyh0wwAAAE4"]
[Tue Nov 25 07:54:16.365222 2025] [:error] [pid 1103:tid 1112] [client 20.119.245.186:5814] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfu.php"] [unique_id "aSTwKI0LETdqOlq63sQvnwAAAUM"]
[Tue Nov 25 07:54:29.618841 2025] [:error] [pid 1103:tid 1115] [client 20.119.245.186:10257] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/nfu.php"] [unique_id "aSTwNY0LETdqOlq63sQwDwAAAUY"]
[Tue Nov 25 07:54:31.223866 2025] [:error] [pid 14688:tid 14707] [client 20.119.245.186:6502] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/nfu.php"] [unique_id "aSTwN29vYrBoEsiDniwKtgAAARE"]
[Tue Nov 25 07:54:33.833913 2025] [:error] [pid 14076:tid 14084] [client 20.119.245.186:10330] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/nfu.php"] [unique_id "aSTwOXsB4Gz6Qw-pvBstQgAAAAM"]
[Tue Nov 25 07:54:39.494967 2025] [proxy_fcgi:error] [pid 14077:tid 14125] [client 20.119.245.186:7021] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:54:39.708755 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 20.119.245.186:7021] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:54:40.040275 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 20.119.245.186:7021] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:54:40.253783 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 20.119.245.186:7021] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:54:40.482810 2025] [proxy_fcgi:error] [pid 14077:tid 14128] [client 20.119.245.186:7021] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:54:40.763693 2025] [proxy_fcgi:error] [pid 14077:tid 14114] [client 20.119.245.186:7021] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:54:40.972514 2025] [:error] [pid 14077:tid 14117] [client 20.119.245.186:7021] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTwQBG9n7UHEkwDTyh09wAAAEc"]
[Tue Nov 25 07:54:45.266713 2025] [:error] [pid 14076:tid 14090] [client 20.119.245.186:10129] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTwRXsB4Gz6Qw-pvBstSAAAAAk"]
[Tue Nov 25 07:54:46.047791 2025] [:error] [pid 14077:tid 14133] [client 20.119.245.186:1171] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTwRhG9n7UHEkwDTyh1AQAAAFc"]
[Tue Nov 25 07:54:47.432065 2025] [:error] [pid 14078:tid 14149] [client 20.119.245.186:6388] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTwR9VXYbb0ii_rVoJuqgAAAIw"]
[Tue Nov 25 07:54:48.368339 2025] [:error] [pid 14076:tid 14089] [client 20.119.245.186:1179] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTwSHsB4Gz6Qw-pvBstSgAAAAg"]
[Tue Nov 25 07:54:49.783145 2025] [:error] [pid 14076:tid 14087] [client 20.119.245.186:1187] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTwSXsB4Gz6Qw-pvBstTQAAAAY"]
[Tue Nov 25 07:54:54.588411 2025] [:error] [pid 1103:tid 1120] [client 20.119.245.186:8936] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTwTo0LETdqOlq63sQwRAAAAUs"]
[Tue Nov 25 07:54:55.499830 2025] [:error] [pid 14078:tid 14139] [client 20.119.245.186:4478] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTwT9VXYbb0ii_rVoJurQAAAII"]
[Tue Nov 25 07:55:04.370242 2025] [:error] [pid 14076:tid 14101] [client 20.119.245.186:2076] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e56.php"] [unique_id "aSTwWHsB4Gz6Qw-pvBstbAAAABQ"]
[Tue Nov 25 07:55:16.627891 2025] [:error] [pid 14688:tid 14708] [client 20.119.245.186:5457] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSTwZG9vYrBoEsiDniwK5AAAARI"]
[Tue Nov 25 07:55:17.734761 2025] [:error] [pid 14688:tid 14699] [client 20.119.245.186:4640] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSTwZW9vYrBoEsiDniwK5QAAAQk"]
[Tue Nov 25 07:55:20.160484 2025] [:error] [pid 14077:tid 14128] [client 20.119.245.186:4630] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSTwaBG9n7UHEkwDTyh1MgAAAFI"]
[Tue Nov 25 07:55:32.856462 2025] [:error] [pid 14076:tid 14103] [client 20.119.245.186:10969] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSTwdHsB4Gz6Qw-pvBstggAAABY"]
[Tue Nov 25 07:55:34.562770 2025] [:error] [pid 14076:tid 14102] [client 20.119.245.186:12834] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSTwdnsB4Gz6Qw-pvBsthgAAABU"]
[Tue Nov 25 07:55:37.816492 2025] [:error] [pid 1103:tid 1115] [client 20.119.245.186:2517] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSTweY0LETdqOlq63sQwXAAAAUY"]
[Tue Nov 25 07:55:39.608294 2025] [:error] [pid 14076:tid 14088] [client 20.119.245.186:8321] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSTwe3sB4Gz6Qw-pvBstjwAAAAc"]
[Tue Nov 25 07:55:40.993424 2025] [proxy_fcgi:error] [pid 1103:tid 1121] [client 20.119.245.186:4652] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:55:41.206035 2025] [proxy_fcgi:error] [pid 1103:tid 1110] [client 20.119.245.186:4652] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:55:41.536605 2025] [proxy_fcgi:error] [pid 1103:tid 1124] [client 20.119.245.186:4652] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:55:41.746985 2025] [proxy_fcgi:error] [pid 1103:tid 1114] [client 20.119.245.186:4652] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:55:42.015433 2025] [:error] [pid 1103:tid 1125] [client 20.119.245.186:4652] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSTwfo0LETdqOlq63sQwYgAAAVA"]
[Tue Nov 25 07:55:44.825267 2025] [:error] [pid 14077:tid 14113] [client 20.119.245.186:3100] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSTwgBG9n7UHEkwDTyh1ggAAAEM"]
[Tue Nov 25 07:55:46.181311 2025] [:error] [pid 1103:tid 1132] [client 20.119.245.186:10659] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSTwgo0LETdqOlq63sQwZgAAAVc"]
[Tue Nov 25 07:55:47.386700 2025] [:error] [pid 14688:tid 14707] [client 20.119.245.186:2550] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSTwg29vYrBoEsiDniwLDwAAARE"]
[Tue Nov 25 07:55:58.908981 2025] [:error] [pid 14688:tid 14696] [client 20.119.245.186:3866] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSTwjm9vYrBoEsiDniwLKAAAAQY"]
[Tue Nov 25 07:56:00.066499 2025] [:error] [pid 14077:tid 14134] [client 20.119.245.186:7762] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSTwkBG9n7UHEkwDTyh12wAAAFg"]
[Tue Nov 25 07:56:10.818993 2025] [:error] [pid 14078:tid 14153] [client 20.119.245.186:5918] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSTwmtVXYbb0ii_rVoJvEgAAAJA"]
[Tue Nov 25 07:56:12.640799 2025] [:error] [pid 14078:tid 14143] [client 20.119.245.186:4319] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSTwnNVXYbb0ii_rVoJvJQAAAIY"]
[Tue Nov 25 07:56:16.893326 2025] [:error] [pid 14168:tid 14183] [client 20.119.245.186:8541] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSTwoPR-ZDU0QEgAIIud1AAAAMw"]
[Tue Nov 25 07:56:19.163208 2025] [:error] [pid 14168:tid 14194] [client 20.119.245.186:7806] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSTwo_R-ZDU0QEgAIIud2QAAANc"]
[Tue Nov 25 07:56:23.621479 2025] [:error] [pid 14077:tid 14120] [client 20.119.245.186:4282] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSTwpxG9n7UHEkwDTyh2TwAAAEo"]
[Tue Nov 25 07:56:24.331482 2025] [:error] [pid 14078:tid 14158] [client 20.119.245.186:9611] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSTwqNVXYbb0ii_rVoJvaQAAAJU"]
[Tue Nov 25 07:56:26.062515 2025] [:error] [pid 14077:tid 14131] [client 20.119.245.186:5246] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSTwqhG9n7UHEkwDTyh2VQAAAFU"]
[Tue Nov 25 07:56:31.293119 2025] [:error] [pid 14168:tid 14175] [client 20.119.245.186:5225] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSTwr_R-ZDU0QEgAIIud_gAAAMQ"]
[Tue Nov 25 07:56:35.472462 2025] [:error] [pid 14076:tid 14104] [client 20.119.245.186:2646] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSTws3sB4Gz6Qw-pvBst-wAAABc"]
[Tue Nov 25 07:56:38.507593 2025] [:error] [pid 1103:tid 1110] [client 20.119.245.186:2665] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSTwto0LETdqOlq63sQwnQAAAUE"]
[Tue Nov 25 07:56:39.888097 2025] [:error] [pid 14168:tid 14172] [client 20.119.245.186:10074] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSTwt_R-ZDU0QEgAIIueAgAAAME"]
[Tue Nov 25 07:56:42.010256 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:42.215215 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:42.421449 2025] [proxy_fcgi:error] [pid 14078:tid 14148] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:42.632683 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:42.842042 2025] [proxy_fcgi:error] [pid 14078:tid 14155] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:43.046099 2025] [proxy_fcgi:error] [pid 14078:tid 14151] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:43.265492 2025] [proxy_fcgi:error] [pid 14078:tid 14139] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:43.473963 2025] [proxy_fcgi:error] [pid 14078:tid 14145] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:43.746435 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:44.064112 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:44.271309 2025] [proxy_fcgi:error] [pid 14078:tid 14143] [client 20.119.245.186:3668] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:56:44.473093 2025] [:error] [pid 14078:tid 14160] [client 20.119.245.186:3668] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSTwvNVXYbb0ii_rVoJvgQAAAJc"]
[Tue Nov 25 07:56:50.902403 2025] [:error] [pid 14078:tid 14159] [client 20.119.245.186:1772] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSTwwtVXYbb0ii_rVoJviAAAAJY"]
[Tue Nov 25 07:56:52.156310 2025] [:error] [pid 14078:tid 14158] [client 20.119.245.186:1734] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSTwxNVXYbb0ii_rVoJviQAAAJU"]
[Tue Nov 25 07:56:56.245608 2025] [:error] [pid 14077:tid 14119] [client 20.119.245.186:1951] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSTwyBG9n7UHEkwDTyh2bQAAAEk"]
[Tue Nov 25 07:56:58.487832 2025] [:error] [pid 1103:tid 1129] [client 20.119.245.186:1921] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aSTwyo0LETdqOlq63sQwrgAAAVQ"]
[Tue Nov 25 07:57:04.782866 2025] [:error] [pid 14077:tid 14128] [client 20.119.245.186:12485] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aSTw0BG9n7UHEkwDTyh2dwAAAFI"]
[Tue Nov 25 07:57:16.053976 2025] [:error] [pid 14078:tid 14141] [client 20.119.245.186:9632] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTw3NVXYbb0ii_rVoJvoQAAAIQ"]
[Tue Nov 25 07:57:18.828970 2025] [:error] [pid 14077:tid 14122] [client 20.119.245.186:6269] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTw3hG9n7UHEkwDTyh2oAAAAEw"]
[Tue Nov 25 07:57:19.715399 2025] [:error] [pid 14076:tid 14097] [client 20.119.245.186:3915] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTw33sB4Gz6Qw-pvBsuEQAAABA"]
[Tue Nov 25 07:57:22.583789 2025] [:error] [pid 14688:tid 14696] [client 20.119.245.186:7181] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSTw4m9vYrBoEsiDniwLoQAAAQY"]
[Tue Nov 25 07:57:26.724753 2025] [:error] [pid 14076:tid 14102] [client 20.119.245.186:5048] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSTw5nsB4Gz6Qw-pvBsuGwAAABU"]
[Tue Nov 25 07:57:30.710736 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:2754] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSTw6hG9n7UHEkwDTyh2sQAAAEE"]
[Tue Nov 25 07:57:31.622058 2025] [:error] [pid 14078:tid 14148] [client 20.119.245.186:6237] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSTw69VXYbb0ii_rVoJv2wAAAIs"]
[Tue Nov 25 07:57:35.492464 2025] [:error] [pid 14688:tid 14698] [client 20.119.245.186:11076] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSTw729vYrBoEsiDniwLswAAAQg"]
[Tue Nov 25 07:57:40.029149 2025] [:error] [pid 14076:tid 14094] [client 20.119.245.186:1909] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/02.php"] [unique_id "aSTw9HsB4Gz6Qw-pvBsuRAAAAA0"]
[Tue Nov 25 07:57:44.896879 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:45.108470 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:45.322952 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:45.531070 2025] [proxy_fcgi:error] [pid 14078:tid 14139] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:45.741901 2025] [proxy_fcgi:error] [pid 14078:tid 14145] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:46.209384 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:46.417430 2025] [proxy_fcgi:error] [pid 14078:tid 14142] [client 20.119.245.186:9588] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:46.621915 2025] [:error] [pid 14078:tid 14161] [client 20.119.245.186:9588] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSTw-tVXYbb0ii_rVoJv6gAAAJg"]
[Tue Nov 25 07:57:47.888333 2025] [:error] [pid 14078:tid 14137] [client 20.119.245.186:2244] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSTw-9VXYbb0ii_rVoJv7QAAAIA"]
[Tue Nov 25 07:57:48.840869 2025] [proxy_fcgi:error] [pid 14688:tid 14691] [client 20.119.245.186:2804] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:49.049490 2025] [proxy_fcgi:error] [pid 14688:tid 14699] [client 20.119.245.186:2804] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:49.263512 2025] [proxy_fcgi:error] [pid 14688:tid 14704] [client 20.119.245.186:2804] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:57:49.464757 2025] [:error] [pid 14688:tid 14690] [client 20.119.245.186:2804] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTw_W9vYrBoEsiDniwLwQAAAQA"]
[Tue Nov 25 07:57:52.115855 2025] [:error] [pid 14077:tid 14131] [client 20.119.245.186:8151] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTxABG9n7UHEkwDTyh20AAAAFU"]
[Tue Nov 25 07:57:53.854996 2025] [:error] [pid 14688:tid 14695] [client 20.119.245.186:3641] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTxAW9vYrBoEsiDniwLwgAAAQU"]
[Tue Nov 25 07:57:58.742314 2025] [:error] [pid 14077:tid 14129] [client 20.119.245.186:11133] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSTxBhG9n7UHEkwDTyh21gAAAFM"]
[Tue Nov 25 07:57:59.895377 2025] [:error] [pid 1103:tid 1132] [client 20.119.245.186:13058] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSTxB40LETdqOlq63sQw8wAAAVc"]
[Tue Nov 25 07:58:02.267247 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:1148] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSTxChG9n7UHEkwDTyh23QAAAEE"]
[Tue Nov 25 07:58:03.156609 2025] [:error] [pid 14077:tid 14131] [client 20.119.245.186:3214] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSTxCxG9n7UHEkwDTyh24QAAAFU"]
[Tue Nov 25 07:58:04.518037 2025] [:error] [pid 14078:tid 14154] [client 20.119.245.186:1538] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSTxDNVXYbb0ii_rVoJv9wAAAJE"]
[Tue Nov 25 07:58:07.528234 2025] [:error] [pid 14076:tid 14105] [client 20.119.245.186:2882] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSTxD3sB4Gz6Qw-pvBsuUwAAABg"]
[Tue Nov 25 07:58:09.090062 2025] [:error] [pid 14077:tid 14133] [client 20.119.245.186:3642] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSTxERG9n7UHEkwDTyh26QAAAFc"]
[Tue Nov 25 07:58:10.302738 2025] [:error] [pid 1103:tid 1109] [client 20.119.245.186:13107] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSTxEo0LETdqOlq63sQw-QAAAUA"]
[Tue Nov 25 07:58:12.687422 2025] [:error] [pid 14168:tid 14189] [client 20.119.245.186:1240] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSTxFPR-ZDU0QEgAIIuePQAAANI"]
[Tue Nov 25 07:58:13.949304 2025] [:error] [pid 1103:tid 1117] [client 20.119.245.186:1541] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSTxFY0LETdqOlq63sQw-wAAAUg"]
[Tue Nov 25 07:58:15.695679 2025] [:error] [pid 14077:tid 14130] [client 20.119.245.186:3622] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSTxFxG9n7UHEkwDTyh2_QAAAFQ"]
[Tue Nov 25 07:58:17.440063 2025] [:error] [pid 14077:tid 14121] [client 20.119.245.186:1526] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSTxGRG9n7UHEkwDTyh3BwAAAEs"]
[Tue Nov 25 07:58:18.590024 2025] [:error] [pid 14168:tid 14174] [client 20.119.245.186:2256] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSTxGvR-ZDU0QEgAIIueWAAAAMM"]
[Tue Nov 25 07:58:23.562371 2025] [:error] [pid 14078:tid 14147] [client 20.119.245.186:11057] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSTxH9VXYbb0ii_rVoJwEgAAAIo"]
[Tue Nov 25 07:58:28.523454 2025] [:error] [pid 14076:tid 14095] [client 20.119.245.186:1282] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSTxJHsB4Gz6Qw-pvBsuYwAAAA4"]
[Tue Nov 25 07:58:29.927636 2025] [:error] [pid 14077:tid 14115] [client 20.119.245.186:11907] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSTxJRG9n7UHEkwDTyh3IgAAAEU"]
[Tue Nov 25 07:58:38.928173 2025] [:error] [pid 1103:tid 1114] [client 20.119.245.186:10565] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSTxLo0LETdqOlq63sQxVgAAAUU"]
[Tue Nov 25 07:58:43.823407 2025] [:error] [pid 14168:tid 14193] [client 20.119.245.186:6135] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSTxM_R-ZDU0QEgAIIuedgAAANY"]
[Tue Nov 25 07:58:44.773846 2025] [:error] [pid 14078:tid 14137] [client 20.119.245.186:12073] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSTxNNVXYbb0ii_rVoJwJQAAAIA"]
[Tue Nov 25 07:58:45.650669 2025] [:error] [pid 1103:tid 1128] [client 20.119.245.186:9007] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSTxNY0LETdqOlq63sQxXQAAAVM"]
[Tue Nov 25 07:58:48.165418 2025] [:error] [pid 14688:tid 14708] [client 20.119.245.186:7116] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSTxOG9vYrBoEsiDniwMEAAAARI"]
[Tue Nov 25 07:58:49.154835 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 20.119.245.186:10363] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:58:49.904173 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 20.119.245.186:10363] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:58:50.280412 2025] [:error] [pid 14077:tid 14129] [client 20.119.245.186:10363] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSTxOhG9n7UHEkwDTyh3PAAAAFM"]
[Tue Nov 25 07:58:51.483961 2025] [proxy_fcgi:error] [pid 14078:tid 14152] [client 20.119.245.186:6473] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:58:51.688526 2025] [:error] [pid 14078:tid 14160] [client 20.119.245.186:6473] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSTxO9VXYbb0ii_rVoJwNwAAAJc"]
[Tue Nov 25 07:58:53.202793 2025] [:error] [pid 14077:tid 14127] [client 20.119.245.186:5399] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSTxPRG9n7UHEkwDTyh3PQAAAFE"]
[Tue Nov 25 07:58:54.899827 2025] [:error] [pid 14168:tid 14193] [client 20.119.245.186:1362] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSTxPvR-ZDU0QEgAIIueiAAAANY"]
[Tue Nov 25 07:58:57.339744 2025] [:error] [pid 14077:tid 14123] [client 20.119.245.186:1394] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSTxQRG9n7UHEkwDTyh3QwAAAE0"]
[Tue Nov 25 07:59:00.404672 2025] [:error] [pid 14076:tid 14091] [client 20.119.245.186:11390] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSTxRHsB4Gz6Qw-pvBsuewAAAAo"]
[Tue Nov 25 07:59:01.300521 2025] [:error] [pid 14077:tid 14115] [client 20.119.245.186:11337] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSTxRRG9n7UHEkwDTyh3SgAAAEU"]
[Tue Nov 25 07:59:03.199141 2025] [:error] [pid 14168:tid 14182] [client 20.119.245.186:4028] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSTxR_R-ZDU0QEgAIIuekAAAAMs"]
[Tue Nov 25 07:59:05.328434 2025] [:error] [pid 1103:tid 1114] [client 20.119.245.186:11364] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSTxSY0LETdqOlq63sQxgQAAAUU"]
[Tue Nov 25 07:59:10.867244 2025] [:error] [pid 14077:tid 14115] [client 20.119.245.186:5433] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSTxThG9n7UHEkwDTyh3VgAAAEU"]
[Tue Nov 25 07:59:13.564779 2025] [:error] [pid 14168:tid 14176] [client 20.119.245.186:7726] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSTxUfR-ZDU0QEgAIIueoQAAAMU"]
[Tue Nov 25 07:59:15.032603 2025] [:error] [pid 14078:tid 14145] [client 20.119.245.186:5856] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSTxU9VXYbb0ii_rVoJwTAAAAIg"]
[Tue Nov 25 07:59:18.386037 2025] [:error] [pid 1103:tid 1119] [client 20.119.245.186:10035] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSTxVo0LETdqOlq63sQxigAAAUo"]
[Tue Nov 25 07:59:30.175219 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:5872] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSTxYhG9n7UHEkwDTyh3bgAAAEE"]
[Tue Nov 25 07:59:30.998967 2025] [:error] [pid 14688:tid 14697] [client 20.119.245.186:5825] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSTxYm9vYrBoEsiDniwMNQAAAQc"]
[Tue Nov 25 07:59:32.300395 2025] [:error] [pid 1103:tid 1119] [client 20.119.245.186:5696] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSTxZI0LETdqOlq63sQxmAAAAUo"]
[Tue Nov 25 07:59:33.391133 2025] [:error] [pid 14078:tid 14160] [client 20.119.245.186:5860] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSTxZdVXYbb0ii_rVoJwbQAAAJc"]
[Tue Nov 25 07:59:34.715539 2025] [:error] [pid 14077:tid 14120] [client 20.119.245.186:1445] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSTxZhG9n7UHEkwDTyh3dAAAAEo"]
[Tue Nov 25 07:59:36.867329 2025] [:error] [pid 14077:tid 14124] [client 20.119.245.186:7700] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSTxaBG9n7UHEkwDTyh3dwAAAE4"]
[Tue Nov 25 07:59:38.397067 2025] [:error] [pid 1103:tid 1121] [client 20.119.245.186:2200] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSTxao0LETdqOlq63sQxmgAAAUw"]
[Tue Nov 25 07:59:40.448387 2025] [:error] [pid 14076:tid 14085] [client 20.119.245.186:10546] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSTxbHsB4Gz6Qw-pvBsumgAAAAQ"]
[Tue Nov 25 07:59:42.106255 2025] [:error] [pid 14077:tid 14125] [client 20.119.245.186:8589] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSTxbhG9n7UHEkwDTyh3gAAAAE8"]
[Tue Nov 25 07:59:46.066046 2025] [:error] [pid 14168:tid 14185] [client 20.119.245.186:9268] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSTxcvR-ZDU0QEgAIIuevQAAAM4"]
[Tue Nov 25 07:59:48.028638 2025] [:error] [pid 14078:tid 14139] [client 20.119.245.186:9843] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSTxdNVXYbb0ii_rVoJwdgAAAII"]
[Tue Nov 25 07:59:49.093783 2025] [:error] [pid 14078:tid 14138] [client 20.119.245.186:6342] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSTxddVXYbb0ii_rVoJweQAAAIE"]
[Tue Nov 25 07:59:50.364686 2025] [:error] [pid 14168:tid 14176] [client 20.119.245.186:3028] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanz.php"] [unique_id "aSTxdvR-ZDU0QEgAIIuewAAAAMU"]
[Tue Nov 25 07:59:54.308926 2025] [proxy_fcgi:error] [pid 14168:tid 14191] [client 20.119.245.186:9814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:59:54.520316 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 20.119.245.186:9814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:59:54.808497 2025] [proxy_fcgi:error] [pid 14168:tid 14181] [client 20.119.245.186:9814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:59:55.183492 2025] [proxy_fcgi:error] [pid 14168:tid 14175] [client 20.119.245.186:9814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:59:55.394664 2025] [proxy_fcgi:error] [pid 14168:tid 14174] [client 20.119.245.186:9814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:59:55.618498 2025] [:error] [pid 14168:tid 14180] [client 20.119.245.186:9814] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSTxe_R-ZDU0QEgAIIueygAAAMk"]
[Tue Nov 25 07:59:57.092098 2025] [:error] [pid 14688:tid 14699] [client 20.119.245.186:9114] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSTxfW9vYrBoEsiDniwMUQAAAQk"]
[Tue Nov 25 07:59:59.333601 2025] [:error] [pid 14077:tid 14123] [client 20.119.245.186:2091] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tiny.php"] [unique_id "aSTxfxG9n7UHEkwDTyh3jwAAAE0"]
[Tue Nov 25 08:00:00.170189 2025] [:error] [pid 14688:tid 14712] [client 20.119.245.186:9142] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aSTxgG9vYrBoEsiDniwMUwAAARY"]
[Tue Nov 25 08:00:01.635434 2025] [:error] [pid 1103:tid 1131] [client 20.119.245.186:3305] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aSTxgY0LETdqOlq63sQxtgAAAVY"]
[Tue Nov 25 08:00:02.811036 2025] [:error] [pid 1103:tid 1125] [client 20.119.245.186:11243] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aSTxgo0LETdqOlq63sQxuQAAAVA"]
[Tue Nov 25 08:00:03.930324 2025] [:error] [pid 14078:tid 14141] [client 20.119.245.186:10544] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aSTxg9VXYbb0ii_rVoJwfgAAAIQ"]
[Tue Nov 25 08:00:07.389846 2025] [:error] [pid 14168:tid 14186] [client 20.119.245.186:12778] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aSTxh_R-ZDU0QEgAIIue0AAAAM8"]
[Tue Nov 25 08:00:08.686195 2025] [:error] [pid 14077:tid 14127] [client 20.119.245.186:2085] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aSTxiBG9n7UHEkwDTyh3ngAAAFE"]
[Tue Nov 25 08:00:10.618618 2025] [:error] [pid 14077:tid 14134] [client 20.119.245.186:9247] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aSTxihG9n7UHEkwDTyh3qAAAAFg"]
[Tue Nov 25 08:00:11.725038 2025] [:error] [pid 14077:tid 14125] [client 20.119.245.186:3503] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aSTxixG9n7UHEkwDTyh3rQAAAE8"]
[Tue Nov 25 08:00:12.999674 2025] [:error] [pid 14078:tid 14154] [client 20.119.245.186:3469] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTxjNVXYbb0ii_rVoJwiQAAAJE"]
[Tue Nov 25 08:00:14.109108 2025] [:error] [pid 14077:tid 14129] [client 20.119.245.186:3513] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTxjhG9n7UHEkwDTyh3sQAAAFM"]
[Tue Nov 25 08:00:18.461083 2025] [:error] [pid 1103:tid 1109] [client 20.119.245.186:12752] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTxko0LETdqOlq63sQxxgAAAUA"]
[Tue Nov 25 08:00:24.047160 2025] [:error] [pid 14077:tid 14134] [client 20.119.245.186:10558] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTxmBG9n7UHEkwDTyh3wgAAAFg"]
[Tue Nov 25 08:00:25.539481 2025] [:error] [pid 14078:tid 14139] [client 20.119.245.186:8948] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aSTxmdVXYbb0ii_rVoJwlwAAAII"]
[Tue Nov 25 08:00:26.588882 2025] [:error] [pid 1103:tid 1121] [client 20.119.245.186:5472] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aSTxmo0LETdqOlq63sQxygAAAUw"]
[Tue Nov 25 08:00:30.478729 2025] [:error] [pid 14077:tid 14122] [client 20.119.245.186:10536] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aSTxnhG9n7UHEkwDTyh3ywAAAEw"]
[Tue Nov 25 08:00:32.691820 2025] [:error] [pid 14078:tid 14152] [client 20.119.245.186:11211] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aSTxoNVXYbb0ii_rVoJwnAAAAI8"]
[Tue Nov 25 08:00:36.137462 2025] [:error] [pid 14077:tid 14133] [client 20.119.245.186:9241] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aSTxpBG9n7UHEkwDTyh31gAAAFc"]
[Tue Nov 25 08:00:38.168822 2025] [:error] [pid 1103:tid 1131] [client 20.119.245.186:4668] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aSTxpo0LETdqOlq63sQx0AAAAVY"]
[Tue Nov 25 08:00:41.770918 2025] [:error] [pid 14688:tid 14706] [client 20.119.245.186:5952] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aSTxqW9vYrBoEsiDniwMbAAAARA"]
[Tue Nov 25 08:00:43.000612 2025] [:error] [pid 14076:tid 14094] [client 20.119.245.186:8758] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aSTxqnsB4Gz6Qw-pvBsuugAAAA0"]
[Tue Nov 25 08:00:46.760783 2025] [:error] [pid 14078:tid 14146] [client 20.119.245.186:12986] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSTxrtVXYbb0ii_rVoJwpgAAAIk"]
[Tue Nov 25 08:00:49.023614 2025] [:error] [pid 14078:tid 14155] [client 20.119.245.186:1213] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSTxsdVXYbb0ii_rVoJwqgAAAJI"]
[Tue Nov 25 08:00:57.708306 2025] [proxy_fcgi:error] [pid 1103:tid 1128] [client 20.119.245.186:10961] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 08:00:58.385322 2025] [proxy_fcgi:error] [pid 1103:tid 1118] [client 20.119.245.186:10961] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 08:00:58.996478 2025] [:error] [pid 1103:tid 1124] [client 20.119.245.186:10961] [client 20.119.245.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSTxuo0LETdqOlq63sQx5QAAAU8"]
[Tue Nov 25 08:01:08.285711 2025] [:error] [pid 14077:tid 14111] [client 20.119.245.186:8333] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSTxxBG9n7UHEkwDTyh3-AAAAEE"]
[Tue Nov 25 08:01:10.150033 2025] [:error] [pid 14077:tid 14124] [client 20.119.245.186:2445] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSTxxhG9n7UHEkwDTyh3-gAAAE4"]
[Tue Nov 25 08:01:14.335313 2025] [:error] [pid 14077:tid 14115] [client 20.119.245.186:12925] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSTxyhG9n7UHEkwDTyh3_wAAAEU"]
[Tue Nov 25 08:01:32.855408 2025] [:error] [pid 14077:tid 14125] [client 20.119.245.186:10638] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSTx3BG9n7UHEkwDTyh4GQAAAE8"]
[Tue Nov 25 08:01:50.305673 2025] [:error] [pid 14076:tid 14105] [client 20.119.245.186:5522] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSTx7nsB4Gz6Qw-pvBsu8QAAABg"]
[Tue Nov 25 08:01:52.413490 2025] [:error] [pid 14078:tid 14140] [client 20.119.245.186:7769] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSTx8NVXYbb0ii_rVoJw7AAAAIM"]
[Tue Nov 25 08:01:56.211214 2025] [:error] [pid 14076:tid 14100] [client 20.119.245.186:5892] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSTx9HsB4Gz6Qw-pvBsu9QAAABM"]
[Tue Nov 25 08:02:02.601859 2025] [:error] [pid 14078:tid 14157] [client 20.119.245.186:5049] [client 20.119.245.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSTx-tVXYbb0ii_rVoJw8wAAAJQ"]
[Tue Nov 25 08:02:10.041491 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 20.119.245.186:1885] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 08:13:40.343581 2025] [:error] [pid 14168:tid 14183] [client 43.166.224.244:38958] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aST0tPR-ZDU0QEgAIIuhlwAAAMw"]
[Tue Nov 25 08:40:35.399251 2025] [:error] [pid 14076:tid 14088] [client 182.44.10.67:52475] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aST7A3sB4Gz6Qw-pvBs4lwAAAAc"]
[Tue Nov 25 10:21:14.241295 2025] [autoindex:error] [pid 14076:tid 14096] [client 195.24.236.75:62007] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 11:03:01.415725 2025] [:error] [pid 28836:tid 28960] [client 45.3.52.80:17843] [client 45.3.52.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aSUcZZwNRsoxcLQGkTc9HwAAAsU"]
[Tue Nov 25 11:03:04.285469 2025] [:error] [pid 14688:tid 14700] [client 65.111.7.69:12353] [client 65.111.7.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env"] [unique_id "aSUcaG9vYrBoEsiDniw5NgAAAQo"]
[Tue Nov 25 11:03:04.936080 2025] [:error] [pid 28609:tid 28631] [client 45.3.52.32:49857] [client 45.3.52.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.svn/wc.db"] [unique_id "aSUcaCGGdT-nZJVs3x1LBQAAAY0"]
[Tue Nov 25 12:12:21.578746 2025] [:error] [pid 14076:tid 14102] [client 43.166.250.187:60338] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSUspXsB4Gz6Qw-pvBuA1AAAABU"]
[Tue Nov 25 12:39:51.704043 2025] [:error] [pid 14168:tid 14184] [client 54.173.250.15:43230] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSUzF_R-ZDU0QEgAIIvzUQAAAM0"]
[Tue Nov 25 14:01:19.571373 2025] [:error] [pid 28609:tid 28622] [client 101.33.80.42:45576] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSVGLyGGdT-nZJVs3x14iAAAAYQ"]
[Tue Nov 25 16:02:08.059349 2025] [autoindex:error] [pid 28609:tid 28619] [client 3.88.151.194:41822] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 16:29:22.130501 2025] [proxy_fcgi:error] [pid 28609:tid 28621] [client 40.69.66.178:3867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:29:22.385540 2025] [proxy_fcgi:error] [pid 28609:tid 28634] [client 40.69.66.178:3867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:29:22.640240 2025] [proxy_fcgi:error] [pid 28609:tid 28625] [client 40.69.66.178:3867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:29:22.897811 2025] [proxy_fcgi:error] [pid 28609:tid 28619] [client 40.69.66.178:3867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:29:23.148941 2025] [:error] [pid 28609:tid 28620] [client 40.69.66.178:3867] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSVo4yGGdT-nZJVs3x2a2wAAAYI"]
[Tue Nov 25 16:29:23.658483 2025] [:error] [pid 14078:tid 14142] [client 40.69.66.178:12429] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSVo49VXYbb0ii_rVoIQngAAAIU"]
[Tue Nov 25 16:29:24.162304 2025] [:error] [pid 14077:tid 14126] [client 40.69.66.178:2832] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSVo5BG9n7UHEkwDTyhAJQAAAFA"]
[Tue Nov 25 16:29:24.664183 2025] [:error] [pid 28740:tid 28805] [client 40.69.66.178:12070] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsx.php"] [unique_id "aSVo5FppQCoYxWW6V0VH4QAAAk4"]
[Tue Nov 25 16:29:25.164201 2025] [:error] [pid 28842:tid 28993] [client 40.69.66.178:1393] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSVo5dNmoaPf6T4-6C1TkwAAA0M"]
[Tue Nov 25 16:29:25.663607 2025] [:error] [pid 28842:tid 29018] [client 40.69.66.178:9034] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSVo5dNmoaPf6T4-6C1TlAAAA1E"]
[Tue Nov 25 16:29:26.163566 2025] [:error] [pid 14168:tid 14172] [client 40.69.66.178:9746] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSVo5vR-ZDU0QEgAIIs-cwAAAME"]
[Tue Nov 25 16:29:26.662278 2025] [:error] [pid 28842:tid 29021] [client 40.69.66.178:1402] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b4.php"] [unique_id "aSVo5tNmoaPf6T4-6C1TlQAAA1M"]
[Tue Nov 25 16:29:27.163060 2025] [:error] [pid 28842:tid 28994] [client 40.69.66.178:5882] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSVo59NmoaPf6T4-6C1TlgAAA0Q"]
[Tue Nov 25 16:29:27.663821 2025] [:error] [pid 28740:tid 28808] [client 40.69.66.178:12446] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSVo51ppQCoYxWW6V0VH5gAAAlE"]
[Tue Nov 25 16:29:28.163213 2025] [:error] [pid 2987:tid 2997] [client 40.69.66.178:14216] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSVo6M-djEt-pTzPxnxuDgAAAUg"]
[Tue Nov 25 16:29:28.667476 2025] [:error] [pid 28842:tid 29003] [client 40.69.66.178:9740] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xenium4.php"] [unique_id "aSVo6NNmoaPf6T4-6C1TmgAAA00"]
[Tue Nov 25 16:29:29.176288 2025] [:error] [pid 14077:tid 14126] [client 40.69.66.178:12049] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSVo6RG9n7UHEkwDTyhAMQAAAFA"]
[Tue Nov 25 16:29:29.683597 2025] [:error] [pid 14168:tid 14175] [client 40.69.66.178:3901] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSVo6fR-ZDU0QEgAIIs-dwAAAMQ"]
[Tue Nov 25 16:29:30.187698 2025] [:error] [pid 14077:tid 14113] [client 40.69.66.178:5873] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSVo6hG9n7UHEkwDTyhAMgAAAEM"]
[Tue Nov 25 16:29:30.700236 2025] [:error] [pid 28609:tid 28638] [client 40.69.66.178:12060] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpw.php"] [unique_id "aSVo6iGGdT-nZJVs3x2a3QAAAZQ"]
[Tue Nov 25 16:29:31.203955 2025] [:error] [pid 14168:tid 14194] [client 40.69.66.178:2250] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSVo6_R-ZDU0QEgAIIs-eAAAANc"]
[Tue Nov 25 16:29:31.706437 2025] [:error] [pid 14077:tid 14131] [client 40.69.66.178:2873] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSVo6xG9n7UHEkwDTyhANAAAAFU"]
[Tue Nov 25 16:29:32.211021 2025] [:error] [pid 28739:tid 28769] [client 40.69.66.178:9038] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSVo7BxGpKmlkG4FexRRIwAAAgc"]
[Tue Nov 25 16:29:32.718470 2025] [:error] [pid 28836:tid 28966] [client 40.69.66.178:12039] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww2.php"] [unique_id "aSVo7JwNRsoxcLQGkTeWqgAAAss"]
[Tue Nov 25 16:29:33.219913 2025] [:error] [pid 28836:tid 28960] [client 40.69.66.178:1401] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aSVo7ZwNRsoxcLQGkTeWqwAAAsU"]
[Tue Nov 25 16:29:33.728802 2025] [:error] [pid 14076:tid 14085] [client 40.69.66.178:12440] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aSVo7XsB4Gz6Qw-pvBvorAAAAAQ"]
[Tue Nov 25 16:29:34.234223 2025] [:error] [pid 28836:tid 29009] [client 40.69.66.178:5961] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aSVo7pwNRsoxcLQGkTeWrgAAAtM"]
[Tue Nov 25 16:29:34.743504 2025] [:error] [pid 14077:tid 14126] [client 40.69.66.178:9036] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aSVo7hG9n7UHEkwDTyhAOwAAAFA"]
[Tue Nov 25 16:29:35.243859 2025] [:error] [pid 28609:tid 28639] [client 40.69.66.178:16221] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aSVo7yGGdT-nZJVs3x2a4AAAAZU"]
[Tue Nov 25 16:29:35.747275 2025] [:error] [pid 14078:tid 14149] [client 40.69.66.178:3864] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aSVo79VXYbb0ii_rVoIQqgAAAIw"]
[Tue Nov 25 16:29:36.249280 2025] [:error] [pid 28609:tid 28622] [client 40.69.66.178:12042] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aSVo8CGGdT-nZJVs3x2a4gAAAYQ"]
[Tue Nov 25 16:29:36.752630 2025] [:error] [pid 14168:tid 14183] [client 40.69.66.178:3844] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aSVo8PR-ZDU0QEgAIIs-fAAAAMw"]
[Tue Nov 25 16:29:37.257579 2025] [:error] [pid 28739:tid 28779] [client 40.69.66.178:12078] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d2.php"] [unique_id "aSVo8RxGpKmlkG4FexRRJAAAAhE"]
[Tue Nov 25 16:29:37.760450 2025] [:error] [pid 28842:tid 28995] [client 40.69.66.178:16075] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d2.php"] [unique_id "aSVo8dNmoaPf6T4-6C1TqAAAA0U"]
[Tue Nov 25 16:29:38.260877 2025] [:error] [pid 14076:tid 14095] [client 40.69.66.178:7845] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d2.php"] [unique_id "aSVo8nsB4Gz6Qw-pvBvotQAAAA4"]
[Tue Nov 25 16:29:38.777302 2025] [:error] [pid 14076:tid 14096] [client 40.69.66.178:1392] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d2.php"] [unique_id "aSVo8nsB4Gz6Qw-pvBvotgAAAA8"]
[Tue Nov 25 16:29:39.279663 2025] [:error] [pid 14078:tid 14151] [client 40.69.66.178:16088] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/snus.php"] [unique_id "aSVo89VXYbb0ii_rVoIQrQAAAI4"]
[Tue Nov 25 16:29:39.781644 2025] [:error] [pid 28740:tid 28806] [client 40.69.66.178:1344] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/snus.php"] [unique_id "aSVo81ppQCoYxWW6V0VH9AAAAk8"]
[Tue Nov 25 16:29:40.281036 2025] [:error] [pid 14078:tid 14146] [client 40.69.66.178:16120] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/snus.php"] [unique_id "aSVo9NVXYbb0ii_rVoIQrwAAAIk"]
[Tue Nov 25 16:29:40.809541 2025] [:error] [pid 14077:tid 14132] [client 40.69.66.178:16087] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/snus.php"] [unique_id "aSVo9BG9n7UHEkwDTyhARAAAAFY"]
[Tue Nov 25 16:29:41.310650 2025] [:error] [pid 28842:tid 28993] [client 40.69.66.178:1547] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/011i.php"] [unique_id "aSVo9dNmoaPf6T4-6C1TqwAAA0M"]
[Tue Nov 25 16:29:41.810854 2025] [:error] [pid 14168:tid 14174] [client 40.69.66.178:2252] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/011i.php"] [unique_id "aSVo9fR-ZDU0QEgAIIs-ggAAAMM"]
[Tue Nov 25 16:29:42.310577 2025] [:error] [pid 28740:tid 28799] [client 40.69.66.178:6011] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/011i.php"] [unique_id "aSVo9lppQCoYxWW6V0VH-QAAAkg"]
[Tue Nov 25 16:29:42.808837 2025] [:error] [pid 14077:tid 14130] [client 40.69.66.178:9757] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/011i.php"] [unique_id "aSVo9hG9n7UHEkwDTyhASQAAAFQ"]
[Tue Nov 25 16:29:43.308980 2025] [:error] [pid 14076:tid 14101] [client 40.69.66.178:5977] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/disaos.php"] [unique_id "aSVo93sB4Gz6Qw-pvBvovAAAABQ"]
[Tue Nov 25 16:29:43.809506 2025] [:error] [pid 14076:tid 14097] [client 40.69.66.178:14254] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/disaos.php"] [unique_id "aSVo93sB4Gz6Qw-pvBvovQAAABA"]
[Tue Nov 25 16:29:44.328075 2025] [:error] [pid 28739:tid 28773] [client 40.69.66.178:2269] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/disaos.php"] [unique_id "aSVo-BxGpKmlkG4FexRRJgAAAgs"]
[Tue Nov 25 16:29:44.827881 2025] [:error] [pid 2987:tid 2997] [client 40.69.66.178:2624] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/disaos.php"] [unique_id "aSVo-M-djEt-pTzPxnxuIAAAAUg"]
[Tue Nov 25 16:29:45.338153 2025] [:error] [pid 14076:tid 14091] [client 40.69.66.178:7782] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSVo-XsB4Gz6Qw-pvBvowAAAAAo"]
[Tue Nov 25 16:29:45.841404 2025] [:error] [pid 28842:tid 29005] [client 40.69.66.178:5229] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSVo-dNmoaPf6T4-6C1TsgAAA08"]
[Tue Nov 25 16:29:46.344322 2025] [:error] [pid 28842:tid 29024] [client 40.69.66.178:11777] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSVo-tNmoaPf6T4-6C1TtAAAA1Y"]
[Tue Nov 25 16:29:46.847202 2025] [:error] [pid 28842:tid 28993] [client 40.69.66.178:12034] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aSVo-tNmoaPf6T4-6C1TtwAAA0M"]
[Tue Nov 25 16:29:47.347691 2025] [:error] [pid 28739:tid 28776] [client 40.69.66.178:9782] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSVo-xxGpKmlkG4FexRRLQAAAg4"]
[Tue Nov 25 16:29:47.849794 2025] [:error] [pid 14077:tid 14113] [client 40.69.66.178:2279] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSVo-xG9n7UHEkwDTyhAVQAAAEM"]
[Tue Nov 25 16:29:48.356414 2025] [:error] [pid 14078:tid 14145] [client 40.69.66.178:7806] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSVo_NVXYbb0ii_rVoIQswAAAIg"]
[Tue Nov 25 16:29:48.855913 2025] [:error] [pid 14077:tid 14122] [client 40.69.66.178:11459] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww4.php"] [unique_id "aSVo_BG9n7UHEkwDTyhAWAAAAEw"]
[Tue Nov 25 16:29:49.356643 2025] [:error] [pid 28740:tid 28801] [client 40.69.66.178:12430] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSVo_VppQCoYxWW6V0VH_gAAAko"]
[Tue Nov 25 16:29:49.858770 2025] [:error] [pid 14077:tid 14127] [client 40.69.66.178:6869] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSVo_RG9n7UHEkwDTyhAXQAAAFE"]
[Tue Nov 25 16:29:50.367257 2025] [:error] [pid 14078:tid 14153] [client 40.69.66.178:3855] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSVo_tVXYbb0ii_rVoIQtwAAAJA"]
[Tue Nov 25 16:29:50.866985 2025] [:error] [pid 28740:tid 28807] [client 40.69.66.178:7648] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aSVo_lppQCoYxWW6V0VH_wAAAlA"]
[Tue Nov 25 16:29:51.369790 2025] [:error] [pid 14077:tid 14132] [client 40.69.66.178:16079] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSVo_xG9n7UHEkwDTyhAZQAAAFY"]
[Tue Nov 25 16:29:51.877877 2025] [:error] [pid 28740:tid 28804] [client 40.69.66.178:5995] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSVo_1ppQCoYxWW6V0VIAAAAAk0"]
[Tue Nov 25 16:29:52.381111 2025] [:error] [pid 28609:tid 28637] [client 40.69.66.178:12463] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSVpACGGdT-nZJVs3x2a7QAAAZM"]
[Tue Nov 25 16:29:53.081655 2025] [:error] [pid 2987:tid 3002] [client 40.69.66.178:14244] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aSVpAc-djEt-pTzPxnxuIgAAAU0"]
[Tue Nov 25 16:29:53.593881 2025] [:error] [pid 28739:tid 28773] [client 40.69.66.178:5213] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSVpARxGpKmlkG4FexRRMwAAAgs"]
[Tue Nov 25 16:29:54.094352 2025] [:error] [pid 14078:tid 14146] [client 40.69.66.178:12093] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSVpAtVXYbb0ii_rVoIQvAAAAIk"]
[Tue Nov 25 16:29:54.594601 2025] [:error] [pid 28739:tid 28767] [client 40.69.66.178:3858] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSVpAhxGpKmlkG4FexRRNQAAAgU"]
[Tue Nov 25 16:29:55.095382 2025] [:error] [pid 2987:tid 2998] [client 40.69.66.178:7862] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx1.php"] [unique_id "aSVpA8-djEt-pTzPxnxuKAAAAUk"]
[Tue Nov 25 16:29:55.595744 2025] [:error] [pid 2987:tid 2997] [client 40.69.66.178:1551] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSVpA8-djEt-pTzPxnxuLAAAAUg"]
[Tue Nov 25 16:29:56.098326 2025] [:error] [pid 14078:tid 14150] [client 40.69.66.178:7752] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSVpBNVXYbb0ii_rVoIQvgAAAI0"]
[Tue Nov 25 16:29:56.600479 2025] [:error] [pid 28842:tid 28999] [client 40.69.66.178:11468] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSVpBNNmoaPf6T4-6C1TxQAAA0k"]
[Tue Nov 25 16:29:57.100433 2025] [:error] [pid 14077:tid 14116] [client 40.69.66.178:7808] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ii.php"] [unique_id "aSVpBRG9n7UHEkwDTyhAcAAAAEY"]
[Tue Nov 25 16:29:57.605776 2025] [:error] [pid 14077:tid 14130] [client 40.69.66.178:12436] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSVpBRG9n7UHEkwDTyhAcgAAAFQ"]
[Tue Nov 25 16:29:58.105931 2025] [:error] [pid 28739:tid 28772] [client 40.69.66.178:9747] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSVpBhxGpKmlkG4FexRROgAAAgo"]
[Tue Nov 25 16:29:58.606542 2025] [:error] [pid 2987:tid 3007] [client 40.69.66.178:2275] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSVpBs-djEt-pTzPxnxuMQAAAVI"]
[Tue Nov 25 16:29:59.108978 2025] [:error] [pid 2987:tid 3008] [client 40.69.66.178:9758] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kr.php"] [unique_id "aSVpB8-djEt-pTzPxnxuMgAAAVM"]
[Tue Nov 25 16:29:59.617756 2025] [:error] [pid 14168:tid 14186] [client 40.69.66.178:16110] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/18299.php"] [unique_id "aSVpB_R-ZDU0QEgAIIs-igAAAM8"]
[Tue Nov 25 16:30:00.120981 2025] [:error] [pid 14077:tid 14129] [client 40.69.66.178:1592] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/18299.php"] [unique_id "aSVpCBG9n7UHEkwDTyhAegAAAFM"]
[Tue Nov 25 16:30:00.630469 2025] [:error] [pid 28739:tid 28775] [client 40.69.66.178:12435] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/18299.php"] [unique_id "aSVpCBxGpKmlkG4FexRRRwAAAg0"]
[Tue Nov 25 16:30:01.134662 2025] [:error] [pid 14078:tid 14143] [client 40.69.66.178:5970] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/18299.php"] [unique_id "aSVpCdVXYbb0ii_rVoIQxQAAAIY"]
[Tue Nov 25 16:30:01.657890 2025] [:error] [pid 2987:tid 3003] [client 40.69.66.178:1569] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSVpCc-djEt-pTzPxnxuNQAAAU4"]
[Tue Nov 25 16:30:02.168974 2025] [:error] [pid 28740:tid 28809] [client 40.69.66.178:9734] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSVpClppQCoYxWW6V0VIAgAAAlI"]
[Tue Nov 25 16:30:02.676660 2025] [:error] [pid 28609:tid 28639] [client 40.69.66.178:12445] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSVpCiGGdT-nZJVs3x2a-AAAAZU"]
[Tue Nov 25 16:30:03.178436 2025] [:error] [pid 14076:tid 14097] [client 40.69.66.178:5985] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aSVpC3sB4Gz6Qw-pvBvoxgAAABA"]
[Tue Nov 25 16:30:03.682209 2025] [:error] [pid 14077:tid 14117] [client 40.69.66.178:1556] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chati.php"] [unique_id "aSVpCxG9n7UHEkwDTyhAfwAAAEc"]
[Tue Nov 25 16:30:04.187485 2025] [:error] [pid 14168:tid 14185] [client 40.69.66.178:9749] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chati.php"] [unique_id "aSVpDPR-ZDU0QEgAIIs-kQAAAM4"]
[Tue Nov 25 16:30:04.688514 2025] [:error] [pid 2987:tid 3013] [client 40.69.66.178:11803] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chati.php"] [unique_id "aSVpDM-djEt-pTzPxnxuNwAAAVg"]
[Tue Nov 25 16:30:05.190413 2025] [:error] [pid 14168:tid 14193] [client 40.69.66.178:12474] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chati.php"] [unique_id "aSVpDfR-ZDU0QEgAIIs-kgAAANY"]
[Tue Nov 25 16:30:05.692270 2025] [:error] [pid 28609:tid 28621] [client 40.69.66.178:7628] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content-over.php"] [unique_id "aSVpDSGGdT-nZJVs3x2a_AAAAYM"]
[Tue Nov 25 16:30:06.194677 2025] [:error] [pid 28842:tid 28994] [client 40.69.66.178:11472] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content-over.php"] [unique_id "aSVpDtNmoaPf6T4-6C1TzQAAA0Q"]
[Tue Nov 25 16:30:06.696475 2025] [:error] [pid 28842:tid 28992] [client 40.69.66.178:11476] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content-over.php"] [unique_id "aSVpDtNmoaPf6T4-6C1TzgAAA0I"]
[Tue Nov 25 16:30:07.199093 2025] [:error] [pid 14077:tid 14116] [client 40.69.66.178:5872] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content-over.php"] [unique_id "aSVpDxG9n7UHEkwDTyhAggAAAEY"]
[Tue Nov 25 16:30:07.704953 2025] [:error] [pid 28836:tid 29014] [client 40.69.66.178:12750] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aSVpD5wNRsoxcLQGkTeWzgAAAtg"]
[Tue Nov 25 16:30:08.208326 2025] [:error] [pid 14076:tid 14105] [client 40.69.66.178:1541] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aSVpEHsB4Gz6Qw-pvBvoyQAAABg"]
[Tue Nov 25 16:30:08.707576 2025] [:error] [pid 28609:tid 28627] [client 40.69.66.178:7636] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aSVpECGGdT-nZJVs3x2bAAAAAYk"]
[Tue Nov 25 16:30:09.210866 2025] [:error] [pid 14077:tid 14110] [client 40.69.66.178:15915] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aSVpERG9n7UHEkwDTyhAgwAAAEA"]
[Tue Nov 25 16:30:09.711701 2025] [:error] [pid 28842:tid 29024] [client 40.69.66.178:14222] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naxc.php"] [unique_id "aSVpEdNmoaPf6T4-6C1T1gAAA1Y"]
[Tue Nov 25 16:30:10.214113 2025] [:error] [pid 28842:tid 28991] [client 40.69.66.178:11817] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naxc.php"] [unique_id "aSVpEtNmoaPf6T4-6C1T2AAAA0E"]
[Tue Nov 25 16:30:10.714466 2025] [:error] [pid 28836:tid 28965] [client 40.69.66.178:1563] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naxc.php"] [unique_id "aSVpEpwNRsoxcLQGkTeW1gAAAso"]
[Tue Nov 25 16:30:11.214125 2025] [:error] [pid 14168:tid 14177] [client 40.69.66.178:9752] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naxc.php"] [unique_id "aSVpE_R-ZDU0QEgAIIs-lwAAAMY"]
[Tue Nov 25 16:30:11.717104 2025] [:error] [pid 28842:tid 29023] [client 40.69.66.178:13469] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aSVpE9NmoaPf6T4-6C1T2wAAA1U"]
[Tue Nov 25 16:30:12.218184 2025] [:error] [pid 28740:tid 28810] [client 40.69.66.178:6004] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aSVpFFppQCoYxWW6V0VICAAAAlM"]
[Tue Nov 25 16:30:12.718340 2025] [:error] [pid 14168:tid 14176] [client 40.69.66.178:16114] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aSVpFPR-ZDU0QEgAIIs-ngAAAMU"]
[Tue Nov 25 16:30:13.217975 2025] [:error] [pid 28836:tid 29013] [client 40.69.66.178:16091] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aSVpFZwNRsoxcLQGkTeW2AAAAtc"]
[Tue Nov 25 16:30:13.725948 2025] [:error] [pid 28609:tid 28620] [client 40.69.66.178:13478] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/size.php"] [unique_id "aSVpFSGGdT-nZJVs3x2bGQAAAYI"]
[Tue Nov 25 16:30:14.226378 2025] [:error] [pid 14077:tid 14117] [client 40.69.66.178:6878] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/size.php"] [unique_id "aSVpFhG9n7UHEkwDTyhAhwAAAEc"]
[Tue Nov 25 16:30:14.730952 2025] [:error] [pid 2987:tid 3008] [client 40.69.66.178:14124] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/size.php"] [unique_id "aSVpFs-djEt-pTzPxnxuTQAAAVM"]
[Tue Nov 25 16:30:15.240701 2025] [:error] [pid 14078:tid 14159] [client 40.69.66.178:5224] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/size.php"] [unique_id "aSVpF9VXYbb0ii_rVoIQyQAAAJY"]
[Tue Nov 25 16:30:15.753249 2025] [:error] [pid 28609:tid 28623] [client 40.69.66.178:9287] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVpFyGGdT-nZJVs3x2bHgAAAYU"]
[Tue Nov 25 16:30:16.258381 2025] [:error] [pid 28842:tid 29018] [client 40.69.66.178:11835] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVpGNNmoaPf6T4-6C1T-wAAA1E"]
[Tue Nov 25 16:30:16.758862 2025] [:error] [pid 14077:tid 14134] [client 40.69.66.178:15902] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVpGBG9n7UHEkwDTyhAjAAAAFg"]
[Tue Nov 25 16:30:17.259836 2025] [:error] [pid 14078:tid 14140] [client 40.69.66.178:10021] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVpGdVXYbb0ii_rVoIQzQAAAIM"]
[Tue Nov 25 16:30:17.760943 2025] [:error] [pid 28740:tid 28815] [client 40.69.66.178:16080] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSVpGVppQCoYxWW6V0VICgAAAlg"]
[Tue Nov 25 16:30:18.264575 2025] [:error] [pid 28609:tid 28621] [client 40.69.66.178:10861] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aSVpGiGGdT-nZJVs3x2bIAAAAYM"]
[Tue Nov 25 16:30:18.776482 2025] [:error] [pid 28739:tid 28767] [client 40.69.66.178:1479] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aSVpGhxGpKmlkG4FexRRTgAAAgU"]
[Tue Nov 25 16:30:19.277312 2025] [:error] [pid 28740:tid 28807] [client 40.69.66.178:6885] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aSVpG1ppQCoYxWW6V0VIDQAAAlA"]
[Tue Nov 25 16:30:19.781079 2025] [:error] [pid 14078:tid 14143] [client 40.69.66.178:6142] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSVpG9VXYbb0ii_rVoIQ6gAAAIY"]
[Tue Nov 25 16:30:20.282489 2025] [:error] [pid 28836:tid 28964] [client 40.69.66.178:10838] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSVpHJwNRsoxcLQGkTeW4QAAAsk"]
[Tue Nov 25 16:30:20.783496 2025] [:error] [pid 14077:tid 14119] [client 40.69.66.178:10019] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSVpHBG9n7UHEkwDTyhAkgAAAEk"]
[Tue Nov 25 16:30:21.292996 2025] [:error] [pid 14078:tid 14161] [client 40.69.66.178:8055] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/gec.php"] [unique_id "aSVpHdVXYbb0ii_rVoIQ7QAAAJg"]
[Tue Nov 25 16:30:21.798626 2025] [:error] [pid 14077:tid 14121] [client 40.69.66.178:15888] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfu.php"] [unique_id "aSVpHRG9n7UHEkwDTyhAlwAAAEs"]
[Tue Nov 25 16:30:22.311071 2025] [proxy_fcgi:error] [pid 14078:tid 14139] [client 40.69.66.178:12203] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:30:22.820787 2025] [proxy_fcgi:error] [pid 14078:tid 14148] [client 40.69.66.178:12203] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:30:23.077025 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 40.69.66.178:12203] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:30:23.333221 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 40.69.66.178:12203] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:30:23.587996 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 40.69.66.178:12203] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:30:23.838457 2025] [:error] [pid 14078:tid 14142] [client 40.69.66.178:12203] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aSVpH9VXYbb0ii_rVoIQ9AAAAIU"]
[Tue Nov 25 16:30:24.342566 2025] [:error] [pid 28842:tid 29001] [client 40.69.66.178:12791] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aSVpINNmoaPf6T4-6C1UFgAAA0s"]
[Tue Nov 25 16:30:24.841769 2025] [:error] [pid 14076:tid 14085] [client 40.69.66.178:1629] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aSVpIHsB4Gz6Qw-pvBvo0QAAAAQ"]
[Tue Nov 25 16:30:25.339842 2025] [:error] [pid 14077:tid 14133] [client 40.69.66.178:10877] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aSVpIRG9n7UHEkwDTyhAqAAAAFc"]
[Tue Nov 25 16:30:25.841686 2025] [:error] [pid 28739:tid 28779] [client 40.69.66.178:8037] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aSVpIRxGpKmlkG4FexRRVQAAAhE"]
[Tue Nov 25 16:30:26.341978 2025] [:error] [pid 28609:tid 28623] [client 40.69.66.178:7181] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aSVpIiGGdT-nZJVs3x2bJgAAAYU"]
[Tue Nov 25 16:30:26.842569 2025] [:error] [pid 14078:tid 14153] [client 40.69.66.178:14110] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aSVpItVXYbb0ii_rVoIQ-AAAAJA"]
[Tue Nov 25 16:30:27.342218 2025] [:error] [pid 14078:tid 14151] [client 40.69.66.178:13823] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aSVpI9VXYbb0ii_rVoIQ-QAAAI4"]
[Tue Nov 25 16:30:27.841436 2025] [:error] [pid 14076:tid 14091] [client 40.69.66.178:10004] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSVpI3sB4Gz6Qw-pvBvo1gAAAAo"]
[Tue Nov 25 16:30:28.340952 2025] [:error] [pid 14076:tid 14099] [client 40.69.66.178:4129] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSVpJHsB4Gz6Qw-pvBvo1wAAABI"]
[Tue Nov 25 16:30:28.840488 2025] [:error] [pid 28836:tid 28958] [client 40.69.66.178:6103] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSVpJJwNRsoxcLQGkTeW5gAAAsM"]
[Tue Nov 25 16:30:29.348087 2025] [:error] [pid 28836:tid 28968] [client 40.69.66.178:13480] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/as.php"] [unique_id "aSVpJZwNRsoxcLQGkTeW5wAAAs0"]
[Tue Nov 25 16:30:29.848299 2025] [:error] [pid 14076:tid 14081] [client 40.69.66.178:1643] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSVpJXsB4Gz6Qw-pvBvo3AAAAAA"]
[Tue Nov 25 16:30:30.364838 2025] [:error] [pid 14077:tid 14133] [client 40.69.66.178:4905] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSVpJhG9n7UHEkwDTyhAqwAAAFc"]
[Tue Nov 25 16:30:30.864025 2025] [:error] [pid 28740:tid 28812] [client 40.69.66.178:6089] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSVpJlppQCoYxWW6V0VIHgAAAlU"]
[Tue Nov 25 16:30:31.371783 2025] [:error] [pid 14077:tid 14125] [client 40.69.66.178:10875] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/product.php"] [unique_id "aSVpJxG9n7UHEkwDTyhArgAAAE8"]
[Tue Nov 25 16:30:31.872182 2025] [:error] [pid 28739:tid 28774] [client 40.69.66.178:9997] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e56.php"] [unique_id "aSVpJxxGpKmlkG4FexRRXAAAAgw"]
[Tue Nov 25 16:30:32.372014 2025] [:error] [pid 14078:tid 14156] [client 40.69.66.178:10875] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e56.php"] [unique_id "aSVpKNVXYbb0ii_rVoIQ_wAAAJM"]
[Tue Nov 25 16:30:32.873364 2025] [:error] [pid 28609:tid 28638] [client 40.69.66.178:7099] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e56.php"] [unique_id "aSVpKCGGdT-nZJVs3x2bKAAAAZQ"]
[Tue Nov 25 16:30:33.374233 2025] [:error] [pid 28740:tid 28796] [client 40.69.66.178:6137] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e56.php"] [unique_id "aSVpKVppQCoYxWW6V0VIJAAAAkU"]
[Tue Nov 25 16:30:33.876169 2025] [:error] [pid 28740:tid 28808] [client 40.69.66.178:12193] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSVpKVppQCoYxWW6V0VIJQAAAlE"]
[Tue Nov 25 16:30:34.377020 2025] [:error] [pid 28740:tid 28806] [client 40.69.66.178:9284] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSVpKlppQCoYxWW6V0VIJwAAAk8"]
[Tue Nov 25 16:30:34.878401 2025] [:error] [pid 28836:tid 28965] [client 40.69.66.178:5683] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSVpKpwNRsoxcLQGkTeW6wAAAso"]
[Tue Nov 25 16:30:35.379069 2025] [:error] [pid 14078:tid 14140] [client 40.69.66.178:7168] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-x.php"] [unique_id "aSVpK9VXYbb0ii_rVoIRAQAAAIM"]
[Tue Nov 25 16:30:35.879979 2025] [:error] [pid 14078:tid 14150] [client 40.69.66.178:9336] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSVpK9VXYbb0ii_rVoIRAgAAAI0"]
[Tue Nov 25 16:30:36.379745 2025] [:error] [pid 28609:tid 28627] [client 40.69.66.178:11975] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSVpLCGGdT-nZJVs3x2bKQAAAYk"]
[Tue Nov 25 16:30:36.880805 2025] [:error] [pid 28609:tid 28640] [client 40.69.66.178:1533] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSVpLCGGdT-nZJVs3x2bKwAAAZY"]
[Tue Nov 25 16:30:37.382628 2025] [:error] [pid 14078:tid 14145] [client 40.69.66.178:12024] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aSVpLdVXYbb0ii_rVoIRBAAAAIg"]
[Tue Nov 25 16:30:37.883309 2025] [:error] [pid 14078:tid 14143] [client 40.69.66.178:11996] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aSVpLdVXYbb0ii_rVoIRBgAAAIY"]
[Tue Nov 25 16:30:38.382690 2025] [:error] [pid 14078:tid 14151] [client 40.69.66.178:12206] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aSVpLtVXYbb0ii_rVoIRCAAAAI4"]
[Tue Nov 25 16:30:38.883488 2025] [:error] [pid 28609:tid 28630] [client 40.69.66.178:4887] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aSVpLiGGdT-nZJVs3x2bLAAAAYw"]
[Tue Nov 25 16:30:39.384398 2025] [:error] [pid 28836:tid 28969] [client 40.69.66.178:10967] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aSVpL5wNRsoxcLQGkTeW7wAAAs4"]
[Tue Nov 25 16:30:39.893062 2025] [:error] [pid 28842:tid 29000] [client 40.69.66.178:1510] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/20.php"] [unique_id "aSVpL9NmoaPf6T4-6C1UIwAAA0o"]
[Tue Nov 25 16:30:40.393547 2025] [:error] [pid 2987:tid 2991] [client 40.69.66.178:9368] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/20.php"] [unique_id "aSVpMM-djEt-pTzPxnxuZAAAAUI"]
[Tue Nov 25 16:30:40.894342 2025] [:error] [pid 2987:tid 2995] [client 40.69.66.178:4109] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/20.php"] [unique_id "aSVpMM-djEt-pTzPxnxuaAAAAUY"]
[Tue Nov 25 16:30:41.395585 2025] [:error] [pid 28740:tid 28791] [client 40.69.66.178:6112] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/20.php"] [unique_id "aSVpMVppQCoYxWW6V0VILAAAAkA"]
[Tue Nov 25 16:30:41.895920 2025] [:error] [pid 28740:tid 28795] [client 40.69.66.178:15252] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpMVppQCoYxWW6V0VILgAAAkQ"]
[Tue Nov 25 16:30:42.394741 2025] [:error] [pid 28740:tid 28796] [client 40.69.66.178:4151] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpMlppQCoYxWW6V0VILwAAAkU"]
[Tue Nov 25 16:30:42.894071 2025] [:error] [pid 14076:tid 14096] [client 40.69.66.178:7194] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpMnsB4Gz6Qw-pvBvo4QAAAA8"]
[Tue Nov 25 16:30:43.394334 2025] [:error] [pid 28842:tid 29026] [client 40.69.66.178:15268] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpM9NmoaPf6T4-6C1UJQAAA1g"]
[Tue Nov 25 16:30:43.896163 2025] [:error] [pid 28740:tid 28811] [client 40.69.66.178:4918] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSVpM1ppQCoYxWW6V0VIMgAAAlQ"]
[Tue Nov 25 16:30:44.417738 2025] [:error] [pid 2987:tid 3013] [client 40.69.66.178:7052] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSVpNM-djEt-pTzPxnxudAAAAVg"]
[Tue Nov 25 16:30:44.927604 2025] [:error] [pid 28609:tid 28634] [client 40.69.66.178:5007] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSVpNCGGdT-nZJVs3x2bLQAAAZA"]
[Tue Nov 25 16:30:45.430207 2025] [:error] [pid 28740:tid 28794] [client 40.69.66.178:6315] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSVpNVppQCoYxWW6V0VIOAAAAkM"]
[Tue Nov 25 16:30:45.929457 2025] [:error] [pid 28739:tid 28774] [client 40.69.66.178:4903] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSVpNRxGpKmlkG4FexRRawAAAgw"]
[Tue Nov 25 16:30:46.436486 2025] [:error] [pid 28609:tid 28623] [client 40.69.66.178:7226] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSVpNiGGdT-nZJVs3x2bNQAAAYU"]
[Tue Nov 25 16:30:46.939050 2025] [:error] [pid 28609:tid 28619] [client 40.69.66.178:4909] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSVpNiGGdT-nZJVs3x2bOAAAAYE"]
[Tue Nov 25 16:30:47.438606 2025] [:error] [pid 14078:tid 14145] [client 40.69.66.178:4546] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSVpN9VXYbb0ii_rVoIROAAAAIg"]
[Tue Nov 25 16:30:47.937542 2025] [:error] [pid 2987:tid 3001] [client 40.69.66.178:11997] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSVpN8-djEt-pTzPxnxugAAAAUw"]
[Tue Nov 25 16:30:48.437258 2025] [:error] [pid 28740:tid 28797] [client 40.69.66.178:5052] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSVpOFppQCoYxWW6V0VIPwAAAkY"]
[Tue Nov 25 16:30:48.939171 2025] [:error] [pid 14077:tid 14131] [client 40.69.66.178:9406] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSVpOBG9n7UHEkwDTyhAtAAAAFU"]
[Tue Nov 25 16:30:49.443089 2025] [:error] [pid 2987:tid 2995] [client 40.69.66.178:4893] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSVpOc-djEt-pTzPxnxuhAAAAUY"]
[Tue Nov 25 16:30:49.943845 2025] [:error] [pid 14076:tid 14093] [client 40.69.66.178:4578] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSVpOXsB4Gz6Qw-pvBvo9gAAAAw"]
[Tue Nov 25 16:30:50.450120 2025] [:error] [pid 14078:tid 14154] [client 40.69.66.178:4992] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSVpOtVXYbb0ii_rVoIROwAAAJE"]
[Tue Nov 25 16:30:50.951472 2025] [:error] [pid 28609:tid 28637] [client 40.69.66.178:13478] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSVpOiGGdT-nZJVs3x2bOgAAAZM"]
[Tue Nov 25 16:30:51.458498 2025] [:error] [pid 14077:tid 14111] [client 40.69.66.178:4556] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aSVpOxG9n7UHEkwDTyhAugAAAEE"]
[Tue Nov 25 16:30:51.965604 2025] [:error] [pid 2987:tid 2997] [client 40.69.66.178:4879] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSVpO8-djEt-pTzPxnxuiQAAAUg"]
[Tue Nov 25 16:30:52.464793 2025] [:error] [pid 14078:tid 14161] [client 40.69.66.178:3245] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSVpPNVXYbb0ii_rVoIRPgAAAJg"]
[Tue Nov 25 16:30:52.966180 2025] [:error] [pid 14078:tid 14138] [client 40.69.66.178:7078] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSVpPNVXYbb0ii_rVoIRPwAAAIE"]
[Tue Nov 25 16:30:53.471303 2025] [:error] [pid 28739:tid 28777] [client 40.69.66.178:4121] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4.php"] [unique_id "aSVpPRxGpKmlkG4FexRRcQAAAg8"]
[Tue Nov 25 16:30:53.975396 2025] [:error] [pid 28842:tid 29017] [client 40.69.66.178:7056] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSVpPdNmoaPf6T4-6C1ULQAAA1A"]
[Tue Nov 25 16:30:54.477919 2025] [:error] [pid 14076:tid 14086] [client 40.69.66.178:4547] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSVpPnsB4Gz6Qw-pvBvo-AAAAAU"]
[Tue Nov 25 16:30:54.980319 2025] [:error] [pid 14076:tid 14089] [client 40.69.66.178:4548] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSVpPnsB4Gz6Qw-pvBvo-QAAAAg"]
[Tue Nov 25 16:30:55.481538 2025] [:error] [pid 14078:tid 14146] [client 40.69.66.178:5638] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aSVpP9VXYbb0ii_rVoIRQgAAAIk"]
[Tue Nov 25 16:30:55.982727 2025] [:error] [pid 14078:tid 14145] [client 40.69.66.178:4997] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aSVpP9VXYbb0ii_rVoIRQwAAAIg"]
[Tue Nov 25 16:30:56.482735 2025] [:error] [pid 28609:tid 28626] [client 40.69.66.178:4296] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aSVpQCGGdT-nZJVs3x2bQgAAAYg"]
[Tue Nov 25 16:30:56.982034 2025] [:error] [pid 2987:tid 2998] [client 40.69.66.178:10977] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aSVpQM-djEt-pTzPxnxujAAAAUk"]
[Tue Nov 25 16:30:57.482706 2025] [:error] [pid 2987:tid 3013] [client 40.69.66.178:4806] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aSVpQc-djEt-pTzPxnxujQAAAVg"]
[Tue Nov 25 16:30:57.990022 2025] [:error] [pid 28740:tid 28812] [client 40.69.66.178:4807] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aSVpQVppQCoYxWW6V0VISwAAAlU"]
[Tue Nov 25 16:30:58.490760 2025] [:error] [pid 14076:tid 14091] [client 40.69.66.178:7042] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aSVpQnsB4Gz6Qw-pvBvo_QAAAAo"]
[Tue Nov 25 16:30:58.992805 2025] [:error] [pid 28739:tid 28784] [client 40.69.66.178:3201] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aSVpQhxGpKmlkG4FexRRcwAAAhY"]
[Tue Nov 25 16:30:59.493117 2025] [:error] [pid 14078:tid 14154] [client 40.69.66.178:3724] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aSVpQ9VXYbb0ii_rVoIRRAAAAJE"]
[Tue Nov 25 16:30:59.992910 2025] [:error] [pid 28739:tid 28771] [client 40.69.66.178:4559] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v4.php"] [unique_id "aSVpQxxGpKmlkG4FexRRdAAAAgk"]
[Tue Nov 25 16:31:00.496053 2025] [:error] [pid 28739:tid 28780] [client 40.69.66.178:6286] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v4.php"] [unique_id "aSVpRBxGpKmlkG4FexRRdQAAAhI"]
[Tue Nov 25 16:31:00.995637 2025] [:error] [pid 2987:tid 2995] [client 40.69.66.178:16829] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v4.php"] [unique_id "aSVpRM-djEt-pTzPxnxujwAAAUY"]
[Tue Nov 25 16:31:01.496275 2025] [:error] [pid 14076:tid 14090] [client 40.69.66.178:9653] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v4.php"] [unique_id "aSVpRXsB4Gz6Qw-pvBvpAQAAAAk"]
[Tue Nov 25 16:31:01.996443 2025] [:error] [pid 28842:tid 28998] [client 40.69.66.178:4340] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-22.php"] [unique_id "aSVpRdNmoaPf6T4-6C1UMgAAA0g"]
[Tue Nov 25 16:31:02.498370 2025] [:error] [pid 28740:tid 28807] [client 40.69.66.178:11544] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-22.php"] [unique_id "aSVpRlppQCoYxWW6V0VITwAAAlA"]
[Tue Nov 25 16:31:02.998934 2025] [:error] [pid 28836:tid 28966] [client 40.69.66.178:13364] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-22.php"] [unique_id "aSVpRpwNRsoxcLQGkTeW_gAAAss"]
[Tue Nov 25 16:31:03.499738 2025] [:error] [pid 28842:tid 29018] [client 40.69.66.178:8826] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-22.php"] [unique_id "aSVpR9NmoaPf6T4-6C1UNQAAA1E"]
[Tue Nov 25 16:31:03.999410 2025] [:error] [pid 14076:tid 14100] [client 40.69.66.178:9606] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aSVpR3sB4Gz6Qw-pvBvpAgAAABM"]
[Tue Nov 25 16:31:04.498051 2025] [:error] [pid 28842:tid 29020] [client 40.69.66.178:1048] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aSVpSNNmoaPf6T4-6C1UNwAAA1I"]
[Tue Nov 25 16:31:04.997733 2025] [:error] [pid 28739:tid 28767] [client 40.69.66.178:9891] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aSVpSBxGpKmlkG4FexRRdwAAAgU"]
[Tue Nov 25 16:31:05.497494 2025] [:error] [pid 14168:tid 14175] [client 40.69.66.178:8546] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aSVpSfR-ZDU0QEgAIIs-zAAAAMQ"]
[Tue Nov 25 16:31:05.997834 2025] [:error] [pid 28740:tid 28793] [client 40.69.66.178:1062] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aSVpSVppQCoYxWW6V0VIVAAAAkI"]
[Tue Nov 25 16:31:06.506028 2025] [:error] [pid 28740:tid 28799] [client 40.69.66.178:8774] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aSVpSlppQCoYxWW6V0VIVQAAAkg"]
[Tue Nov 25 16:31:07.007604 2025] [:error] [pid 14076:tid 14094] [client 40.69.66.178:16813] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aSVpS3sB4Gz6Qw-pvBvpBAAAAA0"]
[Tue Nov 25 16:31:07.509739 2025] [:error] [pid 14077:tid 14130] [client 40.69.66.178:6924] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aSVpSxG9n7UHEkwDTyhA5AAAAFQ"]
[Tue Nov 25 16:31:08.012178 2025] [:error] [pid 14168:tid 14182] [client 40.69.66.178:11028] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aSVpTPR-ZDU0QEgAIIs-zgAAAMs"]
[Tue Nov 25 16:31:08.512562 2025] [:error] [pid 28739:tid 28782] [client 40.69.66.178:9907] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aSVpTBxGpKmlkG4FexRRegAAAhQ"]
[Tue Nov 25 16:31:09.028842 2025] [:error] [pid 14168:tid 14171] [client 40.69.66.178:13316] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aSVpTfR-ZDU0QEgAIIs-zwAAAMA"]
[Tue Nov 25 16:31:09.527929 2025] [:error] [pid 28842:tid 29002] [client 40.69.66.178:1076] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aSVpTdNmoaPf6T4-6C1UTQAAA0w"]
[Tue Nov 25 16:31:10.030097 2025] [:error] [pid 2987:tid 3001] [client 40.69.66.178:9860] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php"] [unique_id "aSVpTs-djEt-pTzPxnxumwAAAUw"]
[Tue Nov 25 16:31:10.531058 2025] [:error] [pid 14077:tid 14118] [client 40.69.66.178:2190] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php"] [unique_id "aSVpThG9n7UHEkwDTyhA6QAAAEg"]
[Tue Nov 25 16:31:11.029407 2025] [:error] [pid 14168:tid 14195] [client 40.69.66.178:5569] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php"] [unique_id "aSVpT_R-ZDU0QEgAIIs-1QAAANg"]
[Tue Nov 25 16:31:11.530217 2025] [:error] [pid 14168:tid 14178] [client 40.69.66.178:7881] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php"] [unique_id "aSVpT_R-ZDU0QEgAIIs-2AAAAMc"]
[Tue Nov 25 16:31:12.029360 2025] [:error] [pid 14077:tid 14127] [client 40.69.66.178:8968] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aSVpUBG9n7UHEkwDTyhA7AAAAFE"]
[Tue Nov 25 16:31:12.528786 2025] [:error] [pid 28740:tid 28803] [client 40.69.66.178:15117] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aSVpUFppQCoYxWW6V0VIWgAAAkw"]
[Tue Nov 25 16:31:13.029304 2025] [:error] [pid 14078:tid 14143] [client 40.69.66.178:13731] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aSVpUdVXYbb0ii_rVoIRTAAAAIY"]
[Tue Nov 25 16:31:13.529807 2025] [:error] [pid 28739:tid 28768] [client 40.69.66.178:16792] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aSVpURxGpKmlkG4FexRRhQAAAgY"]
[Tue Nov 25 16:31:14.030426 2025] [:error] [pid 28842:tid 28998] [client 40.69.66.178:11063] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aSVpUtNmoaPf6T4-6C1UVwAAA0g"]
[Tue Nov 25 16:31:14.533460 2025] [:error] [pid 2987:tid 3008] [client 40.69.66.178:6961] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aSVpUs-djEt-pTzPxnxupQAAAVM"]
[Tue Nov 25 16:31:15.039834 2025] [:error] [pid 14078:tid 14137] [client 40.69.66.178:15118] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aSVpU9VXYbb0ii_rVoIRTwAAAIA"]
[Tue Nov 25 16:31:15.550501 2025] [:error] [pid 14168:tid 14173] [client 40.69.66.178:7897] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aSVpU_R-ZDU0QEgAIIs-2wAAAMI"]
[Tue Nov 25 16:31:16.061475 2025] [:error] [pid 28842:tid 29020] [client 40.69.66.178:5591] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSVpVNNmoaPf6T4-6C1UXAAAA1I"]
[Tue Nov 25 16:31:16.565577 2025] [:error] [pid 28609:tid 28624] [client 40.69.66.178:9014] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSVpVCGGdT-nZJVs3x2bWQAAAYY"]
[Tue Nov 25 16:31:17.073141 2025] [:error] [pid 28842:tid 29005] [client 40.69.66.178:13740] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSVpVdNmoaPf6T4-6C1UXwAAA08"]
[Tue Nov 25 16:31:17.585320 2025] [:error] [pid 28740:tid 28806] [client 40.69.66.178:6957] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aSVpVVppQCoYxWW6V0VIawAAAk8"]
[Tue Nov 25 16:31:18.092859 2025] [:error] [pid 2987:tid 2996] [client 40.69.66.178:1052] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aSVpVs-djEt-pTzPxnxupwAAAUc"]
[Tue Nov 25 16:31:18.604312 2025] [:error] [pid 14077:tid 14110] [client 40.69.66.178:12263] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aSVpVhG9n7UHEkwDTyhA-QAAAEA"]
[Tue Nov 25 16:31:19.108729 2025] [:error] [pid 14077:tid 14116] [client 40.69.66.178:14576] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aSVpVxG9n7UHEkwDTyhA_AAAAEY"]
[Tue Nov 25 16:31:19.614017 2025] [:error] [pid 14077:tid 14132] [client 40.69.66.178:11192] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aSVpVxG9n7UHEkwDTyhA_wAAAFY"]
[Tue Nov 25 16:31:20.115796 2025] [:error] [pid 28740:tid 28794] [client 40.69.66.178:6922] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSVpWFppQCoYxWW6V0VIdQAAAkM"]
[Tue Nov 25 16:31:20.630539 2025] [:error] [pid 28842:tid 28998] [client 40.69.66.178:1050] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSVpWNNmoaPf6T4-6C1UaAAAA0g"]
[Tue Nov 25 16:31:21.135525 2025] [:error] [pid 28609:tid 28618] [client 40.69.66.178:6571] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSVpWSGGdT-nZJVs3x2bXAAAAYA"]
[Tue Nov 25 16:31:21.645024 2025] [:error] [pid 14077:tid 14123] [client 40.69.66.178:13734] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aSVpWRG9n7UHEkwDTyhBBwAAAE0"]
[Tue Nov 25 16:31:22.153378 2025] [:error] [pid 28609:tid 28634] [client 40.69.66.178:14415] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVpWiGGdT-nZJVs3x2bXQAAAZA"]
[Tue Nov 25 16:31:22.664347 2025] [:error] [pid 28740:tid 28806] [client 40.69.66.178:6559] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVpWlppQCoYxWW6V0VIfAAAAk8"]
[Tue Nov 25 16:31:23.448363 2025] [proxy_fcgi:error] [pid 14076:tid 14103] [client 40.69.66.178:4775] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:31:23.705147 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 40.69.66.178:4775] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:31:23.960010 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 40.69.66.178:4775] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:31:24.215739 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 40.69.66.178:4775] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:31:24.470423 2025] [proxy_fcgi:error] [pid 14076:tid 14101] [client 40.69.66.178:4775] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:31:24.722546 2025] [:error] [pid 14076:tid 14102] [client 40.69.66.178:4775] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpXHsB4Gz6Qw-pvBvpFwAAABU"]
[Tue Nov 25 16:31:25.235807 2025] [:error] [pid 14168:tid 14186] [client 40.69.66.178:14941] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpXfR-ZDU0QEgAIIs-4AAAAM8"]
[Tue Nov 25 16:31:25.738357 2025] [:error] [pid 28836:tid 28960] [client 40.69.66.178:14587] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpXZwNRsoxcLQGkTeXGQAAAsU"]
[Tue Nov 25 16:31:26.240595 2025] [:error] [pid 14077:tid 14129] [client 40.69.66.178:3515] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpXhG9n7UHEkwDTyhBCwAAAFM"]
[Tue Nov 25 16:31:26.740480 2025] [:error] [pid 14078:tid 14161] [client 40.69.66.178:13748] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpXtVXYbb0ii_rVoIRUgAAAJg"]
[Tue Nov 25 16:31:27.246127 2025] [:error] [pid 28842:tid 29022] [client 40.69.66.178:4739] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpX9NmoaPf6T4-6C1UawAAA1Q"]
[Tue Nov 25 16:31:27.754689 2025] [:error] [pid 28739:tid 28765] [client 40.69.66.178:8370] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpXxxGpKmlkG4FexRRjwAAAgM"]
[Tue Nov 25 16:31:28.266972 2025] [:error] [pid 28609:tid 28622] [client 40.69.66.178:8366] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSVpYCGGdT-nZJVs3x2baAAAAYQ"]
[Tue Nov 25 16:31:28.779970 2025] [:error] [pid 14076:tid 14100] [client 40.69.66.178:3486] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSVpYHsB4Gz6Qw-pvBvpGwAAABM"]
[Tue Nov 25 16:31:29.280301 2025] [:error] [pid 28836:tid 28968] [client 40.69.66.178:2426] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aSVpYZwNRsoxcLQGkTeXHAAAAs0"]
[Tue Nov 25 16:31:29.783637 2025] [:error] [pid 14077:tid 14122] [client 40.69.66.178:15642] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aSVpYRG9n7UHEkwDTyhBEAAAAEw"]
[Tue Nov 25 16:31:30.295481 2025] [:error] [pid 28609:tid 28618] [client 40.69.66.178:6561] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aSVpYiGGdT-nZJVs3x2bawAAAYA"]
[Tue Nov 25 16:31:30.809647 2025] [:error] [pid 28609:tid 28640] [client 40.69.66.178:6549] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSVpYiGGdT-nZJVs3x2bbAAAAZY"]
[Tue Nov 25 16:31:31.312633 2025] [:error] [pid 28739:tid 28785] [client 40.69.66.178:14970] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/license.php"] [unique_id "aSVpYxxGpKmlkG4FexRRlwAAAhc"]
[Tue Nov 25 16:31:31.815022 2025] [:error] [pid 28739:tid 28762] [client 40.69.66.178:8297] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/license.php"] [unique_id "aSVpYxxGpKmlkG4FexRRmAAAAgA"]
[Tue Nov 25 16:31:32.314751 2025] [:error] [pid 28739:tid 28777] [client 40.69.66.178:3318] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/license.php"] [unique_id "aSVpZBxGpKmlkG4FexRRmwAAAg8"]
[Tue Nov 25 16:31:32.819941 2025] [:error] [pid 28739:tid 28769] [client 40.69.66.178:6203] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/license.php"] [unique_id "aSVpZBxGpKmlkG4FexRRnQAAAgc"]
[Tue Nov 25 16:31:33.331491 2025] [:error] [pid 28609:tid 28623] [client 40.69.66.178:14924] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aSVpZSGGdT-nZJVs3x2bcgAAAYU"]
[Tue Nov 25 16:31:33.832561 2025] [:error] [pid 28739:tid 28765] [client 40.69.66.178:2390] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aSVpZRxGpKmlkG4FexRRnwAAAgM"]
[Tue Nov 25 16:31:34.369491 2025] [:error] [pid 28842:tid 28993] [client 40.69.66.178:12137] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aSVpZtNmoaPf6T4-6C1UcwAAA0M"]
[Tue Nov 25 16:31:34.909018 2025] [:error] [pid 28836:tid 29007] [client 40.69.66.178:10137] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aSVpZpwNRsoxcLQGkTeXIAAAAtE"]
[Tue Nov 25 16:31:35.423501 2025] [:error] [pid 28740:tid 28797] [client 40.69.66.178:12096] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aSVpZ1ppQCoYxWW6V0VIgwAAAkY"]
[Tue Nov 25 16:31:35.925512 2025] [:error] [pid 2987:tid 3012] [client 40.69.66.178:8304] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aSVpZ8-djEt-pTzPxnxurwAAAVc"]
[Tue Nov 25 16:31:36.443243 2025] [:error] [pid 14076:tid 14099] [client 40.69.66.178:6196] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aSVpaHsB4Gz6Qw-pvBvpIgAAABI"]
[Tue Nov 25 16:31:36.948279 2025] [:error] [pid 14078:tid 14157] [client 40.69.66.178:9244] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aSVpaNVXYbb0ii_rVoIRWQAAAJQ"]
[Tue Nov 25 16:31:37.460992 2025] [:error] [pid 28842:tid 28999] [client 40.69.66.178:1928] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSVpadNmoaPf6T4-6C1UdgAAA0k"]
[Tue Nov 25 16:31:37.971272 2025] [:error] [pid 14168:tid 14191] [client 40.69.66.178:6189] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSVpafR-ZDU0QEgAIIs-6gAAANQ"]
[Tue Nov 25 16:31:38.474567 2025] [:error] [pid 28609:tid 28631] [client 40.69.66.178:5112] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSVpaiGGdT-nZJVs3x2beQAAAY0"]
[Tue Nov 25 16:31:38.981185 2025] [:error] [pid 14077:tid 14114] [client 40.69.66.178:4012] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aSVpahG9n7UHEkwDTyhBGgAAAEQ"]
[Tue Nov 25 16:31:39.482245 2025] [:error] [pid 28609:tid 28624] [client 40.69.66.178:14367] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSVpayGGdT-nZJVs3x2bfgAAAYY"]
[Tue Nov 25 16:31:39.996261 2025] [:error] [pid 2987:tid 2994] [client 40.69.66.178:6200] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSVpa8-djEt-pTzPxnxusQAAAUU"]
[Tue Nov 25 16:31:40.514130 2025] [:error] [pid 14076:tid 14090] [client 40.69.66.178:8509] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSVpbHsB4Gz6Qw-pvBvpIwAAAAk"]
[Tue Nov 25 16:31:41.013298 2025] [:error] [pid 28739:tid 28783] [client 40.69.66.178:9252] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aSVpbRxGpKmlkG4FexRRowAAAhU"]
[Tue Nov 25 16:31:41.519159 2025] [:error] [pid 14077:tid 14121] [client 40.69.66.178:6204] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVpbRG9n7UHEkwDTyhBHQAAAEs"]
[Tue Nov 25 16:31:42.018073 2025] [:error] [pid 14076:tid 14105] [client 40.69.66.178:10650] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVpbnsB4Gz6Qw-pvBvpJAAAABg"]
[Tue Nov 25 16:31:42.520272 2025] [:error] [pid 28740:tid 28804] [client 40.69.66.178:7299] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVpblppQCoYxWW6V0VIhQAAAk0"]
[Tue Nov 25 16:31:43.028954 2025] [:error] [pid 2987:tid 3010] [client 40.69.66.178:10614] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVpb8-djEt-pTzPxnxuuQAAAVU"]
[Tue Nov 25 16:31:43.530208 2025] [:error] [pid 28836:tid 28959] [client 40.69.66.178:11454] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSVpb5wNRsoxcLQGkTeXMAAAAsQ"]
[Tue Nov 25 16:31:44.030327 2025] [:error] [pid 14077:tid 14110] [client 40.69.66.178:10518] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSVpcBG9n7UHEkwDTyhBIAAAAEA"]
[Tue Nov 25 16:31:44.538351 2025] [:error] [pid 28740:tid 28796] [client 40.69.66.178:10632] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSVpcFppQCoYxWW6V0VIiQAAAkU"]
[Tue Nov 25 16:31:45.038986 2025] [:error] [pid 28836:tid 28963] [client 40.69.66.178:12152] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aSVpcZwNRsoxcLQGkTeXNQAAAsg"]
[Tue Nov 25 16:31:45.539894 2025] [:error] [pid 14168:tid 14177] [client 40.69.66.178:14376] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSVpcfR-ZDU0QEgAIIs-8wAAAMY"]
[Tue Nov 25 16:31:46.041376 2025] [:error] [pid 14077:tid 14120] [client 40.69.66.178:4281] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSVpchG9n7UHEkwDTyhBIwAAAEo"]
[Tue Nov 25 16:31:46.543834 2025] [:error] [pid 14076:tid 14096] [client 40.69.66.178:5071] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSVpcnsB4Gz6Qw-pvBvpJwAAAA8"]
[Tue Nov 25 16:31:47.049784 2025] [:error] [pid 14076:tid 14088] [client 40.69.66.178:14896] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSVpc3sB4Gz6Qw-pvBvpKAAAAAc"]
[Tue Nov 25 16:31:47.550346 2025] [:error] [pid 28740:tid 28800] [client 40.69.66.178:12911] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSVpc1ppQCoYxWW6V0VIigAAAkk"]
[Tue Nov 25 16:31:48.056385 2025] [:error] [pid 28739:tid 28778] [client 40.69.66.178:11893] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSVpdBxGpKmlkG4FexRRrQAAAhA"]
[Tue Nov 25 16:31:48.564963 2025] [:error] [pid 28842:tid 28999] [client 40.69.66.178:10530] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSVpdNNmoaPf6T4-6C1UfwAAA0k"]
[Tue Nov 25 16:31:49.073554 2025] [:error] [pid 28740:tid 28805] [client 40.69.66.178:1843] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aSVpdVppQCoYxWW6V0VIiwAAAk4"]
[Tue Nov 25 16:31:49.573264 2025] [:error] [pid 14077:tid 14118] [client 40.69.66.178:10609] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aSVpdRG9n7UHEkwDTyhBJgAAAEg"]
[Tue Nov 25 16:31:50.073718 2025] [:error] [pid 28739:tid 28782] [client 40.69.66.178:14862] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aSVpdhxGpKmlkG4FexRRsQAAAhQ"]
[Tue Nov 25 16:31:50.577342 2025] [:error] [pid 2987:tid 3013] [client 40.69.66.178:10596] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aSVpds-djEt-pTzPxnxuywAAAVg"]
[Tue Nov 25 16:31:51.085969 2025] [:error] [pid 2987:tid 3010] [client 40.69.66.178:11376] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aSVpd8-djEt-pTzPxnxuzQAAAVU"]
[Tue Nov 25 16:31:51.589113 2025] [:error] [pid 28842:tid 28997] [client 40.69.66.178:7402] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpd9NmoaPf6T4-6C1UhAAAA0c"]
[Tue Nov 25 16:31:52.090938 2025] [:error] [pid 28740:tid 28808] [client 40.69.66.178:12891] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpeFppQCoYxWW6V0VIjQAAAlE"]
[Tue Nov 25 16:31:52.593325 2025] [:error] [pid 28739:tid 28779] [client 40.69.66.178:10378] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpeBxGpKmlkG4FexRRuAAAAhE"]
[Tue Nov 25 16:31:53.096407 2025] [:error] [pid 14168:tid 14186] [client 40.69.66.178:12890] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpefR-ZDU0QEgAIIs-9wAAAM8"]
[Tue Nov 25 16:31:53.599938 2025] [:error] [pid 28739:tid 28786] [client 40.69.66.178:14893] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpeRxGpKmlkG4FexRRuQAAAhg"]
[Tue Nov 25 16:31:54.100494 2025] [:error] [pid 28842:tid 29026] [client 40.69.66.178:11413] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpetNmoaPf6T4-6C1UjAAAA1g"]
[Tue Nov 25 16:31:54.602654 2025] [:error] [pid 28740:tid 28801] [client 40.69.66.178:1401] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpelppQCoYxWW6V0VIjgAAAko"]
[Tue Nov 25 16:31:55.100946 2025] [:error] [pid 28740:tid 28798] [client 40.69.66.178:7403] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpe1ppQCoYxWW6V0VIjwAAAkc"]
[Tue Nov 25 16:31:55.610011 2025] [:error] [pid 28842:tid 28995] [client 40.69.66.178:11382] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSVpe9NmoaPf6T4-6C1UmgAAA0U"]
[Tue Nov 25 16:31:56.111890 2025] [:error] [pid 28740:tid 28793] [client 40.69.66.178:1180] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/403.php"] [unique_id "aSVpfFppQCoYxWW6V0VIlAAAAkI"]
[Tue Nov 25 16:31:56.614784 2025] [:error] [pid 28842:tid 29020] [client 40.69.66.178:9455] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/403.php"] [unique_id "aSVpfNNmoaPf6T4-6C1UpAAAA1I"]
[Tue Nov 25 16:31:57.122050 2025] [:error] [pid 14077:tid 14119] [client 40.69.66.178:7329] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/403.php"] [unique_id "aSVpfRG9n7UHEkwDTyhBKwAAAEk"]
[Tue Nov 25 16:31:57.624841 2025] [:error] [pid 14076:tid 14090] [client 40.69.66.178:11351] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSVpfXsB4Gz6Qw-pvBvpPAAAAAk"]
[Tue Nov 25 16:31:58.128888 2025] [:error] [pid 14077:tid 14129] [client 40.69.66.178:7926] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSVpfhG9n7UHEkwDTyhBLgAAAFM"]
[Tue Nov 25 16:31:58.632929 2025] [:error] [pid 14168:tid 14180] [client 40.69.66.178:10377] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSVpfvR-ZDU0QEgAIIs_CQAAAMk"]
[Tue Nov 25 16:31:59.133301 2025] [:error] [pid 28609:tid 28625] [client 40.69.66.178:9454] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSVpfyGGdT-nZJVs3x2bgQAAAYc"]
[Tue Nov 25 16:31:59.642435 2025] [:error] [pid 28609:tid 28623] [client 40.69.66.178:12724] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpfyGGdT-nZJVs3x2bgwAAAYU"]
[Tue Nov 25 16:32:00.145601 2025] [:error] [pid 14077:tid 14117] [client 40.69.66.178:7397] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpgBG9n7UHEkwDTyhBMQAAAEc"]
[Tue Nov 25 16:32:00.652546 2025] [:error] [pid 28836:tid 29009] [client 40.69.66.178:2020] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpgJwNRsoxcLQGkTeXRQAAAtM"]
[Tue Nov 25 16:32:01.158998 2025] [:error] [pid 28609:tid 28641] [client 40.69.66.178:10495] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSVpgSGGdT-nZJVs3x2bhwAAAZc"]
[Tue Nov 25 16:32:01.661229 2025] [:error] [pid 28842:tid 28993] [client 40.69.66.178:8578] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpgdNmoaPf6T4-6C1UtQAAA0M"]
[Tue Nov 25 16:32:02.162333 2025] [:error] [pid 14076:tid 14087] [client 40.69.66.178:7401] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpgnsB4Gz6Qw-pvBvpQAAAAAY"]
[Tue Nov 25 16:32:02.662906 2025] [:error] [pid 2987:tid 2996] [client 40.69.66.178:11887] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpgs-djEt-pTzPxnxu4AAAAUc"]
[Tue Nov 25 16:32:03.162758 2025] [:error] [pid 28842:tid 29004] [client 40.69.66.178:12837] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/marijuana.php"] [unique_id "aSVpg9NmoaPf6T4-6C1UuwAAA04"]
[Tue Nov 25 16:32:03.665052 2025] [:error] [pid 14076:tid 14088] [client 40.69.66.178:11864] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSVpg3sB4Gz6Qw-pvBvpQQAAAAc"]
[Tue Nov 25 16:32:04.165271 2025] [:error] [pid 14076:tid 14086] [client 40.69.66.178:7746] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSVphHsB4Gz6Qw-pvBvpQgAAAAU"]
[Tue Nov 25 16:32:04.667670 2025] [:error] [pid 14168:tid 14177] [client 40.69.66.178:1915] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSVphPR-ZDU0QEgAIIs_FAAAAMY"]
[Tue Nov 25 16:32:05.170430 2025] [:error] [pid 28739:tid 28774] [client 40.69.66.178:12843] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aSVphRxGpKmlkG4FexRR3wAAAgw"]
[Tue Nov 25 16:32:05.672417 2025] [:error] [pid 28739:tid 28783] [client 40.69.66.178:10473] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSVphRxGpKmlkG4FexRR4QAAAhU"]
[Tue Nov 25 16:32:06.176090 2025] [:error] [pid 14077:tid 14110] [client 40.69.66.178:12699] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSVphhG9n7UHEkwDTyhBOQAAAEA"]
[Tue Nov 25 16:32:06.677791 2025] [:error] [pid 2987:tid 3005] [client 40.69.66.178:9674] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSVphs-djEt-pTzPxnxu6gAAAVA"]
[Tue Nov 25 16:32:07.180615 2025] [:error] [pid 2987:tid 2995] [client 40.69.66.178:1906] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aSVph8-djEt-pTzPxnxu7QAAAUY"]
[Tue Nov 25 16:32:07.683095 2025] [:error] [pid 28836:tid 29009] [client 40.69.66.178:1895] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSVph5wNRsoxcLQGkTeXTwAAAtM"]
[Tue Nov 25 16:32:08.188303 2025] [:error] [pid 14168:tid 14194] [client 40.69.66.178:15363] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSVpiPR-ZDU0QEgAIIs_GQAAANc"]
[Tue Nov 25 16:32:08.696941 2025] [:error] [pid 28740:tid 28794] [client 40.69.66.178:1863] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSVpiFppQCoYxWW6V0VIngAAAkM"]
[Tue Nov 25 16:32:09.205199 2025] [:error] [pid 14077:tid 14115] [client 40.69.66.178:6450] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aSVpiRG9n7UHEkwDTyhBPwAAAEU"]
[Tue Nov 25 16:32:09.708454 2025] [:error] [pid 28740:tid 28813] [client 40.69.66.178:9704] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSVpiVppQCoYxWW6V0VInwAAAlY"]
[Tue Nov 25 16:32:10.209166 2025] [:error] [pid 28609:tid 28635] [client 40.69.66.178:5314] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSVpiiGGdT-nZJVs3x2biwAAAZE"]
[Tue Nov 25 16:32:10.713493 2025] [:error] [pid 14077:tid 14121] [client 40.69.66.178:4195] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSVpihG9n7UHEkwDTyhBQwAAAEs"]
[Tue Nov 25 16:32:11.215740 2025] [:error] [pid 28842:tid 28999] [client 40.69.66.178:1889] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aSVpi9NmoaPf6T4-6C1UwQAAA0k"]
[Tue Nov 25 16:32:11.724480 2025] [:error] [pid 14077:tid 14133] [client 40.69.66.178:5316] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSVpixG9n7UHEkwDTyhBSQAAAFc"]
[Tue Nov 25 16:32:12.229108 2025] [:error] [pid 28842:tid 28992] [client 40.69.66.178:2512] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSVpjNNmoaPf6T4-6C1UwgAAA0I"]
[Tue Nov 25 16:32:12.735067 2025] [:error] [pid 28842:tid 29003] [client 40.69.66.178:12653] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSVpjNNmoaPf6T4-6C1UwwAAA00"]
[Tue Nov 25 16:32:13.243093 2025] [:error] [pid 28740:tid 28804] [client 40.69.66.178:15394] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cron.php"] [unique_id "aSVpjVppQCoYxWW6V0VIoAAAAk0"]
[Tue Nov 25 16:32:13.752163 2025] [:error] [pid 28740:tid 28809] [client 40.69.66.178:6982] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanz.php"] [unique_id "aSVpjVppQCoYxWW6V0VIoQAAAlI"]
[Tue Nov 25 16:32:14.266602 2025] [:error] [pid 2987:tid 2992] [client 40.69.66.178:13173] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanz.php"] [unique_id "aSVpjs-djEt-pTzPxnxu_QAAAUM"]
[Tue Nov 25 16:32:14.766646 2025] [:error] [pid 28609:tid 28625] [client 40.69.66.178:6752] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanz.php"] [unique_id "aSVpjiGGdT-nZJVs3x2bjwAAAYc"]
[Tue Nov 25 16:32:15.268036 2025] [:error] [pid 14078:tid 14153] [client 40.69.66.178:8606] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanz.php"] [unique_id "aSVpj9VXYbb0ii_rVoIRfgAAAJA"]
[Tue Nov 25 16:32:15.769143 2025] [:error] [pid 14078:tid 14139] [client 40.69.66.178:1868] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aSVpj9VXYbb0ii_rVoIRfwAAAII"]
[Tue Nov 25 16:32:16.277939 2025] [:error] [pid 14076:tid 14086] [client 40.69.66.178:6378] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aSVpkHsB4Gz6Qw-pvBvpUAAAAAU"]
[Tue Nov 25 16:32:16.782051 2025] [:error] [pid 28842:tid 29004] [client 40.69.66.178:2523] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aSVpkNNmoaPf6T4-6C1U0AAAA04"]
[Tue Nov 25 16:32:17.285516 2025] [:error] [pid 28740:tid 28807] [client 40.69.66.178:16206] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aSVpkVppQCoYxWW6V0VIsAAAAlA"]
[Tue Nov 25 16:32:17.792939 2025] [:error] [pid 14077:tid 14123] [client 40.69.66.178:9089] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aSVpkRG9n7UHEkwDTyhBXAAAAE0"]
[Tue Nov 25 16:32:18.307429 2025] [:error] [pid 28739:tid 28762] [client 40.69.66.178:6374] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aSVpkhxGpKmlkG4FexRR5wAAAgA"]
[Tue Nov 25 16:32:18.807827 2025] [:error] [pid 28836:tid 29010] [client 40.69.66.178:14089] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aSVpkpwNRsoxcLQGkTeXZQAAAtQ"]
[Tue Nov 25 16:32:19.312335 2025] [:error] [pid 14078:tid 14160] [client 40.69.66.178:11939] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aSVpk9VXYbb0ii_rVoIRggAAAJc"]
[Tue Nov 25 16:32:19.813606 2025] [:error] [pid 28842:tid 28991] [client 40.69.66.178:11905] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-2019.php"] [unique_id "aSVpk9NmoaPf6T4-6C1U1QAAA0E"]
[Tue Nov 25 16:32:20.316561 2025] [:error] [pid 28842:tid 29002] [client 40.69.66.178:4532] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-2019.php"] [unique_id "aSVplNNmoaPf6T4-6C1U1gAAA0w"]
[Tue Nov 25 16:32:20.815971 2025] [:error] [pid 28842:tid 28993] [client 40.69.66.178:5346] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-2019.php"] [unique_id "aSVplNNmoaPf6T4-6C1U2AAAA0M"]
[Tue Nov 25 16:32:21.322238 2025] [:error] [pid 28609:tid 28629] [client 40.69.66.178:4187] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-2019.php"] [unique_id "aSVplSGGdT-nZJVs3x2bpQAAAYs"]
[Tue Nov 25 16:32:21.822766 2025] [:error] [pid 14076:tid 14098] [client 40.69.66.178:2589] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aSVplXsB4Gz6Qw-pvBvpWAAAABE"]
[Tue Nov 25 16:32:22.325600 2025] [:error] [pid 28740:tid 28813] [client 40.69.66.178:6336] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aSVpllppQCoYxWW6V0VIvQAAAlY"]
[Tue Nov 25 16:32:22.825091 2025] [:error] [pid 14168:tid 14186] [client 40.69.66.178:12039] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aSVplvR-ZDU0QEgAIIs_JAAAAM8"]
[Tue Nov 25 16:32:23.329805 2025] [:error] [pid 14168:tid 14179] [client 40.69.66.178:8900] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aSVpl_R-ZDU0QEgAIIs_JQAAAMg"]
[Tue Nov 25 16:32:23.834983 2025] [:error] [pid 28842:tid 28994] [client 40.69.66.178:9129] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSVpl9NmoaPf6T4-6C1U4QAAA0Q"]
[Tue Nov 25 16:32:24.343234 2025] [:error] [pid 14168:tid 14188] [client 40.69.66.178:13033] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSVpmPR-ZDU0QEgAIIs_JgAAANE"]
[Tue Nov 25 16:32:24.844250 2025] [:error] [pid 14078:tid 14148] [client 40.69.66.178:6701] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tiny.php"] [unique_id "aSVpmNVXYbb0ii_rVoIRnQAAAIs"]
[Tue Nov 25 16:32:25.349198 2025] [proxy_fcgi:error] [pid 14077:tid 14110] [client 40.69.66.178:6408] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:32:25.604689 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 40.69.66.178:6408] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:32:26.115101 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 40.69.66.178:6408] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:32:26.368764 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 40.69.66.178:6408] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:32:26.623180 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 40.69.66.178:6408] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:32:26.873216 2025] [:error] [pid 14077:tid 14129] [client 40.69.66.178:6408] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpmhG9n7UHEkwDTyhBcQAAAFM"]
[Tue Nov 25 16:32:27.373047 2025] [:error] [pid 14077:tid 14115] [client 40.69.66.178:7401] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpmxG9n7UHEkwDTyhBcwAAAEU"]
[Tue Nov 25 16:32:27.874830 2025] [:error] [pid 28842:tid 28999] [client 40.69.66.178:10729] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpm9NmoaPf6T4-6C1U6gAAA0k"]
[Tue Nov 25 16:32:28.377597 2025] [:error] [pid 28842:tid 29003] [client 40.69.66.178:2594] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVpnNNmoaPf6T4-6C1U7QAAA00"]
[Tue Nov 25 16:32:28.877314 2025] [:error] [pid 28842:tid 28991] [client 40.69.66.178:15912] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSVpnNNmoaPf6T4-6C1U7wAAA0E"]
[Tue Nov 25 16:32:29.392701 2025] [:error] [pid 14078:tid 14146] [client 40.69.66.178:1135] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSVpndVXYbb0ii_rVoIRoAAAAIk"]
[Tue Nov 25 16:32:29.893135 2025] [:error] [pid 2987:tid 2992] [client 40.69.66.178:2582] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSVpnc-djEt-pTzPxnxvIAAAAUM"]
[Tue Nov 25 16:32:30.394908 2025] [:error] [pid 14076:tid 14089] [client 40.69.66.178:6506] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSVpnnsB4Gz6Qw-pvBvpXwAAAAg"]
[Tue Nov 25 16:32:30.908376 2025] [:error] [pid 2987:tid 3011] [client 40.69.66.178:16909] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSVpns-djEt-pTzPxnxvIgAAAVY"]
[Tue Nov 25 16:32:31.416496 2025] [:error] [pid 14078:tid 14158] [client 40.69.66.178:8123] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSVpn9VXYbb0ii_rVoIRogAAAJU"]
[Tue Nov 25 16:32:31.934195 2025] [:error] [pid 28740:tid 28805] [client 40.69.66.178:2366] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSVpn1ppQCoYxWW6V0VIygAAAk4"]
[Tue Nov 25 16:32:32.442343 2025] [:error] [pid 28740:tid 28803] [client 40.69.66.178:6517] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aSVpoFppQCoYxWW6V0VIzAAAAkw"]
[Tue Nov 25 16:32:32.949422 2025] [:error] [pid 28740:tid 28801] [client 40.69.66.178:11685] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSVpoFppQCoYxWW6V0VIzQAAAko"]
[Tue Nov 25 16:32:33.460484 2025] [:error] [pid 28740:tid 28798] [client 40.69.66.178:7950] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSVpoVppQCoYxWW6V0VIzwAAAkc"]
[Tue Nov 25 16:32:33.961552 2025] [:error] [pid 28609:tid 28637] [client 40.69.66.178:2166] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSVpoSGGdT-nZJVs3x2bqgAAAZM"]
[Tue Nov 25 16:32:34.462873 2025] [:error] [pid 28836:tid 29007] [client 40.69.66.178:6476] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSVpopwNRsoxcLQGkTeXeAAAAtE"]
[Tue Nov 25 16:32:34.964337 2025] [:error] [pid 14077:tid 14117] [client 40.69.66.178:8417] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSVpohG9n7UHEkwDTyhBhAAAAEc"]
[Tue Nov 25 16:32:35.467376 2025] [:error] [pid 2987:tid 2998] [client 40.69.66.178:11682] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSVpo8-djEt-pTzPxnxvJQAAAUk"]
[Tue Nov 25 16:32:35.976876 2025] [:error] [pid 28836:tid 28986] [client 40.69.66.178:2357] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSVpo5wNRsoxcLQGkTeXegAAAs8"]
[Tue Nov 25 16:32:36.478059 2025] [:error] [pid 14077:tid 14118] [client 40.69.66.178:2347] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSVppBG9n7UHEkwDTyhBhwAAAEg"]
[Tue Nov 25 16:32:36.978958 2025] [:error] [pid 28842:tid 29002] [client 40.69.66.178:12992] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSVppNNmoaPf6T4-6C1U9QAAA0w"]
[Tue Nov 25 16:32:37.481088 2025] [:error] [pid 14078:tid 14161] [client 40.69.66.178:2346] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSVppdVXYbb0ii_rVoIRpAAAAJg"]
[Tue Nov 25 16:32:37.985774 2025] [:error] [pid 14077:tid 14131] [client 40.69.66.178:2955] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSVppRG9n7UHEkwDTyhBlQAAAFU"]
[Tue Nov 25 16:32:38.487868 2025] [:error] [pid 14077:tid 14112] [client 40.69.66.178:13070] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/fucku.php"] [unique_id "aSVpphG9n7UHEkwDTyhBoQAAAEI"]
[Tue Nov 25 16:32:39.006448 2025] [:error] [pid 14168:tid 14176] [client 40.69.66.178:7985] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSVpp_R-ZDU0QEgAIIs_KwAAAMU"]
[Tue Nov 25 16:32:39.509143 2025] [:error] [pid 14168:tid 14193] [client 40.69.66.178:2353] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSVpp_R-ZDU0QEgAIIs_LAAAANY"]
[Tue Nov 25 16:32:40.012270 2025] [:error] [pid 14077:tid 14133] [client 40.69.66.178:2713] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSVpqBG9n7UHEkwDTyhBsQAAAFc"]
[Tue Nov 25 16:32:40.523530 2025] [:error] [pid 14168:tid 14172] [client 40.69.66.178:7553] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSVpqPR-ZDU0QEgAIIs_LQAAAME"]
[Tue Nov 25 16:32:41.025607 2025] [:error] [pid 14078:tid 14155] [client 40.69.66.178:13114] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSVpqdVXYbb0ii_rVoIRqgAAAJI"]
[Tue Nov 25 16:32:41.535395 2025] [:error] [pid 28740:tid 28810] [client 40.69.66.178:16930] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSVpqVppQCoYxWW6V0VI1wAAAlM"]
[Tue Nov 25 16:32:42.035752 2025] [:error] [pid 28836:tid 29012] [client 40.69.66.178:11192] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSVpqpwNRsoxcLQGkTeXhwAAAtY"]
[Tue Nov 25 16:32:42.543732 2025] [:error] [pid 14078:tid 14157] [client 40.69.66.178:8427] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aSVpqtVXYbb0ii_rVoIRrAAAAJQ"]
[Tue Nov 25 16:32:43.043288 2025] [:error] [pid 14076:tid 14089] [client 40.69.66.178:4657] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVpq3sB4Gz6Qw-pvBvpbwAAAAg"]
[Tue Nov 25 16:32:43.549996 2025] [:error] [pid 14078:tid 14143] [client 40.69.66.178:8679] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVpq9VXYbb0ii_rVoIRrgAAAIY"]
[Tue Nov 25 16:32:44.053738 2025] [:error] [pid 14077:tid 14125] [client 40.69.66.178:8687] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVprBG9n7UHEkwDTyhBtwAAAE8"]
[Tue Nov 25 16:32:44.558008 2025] [:error] [pid 2987:tid 3000] [client 40.69.66.178:11285] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVprM-djEt-pTzPxnxvLQAAAUs"]
[Tue Nov 25 21:44:27.750277 2025] [:error] [pid 43843:tid 43854] [client 49.36.26.180:51399] [client 49.36.26.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.26.180, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSWyuxhx4v3NUNdMKDP16wAAAck"]
[Tue Nov 25 21:44:27.761283 2025] [proxy_fcgi:error] [pid 43843:tid 43854] [client 49.36.26.180:51399] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 22:23:48.756583 2025] [autoindex:error] [pid 43981:tid 43998] [client 34.90.27.177:56042] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 22:48:10.418706 2025] [autoindex:error] [pid 14077:tid 14111] [client 34.6.129.75:58803] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:06:26.517470 2025] [:error] [pid 28836:tid 28955] [client 43.157.170.126:43990] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSXF8pwNRsoxcLQGkTcBUwAAAsA"]
[Tue Nov 25 23:30:52.725726 2025] [autoindex:error] [pid 14076:tid 14103] [client 34.78.165.176:58961] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:56:03.691877 2025] [autoindex:error] [pid 2987:tid 3003] [client 34.73.15.137:52946] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 00:02:19.282212 2025] [:error] [pid 14078:tid 14150] [client 54.173.250.15:43932] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSXTC9VXYbb0ii_rVoLBiwAAAI0"]
[Wed Nov 26 00:18:46.816037 2025] [autoindex:error] [pid 14078:tid 14147] [client 34.132.154.225:55986] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 00:52:57.440262 2025] [autoindex:error] [pid 14078:tid 14151] [client 74.7.243.216:34962] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 01:12:15.663288 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:15.780998 2025] [proxy_fcgi:error] [pid 14076:tid 14089] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:15.898370 2025] [proxy_fcgi:error] [pid 14076:tid 14082] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:16.015217 2025] [proxy_fcgi:error] [pid 14076:tid 14094] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:16.132441 2025] [proxy_fcgi:error] [pid 14076:tid 14105] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:16.302692 2025] [proxy_fcgi:error] [pid 14076:tid 14093] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:16.552807 2025] [proxy_fcgi:error] [pid 14076:tid 14090] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:16.681318 2025] [proxy_fcgi:error] [pid 14076:tid 14103] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:16.798992 2025] [proxy_fcgi:error] [pid 14076:tid 14088] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:17.020961 2025] [proxy_fcgi:error] [pid 14076:tid 14099] [client 172.207.235.63:32717] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 01:12:17.134291 2025] [:error] [pid 14076:tid 14083] [client 172.207.235.63:32717] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSXjcXsB4Gz6Qw-pvBuEVgAAAAI"]
[Wed Nov 26 01:12:18.981811 2025] [:error] [pid 2987:tid 2992] [client 172.207.235.63:32649] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSXjcs-djEt-pTzPxnwELQAAAUM"]
[Wed Nov 26 01:12:21.749139 2025] [:error] [pid 43843:tid 43857] [client 172.207.235.63:32705] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSXjdRhx4v3NUNdMKDMkRQAAAcw"]
[Wed Nov 26 01:12:22.832185 2025] [:error] [pid 14076:tid 14085] [client 172.207.235.63:32653] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aSXjdnsB4Gz6Qw-pvBuEVwAAAAQ"]
[Wed Nov 26 01:12:24.067030 2025] [:error] [pid 2987:tid 3001] [client 172.207.235.63:32734] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSXjeM-djEt-pTzPxnwENwAAAUw"]
[Wed Nov 26 01:12:25.434501 2025] [:error] [pid 2987:tid 2990] [client 172.207.235.63:32723] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSXjec-djEt-pTzPxnwEOgAAAUE"]
[Wed Nov 26 01:12:26.802274 2025] [:error] [pid 14168:tid 14173] [client 172.207.235.63:32741] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSXjevR-ZDU0QEgAIIvAswAAAMI"]
[Wed Nov 26 01:12:28.916106 2025] [:error] [pid 43981:tid 44002] [client 172.207.235.63:32707] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aSXjfAgZn97m_qh_RaGbkQAAAxM"]
[Wed Nov 26 01:12:30.306891 2025] [:error] [pid 14168:tid 14179] [client 172.207.235.63:32648] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSXjfvR-ZDU0QEgAIIvAtQAAAMg"]
[Wed Nov 26 01:12:30.986685 2025] [:error] [pid 28739:tid 28763] [client 172.207.235.63:32755] [client 172.207.235.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aSXjfhxGpKmlkG4FexT60QAAAgE"]
[Wed Nov 26 01:23:30.616071 2025] [autoindex:error] [pid 28836:tid 29007] [client 66.249.64.8:56064] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 03:00:10.194448 2025] [autoindex:error] [pid 28609:tid 28627] [client 43.131.1.64:54920] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 04:01:23.902417 2025] [autoindex:error] [pid 3493:tid 3503] [client 35.88.170.197:60372] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 10:24:47.911283 2025] [autoindex:error] [pid 45836:tid 45864] [client 209.222.82.72:55722] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 10:57:04.770909 2025] [autoindex:error] [pid 45901:tid 45921] [client 209.222.82.128:40476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 11:35:49.274701 2025] [autoindex:error] [pid 45901:tid 45926] [client 35.88.170.197:34888] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 16:15:11.701292 2025] [:error] [pid 45683:tid 45708] [client 216.126.239.203:35374] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSa3DxX1gQgNFW_222p7kgAAAVQ"]
[Wed Nov 26 18:37:13.829621 2025] [autoindex:error] [pid 45684:tid 45731] [client 98.93.207.228:58284] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 18:37:14.238629 2025] [autoindex:error] [pid 20733:tid 20758] [client 98.93.207.228:42992] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 18:40:53.283629 2025] [:error] [pid 45684:tid 45735] [client 223.185.36.191:3929] [client 223.185.36.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.36.191, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSbZNfg5LMxwI4-PD1c6ZwAAABQ"]
[Wed Nov 26 18:40:53.293625 2025] [proxy_fcgi:error] [pid 45684:tid 45735] [client 223.185.36.191:3929] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 19:02:53.851372 2025] [:error] [pid 20733:tid 20740] [client 49.206.245.162:56228] [client 49.206.245.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.245.162, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSbeXQV9EP2HuRvnH8dUQQAAAMU"]
[Wed Nov 26 19:02:53.866378 2025] [proxy_fcgi:error] [pid 20733:tid 20740] [client 49.206.245.162:56228] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 00:14:12.863134 2025] [autoindex:error] [pid 45685:tid 45754] [client 172.191.37.184:15519] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 00:14:12.871735 2025] [proxy_fcgi:error] [pid 46443:tid 46446] [client 172.191.37.184:15518] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 27 00:14:13.130378 2025] [proxy_fcgi:error] [pid 46443:tid 46467] [client 172.191.37.184:15518] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 27 00:14:15.363727 2025] [proxy_fcgi:error] [pid 45684:tid 45719] [client 172.191.37.184:15535] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 27 00:14:15.587768 2025] [proxy_fcgi:error] [pid 45684:tid 45725] [client 172.191.37.184:15535] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Nov 27 00:46:47.036808 2025] [:error] [pid 8184:tid 8254] [client 103.77.107.57:57073] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aScu97-M2IHkRYVrcbN4pAAAAFA"]
[Thu Nov 27 00:46:47.313834 2025] [:error] [pid 8184:tid 8248] [client 103.77.107.57:63178] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScu97-M2IHkRYVrcbN4pgAAAEs"]
[Thu Nov 27 04:40:52.200626 2025] [autoindex:error] [pid 6290:tid 6304] [client 51.103.101.212:21499] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 04:40:52.446903 2025] [proxy_fcgi:error] [pid 6290:tid 6313] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 04:40:52.975875 2025] [proxy_fcgi:error] [pid 6290:tid 6309] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 04:40:53.215695 2025] [proxy_fcgi:error] [pid 6290:tid 6316] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:40:53.458139 2025] [proxy_fcgi:error] [pid 6290:tid 6314] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 04:40:53.723518 2025] [proxy_fcgi:error] [pid 6290:tid 6312] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 04:40:53.963827 2025] [proxy_fcgi:error] [pid 6290:tid 6302] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:40:54.203459 2025] [proxy_fcgi:error] [pid 6290:tid 6296] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:40:55.295191 2025] [proxy_fcgi:error] [pid 6290:tid 6308] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:40:55.817228 2025] [proxy_fcgi:error] [pid 6290:tid 6311] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:40:56.443007 2025] [proxy_fcgi:error] [pid 6290:tid 6315] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 04:40:56.684610 2025] [proxy_fcgi:error] [pid 6290:tid 6295] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:40:56.949291 2025] [proxy_fcgi:error] [pid 6290:tid 6310] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 04:40:57.231863 2025] [proxy_fcgi:error] [pid 6290:tid 6297] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:40:59.324899 2025] [proxy_fcgi:error] [pid 6290:tid 6304] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:40:59.812567 2025] [proxy_fcgi:error] [pid 6290:tid 6300] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 04:41:00.057290 2025] [proxy_fcgi:error] [pid 6290:tid 6309] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:00.298770 2025] [proxy_fcgi:error] [pid 6290:tid 6316] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:00.589894 2025] [proxy_fcgi:error] [pid 6290:tid 6312] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:00.829091 2025] [proxy_fcgi:error] [pid 6290:tid 6302] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:01.069462 2025] [proxy_fcgi:error] [pid 6290:tid 6296] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:41:01.402334 2025] [proxy_fcgi:error] [pid 6290:tid 6299] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:02.185329 2025] [proxy_fcgi:error] [pid 6290:tid 6315] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:02.487650 2025] [proxy_fcgi:error] [pid 6290:tid 6303] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 04:41:02.734240 2025] [proxy_fcgi:error] [pid 6290:tid 6295] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:02.973914 2025] [proxy_fcgi:error] [pid 6290:tid 6310] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:41:03.226780 2025] [proxy_fcgi:error] [pid 6290:tid 6297] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:41:03.604050 2025] [proxy_fcgi:error] [pid 6290:tid 6306] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:41:04.333109 2025] [proxy_fcgi:error] [pid 6290:tid 6300] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 04:41:04.576855 2025] [proxy_fcgi:error] [pid 6290:tid 6309] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:41:05.081456 2025] [proxy_fcgi:error] [pid 6290:tid 6312] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:05.452383 2025] [proxy_fcgi:error] [pid 6290:tid 6302] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:41:05.696390 2025] [proxy_fcgi:error] [pid 6290:tid 6296] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:05.952892 2025] [proxy_fcgi:error] [pid 6290:tid 6299] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:06.195211 2025] [proxy_fcgi:error] [pid 6290:tid 6307] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:41:06.545636 2025] [proxy_fcgi:error] [pid 6290:tid 6298] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:41:07.097097 2025] [proxy_fcgi:error] [pid 6290:tid 6315] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 04:41:07.337451 2025] [proxy_fcgi:error] [pid 6290:tid 6314] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 04:41:07.578625 2025] [proxy_fcgi:error] [pid 6290:tid 6295] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:41:09.115385 2025] [proxy_fcgi:error] [pid 6290:tid 6306] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:10.508081 2025] [proxy_fcgi:error] [pid 6290:tid 6294] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:10.839932 2025] [proxy_fcgi:error] [pid 6290:tid 6317] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:11.551099 2025] [proxy_fcgi:error] [pid 6290:tid 6304] [client 51.103.101.212:21499] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 04:41:12.793755 2025] [:error] [pid 6290:tid 6302] [client 51.103.101.212:21499] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSdl6IqL4zye-zKr6suTlwAAAMg"], referer: https://duckduckgo.com/
[Thu Nov 27 04:41:15.351787 2025] [proxy_fcgi:error] [pid 6290:tid 6297] [client 51.103.101.212:21475] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 04:41:22.812071 2025] [proxy_fcgi:error] [pid 6290:tid 6307] [client 51.103.101.212:21475] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:41:23.106870 2025] [proxy_fcgi:error] [pid 6290:tid 6318] [client 51.103.101.212:21475] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 04:41:23.348178 2025] [proxy_fcgi:error] [pid 6290:tid 6312] [client 51.103.101.212:21475] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:30.213020 2025] [proxy_fcgi:error] [pid 6290:tid 6308] [client 51.103.101.212:21475] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:41:31.734183 2025] [:error] [pid 6290:tid 6299] [client 51.103.101.212:21475] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSdl-4qL4zye-zKr6suUBQAAAMU"], referer: https://duckduckgo.com/
[Thu Nov 27 04:41:34.765979 2025] [:error] [pid 6290:tid 6306] [client 51.103.101.212:21444] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSdl_oqL4zye-zKr6suUGAAAAMw"], referer: https://www.google.fr/
[Thu Nov 27 04:41:36.415137 2025] [:error] [pid 6202:tid 6235] [client 51.103.101.212:21476] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSdmANJa7NTP0XPyZ6lk0QAAAEI"], referer: https://www.bing.com/
[Thu Nov 27 04:41:47.077790 2025] [:error] [pid 6202:tid 6248] [client 51.103.101.212:21385] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSdmC9Ja7NTP0XPyZ6lk3AAAAE8"], referer: https://www.google.co.uk/
[Thu Nov 27 04:41:48.761539 2025] [:error] [pid 6201:tid 6221] [client 51.103.101.212:21479] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSdmDDkSJeRkIQGTjzwfOQAAABA"], referer: https://duckduckgo.com/
[Thu Nov 27 04:41:49.393616 2025] [:error] [pid 6201:tid 6217] [client 51.103.101.212:21455] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSdmDTkSJeRkIQGTjzwfPAAAAAw"], referer: https://www.google.fr/
[Thu Nov 27 04:41:51.947910 2025] [:error] [pid 21017:tid 21060] [client 51.103.101.212:21497] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSdmD6ZA663ub03MMQt-6QAAAQE"], referer: https://www.google.com/
[Thu Nov 27 04:41:52.919873 2025] [:error] [pid 21017:tid 21079] [client 51.103.101.212:21502] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSdmEKZA663ub03MMQt-7QAAARQ"], referer: https://www.yahoo.com/
[Thu Nov 27 04:41:54.740812 2025] [:error] [pid 6203:tid 6264] [client 51.103.101.212:21456] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSdmEsbdRL7aKyrgqyzCrgAAAIQ"], referer: https://www.google.co.uk/
[Thu Nov 27 04:41:56.382085 2025] [:error] [pid 21017:tid 21063] [client 51.103.101.212:21395] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSdmFKZA663ub03MMQt-8wAAAQQ"], referer: https://www.yahoo.com/
[Thu Nov 27 04:41:58.446259 2025] [:error] [pid 21017:tid 21074] [client 51.103.101.212:21482] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSdmFqZA663ub03MMQt-9wAAAQ8"], referer: https://www.google.com/
[Thu Nov 27 04:42:00.157402 2025] [:error] [pid 6201:tid 6206] [client 51.103.101.212:21467] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSdmGDkSJeRkIQGTjzwfRwAAAAE"], referer: https://www.yahoo.com/
[Thu Nov 27 04:42:02.140841 2025] [:error] [pid 6203:tid 6274] [client 51.103.101.212:21454] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSdmGsbdRL7aKyrgqyzCxwAAAI4"], referer: https://www.bing.com/
[Thu Nov 27 04:42:07.889778 2025] [:error] [pid 21017:tid 21080] [client 51.103.101.212:21442] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSdmH6ZA663ub03MMQt_IwAAARU"], referer: https://www.google.de/
[Thu Nov 27 04:42:10.020739 2025] [:error] [pid 21017:tid 21069] [client 51.103.101.212:21450] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSdmIqZA663ub03MMQt_KAAAAQo"], referer: https://duckduckgo.com/
[Thu Nov 27 04:42:12.204482 2025] [:error] [pid 6203:tid 6274] [client 51.103.101.212:21386] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSdmJMbdRL7aKyrgqyzDAwAAAI4"], referer: https://www.bing.com/
[Thu Nov 27 04:42:13.786713 2025] [:error] [pid 6290:tid 6316] [client 51.103.101.212:21486] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSdmJYqL4zye-zKr6suUOgAAANY"], referer: https://duckduckgo.com/
[Thu Nov 27 04:42:15.096579 2025] [:error] [pid 21017:tid 21062] [client 51.103.101.212:21488] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSdmJ6ZA663ub03MMQt_MwAAAQM"], referer: https://www.yahoo.com/
[Thu Nov 27 04:42:17.007734 2025] [:error] [pid 6203:tid 6280] [client 51.103.101.212:21381] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSdmKcbdRL7aKyrgqyzDFwAAAJQ"], referer: https://www.google.co.uk/
[Thu Nov 27 04:42:19.963406 2025] [:error] [pid 6290:tid 6295] [client 51.103.101.212:21500] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSdmK4qL4zye-zKr6suUTwAAAME"], referer: https://www.yahoo.com/
[Thu Nov 27 04:42:22.056360 2025] [:error] [pid 6290:tid 6303] [client 51.103.101.212:21441] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSdmLoqL4zye-zKr6suUUgAAAMk"], referer: https://www.google.co.uk/
[Thu Nov 27 04:42:25.078908 2025] [:error] [pid 21017:tid 21061] [client 51.103.101.212:21436] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSdmMaZA663ub03MMQt_PwAAAQI"], referer: https://www.google.co.uk/
[Thu Nov 27 04:42:29.389771 2025] [:error] [pid 6201:tid 6209] [client 51.103.101.212:21472] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSdmNTkSJeRkIQGTjzwfYwAAAAQ"], referer: https://www.google.fr/
[Thu Nov 27 04:42:31.411852 2025] [:error] [pid 6290:tid 6296] [client 51.103.101.212:21403] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSdmN4qL4zye-zKr6suUagAAAMI"], referer: https://duckduckgo.com/
[Thu Nov 27 04:42:32.861587 2025] [proxy_fcgi:error] [pid 21017:tid 21074] [client 51.103.101.212:21400] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 04:42:33.100820 2025] [proxy_fcgi:error] [pid 21017:tid 21059] [client 51.103.101.212:21400] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:42:33.387954 2025] [proxy_fcgi:error] [pid 21017:tid 21060] [client 51.103.101.212:21400] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 04:42:33.629421 2025] [proxy_fcgi:error] [pid 21017:tid 21081] [client 51.103.101.212:21400] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 04:42:34.657879 2025] [proxy_fcgi:error] [pid 21017:tid 21061] [client 51.103.101.212:21400] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:47:57.980157 2025] [:error] [pid 6202:tid 6235] [client 58.49.233.126:43605] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSd1jdJa7NTP0XPyZ6l0XQAAAEI"]
[Thu Nov 27 07:11:10.622374 2025] [autoindex:error] [pid 51021:tid 51045] [client 196.51.225.219:51919] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/search?q=cientifica
[Thu Nov 27 07:41:48.495240 2025] [autoindex:error] [pid 44723:tid 44738] [client 196.51.228.78:46060] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/search?q=cientifica
[Thu Nov 27 09:39:32.268069 2025] [:error] [pid 19119:tid 19180] [client 213.21.239.4:40032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica../.git/config"] [unique_id "aSer1BsL_RTusriYkwebCgAAAMY"]
[Thu Nov 27 09:39:32.269498 2025] [:error] [pid 19014:tid 19056] [client 213.21.239.4:40084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/application/.git/config"] [unique_id "aSer1I2utvwZ4eADRmoMWgAAAEw"]
[Thu Nov 27 09:39:32.270190 2025] [:error] [pid 19119:tid 19187] [client 213.21.239.4:40216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/api/.git/config"] [unique_id "aSer1BsL_RTusriYkwebCwAAAM0"]
[Thu Nov 27 09:39:32.272183 2025] [:error] [pid 19119:tid 19189] [client 213.21.239.4:40144] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/static../.git/config"] [unique_id "aSer1BsL_RTusriYkwebDQAAAM8"]
[Thu Nov 27 09:39:32.273281 2025] [:error] [pid 39563:tid 39587] [client 213.21.239.4:40246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/app/.git/config"] [unique_id "aSer1DNSKUd-PJ2wU0Q0sQAAARY"]
[Thu Nov 27 09:39:32.277705 2025] [:error] [pid 19014:tid 19053] [client 213.21.239.4:40182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/content../.git/config"] [unique_id "aSer1I2utvwZ4eADRmoMWwAAAEk"]
[Thu Nov 27 09:39:32.280454 2025] [:error] [pid 19119:tid 19181] [client 213.21.239.4:40046] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/.git/config;.."] [unique_id "aSer1BsL_RTusriYkwebDgAAAMc"]
[Thu Nov 27 09:39:32.281159 2025] [:error] [pid 19013:tid 19034] [client 213.21.239.4:40180] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/backup/.git/config"] [unique_id "aSer1IaBrX8b6-N6_86nFgAAABE"]
[Thu Nov 27 09:39:32.282058 2025] [:error] [pid 19119:tid 19179] [client 213.21.239.4:40274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/assets../.git/config"] [unique_id "aSer1BsL_RTusriYkwebDwAAAMU"]
[Thu Nov 27 09:39:32.283866 2025] [:error] [pid 39563:tid 39567] [client 213.21.239.4:40114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/css../.git/config"] [unique_id "aSer1DNSKUd-PJ2wU0Q0swAAAQI"]
[Thu Nov 27 09:39:32.284818 2025] [:error] [pid 39563:tid 39575] [client 213.21.239.4:40100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/..;/.git/config"] [unique_id "aSer1DNSKUd-PJ2wU0Q0tAAAAQo"]
[Thu Nov 27 09:39:32.285526 2025] [:error] [pid 19119:tid 19190] [client 213.21.239.4:40252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/admin/.git/config"] [unique_id "aSer1BsL_RTusriYkwebEAAAANA"]
[Thu Nov 27 09:39:32.286712 2025] [:error] [pid 39563:tid 39574] [client 213.21.239.4:40136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/.git/config"] [unique_id "aSer1DNSKUd-PJ2wU0Q0tQAAAQk"]
[Thu Nov 27 09:39:32.287225 2025] [:error] [pid 19014:tid 19058] [client 213.21.239.4:40198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/dev/.git/config"] [unique_id "aSer1I2utvwZ4eADRmoMXAAAAE4"]
[Thu Nov 27 09:39:32.291144 2025] [:error] [pid 19119:tid 19195] [client 213.21.239.4:40026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/.git/config;"] [unique_id "aSer1BsL_RTusriYkwebEQAAANU"]
[Thu Nov 27 09:39:32.295492 2025] [:error] [pid 19014:tid 19047] [client 213.21.239.4:40068] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/developer/.git/config"] [unique_id "aSer1I2utvwZ4eADRmoMXQAAAEM"]
[Thu Nov 27 09:39:32.296896 2025] [:error] [pid 19119:tid 19194] [client 213.21.239.4:40170] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/common/.git/config"] [unique_id "aSer1BsL_RTusriYkwebEwAAANQ"]
[Thu Nov 27 09:39:32.300221 2025] [:error] [pid 40009:tid 40069] [client 213.21.239.4:40288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/database/.git/config"] [unique_id "aSer1EJuxjShta_KR6UTZQAAAUc"]
[Thu Nov 27 09:39:32.301503 2025] [:error] [pid 19015:tid 19078] [client 213.21.239.4:40050] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/;/.git/config"] [unique_id "aSer1A4MxyJWPPh2qEjSWQAAAIc"]
[Thu Nov 27 09:39:32.303629 2025] [:error] [pid 19119:tid 19184] [client 213.21.239.4:40130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica/.git/%0Aconfig"] [unique_id "aSer1BsL_RTusriYkwebFAAAAMo"]
[Thu Nov 27 09:39:34.911293 2025] [:error] [pid 19014:tid 19057] [client 213.21.239.4:40566] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au../.git/config"] [unique_id "aSer1o2utvwZ4eADRmoMagAAAE0"]
[Thu Nov 27 09:39:34.912632 2025] [:error] [pid 40009:tid 40063] [client 213.21.239.4:40564] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/.git/%0Aconfig"] [unique_id "aSer1kJuxjShta_KR6UTdgAAAUE"]
[Thu Nov 27 09:39:34.913494 2025] [:error] [pid 19015:tid 19093] [client 213.21.239.4:40616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/message-api/.git/config"] [unique_id "aSer1g4MxyJWPPh2qEjSXAAAAJY"]
[Thu Nov 27 09:39:34.916909 2025] [:error] [pid 19013:tid 19024] [client 213.21.239.4:40686] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/live/.git/config"] [unique_id "aSer1oaBrX8b6-N6_86nJQAAAAc"]
[Thu Nov 27 09:39:34.918115 2025] [:error] [pid 19119:tid 19184] [client 213.21.239.4:40716] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/.git/config;.."] [unique_id "aSer1hsL_RTusriYkwebIwAAAMo"]
[Thu Nov 27 09:39:34.924632 2025] [:error] [pid 19014:tid 19049] [client 213.21.239.4:40590] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSer1o2utvwZ4eADRmoMawAAAEU"]
[Thu Nov 27 09:39:34.924928 2025] [:error] [pid 19015:tid 19071] [client 213.21.239.4:40738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/img../.git/config"] [unique_id "aSer1g4MxyJWPPh2qEjSXQAAAIA"]
[Thu Nov 27 09:39:34.925740 2025] [:error] [pid 40009:tid 40066] [client 213.21.239.4:40576] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/..;/.git/config"] [unique_id "aSer1kJuxjShta_KR6UTdwAAAUQ"]
[Thu Nov 27 09:39:34.925777 2025] [:error] [pid 39563:tid 39581] [client 213.21.239.4:40614] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/lib../.git/config"] [unique_id "aSer1jNSKUd-PJ2wU0Q0uAAAARA"]
[Thu Nov 27 09:39:34.929346 2025] [:error] [pid 39563:tid 39566] [client 213.21.239.4:40586] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/..;/.git/config"] [unique_id "aSer1jNSKUd-PJ2wU0Q0uQAAAQE"]
[Thu Nov 27 09:39:34.932317 2025] [:error] [pid 40009:tid 40077] [client 213.21.239.4:40672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/images../.git/config"] [unique_id "aSer1kJuxjShta_KR6UTeAAAAU4"]
[Thu Nov 27 09:39:34.933733 2025] [:error] [pid 19015:tid 19076] [client 213.21.239.4:40554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/;/.git/config"] [unique_id "aSer1g4MxyJWPPh2qEjSXgAAAIU"]
[Thu Nov 27 09:39:34.934161 2025] [:error] [pid 19015:tid 19080] [client 213.21.239.4:40770] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/git/.git/config"] [unique_id "aSer1g4MxyJWPPh2qEjSXwAAAIk"]
[Thu Nov 27 09:39:34.935926 2025] [:error] [pid 39563:tid 39588] [client 213.21.239.4:40606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/.git/config"] [unique_id "aSer1jNSKUd-PJ2wU0Q0ugAAARc"]
[Thu Nov 27 09:39:34.936595 2025] [:error] [pid 19119:tid 19178] [client 213.21.239.4:40630] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSer1hsL_RTusriYkwebJQAAAMQ"]
[Thu Nov 27 09:39:34.938726 2025] [:error] [pid 19119:tid 19188] [client 213.21.239.4:40688] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/static../.git/config"] [unique_id "aSer1hsL_RTusriYkwebJgAAAM4"]
[Thu Nov 27 09:39:34.943324 2025] [:error] [pid 19013:tid 19030] [client 213.21.239.4:40786] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/.git/config;"] [unique_id "aSer1oaBrX8b6-N6_86nJgAAAA0"]
[Thu Nov 27 09:39:34.943728 2025] [:error] [pid 40009:tid 40083] [client 213.21.239.4:40762] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/;/.git/config"] [unique_id "aSer1kJuxjShta_KR6UTeQAAAVM"]
[Thu Nov 27 09:39:34.948440 2025] [:error] [pid 19119:tid 19186] [client 213.21.239.4:40656] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/js../.git/config"] [unique_id "aSer1hsL_RTusriYkwebJwAAAMw"]
[Thu Nov 27 09:39:34.949087 2025] [:error] [pid 39563:tid 39585] [client 213.21.239.4:40638] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config;"] [unique_id "aSer1jNSKUd-PJ2wU0Q0uwAAARQ"]
[Thu Nov 27 09:39:34.952092 2025] [:error] [pid 19013:tid 19034] [client 213.21.239.4:40728] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.git;/config;"] [unique_id "aSer1oaBrX8b6-N6_86nJwAAABE"]
[Thu Nov 27 09:39:34.952944 2025] [:error] [pid 40009:tid 40074] [client 213.21.239.4:40660] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config;.."] [unique_id "aSer1kJuxjShta_KR6UTegAAAUs"]
[Thu Nov 27 09:39:34.953886 2025] [:error] [pid 19013:tid 19025] [client 213.21.239.4:40754] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/m/.git/config"] [unique_id "aSer1oaBrX8b6-N6_86nKAAAAAg"]
[Thu Nov 27 09:39:34.956232 2025] [:error] [pid 39563:tid 39580] [client 213.21.239.4:40792] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/.git;/config"] [unique_id "aSer1jNSKUd-PJ2wU0Q0vAAAAQ8"]
[Thu Nov 27 09:39:36.975610 2025] [:error] [pid 19015:tid 19073] [client 213.21.239.4:41040] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.git;/config;"] [unique_id "aSer2A4MxyJWPPh2qEjSZAAAAII"]
[Thu Nov 27 09:39:36.988475 2025] [:error] [pid 39563:tid 39566] [client 213.21.239.4:41056] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www.cientifica.com.au/.git;/config"] [unique_id "aSer2DNSKUd-PJ2wU0Q0xQAAAQE"]
[Thu Nov 27 09:39:37.899208 2025] [:error] [pid 40009:tid 40075] [client 213.21.239.4:41072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/;/.git/config"] [unique_id "aSer2UJuxjShta_KR6UTfQAAAUw"]
[Thu Nov 27 09:39:37.900011 2025] [:error] [pid 19015:tid 19083] [client 213.21.239.4:41078] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www/config"] [unique_id "aSer2Q4MxyJWPPh2qEjSZgAAAIw"]
[Thu Nov 27 09:39:37.902121 2025] [:error] [pid 39563:tid 39567] [client 213.21.239.4:41130] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/.git;/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q0xwAAAQI"]
[Thu Nov 27 09:39:37.905429 2025] [:error] [pid 39563:tid 39569] [client 213.21.239.4:41158] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q0yAAAAQQ"]
[Thu Nov 27 09:39:37.905970 2025] [:error] [pid 39563:tid 39576] [client 213.21.239.4:41066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/prod/.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q0yQAAAQs"]
[Thu Nov 27 09:39:37.909489 2025] [:error] [pid 39563:tid 39587] [client 213.21.239.4:41082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q0ygAAARY"]
[Thu Nov 27 09:39:37.911687 2025] [:error] [pid 39563:tid 39573] [client 213.21.239.4:41194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/.git/%0Aconfig"] [unique_id "aSer2TNSKUd-PJ2wU0Q0ywAAAQg"]
[Thu Nov 27 09:39:37.912180 2025] [:error] [pid 39563:tid 39575] [client 213.21.239.4:41084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/qa/.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q0zAAAAQo"]
[Thu Nov 27 09:39:37.914193 2025] [:error] [pid 39563:tid 39574] [client 213.21.239.4:41100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/.git/config;"] [unique_id "aSer2TNSKUd-PJ2wU0Q0zQAAAQk"]
[Thu Nov 27 09:39:37.915774 2025] [:error] [pid 39563:tid 39582] [client 213.21.239.4:41142] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/.git/config;.."] [unique_id "aSer2TNSKUd-PJ2wU0Q0zgAAARE"]
[Thu Nov 27 09:39:37.923720 2025] [:error] [pid 19119:tid 19176] [client 213.21.239.4:41124] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au../config"] [unique_id "aSer2RsL_RTusriYkwebNgAAAMI"]
[Thu Nov 27 09:39:37.924247 2025] [:error] [pid 39563:tid 39572] [client 213.21.239.4:41166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q0zwAAAQc"]
[Thu Nov 27 09:39:37.925071 2025] [:error] [pid 40009:tid 40065] [client 213.21.239.4:41182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/..;/.git/config"] [unique_id "aSer2UJuxjShta_KR6UTfgAAAUM"]
[Thu Nov 27 09:39:37.925628 2025] [:error] [pid 39563:tid 39584] [client 213.21.239.4:41222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/static../.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q00AAAARM"]
[Thu Nov 27 09:39:37.925848 2025] [:error] [pid 19014:tid 19063] [client 213.21.239.4:41178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/.git/config;.."] [unique_id "aSer2Y2utvwZ4eADRmoMbgAAAFM"]
[Thu Nov 27 09:39:37.927332 2025] [:error] [pid 40009:tid 40087] [client 213.21.239.4:41110] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www../config"] [unique_id "aSer2UJuxjShta_KR6UTfwAAAVc"]
[Thu Nov 27 09:39:37.927681 2025] [:error] [pid 39563:tid 39586] [client 213.21.239.4:41206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/..;/.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q00QAAARU"]
[Thu Nov 27 09:39:37.928848 2025] [:error] [pid 19014:tid 19050] [client 213.21.239.4:41150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/public/.git/config"] [unique_id "aSer2Y2utvwZ4eADRmoMbwAAAEY"]
[Thu Nov 27 09:39:37.931800 2025] [:error] [pid 39563:tid 39589] [client 213.21.239.4:41168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au../.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q00gAAARg"]
[Thu Nov 27 09:39:37.932038 2025] [:error] [pid 40009:tid 40062] [client 213.21.239.4:41232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/.git/%0Aconfig"] [unique_id "aSer2UJuxjShta_KR6UTgAAAAUA"]
[Thu Nov 27 09:39:37.933359 2025] [:error] [pid 19015:tid 19093] [client 213.21.239.4:41170] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/.git/config;"] [unique_id "aSer2Q4MxyJWPPh2qEjSZwAAAJY"]
[Thu Nov 27 09:39:37.934894 2025] [:error] [pid 39563:tid 39565] [client 213.21.239.4:41258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/new/.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q00wAAAQA"]
[Thu Nov 27 09:39:37.937777 2025] [:error] [pid 39563:tid 39570] [client 213.21.239.4:41242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www../.git/config"] [unique_id "aSer2TNSKUd-PJ2wU0Q01AAAAQU"]
[Thu Nov 27 09:39:39.908521 2025] [:error] [pid 19015:tid 19081] [client 213.21.239.4:41504] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/;/.git/config"] [unique_id "aSer2w4MxyJWPPh2qEjScAAAAIo"]
[Thu Nov 27 09:39:39.917655 2025] [:error] [pid 19119:tid 19188] [client 213.21.239.4:41514] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www/.git;/config"] [unique_id "aSer2xsL_RTusriYkwebQQAAAM4"]
[Thu Nov 27 09:39:39.929597 2025] [:error] [pid 19014:tid 19061] [client 213.21.239.4:41544] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www/config"] [unique_id "aSer242utvwZ4eADRmoMfQAAAFE"]
[Thu Nov 27 09:39:39.930784 2025] [:error] [pid 39563:tid 39587] [client 213.21.239.4:41528] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/config"] [unique_id "aSer2zNSKUd-PJ2wU0Q03AAAARY"]
[Thu Nov 27 09:39:39.933802 2025] [:error] [pid 19014:tid 19047] [client 213.21.239.4:41530] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au/.git;/config"] [unique_id "aSer242utvwZ4eADRmoMfgAAAEM"]
[Thu Nov 27 09:39:39.950900 2025] [:error] [pid 19014:tid 19065] [client 213.21.239.4:41574] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www../config"] [unique_id "aSer242utvwZ4eADRmoMfwAAAFU"]
[Thu Nov 27 09:39:39.956673 2025] [:error] [pid 39563:tid 39573] [client 213.21.239.4:41560] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cientifica.com.au../config"] [unique_id "aSer2zNSKUd-PJ2wU0Q03gAAAQg"]
[Thu Nov 27 09:39:40.899567 2025] [:error] [pid 19015:tid 19075] [client 213.21.239.4:41622] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSer3A4MxyJWPPh2qEjSeAAAAIQ"]
[Thu Nov 27 09:39:40.905170 2025] [:error] [pid 19119:tid 19187] [client 213.21.239.4:41626] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSer3BsL_RTusriYkwebSgAAAM0"]
[Thu Nov 27 09:39:40.905777 2025] [:error] [pid 19014:tid 19051] [client 213.21.239.4:41576] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/static../.git/config"] [unique_id "aSer3I2utvwZ4eADRmoMhQAAAEc"]
[Thu Nov 27 09:39:40.906332 2025] [:error] [pid 19014:tid 19060] [client 213.21.239.4:41614] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSer3I2utvwZ4eADRmoMhgAAAFA"]
[Thu Nov 27 09:39:40.908990 2025] [:error] [pid 19119:tid 19174] [client 213.21.239.4:41598] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/web/.git/config"] [unique_id "aSer3BsL_RTusriYkwebSwAAAMA"]
[Thu Nov 27 09:39:40.911966 2025] [:error] [pid 19013:tid 19031] [client 213.21.239.4:41590] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/uat/.git/config"] [unique_id "aSer3IaBrX8b6-N6_86nSgAAAA4"]
[Thu Nov 27 09:39:40.914218 2025] [:error] [pid 40009:tid 40080] [client 213.21.239.4:41648] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/staging/.git/config"] [unique_id "aSer3EJuxjShta_KR6UTiAAAAVA"]
[Thu Nov 27 09:39:40.916781 2025] [:error] [pid 19119:tid 19175] [client 213.21.239.4:41634] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/www/static../.git/config"] [unique_id "aSer3BsL_RTusriYkwebTAAAAME"]
[Thu Nov 27 09:39:41.933583 2025] [:error] [pid 19015:tid 19076] [client 213.21.239.4:44060] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/www/.git;/config"] [unique_id "aSer3Q4MxyJWPPh2qEjSewAAAIU"]
[Thu Nov 27 12:05:21.883140 2025] [:error] [pid 20920:tid 20928] [client 182.42.111.156:58644] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSfOAZSa1DjTOfWcHhxqIgAAAEY"]
[Thu Nov 27 12:15:53.386933 2025] [autoindex:error] [pid 25405:tid 25428] [client 159.196.44.247:60992] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 12:39:28.598026 2025] [autoindex:error] [pid 25405:tid 25413] [client 74.7.243.205:40296] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 12:57:53.205095 2025] [autoindex:error] [pid 20859:tid 20902] [client 87.106.101.102:58284] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 14:02:27.834584 2025] [autoindex:error] [pid 4209:tid 4224] [client 34.224.212.159:33384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 14:02:28.787804 2025] [autoindex:error] [pid 4209:tid 4229] [client 213.159.12.196:46429] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 15:50:10.747592 2025] [:error] [pid 42455:tid 42481] [client 182.253.124.169:27876] [client 182.253.124.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.124.169, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSgCsootBBAk-ixbVNcDJgAAARg"]
[Thu Nov 27 15:50:10.759025 2025] [proxy_fcgi:error] [pid 42455:tid 42481] [client 182.253.124.169:27876] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 16:07:54.169523 2025] [autoindex:error] [pid 42363:tid 42389] [client 34.224.212.159:52236] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 16:07:55.045764 2025] [autoindex:error] [pid 42455:tid 42466] [client 134.199.86.180:38883] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 18:28:46.467595 2025] [:error] [pid 9729:tid 9734] [client 182.42.110.255:37541] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSgn3kzUmMVU4_s7SwdU5AAAAYM"]
[Thu Nov 27 18:30:36.139615 2025] [autoindex:error] [pid 58484:tid 58506] [client 34.224.212.159:50086] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 18:30:37.353062 2025] [autoindex:error] [pid 58517:tid 58533] [client 136.227.180.252:37153] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 20:32:26.532057 2025] [autoindex:error] [pid 31446:tid 31504] [client 54.214.121.34:36424] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 20:50:16.684452 2025] [autoindex:error] [pid 31533:tid 31555] [client 34.224.212.159:47494] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 20:50:18.161387 2025] [autoindex:error] [pid 33486:tid 33500] [client 5.253.184.81:35717] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 21:55:27.899716 2025] [autoindex:error] [pid 5478:tid 5514] [client 18.236.98.181:34554] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 21:55:28.707389 2025] [autoindex:error] [pid 5478:tid 5512] [client 18.236.98.181:34576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 27 23:20:49.340861 2025] [:error] [pid 23232:tid 23235] [client 104.28.205.111:41102] [client 104.28.205.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aShsURiWQ0wMzrcP16qHuQAAAQE"]
[Fri Nov 28 00:25:59.951122 2025] [autoindex:error] [pid 4383:tid 4407] [client 195.178.110.208:39700] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 00:32:42.710080 2025] [autoindex:error] [pid 3968:tid 3970] [client 51.68.236.69:33437] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 00:44:45.253346 2025] [autoindex:error] [pid 3880:tid 3887] [client 195.178.110.208:44682] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 00:44:46.067294 2025] [autoindex:error] [pid 3880:tid 3891] [client 195.178.110.208:44840] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 12:09:34.140463 2025] [autoindex:error] [pid 18271:tid 18277] [client 49.207.192.99:32047] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 13:50:12.667700 2025] [autoindex:error] [pid 34292:tid 34305] [client 74.7.243.216:51242] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 14:24:55.476496 2025] [autoindex:error] [pid 59558:tid 59581] [client 34.11.39.217:63429] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 14:24:55.692804 2025] [autoindex:error] [pid 59558:tid 59578] [client 34.11.39.217:63429] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 14:24:56.169274 2025] [:error] [pid 59558:tid 59567] [client 34.11.39.217:63429] [client 34.11.39.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.39.217, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSlAOMv1JlbxrOWQIPaa7gAAAEU"]
[Fri Nov 28 14:24:56.178670 2025] [proxy_fcgi:error] [pid 59558:tid 59567] [client 34.11.39.217:63429] AH01071: Got error 'Primary script unknown'
[Fri Nov 28 14:24:56.395125 2025] [autoindex:error] [pid 59558:tid 59585] [client 34.11.39.217:63429] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 14:24:57.499194 2025] [:error] [pid 59558:tid 59574] [client 34.11.39.217:63429] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSlAOcv1JlbxrOWQIPaa9QAAAEw"]
[Fri Nov 28 14:24:57.947034 2025] [:error] [pid 59559:tid 59598] [client 34.11.39.217:49557] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aSlAORqw_7c4pIN46wkItgAAAMk"]
[Fri Nov 28 14:24:58.408779 2025] [:error] [pid 59836:tid 59842] [client 34.11.39.217:64406] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSlAOudZMCOz1m2UNtFCGQAAAAM"]
[Fri Nov 28 14:24:58.852481 2025] [:error] [pid 59559:tid 59610] [client 34.11.39.217:60766] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSlAOhqw_7c4pIN46wkIuAAAANU"]
[Fri Nov 28 14:24:59.292783 2025] [:error] [pid 59558:tid 59573] [client 34.11.39.217:56241] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSlAO8v1JlbxrOWQIPaa-AAAAEs"]
[Fri Nov 28 14:24:59.732813 2025] [:error] [pid 59560:tid 59627] [client 34.11.39.217:55934] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSlAO_tAG2btIDWyf4K7ugAAAQs"]
[Fri Nov 28 14:25:00.204533 2025] [:error] [pid 59836:tid 59861] [client 34.11.39.217:65158] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSlAPOdZMCOz1m2UNtFCHgAAABY"]
[Fri Nov 28 14:25:00.690449 2025] [:error] [pid 59559:tid 59605] [client 34.11.39.217:55363] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSlAPBqw_7c4pIN46wkIxQAAANA"]
[Fri Nov 28 14:25:01.135228 2025] [:error] [pid 59558:tid 59571] [client 34.11.39.217:57986] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSlAPcv1JlbxrOWQIPaa-wAAAEk"]
[Fri Nov 28 14:25:01.668851 2025] [:error] [pid 59836:tid 59850] [client 34.11.39.217:54077] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSlAPedZMCOz1m2UNtFCIQAAAAs"]
[Fri Nov 28 14:25:02.127709 2025] [:error] [pid 59836:tid 59849] [client 34.11.39.217:61279] [client 34.11.39.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSlAPudZMCOz1m2UNtFCIwAAAAo"]
[Fri Nov 28 15:53:03.135330 2025] [:error] [pid 59560:tid 59639] [client 43.130.150.80:38948] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSlU3_tAG2btIDWyf4LccQAAARc"]
[Fri Nov 28 16:06:11.892578 2025] [autoindex:error] [pid 59560:tid 59622] [client 51.68.107.141:15963] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 16:42:15.373170 2025] [:error] [pid 59645:tid 59659] [client 152.42.205.93:60098] [client 152.42.205.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aSlgZyAY8JAkoCJBYqwa6wAAAIs"]
[Fri Nov 28 17:49:00.640324 2025] [:error] [pid 59836:tid 59854] [client 3.80.157.90:57356] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aSlwDOdZMCOz1m2UNtGUbwAAAA8"]
[Fri Nov 28 17:49:00.640788 2025] [:error] [pid 59836:tid 59848] [client 3.80.157.90:57358] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aSlwDOdZMCOz1m2UNtGUcAAAAAk"]
[Fri Nov 28 17:49:00.827343 2025] [:error] [pid 37362:tid 37384] [client 3.80.157.90:57360] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.production"] [unique_id "aSlwDLEmXwnywt2l66evZAAAAVQ"]
[Fri Nov 28 17:49:00.828110 2025] [:error] [pid 59836:tid 59858] [client 3.80.157.90:57362] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSlwDOdZMCOz1m2UNtGUcQAAABM"]
[Fri Nov 28 17:49:00.828388 2025] [:error] [pid 37362:tid 37381] [client 3.80.157.90:57364] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.remote"] [unique_id "aSlwDLEmXwnywt2l66evZQAAAVE"]
[Fri Nov 28 17:49:00.828718 2025] [:error] [pid 59559:tid 59609] [client 3.80.157.90:57366] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/vendor/.env"] [unique_id "aSlwDBqw_7c4pIN46wk-xwAAANQ"]
[Fri Nov 28 17:49:00.828991 2025] [:error] [pid 59559:tid 59608] [client 3.80.157.90:57368] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/core/.env"] [unique_id "aSlwDBqw_7c4pIN46wk-yAAAANM"]
[Fri Nov 28 17:49:00.829190 2025] [:error] [pid 59559:tid 59610] [client 3.80.157.90:57370] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cron/.env"] [unique_id "aSlwDBqw_7c4pIN46wk-yQAAANU"]
[Fri Nov 28 17:49:00.829805 2025] [:error] [pid 37392:tid 37410] [client 3.80.157.90:57372] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cronlab/.env"] [unique_id "aSlwDKB3gkyvQI8SfR-FnAAAAZA"]
[Fri Nov 28 17:49:00.829819 2025] [:error] [pid 37392:tid 37414] [client 3.80.157.90:57374] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/core/app/.env"] [unique_id "aSlwDKB3gkyvQI8SfR-FnQAAAZQ"]
[Fri Nov 28 17:49:00.973236 2025] [:error] [pid 59559:tid 59613] [client 3.80.157.90:57376] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/lab/.env"] [unique_id "aSlwDBqw_7c4pIN46wk-ygAAANg"]
[Fri Nov 28 17:49:00.974402 2025] [:error] [pid 59836:tid 59841] [client 3.80.157.90:57378] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/lib/.env"] [unique_id "aSlwDOdZMCOz1m2UNtGUcgAAAAI"]
[Fri Nov 28 17:49:00.974951 2025] [:error] [pid 59836:tid 59857] [client 3.80.157.90:57382] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSlwDOdZMCOz1m2UNtGUcwAAABI"]
[Fri Nov 28 17:49:00.975056 2025] [:error] [pid 59836:tid 59855] [client 3.80.157.90:57380] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/database/.env"] [unique_id "aSlwDOdZMCOz1m2UNtGUdAAAABA"]
[Fri Nov 28 17:49:01.492991 2025] [:error] [pid 37362:tid 37365] [client 3.80.157.90:57458] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/config/.env"] [unique_id "aSlwDbEmXwnywt2l66evZgAAAUE"]
[Fri Nov 28 17:49:01.493126 2025] [:error] [pid 37392:tid 37395] [client 3.80.157.90:57460] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/assets/.env"] [unique_id "aSlwDaB3gkyvQI8SfR-FngAAAYE"]
[Fri Nov 28 17:49:01.695363 2025] [:error] [pid 59560:tid 59624] [client 3.80.157.90:57600] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/app/.env"] [unique_id "aSlwDftAG2btIDWyf4L19QAAAQg"]
[Fri Nov 28 17:49:02.880141 2025] [:error] [pid 59560:tid 59618] [client 3.80.157.90:57670] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/apps/.env"] [unique_id "aSlwDvtAG2btIDWyf4L19gAAAQI"]
[Fri Nov 28 17:49:03.483517 2025] [:error] [pid 59558:tid 59563] [client 3.80.157.90:57810] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/uploads/.env"] [unique_id "aSlwD8v1JlbxrOWQIPbVmwAAAEE"]
[Fri Nov 28 17:49:04.144586 2025] [:error] [pid 59645:tid 59656] [client 3.80.157.90:58270] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/saas/.env"] [unique_id "aSlwECAY8JAkoCJBYqwnfQAAAIg"]
[Fri Nov 28 17:49:04.251389 2025] [:error] [pid 55588:tid 55595] [client 3.80.157.90:58720] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/api/.env"] [unique_id "aSlwEFkh_zgPkFPwj1fODwAAAcU"]
[Fri Nov 28 17:49:05.160290 2025] [:error] [pid 59645:tid 59672] [client 3.80.157.90:60402] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/web/.env"] [unique_id "aSlwESAY8JAkoCJBYqwnfgAAAJg"]
[Fri Nov 28 17:49:05.349499 2025] [:error] [pid 37392:tid 37418] [client 3.80.157.90:60790] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/en/.env"] [unique_id "aSlwEaB3gkyvQI8SfR-FogAAAZg"]
[Fri Nov 28 17:49:05.350148 2025] [:error] [pid 59559:tid 59600] [client 3.80.157.90:60612] [client 3.80.157.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/public/.env"] [unique_id "aSlwERqw_7c4pIN46wk-zAAAAMs"]
[Fri Nov 28 20:32:05.697027 2025] [autoindex:error] [pid 38346:tid 38352] [client 51.89.60.56:62873] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 28 22:22:03.648758 2025] [proxy_fcgi:error] [pid 38347:tid 38386] [client 129.212.237.19:65032] AH01071: Got error 'Primary script unknown'
[Fri Nov 28 23:38:16.093253 2025] [autoindex:error] [pid 38348:tid 38404] [client 93.158.90.40:35239] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 00:19:19.433922 2025] [autoindex:error] [pid 9654:tid 9681] [client 173.254.252.240:48637] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.cientifica.com.au
[Sat Nov 29 00:19:19.663722 2025] [autoindex:error] [pid 9654:tid 9667] [client 173.254.252.240:48637] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.cientifica.com.au
[Sat Nov 29 01:47:34.825664 2025] [autoindex:error] [pid 57438:tid 57447] [client 185.39.19.48:54138] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 29 01:47:35.393709 2025] [autoindex:error] [pid 9656:tid 9718] [client 185.39.19.48:54932] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 29 01:47:35.965372 2025] [autoindex:error] [pid 57438:tid 57458] [client 185.39.19.48:55679] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 29 01:47:36.531529 2025] [autoindex:error] [pid 9751:tid 9773] [client 185.39.19.48:56521] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Nov 29 02:49:51.474988 2025] [:error] [pid 57438:tid 57464] [client 13.231.252.104:60216] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.remote"] [unique_id "aSnuz6ANc56NCdbFpjsJcAAAANg"]
[Sat Nov 29 02:49:51.475282 2025] [:error] [pid 9655:tid 9702] [client 13.231.252.104:60210] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSnuz006gYqtNcz_Y882zAAAABE"]
[Sat Nov 29 02:49:51.475412 2025] [:error] [pid 9751:tid 9770] [client 13.231.252.104:60214] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/vendor/.env"] [unique_id "aSnuz6qNNTs_lWy2XeEBSgAAAdE"]
[Sat Nov 29 02:49:51.476063 2025] [:error] [pid 9751:tid 9763] [client 13.231.252.104:60212] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aSnuz6qNNTs_lWy2XeEBSwAAAco"]
[Sat Nov 29 02:49:51.476085 2025] [:error] [pid 57438:tid 57446] [client 13.231.252.104:60224] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cron/.env"] [unique_id "aSnuz6ANc56NCdbFpjsJcQAAAMY"]
[Sat Nov 29 02:49:51.476478 2025] [:error] [pid 9751:tid 9754] [client 13.231.252.104:60218] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.production"] [unique_id "aSnuz6qNNTs_lWy2XeEBTAAAAcE"]
[Sat Nov 29 02:49:51.476730 2025] [:error] [pid 9751:tid 9755] [client 13.231.252.104:60348] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/core/app/.env"] [unique_id "aSnuz6qNNTs_lWy2XeEBTQAAAcI"]
[Sat Nov 29 02:49:51.477047 2025] [:error] [pid 9907:tid 9932] [client 13.231.252.104:60220] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aSnuz-FoCqXx6ihYWZwaFAAAARc"]
[Sat Nov 29 02:49:51.477386 2025] [:error] [pid 9655:tid 9693] [client 13.231.252.104:60226] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/lab/.env"] [unique_id "aSnuz006gYqtNcz_Y882zQAAAAg"]
[Sat Nov 29 02:49:51.477763 2025] [:error] [pid 9654:tid 9660] [client 13.231.252.104:60228] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/lib/.env"] [unique_id "aSnuz3wlAlfevRIdjr---QAAAEI"]
[Sat Nov 29 02:49:51.478168 2025] [:error] [pid 9907:tid 9922] [client 13.231.252.104:60222] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/cronlab/.env"] [unique_id "aSnuz-FoCqXx6ihYWZwaFQAAAQ0"]
[Sat Nov 29 02:49:51.478646 2025] [:error] [pid 9907:tid 9917] [client 13.231.252.104:60346] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/core/.env"] [unique_id "aSnuz-FoCqXx6ihYWZwaFgAAAQg"]
[Sat Nov 29 02:49:51.902104 2025] [:error] [pid 9751:tid 9766] [client 13.231.252.104:60482] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSnuz6qNNTs_lWy2XeEBTgAAAc0"]
[Sat Nov 29 02:49:52.734916 2025] [:error] [pid 9907:tid 9921] [client 13.231.252.104:60594] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/database/.env"] [unique_id "aSnu0OFoCqXx6ihYWZwaFwAAAQw"]
[Sat Nov 29 02:49:52.735226 2025] [:error] [pid 9751:tid 9757] [client 13.231.252.104:60596] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/config/.env"] [unique_id "aSnu0KqNNTs_lWy2XeEBUQAAAcQ"]
[Sat Nov 29 02:49:53.079202 2025] [:error] [pid 9654:tid 9659] [client 13.231.252.104:60762] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/assets/.env"] [unique_id "aSnu0XwlAlfevRIdjr---wAAAEE"]
[Sat Nov 29 02:49:53.080223 2025] [:error] [pid 9907:tid 9910] [client 13.231.252.104:60810] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/app/.env"] [unique_id "aSnu0eFoCqXx6ihYWZwaGAAAAQE"]
[Sat Nov 29 02:49:53.528095 2025] [:error] [pid 9654:tid 9680] [client 13.231.252.104:60888] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/apps/.env"] [unique_id "aSnu0XwlAlfevRIdjr--_AAAAFY"]
[Sat Nov 29 02:49:53.802729 2025] [:error] [pid 9656:tid 9718] [client 13.231.252.104:33094] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/uploads/.env"] [unique_id "aSnu0Y_4AfnhtHpInunklQAAAIY"]
[Sat Nov 29 02:49:54.166146 2025] [:error] [pid 9751:tid 9765] [client 13.231.252.104:33572] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/saas/.env"] [unique_id "aSnu0qqNNTs_lWy2XeEBVgAAAcw"]
[Sat Nov 29 02:49:54.166144 2025] [:error] [pid 9751:tid 9767] [client 13.231.252.104:33224] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sitemaps/.env"] [unique_id "aSnu0qqNNTs_lWy2XeEBVQAAAc4"]
[Sat Nov 29 02:49:54.376325 2025] [:error] [pid 9656:tid 9719] [client 13.231.252.104:33736] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/api/.env"] [unique_id "aSnu0o_4AfnhtHpInunklgAAAIc"]
[Sat Nov 29 02:49:54.710799 2025] [:error] [pid 9655:tid 9686] [client 13.231.252.104:33886] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/psnlink/.env"] [unique_id "aSnu0k06gYqtNcz_Y8820AAAAAE"]
[Sat Nov 29 02:49:54.984439 2025] [:error] [pid 9656:tid 9728] [client 13.231.252.104:34600] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/site/.env"] [unique_id "aSnu0o_4AfnhtHpInunklwAAAJA"]
[Sat Nov 29 02:49:54.984733 2025] [:error] [pid 9656:tid 9735] [client 13.231.252.104:34598] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/exapi/.env"] [unique_id "aSnu0o_4AfnhtHpInunkmAAAAJc"]
[Sat Nov 29 02:49:55.098442 2025] [:error] [pid 9656:tid 9733] [client 13.231.252.104:34656] [client 13.231.252.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/admin/.env"] [unique_id "aSnu04_4AfnhtHpInunkmQAAAJU"]
[Sat Nov 29 03:55:35.746900 2025] [autoindex:error] [pid 14643:tid 14695] [client 34.216.175.253:9422] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 03:55:36.891612 2025] [autoindex:error] [pid 13718:tid 13746] [client 34.216.175.253:26743] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 03:55:37.264268 2025] [autoindex:error] [pid 9102:tid 9104] [client 34.216.175.253:40976] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 03:55:37.638187 2025] [autoindex:error] [pid 9102:tid 9118] [client 34.216.175.253:42320] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 05:00:53.501280 2025] [autoindex:error] [pid 53906:tid 53932] [client 151.115.35.91:40246] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 07:39:25.045680 2025] [autoindex:error] [pid 51093:tid 51144] [client 35.196.123.109:54867] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 07:46:02.077184 2025] [autoindex:error] [pid 22280:tid 22296] [client 66.249.64.1:41310] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 08:44:25.350624 2025] [:error] [pid 20915:tid 20921] [client 161.35.139.239:38904] [client 161.35.139.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSpB6VOOtKw1QZ3TPERVqgAAAMQ"]
[Sat Nov 29 08:44:27.080942 2025] [:error] [pid 20828:tid 20894] [client 161.35.139.239:59116] [client 161.35.139.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSpB6-qW2f0jLRABAOQRxQAAAIk"]
[Sat Nov 29 08:48:08.146710 2025] [autoindex:error] [pid 20826:tid 20842] [client 35.196.123.109:36895] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 09:17:49.006139 2025] [autoindex:error] [pid 20828:tid 20887] [client 44.230.239.14:25610] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 10:57:07.197722 2025] [autoindex:error] [pid 20826:tid 20845] [client 34.138.233.171:37901] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:06:05.656628 2025] [:error] [pid 62619:tid 62644] [client 45.153.34.41:50432] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSpjHdk7ZYKT63FfVSX3hwAAAVc"]
[Sat Nov 29 11:58:22.007003 2025] [autoindex:error] [pid 62619:tid 62633] [client 34.138.233.171:44703] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 14:52:07.212655 2025] [autoindex:error] [pid 16610:tid 16632] [client 80.94.92.100:35696] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 15:00:51.971268 2025] [:error] [pid 25341:tid 25364] [client 207.154.216.0:54249] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSqaI_WK8JdN03Mg7dz7OwAAAdM"]
[Sat Nov 29 15:00:53.005151 2025] [:error] [pid 20915:tid 20940] [client 207.154.216.0:54397] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSqaJVOOtKw1QZ3TPESzZwAAANc"]
[Sat Nov 29 15:00:53.976892 2025] [:error] [pid 20827:tid 20877] [client 207.154.216.0:54314] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSqaJYR9B7FcLfh1rSFrxgAAAFM"]
[Sat Nov 29 15:00:54.481000 2025] [:error] [pid 16610:tid 16617] [client 207.154.216.0:50268] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSqaJgTu2dLzNk_QISre_wAAAYU"]
[Sat Nov 29 15:00:54.973254 2025] [:error] [pid 20826:tid 20832] [client 207.154.216.0:55826] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSqaJvABfBqk70vKX9SD1QAAAAI"]
[Sat Nov 29 15:14:23.268066 2025] [:error] [pid 16610:tid 16636] [client 207.154.216.0:63365] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-json/"] [unique_id "aSqdTwTu2dLzNk_QISrgqQAAAZg"]
[Sat Nov 29 15:18:35.639535 2025] [autoindex:error] [pid 20828:tid 20889] [client 34.74.32.16:58981] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 15:44:40.668948 2025] [proxy_fcgi:error] [pid 20826:tid 20846] [client 146.190.135.232:53694] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Nov 29 15:44:40.689747 2025] [autoindex:error] [pid 20828:tid 20897] [client 146.190.135.232:53718] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 15:44:40.862434 2025] [proxy_fcgi:error] [pid 20826:tid 20848] [client 146.190.135.232:53694] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Nov 29 15:44:47.800741 2025] [proxy_fcgi:error] [pid 20826:tid 20840] [client 146.190.135.232:50815] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Nov 29 15:44:48.519505 2025] [proxy_fcgi:error] [pid 20826:tid 20839] [client 146.190.135.232:50815] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Nov 29 16:39:01.078019 2025] [autoindex:error] [pid 20828:tid 20888] [client 34.74.32.16:48749] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 16:42:29.167077 2025] [autoindex:error] [pid 20827:tid 20874] [client 69.55.60.174:55412] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 16:55:29.798665 2025] [autoindex:error] [pid 25341:tid 25348] [client 54.163.223.215:60934] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 17:25:11.669234 2025] [autoindex:error] [pid 32136:tid 32162] [client 205.169.39.44:12461] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 18:42:06.303390 2025] [:error] [pid 20826:tid 20832] [client 170.106.35.153:52738] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSrN_vABfBqk70vKX9S5qgAAAAI"]
[Sat Nov 29 20:49:48.716292 2025] [:error] [pid 20826:tid 20852] [client 45.153.34.41:54800] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSrr7PABfBqk70vKX9TTAQAAABY"]
[Sat Nov 29 21:06:46.304084 2025] [:error] [pid 20827:tid 20878] [client 47.129.113.59:57266] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSrv5oR9B7FcLfh1rSGmNAAAAFQ"]
[Sat Nov 29 21:06:46.697186 2025] [:error] [pid 16610:tid 16620] [client 47.129.113.59:57270] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aSrv5gTu2dLzNk_QISodjwAAAYg"]
[Sat Nov 29 21:06:47.094764 2025] [:error] [pid 25341:tid 25366] [client 47.129.113.59:57278] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aSrv5_WK8JdN03Mg7dxcnAAAAdU"]
[Sat Nov 29 21:06:47.519992 2025] [:error] [pid 62619:tid 62635] [client 47.129.113.59:57280] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.production"] [unique_id "aSrv59k7ZYKT63FfVSV9ygAAAU4"]
[Sat Nov 29 21:06:47.919279 2025] [:error] [pid 37490:tid 37515] [client 47.129.113.59:57282] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.development"] [unique_id "aSrv55jG6OUSCUo6XZ1OawAAAhc"]
[Sat Nov 29 21:06:48.311165 2025] [:error] [pid 20826:tid 20832] [client 47.129.113.59:57290] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.bak"] [unique_id "aSrv6PABfBqk70vKX9TWKgAAAAI"]
[Sat Nov 29 21:06:48.706281 2025] [:error] [pid 20828:tid 20891] [client 47.129.113.59:57296] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.example"] [unique_id "aSrv6OqW2f0jLRABAOSgFwAAAIY"]
[Sat Nov 29 21:06:52.734007 2025] [:error] [pid 16610:tid 16632] [client 47.129.113.59:57380] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cientifica.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cientifica.com.au"] [uri "/config.ini"] [unique_id "aSrv7ATu2dLzNk_QISodlQAAAZQ"]
[Sat Nov 29 21:06:53.172140 2025] [proxy_fcgi:error] [pid 16610:tid 16614] [client 47.129.113.59:57384] AH01071: Got error 'Primary script unknown'
[Sat Nov 29 21:06:53.962289 2025] [:error] [pid 62619:tid 62622] [client 47.129.113.59:57392] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/settings"] [unique_id "aSrv7dk7ZYKT63FfVSV9zwAAAUE"]
[Sat Nov 29 21:06:54.352319 2025] [:error] [pid 20915:tid 20938] [client 47.129.113.59:37958] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/settings.json"] [unique_id "aSrv7lOOtKw1QZ3TPEQBXwAAANU"]
[Sat Nov 29 21:06:54.743361 2025] [:error] [pid 62619:tid 62639] [client 47.129.113.59:37972] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/app.config.js"] [unique_id "aSrv7tk7ZYKT63FfVSV90AAAAVI"]
[Sat Nov 29 21:06:55.144846 2025] [:error] [pid 62619:tid 62641] [client 47.129.113.59:37974] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aSrv79k7ZYKT63FfVSV90QAAAVQ"]
[Sat Nov 29 21:06:55.578292 2025] [:error] [pid 25341:tid 25366] [client 47.129.113.59:37976] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aSrv7_WK8JdN03Mg7dxcqQAAAdU"]
[Sat Nov 29 21:06:55.970220 2025] [:error] [pid 25341:tid 25356] [client 47.129.113.59:37992] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpversion.php"] [unique_id "aSrv7_WK8JdN03Mg7dxcqgAAAcs"]
[Sat Nov 29 21:06:56.362682 2025] [:error] [pid 25341:tid 25354] [client 47.129.113.59:38008] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aSrv8PWK8JdN03Mg7dxcrAAAAck"]
[Sat Nov 29 21:06:56.754614 2025] [:error] [pid 62619:tid 62629] [client 47.129.113.59:38014] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin"] [unique_id "aSrv8Nk7ZYKT63FfVSV90gAAAUg"]
[Sat Nov 29 21:06:57.144699 2025] [:error] [pid 37490:tid 37515] [client 47.129.113.59:38020] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aSrv8ZjG6OUSCUo6XZ1OdAAAAhc"]
[Sat Nov 29 21:06:57.538359 2025] [:error] [pid 20915:tid 20934] [client 47.129.113.59:38036] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/wp-config.php"] [unique_id "aSrv8VOOtKw1QZ3TPEQBaAAAANE"]
[Sat Nov 29 21:06:57.996909 2025] [:error] [pid 20826:tid 20832] [client 47.129.113.59:38038] [client 47.129.113.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/composer.json"] [unique_id "aSrv8fABfBqk70vKX9TWNwAAAAI"]
[Sat Nov 29 21:06:58.388288 2025] [:error] [pid 20826:tid 20837] [client 47.129.113.59:38040] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.aws/config"] [unique_id "aSrv8vABfBqk70vKX9TWOAAAAAc"]
[Sat Nov 29 21:06:58.780878 2025] [:error] [pid 20915:tid 20935] [client 47.129.113.59:38056] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.aws/credentials"] [unique_id "aSrv8lOOtKw1QZ3TPEQBaQAAANI"]
[Sat Nov 29 21:06:59.173021 2025] [:error] [pid 20915:tid 20938] [client 47.129.113.59:38066] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aws/config"] [unique_id "aSrv81OOtKw1QZ3TPEQBawAAANU"]
[Sat Nov 29 21:06:59.564445 2025] [:error] [pid 37490:tid 37504] [client 47.129.113.59:38070] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aws/credentials"] [unique_id "aSrv85jG6OUSCUo6XZ1OeAAAAgw"]
[Sat Nov 29 21:06:59.955515 2025] [:error] [pid 25341:tid 25353] [client 47.129.113.59:38078] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aws.json"] [unique_id "aSrv8_WK8JdN03Mg7dxcrgAAAcg"]
[Sat Nov 29 21:07:00.352384 2025] [:error] [pid 20828:tid 20890] [client 47.129.113.59:38082] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/credentials"] [unique_id "aSrv9OqW2f0jLRABAOSgIwAAAIU"]
[Sat Nov 29 21:07:00.764264 2025] [:error] [pid 25341:tid 25348] [client 47.129.113.59:38086] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/secrets.json"] [unique_id "aSrv9PWK8JdN03Mg7dxcsAAAAcM"]
[Sat Nov 29 21:07:01.156346 2025] [:error] [pid 20828:tid 20892] [client 47.129.113.59:38090] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/keys.js"] [unique_id "aSrv9eqW2f0jLRABAOSgJQAAAIc"]
[Sat Nov 29 21:07:01.550649 2025] [:error] [pid 20915:tid 20937] [client 47.129.113.59:38092] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aws-keys.js"] [unique_id "aSrv9VOOtKw1QZ3TPEQBcAAAANQ"]
[Sat Nov 29 21:07:01.941985 2025] [:error] [pid 32136:tid 32160] [client 47.129.113.59:38108] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mailgun"] [unique_id "aSrv9cSj_WSVQM1psKq1EwAAARY"]
[Sat Nov 29 21:07:02.332284 2025] [:error] [pid 20826:tid 20840] [client 47.129.113.59:38116] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mailgun.json"] [unique_id "aSrv9vABfBqk70vKX9TWPQAAAAo"]
[Sat Nov 29 21:07:02.724951 2025] [:error] [pid 20828:tid 20900] [client 47.129.113.59:38130] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mailgun/config"] [unique_id "aSrv9uqW2f0jLRABAOSgJgAAAI8"]
[Sat Nov 29 21:07:03.117646 2025] [:error] [pid 20827:tid 20860] [client 47.129.113.59:38146] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mailgun.php"] [unique_id "aSrv94R9B7FcLfh1rSGmQwAAAEI"]
[Sat Nov 29 21:07:03.540584 2025] [:error] [pid 37490:tid 37515] [client 47.129.113.59:38150] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sendgrid"] [unique_id "aSrv95jG6OUSCUo6XZ1OgQAAAhc"]
[Sat Nov 29 21:07:03.931942 2025] [:error] [pid 25341:tid 25364] [client 47.129.113.59:38164] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sendgrid.json"] [unique_id "aSrv9_WK8JdN03Mg7dxcswAAAdM"]
[Sat Nov 29 21:07:04.330972 2025] [:error] [pid 20827:tid 20859] [client 47.129.113.59:53038] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sendgrid/config"] [unique_id "aSrv-IR9B7FcLfh1rSGmRAAAAEE"]
[Sat Nov 29 21:07:04.728180 2025] [:error] [pid 62619:tid 62638] [client 47.129.113.59:53048] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sendgrid.php"] [unique_id "aSrv-Nk7ZYKT63FfVSV92gAAAVE"]
[Sat Nov 29 21:07:05.123058 2025] [:error] [pid 62619:tid 62639] [client 47.129.113.59:53060] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sendgrid.env"] [unique_id "aSrv-dk7ZYKT63FfVSV93AAAAVI"]
[Sat Nov 29 21:07:05.517365 2025] [:error] [pid 20827:tid 20875] [client 47.129.113.59:53062] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/brevo"] [unique_id "aSrv-YR9B7FcLfh1rSGmRgAAAFE"]
[Sat Nov 29 21:07:05.945949 2025] [:error] [pid 32136:tid 32138] [client 47.129.113.59:53078] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/brevo.json"] [unique_id "aSrv-cSj_WSVQM1psKq1FwAAAQA"]
[Sat Nov 29 21:07:06.371508 2025] [:error] [pid 62619:tid 62635] [client 47.129.113.59:53086] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/brevo/config"] [unique_id "aSrv-tk7ZYKT63FfVSV93gAAAU4"]
[Sat Nov 29 21:07:06.764904 2025] [:error] [pid 20915:tid 20920] [client 47.129.113.59:53098] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/brevo.php"] [unique_id "aSrv-lOOtKw1QZ3TPEQBdQAAAMM"]
[Sat Nov 29 21:07:07.162458 2025] [:error] [pid 20828:tid 20894] [client 47.129.113.59:53112] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php"] [unique_id "aSrv--qW2f0jLRABAOSgKAAAAIk"]
[Sat Nov 29 21:07:07.556762 2025] [:error] [pid 37490:tid 37502] [client 47.129.113.59:53118] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info"] [unique_id "aSrv-5jG6OUSCUo6XZ1OjgAAAgo"]
[Sat Nov 29 21:07:07.950826 2025] [:error] [pid 20828:tid 20887] [client 47.129.113.59:53124] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpinfo"] [unique_id "aSrv--qW2f0jLRABAOSgKQAAAII"]
[Sat Nov 29 21:07:08.394183 2025] [:error] [pid 25341:tid 25350] [client 47.129.113.59:53138] [client 47.129.113.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSrv_PWK8JdN03Mg7dxctAAAAcU"]
[Sat Nov 29 21:07:08.791160 2025] [autoindex:error] [pid 25341:tid 25352] [client 47.129.113.59:53152] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 21:36:07.139224 2025] [:error] [pid 25341:tid 25363] [client 182.44.2.148:34819] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSr2x_WK8JdN03Mg7dxizgAAAdI"]
[Sat Nov 29 21:36:39.630172 2025] [autoindex:error] [pid 20826:tid 20834] [client 54.163.223.215:59638] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 23:52:01.940340 2025] [:error] [pid 16610:tid 16630] [client 43.130.60.195:45476] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSsWoQTu2dLzNk_QISo8vgAAAZI"]
[Sun Nov 30 02:00:27.955013 2025] [autoindex:error] [pid 33303:tid 33312] [client 93.158.90.73:53609] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:00.857840 2025] [autoindex:error] [pid 42162:tid 42170] [client 3.144.169.249:37554] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:02.414585 2025] [autoindex:error] [pid 33303:tid 33318] [client 3.144.169.249:37568] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:04.956603 2025] [autoindex:error] [pid 33376:tid 33386] [client 3.144.169.249:51028] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:04.958245 2025] [autoindex:error] [pid 42163:tid 42202] [client 3.144.169.249:51040] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:05.767807 2025] [autoindex:error] [pid 42162:tid 42186] [client 3.144.169.249:49510] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:09.202358 2025] [autoindex:error] [pid 33337:tid 33363] [client 3.144.169.249:49532] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 03:16:10.053863 2025] [autoindex:error] [pid 33303:tid 33321] [client 3.144.169.249:49542] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 04:04:41.127200 2025] [:error] [pid 6904:tid 6928] [client 58.49.233.126:35762] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aStR2VDhdoNopa1cdId1cQAAABI"]
[Sun Nov 30 06:09:51.296094 2025] [autoindex:error] [pid 60369:tid 60386] [client 143.244.169.29:46576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 06:34:51.854786 2025] [:error] [pid 60572:tid 60594] [client 93.123.109.7:43262] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSt1C4Vcy1tAF6kmNWn5eAAAAhQ"]
[Sun Nov 30 06:51:39.024805 2025] [:error] [pid 63468:tid 63473] [client 93.123.109.7:44226] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSt4-6GdTyPw0PxgJeuCcwAAAAM"]
[Sun Nov 30 07:28:21.297211 2025] [:error] [pid 63468:tid 63474] [client 176.200.57.109:24939] [client 176.200.57.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.200.57.109, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSuBlaGdTyPw0PxgJeuIewAAAAQ"]
[Sun Nov 30 07:28:21.309147 2025] [proxy_fcgi:error] [pid 63468:tid 63474] [client 176.200.57.109:24939] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 08:49:12.724564 2025] [:error] [pid 58674:tid 58680] [client 34.243.0.188:34446] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aSuUiNSN3xKbhZ124Wy3OAAAA0Q"]
[Sun Nov 30 08:49:13.816272 2025] [:error] [pid 58704:tid 58723] [client 34.243.0.188:34462] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env"] [unique_id "aSuUiVgCdnbXMzbONnOMLQAAA5A"]
[Sun Nov 30 08:49:14.888245 2025] [:error] [pid 58627:tid 58632] [client 34.243.0.188:60174] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.local"] [unique_id "aSuUiot6XGlcEsOE6PXQuAAAAsM"]
[Sun Nov 30 08:49:15.957276 2025] [:error] [pid 58674:tid 58693] [client 34.243.0.188:60182] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.production"] [unique_id "aSuUi9SN3xKbhZ124Wy3OwAAA1E"]
[Sun Nov 30 08:49:17.026517 2025] [:error] [pid 58704:tid 58719] [client 34.243.0.188:60198] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.development"] [unique_id "aSuUjVgCdnbXMzbONnOMMAAAA4w"]
[Sun Nov 30 08:49:18.098203 2025] [:error] [pid 58627:tid 58641] [client 34.243.0.188:60204] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.bak"] [unique_id "aSuUjot6XGlcEsOE6PXQugAAAsw"]
[Sun Nov 30 08:49:19.167155 2025] [:error] [pid 58704:tid 58726] [client 34.243.0.188:60212] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.example"] [unique_id "aSuUj1gCdnbXMzbONnOMNAAAA5M"]
[Sun Nov 30 08:49:29.908317 2025] [:error] [pid 47388:tid 47400] [client 34.243.0.188:45458] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cientifica.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cientifica.com.au"] [uri "/config.ini"] [unique_id "aSuUma4bdWdKxWfLl-e8rAAAAgk"]
[Sun Nov 30 08:49:30.991007 2025] [proxy_fcgi:error] [pid 58674:tid 58677] [client 34.243.0.188:45466] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 08:49:33.137560 2025] [:error] [pid 38508:tid 38538] [client 34.243.0.188:45478] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/settings"] [unique_id "aSuUnf9ik0lOnKrNBoyMlAAAApQ"]
[Sun Nov 30 08:49:34.205788 2025] [:error] [pid 58627:tid 58641] [client 34.243.0.188:34168] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/settings.json"] [unique_id "aSuUnot6XGlcEsOE6PXQxgAAAsw"]
[Sun Nov 30 08:49:35.275235 2025] [:error] [pid 58704:tid 58719] [client 34.243.0.188:34180] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app.config.js"] [unique_id "aSuUn1gCdnbXMzbONnOMQwAAA4w"]
[Sun Nov 30 08:49:36.344506 2025] [:error] [pid 58704:tid 58726] [client 34.243.0.188:34184] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aSuUoFgCdnbXMzbONnOMSAAAA5M"]
[Sun Nov 30 08:49:37.412536 2025] [:error] [pid 58674:tid 58696] [client 34.243.0.188:34190] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aSuUodSN3xKbhZ124Wy3SgAAA1Q"]
[Sun Nov 30 08:49:38.479219 2025] [:error] [pid 58627:tid 58640] [client 34.243.0.188:34206] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/phpversion.php"] [unique_id "aSuUoot6XGlcEsOE6PXQyAAAAss"]
[Sun Nov 30 08:49:39.549780 2025] [:error] [pid 42679:tid 42714] [client 34.243.0.188:34218] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/test.php"] [unique_id "aSuUoxye9VvkL-lF3kFmXQAAAkY"]
[Sun Nov 30 08:49:40.619543 2025] [:error] [pid 58549:tid 58601] [client 34.243.0.188:34234] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin"] [unique_id "aSuUpOx957ZJIudq4UwjlAAAAVc"]
[Sun Nov 30 08:49:41.687774 2025] [:error] [pid 47389:tid 47424] [client 34.243.0.188:34250] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aSuUpSp04fPeCs_EYV4YlgAAA8Y"]
[Sun Nov 30 08:49:42.756631 2025] [:error] [pid 58704:tid 58710] [client 34.243.0.188:34254] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/wp-config.php"] [unique_id "aSuUplgCdnbXMzbONnOMTgAAA4M"]
[Sun Nov 30 08:49:43.826474 2025] [:error] [pid 47389:tid 47425] [client 34.243.0.188:34268] [client 34.243.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/composer.json"] [unique_id "aSuUpyp04fPeCs_EYV4YmQAAA8c"]
[Sun Nov 30 08:49:44.896298 2025] [:error] [pid 58549:tid 58592] [client 34.243.0.188:59358] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.aws/config"] [unique_id "aSuUqOx957ZJIudq4UwjlgAAAU4"]
[Sun Nov 30 08:49:45.964920 2025] [:error] [pid 47388:tid 47400] [client 34.243.0.188:59372] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.aws/credentials"] [unique_id "aSuUqa4bdWdKxWfLl-e8twAAAgk"]
[Sun Nov 30 08:49:47.034421 2025] [:error] [pid 58627:tid 58638] [client 34.243.0.188:59376] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aws/config"] [unique_id "aSuUq4t6XGlcEsOE6PXQzwAAAsk"]
[Sun Nov 30 08:49:48.103238 2025] [:error] [pid 58704:tid 58715] [client 34.243.0.188:59386] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aws/credentials"] [unique_id "aSuUrFgCdnbXMzbONnOMVgAAA4g"]
[Sun Nov 30 08:49:49.170994 2025] [:error] [pid 58704:tid 58723] [client 34.243.0.188:59392] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aws.json"] [unique_id "aSuUrVgCdnbXMzbONnOMWQAAA5A"]
[Sun Nov 30 08:49:50.239785 2025] [:error] [pid 58674:tid 58699] [client 34.243.0.188:59398] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/credentials"] [unique_id "aSuUrtSN3xKbhZ124Wy3SwAAA1c"]
[Sun Nov 30 08:49:51.309481 2025] [:error] [pid 42679:tid 42730] [client 34.243.0.188:59406] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/secrets.json"] [unique_id "aSuUrxye9VvkL-lF3kFmZgAAAlY"]
[Sun Nov 30 08:49:52.377851 2025] [:error] [pid 42679:tid 42716] [client 34.243.0.188:59418] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/keys.js"] [unique_id "aSuUsBye9VvkL-lF3kFmZwAAAkg"]
[Sun Nov 30 08:49:53.445747 2025] [:error] [pid 58549:tid 58593] [client 34.243.0.188:59422] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aws-keys.js"] [unique_id "aSuUsex957ZJIudq4UwjnAAAAU8"]
[Sun Nov 30 08:49:54.512442 2025] [:error] [pid 42679:tid 42719] [client 34.243.0.188:45348] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mailgun"] [unique_id "aSuUshye9VvkL-lF3kFmawAAAks"]
[Sun Nov 30 08:49:55.580540 2025] [:error] [pid 38508:tid 38530] [client 34.243.0.188:45364] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mailgun.json"] [unique_id "aSuUs_9ik0lOnKrNBoyMowAAAow"]
[Sun Nov 30 08:49:56.648089 2025] [:error] [pid 47389:tid 47422] [client 34.243.0.188:45374] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mailgun/config"] [unique_id "aSuUtCp04fPeCs_EYV4YnQAAA8Q"]
[Sun Nov 30 08:49:57.716418 2025] [:error] [pid 47388:tid 47405] [client 34.243.0.188:45378] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mailgun.php"] [unique_id "aSuUta4bdWdKxWfLl-e8vAAAAg4"]
[Sun Nov 30 08:49:58.783865 2025] [:error] [pid 58674:tid 58688] [client 34.243.0.188:45392] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sendgrid"] [unique_id "aSuUttSN3xKbhZ124Wy3UgAAA0w"]
[Sun Nov 30 08:49:59.852523 2025] [:error] [pid 58674:tid 58686] [client 34.243.0.188:45406] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sendgrid.json"] [unique_id "aSuUt9SN3xKbhZ124Wy3UwAAA0o"]
[Sun Nov 30 08:50:00.922449 2025] [:error] [pid 58627:tid 58651] [client 34.243.0.188:45416] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sendgrid/config"] [unique_id "aSuUuIt6XGlcEsOE6PXQ1wAAAtY"]
[Sun Nov 30 08:50:01.991054 2025] [:error] [pid 38508:tid 38523] [client 34.243.0.188:45432] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sendgrid.php"] [unique_id "aSuUuf9ik0lOnKrNBoyMrgAAAoU"]
[Sun Nov 30 08:50:03.058612 2025] [:error] [pid 47388:tid 47407] [client 34.243.0.188:45442] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sendgrid.env"] [unique_id "aSuUu64bdWdKxWfLl-e8wQAAAhA"]
[Sun Nov 30 08:50:04.128474 2025] [:error] [pid 58549:tid 58600] [client 34.243.0.188:60858] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/brevo"] [unique_id "aSuUvOx957ZJIudq4UwjpAAAAVY"]
[Sun Nov 30 08:50:05.198380 2025] [:error] [pid 58549:tid 58579] [client 34.243.0.188:60866] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/brevo.json"] [unique_id "aSuUvex957ZJIudq4UwjpwAAAUE"]
[Sun Nov 30 08:50:06.265249 2025] [:error] [pid 47388:tid 47402] [client 34.243.0.188:60874] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/brevo/config"] [unique_id "aSuUvq4bdWdKxWfLl-e8xQAAAgs"]
[Sun Nov 30 08:50:07.333590 2025] [:error] [pid 58704:tid 58724] [client 34.243.0.188:60878] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/brevo.php"] [unique_id "aSuUv1gCdnbXMzbONnOMaAAAA5E"]
[Sun Nov 30 08:50:08.400462 2025] [:error] [pid 58704:tid 58715] [client 34.243.0.188:60888] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/php"] [unique_id "aSuUwFgCdnbXMzbONnOMbAAAA4g"]
[Sun Nov 30 08:50:09.472732 2025] [:error] [pid 58627:tid 58643] [client 34.243.0.188:60892] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info"] [unique_id "aSuUwYt6XGlcEsOE6PXQ4AAAAs4"]
[Sun Nov 30 08:50:10.542673 2025] [:error] [pid 58704:tid 58722] [client 34.243.0.188:60898] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/phpinfo"] [unique_id "aSuUwlgCdnbXMzbONnOMcAAAA48"]
[Sun Nov 30 08:50:11.610770 2025] [:error] [pid 42679:tid 42708] [client 34.243.0.188:60904] [client 34.243.0.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSuUwxye9VvkL-lF3kFmdgAAAkA"]
[Sun Nov 30 08:50:12.685143 2025] [autoindex:error] [pid 58548:tid 58558] [client 34.243.0.188:60916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 10:18:13.974938 2025] [:error] [pid 58704:tid 58725] [client 182.42.105.144:58307] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aSupZVgCdnbXMzbONnOdAAAAA5I"]
[Sun Nov 30 10:30:07.037837 2025] [:error] [pid 12554:tid 12563] [client 34.170.165.171:36110] [client 34.170.165.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aSusLz7q_kXd01TaAD8ZvwAAAAc"]
[Sun Nov 30 10:57:20.594870 2025] [autoindex:error] [pid 9374:tid 9388] [client 74.7.243.205:45014] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 11:13:25.965266 2025] [autoindex:error] [pid 9375:tid 9405] [client 66.249.64.15:43365] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 12:18:06.721510 2025] [autoindex:error] [pid 12793:tid 12808] [client 129.212.231.54:60005] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 12:18:06.816428 2025] [autoindex:error] [pid 12793:tid 12800] [client 129.212.231.54:60005] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 12:18:06.996173 2025] [:error] [pid 12793:tid 12816] [client 129.212.231.54:60005] [client 129.212.231.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.212.231.54, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSvFfssEgQeCVydJZ0jznwAAAFU"]
[Sun Nov 30 12:18:07.006373 2025] [proxy_fcgi:error] [pid 12793:tid 12816] [client 129.212.231.54:60005] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 12:18:07.100187 2025] [autoindex:error] [pid 12793:tid 12819] [client 129.212.231.54:60005] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 12:18:09.416717 2025] [:error] [pid 12793:tid 12812] [client 129.212.231.54:60005] [client 129.212.231.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSvFgcsEgQeCVydJZ0jzqgAAAFE"]
[Sun Nov 30 12:18:09.607642 2025] [:error] [pid 10607:tid 10634] [client 129.212.231.54:59897] [client 129.212.231.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSvFgXMxNFmf1l9xA_FiHwAAAtg"]
[Sun Nov 30 12:18:09.798632 2025] [:error] [pid 58704:tid 58718] [client 129.212.231.54:57782] [client 129.212.231.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSvFgVgCdnbXMzbONnO8EwAAA4s"]
[Sun Nov 30 12:18:09.988505 2025] [:error] [pid 10518:tid 10541] [client 129.212.231.54:56021] [client 129.212.231.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSvFgQ8XjrhaEDJ0Rd94tgAAAVQ"]
[Sun Nov 30 12:18:10.175597 2025] [:error] [pid 10607:tid 10629] [client 129.212.231.54:63178] [client 129.212.231.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSvFgnMxNFmf1l9xA_FiIAAAAtM"]
[Sun Nov 30 12:18:10.363562 2025] [:error] [pid 10607:tid 10622] [client 129.212.231.54:65159] [client 129.212.231.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSvFgnMxNFmf1l9xA_FiIQAAAsw"]
[Sun Nov 30 14:34:33.999795 2025] [autoindex:error] [pid 12793:tid 12795] [client 159.223.122.108:56128] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 15:42:30.223291 2025] [autoindex:error] [pid 58704:tid 58725] [client 66.249.64.1:61104] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 16:01:18.515800 2025] [:error] [pid 9374:tid 9387] [client 170.106.35.153:42602] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSv5zoEwr5jt_cokVdxG_QAAAwo"]
[Sun Nov 30 16:50:15.901360 2025] [:error] [pid 10550:tid 10601] [client 182.44.67.97:47932] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aSwFR-l_8Vq2nipf7mE2TQAAApY"]
[Sun Nov 30 17:26:30.935652 2025] [autoindex:error] [pid 12554:tid 12564] [client 74.7.243.216:46706] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 17:41:13.148409 2025] [autoindex:error] [pid 9374:tid 9383] [client 3.87.60.1:53306] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 17:41:13.555966 2025] [autoindex:error] [pid 12793:tid 12799] [client 3.87.60.1:39432] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 19:05:00.026374 2025] [autoindex:error] [pid 9374:tid 9390] [client 35.205.53.89:59634] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 20:10:20.033428 2025] [autoindex:error] [pid 9374:tid 9395] [client 34.216.92.37:60906] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 20:26:18.606752 2025] [autoindex:error] [pid 12793:tid 12796] [client 66.249.64.3:46128] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:27:39.388153 2025] [:error] [pid 32521:tid 32575] [client 159.203.160.93:56296] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSx-iz-OXioBrWvHoPq9IwAAAxc"]
[Mon Dec 01 01:27:41.570186 2025] [:error] [pid 32520:tid 32546] [client 159.203.160.93:47224] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSx-jfvbCMB_T-u6uxlFtQAAA5U"]
[Mon Dec 01 02:27:15.560775 2025] [autoindex:error] [pid 22963:tid 22973] [client 4.241.178.76:56424] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:27:15.685655 2025] [proxy_fcgi:error] [pid 22963:tid 22983] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:16.273378 2025] [proxy_fcgi:error] [pid 22963:tid 22970] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 02:27:16.480363 2025] [proxy_fcgi:error] [pid 22963:tid 22989] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:16.717150 2025] [proxy_fcgi:error] [pid 22963:tid 22971] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 02:27:17.043402 2025] [proxy_fcgi:error] [pid 22963:tid 22968] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 02:27:18.455944 2025] [proxy_fcgi:error] [pid 22963:tid 22981] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:18.623220 2025] [proxy_fcgi:error] [pid 22963:tid 22979] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:19.344343 2025] [proxy_fcgi:error] [pid 22963:tid 22974] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 02:27:19.463537 2025] [proxy_fcgi:error] [pid 22963:tid 22989] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:19.626919 2025] [proxy_fcgi:error] [pid 22963:tid 22971] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:19.766069 2025] [proxy_fcgi:error] [pid 22963:tid 22984] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:20.224006 2025] [proxy_fcgi:error] [pid 22963:tid 22987] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:20.381021 2025] [proxy_fcgi:error] [pid 22963:tid 22985] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:20.903025 2025] [proxy_fcgi:error] [pid 22963:tid 22976] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:21.618866 2025] [proxy_fcgi:error] [pid 22963:tid 22983] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:21.769148 2025] [proxy_fcgi:error] [pid 22963:tid 22989] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 02:27:22.425952 2025] [proxy_fcgi:error] [pid 22963:tid 22984] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:23.210461 2025] [proxy_fcgi:error] [pid 22963:tid 22969] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 02:27:23.327918 2025] [proxy_fcgi:error] [pid 22963:tid 22982] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:23.445482 2025] [proxy_fcgi:error] [pid 22963:tid 22977] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 02:27:23.871274 2025] [proxy_fcgi:error] [pid 22963:tid 22968] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:24.405653 2025] [proxy_fcgi:error] [pid 22963:tid 22987] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:24.686595 2025] [proxy_fcgi:error] [pid 22963:tid 22985] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 02:27:24.884793 2025] [proxy_fcgi:error] [pid 22963:tid 22986] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:25.018957 2025] [proxy_fcgi:error] [pid 22963:tid 22972] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:25.136337 2025] [proxy_fcgi:error] [pid 22963:tid 22976] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:25.296378 2025] [proxy_fcgi:error] [pid 22963:tid 22988] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:25.861342 2025] [proxy_fcgi:error] [pid 22963:tid 22980] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:25.984523 2025] [proxy_fcgi:error] [pid 22963:tid 22982] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 02:27:26.264340 2025] [proxy_fcgi:error] [pid 22963:tid 22968] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:26.399371 2025] [proxy_fcgi:error] [pid 22963:tid 22981] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:26.518609 2025] [proxy_fcgi:error] [pid 22963:tid 22985] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:26.648430 2025] [proxy_fcgi:error] [pid 22963:tid 22965] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:26.783671 2025] [proxy_fcgi:error] [pid 22963:tid 22986] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:26.900778 2025] [proxy_fcgi:error] [pid 22963:tid 22972] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:27.293413 2025] [proxy_fcgi:error] [pid 22963:tid 22984] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:27.465304 2025] [proxy_fcgi:error] [pid 22963:tid 22971] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:27.601600 2025] [proxy_fcgi:error] [pid 22963:tid 22980] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:28.279288 2025] [proxy_fcgi:error] [pid 22963:tid 22967] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:28.409695 2025] [proxy_fcgi:error] [pid 22963:tid 22977] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:27:28.532493 2025] [proxy_fcgi:error] [pid 22963:tid 22968] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 02:27:28.699268 2025] [proxy_fcgi:error] [pid 22963:tid 22975] [client 4.241.178.76:56424] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:27:28.815641 2025] [:error] [pid 22963:tid 22983] [client 4.241.178.76:56424] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSyMkCgjrTC0kxo5Q-z7KQAAAJI"], referer: https://www.yahoo.com/
[Mon Dec 01 02:27:31.983138 2025] [proxy_fcgi:error] [pid 32520:tid 32547] [client 4.241.178.76:59841] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:35.619897 2025] [proxy_fcgi:error] [pid 32520:tid 32535] [client 4.241.178.76:59841] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:35.739016 2025] [proxy_fcgi:error] [pid 32520:tid 32540] [client 4.241.178.76:59841] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:27:35.873994 2025] [proxy_fcgi:error] [pid 32520:tid 32539] [client 4.241.178.76:59841] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 02:27:39.942214 2025] [proxy_fcgi:error] [pid 32520:tid 32540] [client 4.241.178.76:59841] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 02:27:40.308352 2025] [:error] [pid 32520:tid 32526] [client 4.241.178.76:59841] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSyMnPvbCMB_T-u6uxlXEgAAA4E"], referer: https://www.google.com/
[Mon Dec 01 02:27:41.622441 2025] [:error] [pid 32522:tid 32582] [client 4.241.178.76:59854] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSyMnSY5g6U7AgYu2cLA8wAAAMM"], referer: https://www.google.com/
[Mon Dec 01 02:27:42.790394 2025] [:error] [pid 32521:tid 32570] [client 4.241.178.76:56441] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSyMnj-OXioBrWvHoPrZIwAAAxI"], referer: https://duckduckgo.com/
[Mon Dec 01 02:27:44.209932 2025] [:error] [pid 32522:tid 32603] [client 4.241.178.76:59896] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSyMoCY5g6U7AgYu2cLA9wAAANg"], referer: https://www.google.de/
[Mon Dec 01 02:27:45.736238 2025] [:error] [pid 32520:tid 32528] [client 4.241.178.76:59879] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSyMofvbCMB_T-u6uxlXHAAAA4M"], referer: https://www.google.de/
[Mon Dec 01 02:27:46.145826 2025] [:error] [pid 25124:tid 25155] [client 4.241.178.76:59858] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSyMoll826mNLYSD9-3PiAAAAEI"], referer: https://www.bing.com/
[Mon Dec 01 02:27:48.333421 2025] [:error] [pid 32520:tid 32547] [client 4.241.178.76:59856] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSyMpPvbCMB_T-u6uxlXJAAAA5Y"], referer: https://www.google.com/
[Mon Dec 01 02:27:49.945892 2025] [:error] [pid 32520:tid 32538] [client 4.241.178.76:56419] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSyMpfvbCMB_T-u6uxlXJgAAA40"], referer: https://www.bing.com/
[Mon Dec 01 02:27:51.357391 2025] [:error] [pid 22995:tid 23016] [client 4.241.178.76:59865] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSyMp6hgK6YGad0ApM9d5wAAARI"], referer: https://www.google.de/
[Mon Dec 01 02:27:51.859320 2025] [:error] [pid 32522:tid 32589] [client 4.241.178.76:56422] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSyMpyY5g6U7AgYu2cLBAAAAAMo"], referer: https://www.google.com/
[Mon Dec 01 02:27:54.211506 2025] [:error] [pid 25124:tid 25158] [client 4.241.178.76:56393] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSyMqll826mNLYSD9-3PlQAAAEU"], referer: https://www.google.fr/
[Mon Dec 01 02:27:56.116763 2025] [:error] [pid 32611:tid 32617] [client 4.241.178.76:59901] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSyMrK_aT7PlMcEPLmkobgAAAAQ"], referer: https://duckduckgo.com/
[Mon Dec 01 02:27:57.261849 2025] [:error] [pid 32520:tid 32542] [client 4.241.178.76:56391] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSyMrfvbCMB_T-u6uxlXMQAAA5E"], referer: https://duckduckgo.com/
[Mon Dec 01 02:28:01.439402 2025] [:error] [pid 32521:tid 32558] [client 4.241.178.76:59843] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSyMsT-OXioBrWvHoPrZTQAAAwY"], referer: https://www.google.co.uk/
[Mon Dec 01 02:28:02.487112 2025] [:error] [pid 22995:tid 23012] [client 4.241.178.76:56408] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSyMsqhgK6YGad0ApM9d_QAAAQ4"], referer: https://www.google.de/
[Mon Dec 01 02:28:03.523069 2025] [:error] [pid 32521:tid 32556] [client 4.241.178.76:7437] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSyMsz-OXioBrWvHoPrZUQAAAwQ"], referer: https://www.yahoo.com/
[Mon Dec 01 02:28:03.996725 2025] [:error] [pid 32521:tid 32565] [client 4.241.178.76:7758] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSyMsz-OXioBrWvHoPrZVgAAAw0"], referer: https://www.bing.com/
[Mon Dec 01 02:28:04.524274 2025] [:error] [pid 22963:tid 22976] [client 4.241.178.76:7747] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSyMtCgjrTC0kxo5Q-z7TQAAAIs"], referer: https://duckduckgo.com/
[Mon Dec 01 02:28:05.385758 2025] [:error] [pid 22963:tid 22967] [client 4.241.178.76:59850] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSyMtSgjrTC0kxo5Q-z7UwAAAII"], referer: https://www.google.fr/
[Mon Dec 01 02:28:07.035283 2025] [:error] [pid 22963:tid 22971] [client 4.241.178.76:7752] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSyMtygjrTC0kxo5Q-z7XQAAAIY"], referer: https://www.google.de/
[Mon Dec 01 02:28:08.300720 2025] [:error] [pid 32520:tid 32544] [client 4.241.178.76:7766] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSyMuPvbCMB_T-u6uxlXRwAAA5M"], referer: https://www.google.com/
[Mon Dec 01 02:28:08.879379 2025] [:error] [pid 32520:tid 32533] [client 4.241.178.76:56414] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSyMuPvbCMB_T-u6uxlXSQAAA4g"], referer: https://www.yahoo.com/
[Mon Dec 01 02:28:09.823809 2025] [:error] [pid 32521:tid 32575] [client 4.241.178.76:59903] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSyMuT-OXioBrWvHoPrZaAAAAxc"], referer: https://duckduckgo.com/
[Mon Dec 01 02:28:10.694594 2025] [:error] [pid 32520:tid 32538] [client 4.241.178.76:56426] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSyMuvvbCMB_T-u6uxlXTwAAA40"], referer: https://www.google.co.uk/
[Mon Dec 01 02:28:11.317226 2025] [proxy_fcgi:error] [pid 32521:tid 32558] [client 4.241.178.76:56387] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 02:28:11.549538 2025] [proxy_fcgi:error] [pid 32521:tid 32563] [client 4.241.178.76:56387] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:28:11.670310 2025] [proxy_fcgi:error] [pid 32521:tid 32556] [client 4.241.178.76:56387] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 02:28:11.787672 2025] [proxy_fcgi:error] [pid 32521:tid 32553] [client 4.241.178.76:56387] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:28:11.923316 2025] [proxy_fcgi:error] [pid 32521:tid 32564] [client 4.241.178.76:56387] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 02:38:05.452983 2025] [:error] [pid 41526:tid 41544] [client 103.65.237.153:57513] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aSyPDV0bjN1zt83-HJ0mtgAAAU0"]
[Mon Dec 01 02:38:05.703331 2025] [:error] [pid 25124:tid 25172] [client 103.65.237.153:57545] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSyPDVl826mNLYSD9-3SiAAAAFM"]
[Mon Dec 01 03:17:02.117834 2025] [autoindex:error] [pid 32611:tid 32626] [client 94.102.55.18:51806] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 04:03:53.856738 2025] [autoindex:error] [pid 20218:tid 20235] [client 4.218.17.104:45291] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 04:03:54.060011 2025] [proxy_fcgi:error] [pid 20218:tid 20229] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 04:03:57.389243 2025] [proxy_fcgi:error] [pid 20218:tid 20227] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:03:57.574341 2025] [proxy_fcgi:error] [pid 20218:tid 20228] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:03:57.736014 2025] [proxy_fcgi:error] [pid 20218:tid 20225] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:03:57.888922 2025] [proxy_fcgi:error] [pid 20218:tid 20224] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:03:58.394566 2025] [proxy_fcgi:error] [pid 20218:tid 20244] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:03:58.547016 2025] [proxy_fcgi:error] [pid 20218:tid 20242] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:03:59.093274 2025] [proxy_fcgi:error] [pid 20218:tid 20237] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:03:59.347342 2025] [proxy_fcgi:error] [pid 20218:tid 20239] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:03:59.575034 2025] [proxy_fcgi:error] [pid 20218:tid 20236] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 04:03:59.730258 2025] [proxy_fcgi:error] [pid 20218:tid 20235] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 04:03:59.894057 2025] [proxy_fcgi:error] [pid 20218:tid 20229] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:00.118169 2025] [proxy_fcgi:error] [pid 20218:tid 20245] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:01.533235 2025] [proxy_fcgi:error] [pid 20218:tid 20238] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:02.038704 2025] [proxy_fcgi:error] [pid 20218:tid 20227] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:04:02.227043 2025] [proxy_fcgi:error] [pid 20218:tid 20224] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:02.378605 2025] [proxy_fcgi:error] [pid 20218:tid 20230] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:02.544578 2025] [proxy_fcgi:error] [pid 20218:tid 20244] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 04:04:02.734690 2025] [proxy_fcgi:error] [pid 20218:tid 20231] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:02.889814 2025] [proxy_fcgi:error] [pid 20218:tid 20223] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 04:04:03.078325 2025] [proxy_fcgi:error] [pid 20218:tid 20234] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 04:04:03.573469 2025] [proxy_fcgi:error] [pid 20218:tid 20235] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:03.726709 2025] [proxy_fcgi:error] [pid 20218:tid 20229] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:04:03.885600 2025] [proxy_fcgi:error] [pid 20218:tid 20245] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 04:04:04.037130 2025] [proxy_fcgi:error] [pid 20218:tid 20246] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 04:04:04.200042 2025] [proxy_fcgi:error] [pid 20218:tid 20240] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 04:04:04.377320 2025] [proxy_fcgi:error] [pid 20218:tid 20226] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:04.855080 2025] [proxy_fcgi:error] [pid 20218:tid 20243] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:05.383348 2025] [proxy_fcgi:error] [pid 20218:tid 20227] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:05.704275 2025] [proxy_fcgi:error] [pid 20218:tid 20223] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:05.922302 2025] [proxy_fcgi:error] [pid 20218:tid 20234] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:06.080849 2025] [proxy_fcgi:error] [pid 20218:tid 20239] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 04:04:06.305269 2025] [proxy_fcgi:error] [pid 20218:tid 20235] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:06.514165 2025] [proxy_fcgi:error] [pid 20218:tid 20245] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:06.666163 2025] [proxy_fcgi:error] [pid 20218:tid 20240] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 04:04:07.031133 2025] [proxy_fcgi:error] [pid 20218:tid 20241] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:07.185939 2025] [proxy_fcgi:error] [pid 20218:tid 20232] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 04:04:07.341563 2025] [proxy_fcgi:error] [pid 20218:tid 20238] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:07.646239 2025] [proxy_fcgi:error] [pid 20218:tid 20228] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 04:04:07.935665 2025] [proxy_fcgi:error] [pid 20218:tid 20224] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:04:08.144969 2025] [proxy_fcgi:error] [pid 20218:tid 20233] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 01 04:04:08.302795 2025] [proxy_fcgi:error] [pid 20218:tid 20244] [client 4.218.17.104:45291] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 04:04:08.459339 2025] [:error] [pid 20218:tid 20234] [client 4.218.17.104:45291] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSyjOL1Fj2Rp4FeQshaq8QAAAAs"], referer: https://www.google.co.uk/
[Mon Dec 01 04:04:10.002354 2025] [proxy_fcgi:error] [pid 20219:tid 20264] [client 4.218.17.104:45283] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 01 04:04:14.574882 2025] [proxy_fcgi:error] [pid 20219:tid 20272] [client 4.218.17.104:45283] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 01 04:04:14.728685 2025] [proxy_fcgi:error] [pid 20219:tid 20256] [client 4.218.17.104:45283] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:14.882917 2025] [proxy_fcgi:error] [pid 20219:tid 20269] [client 4.218.17.104:45283] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:19.296354 2025] [proxy_fcgi:error] [pid 20219:tid 20254] [client 4.218.17.104:45283] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 04:04:20.373804 2025] [:error] [pid 20219:tid 20271] [client 4.218.17.104:45283] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSyjRJcCVJSacjuiDNsRwwAAAFU"], referer: https://www.google.de/
[Mon Dec 01 04:04:22.641312 2025] [:error] [pid 20220:tid 20279] [client 4.218.17.104:45275] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSyjRoCPCwJCD06SoBoDOAAAAII"], referer: https://duckduckgo.com/
[Mon Dec 01 04:04:24.428031 2025] [:error] [pid 29499:tid 29524] [client 4.218.17.104:45266] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSyjSIQOS61lM5ziuKLBEQAAAQw"], referer: https://duckduckgo.com/
[Mon Dec 01 04:04:26.961008 2025] [:error] [pid 29499:tid 29532] [client 4.218.17.104:45284] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSyjSoQOS61lM5ziuKLBGQAAARQ"], referer: https://www.google.com/
[Mon Dec 01 04:04:28.137909 2025] [:error] [pid 20220:tid 20296] [client 4.218.17.104:45263] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSyjTICPCwJCD06SoBoDQgAAAJM"], referer: https://www.google.com/
[Mon Dec 01 04:04:29.045768 2025] [:error] [pid 29499:tid 29529] [client 4.218.17.104:45306] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSyjTYQOS61lM5ziuKLBGwAAARE"], referer: https://www.google.de/
[Mon Dec 01 04:04:30.623586 2025] [:error] [pid 20220:tid 20278] [client 4.218.17.104:45193] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSyjToCPCwJCD06SoBoDSwAAAIE"], referer: https://www.yahoo.com/
[Mon Dec 01 04:04:31.950658 2025] [:error] [pid 20220:tid 20283] [client 4.218.17.104:45255] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSyjT4CPCwJCD06SoBoDTgAAAIY"], referer: https://duckduckgo.com/
[Mon Dec 01 04:04:33.023272 2025] [:error] [pid 20219:tid 20266] [client 4.218.17.104:45254] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSyjUZcCVJSacjuiDNsR1gAAAFA"], referer: https://www.yahoo.com/
[Mon Dec 01 04:04:33.589440 2025] [:error] [pid 20219:tid 20263] [client 4.218.17.104:45304] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSyjUZcCVJSacjuiDNsR2AAAAE0"], referer: https://www.google.co.uk/
[Mon Dec 01 04:04:34.519147 2025] [:error] [pid 20220:tid 20289] [client 4.218.17.104:45265] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSyjUoCPCwJCD06SoBoDWQAAAIw"], referer: https://www.google.co.uk/
[Mon Dec 01 04:04:35.893626 2025] [:error] [pid 20219:tid 20271] [client 4.218.17.104:45269] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSyjU5cCVJSacjuiDNsR3QAAAFU"], referer: https://www.google.com/
[Mon Dec 01 04:04:37.088781 2025] [:error] [pid 20219:tid 20260] [client 4.218.17.104:45197] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSyjVZcCVJSacjuiDNsR4wAAAEo"], referer: https://www.google.co.uk/
[Mon Dec 01 04:04:40.854862 2025] [:error] [pid 20219:tid 20272] [client 4.218.17.104:45203] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSyjWJcCVJSacjuiDNsR-wAAAFY"], referer: https://www.google.fr/
[Mon Dec 01 04:04:41.547748 2025] [:error] [pid 20220:tid 20298] [client 4.218.17.104:45201] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSyjWYCPCwJCD06SoBoDXAAAAJU"], referer: https://www.google.com/
[Mon Dec 01 04:04:43.435955 2025] [:error] [pid 20220:tid 20291] [client 4.218.17.104:45250] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSyjW4CPCwJCD06SoBoDYgAAAI4"], referer: https://www.yahoo.com/
[Mon Dec 01 04:04:44.093968 2025] [:error] [pid 20218:tid 20244] [client 4.218.17.104:45248] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSyjXL1Fj2Rp4FeQsharGwAAABU"], referer: https://www.yahoo.com/
[Mon Dec 01 04:04:46.708929 2025] [:error] [pid 20219:tid 20264] [client 4.218.17.104:45272] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSyjXpcCVJSacjuiDNsSAwAAAE4"], referer: https://www.bing.com/
[Mon Dec 01 04:04:49.092611 2025] [:error] [pid 20314:tid 20323] [client 4.218.17.104:45188] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSyjYQH4VTBiDAysQ69PsAAAAMQ"], referer: https://duckduckgo.com/
[Mon Dec 01 04:04:52.909873 2025] [:error] [pid 20314:tid 20338] [client 4.218.17.104:45280] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSyjZAH4VTBiDAysQ69PuwAAANM"], referer: https://www.google.co.uk/
[Mon Dec 01 04:04:54.297271 2025] [:error] [pid 20220:tid 20290] [client 4.218.17.104:45224] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSyjZoCPCwJCD06SoBoDgwAAAI0"], referer: https://www.yahoo.com/
[Mon Dec 01 04:04:55.216114 2025] [:error] [pid 29499:tid 29535] [client 4.218.17.104:45293] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSyjZ4QOS61lM5ziuKLBOgAAARc"], referer: https://www.google.de/
[Mon Dec 01 04:04:55.677684 2025] [:error] [pid 29499:tid 29534] [client 4.218.17.104:45282] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSyjZ4QOS61lM5ziuKLBPAAAARY"], referer: https://www.bing.com/
[Mon Dec 01 04:04:57.043134 2025] [:error] [pid 20218:tid 20238] [client 4.218.17.104:45274] [client 4.218.17.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSyjab1Fj2Rp4FeQsharMwAAAA8"], referer: https://www.google.fr/
[Mon Dec 01 04:04:57.850568 2025] [proxy_fcgi:error] [pid 29499:tid 29521] [client 4.218.17.104:45308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:04:58.008038 2025] [proxy_fcgi:error] [pid 29499:tid 29528] [client 4.218.17.104:45308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 04:04:58.370131 2025] [proxy_fcgi:error] [pid 29499:tid 29530] [client 4.218.17.104:45308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:04:58.526206 2025] [proxy_fcgi:error] [pid 29499:tid 29514] [client 4.218.17.104:45308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:04:58.680418 2025] [proxy_fcgi:error] [pid 29499:tid 29524] [client 4.218.17.104:45308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 01 06:02:16.878938 2025] [:error] [pid 38740:tid 38785] [client 159.203.160.93:47742] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSy-6HhJ8D5KZ4hRdTU8OwAAAEw"]
[Mon Dec 01 06:02:30.010884 2025] [:error] [pid 38739:tid 38761] [client 159.203.160.93:57086] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSy-9hV3AnmLberc_XDhmgAAABA"]
[Mon Dec 01 06:38:10.474126 2025] [autoindex:error] [pid 38739:tid 38768] [client 51.68.107.161:14281] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 08:26:53.613267 2025] [:error] [pid 57481:tid 57498] [client 105.190.196.203:24123] [client 105.190.196.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.190.196.203, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzgzS7BxGrXu7K9llL0LgAAAMw"]
[Mon Dec 01 08:26:53.629054 2025] [proxy_fcgi:error] [pid 57481:tid 57498] [client 105.190.196.203:24123] AH01071: Got error 'Primary script unknown'
[Mon Dec 01 09:12:41.172520 2025] [:error] [pid 50236:tid 50251] [client 159.203.160.93:35572] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSzridFh6opCMA7G1YTM_AAAAU0"]
[Mon Dec 01 09:12:49.801327 2025] [:error] [pid 50173:tid 50212] [client 159.203.160.93:41016] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aSzrkYv3zN9A0dVx6aRToQAAAQg"]
[Mon Dec 01 09:38:03.915161 2025] [autoindex:error] [pid 50236:tid 50252] [client 44.247.12.19:56784] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 09:38:08.400672 2025] [autoindex:error] [pid 50173:tid 50223] [client 44.247.12.19:60456] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 12:05:13.788280 2025] [:error] [pid 50236:tid 50255] [client 113.219.218.197:60767] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS0T-dFh6opCMA7G1YQS8wAAAVE"]
[Mon Dec 01 12:34:01.362231 2025] [autoindex:error] [pid 28260:tid 28278] [client 66.249.64.15:46312] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 12:34:03.510345 2025] [autoindex:error] [pid 28260:tid 28284] [client 66.249.64.1:53786] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 14:47:48.298013 2025] [:error] [pid 7182:tid 7185] [client 159.203.160.93:51232] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aS06FH9TcBzcTIZoEPiDNwAAAMA"]
[Mon Dec 01 14:47:54.979096 2025] [:error] [pid 50173:tid 50215] [client 159.203.160.93:47400] [client 159.203.160.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aS06Gov3zN9A0dVx6aTLDQAAAQs"]
[Mon Dec 01 15:32:49.118567 2025] [proxy_fcgi:error] [pid 53361:tid 53432] [client 5.189.187.80:50505] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Dec 01 15:32:53.362350 2025] [proxy_fcgi:error] [pid 53359:tid 53374] [client 5.189.187.80:50988] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Dec 01 15:32:57.001044 2025] [proxy_fcgi:error] [pid 53360:tid 53397] [client 5.189.187.80:56513] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Dec 01 18:11:13.711483 2025] [:error] [pid 53360:tid 53408] [client 43.159.140.236:39702] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS1pwRALjvdOeXyvOe0BugAAAJE"]
[Mon Dec 01 21:12:24.645283 2025] [autoindex:error] [pid 42358:tid 42367] [client 49.13.126.1:50640] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 22:11:57.934221 2025] [autoindex:error] [pid 11436:tid 11515] [client 18.246.166.238:37222] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 22:12:04.221576 2025] [autoindex:error] [pid 11524:tid 11530] [client 18.246.166.238:37228] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 01:12:16.835415 2025] [:error] [pid 18735:tid 18777] [client 60.188.57.0:42644] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3McCObBdpXdl5ZEt_ijgAAAQ0"]
[Tue Dec 02 02:59:13.825996 2025] [autoindex:error] [pid 56397:tid 56411] [client 52.87.214.88:51672] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 02:59:15.052744 2025] [:error] [pid 25307:tid 25310] [client 158.46.160.238:47689] [client 158.46.160.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lg3J-V-CI00LOhTPe9QAAAUE"], referer: https://www.google.com/
[Tue Dec 02 02:59:16.063988 2025] [autoindex:error] [pid 18735:tid 18768] [client 85.255.181.32:4545] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:17.218830 2025] [autoindex:error] [pid 18826:tid 18847] [client 161.129.162.48:33743] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:18.535065 2025] [autoindex:error] [pid 25307:tid 25309] [client 45.142.99.14:35871] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:19.262413 2025] [autoindex:error] [pid 18734:tid 18754] [client 180.149.27.5:34281] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:19.868118 2025] [:error] [pid 18797:tid 18819] [client 111.92.184.19:56517] [client 111.92.184.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lh3wDQfILaZGBrIxzKgAAAZQ"], referer: https://www.google.com/
[Tue Dec 02 02:59:20.558905 2025] [autoindex:error] [pid 25307:tid 25329] [client 119.12.179.88:40441] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:21.191781 2025] [autoindex:error] [pid 25307:tid 25321] [client 162.43.236.96:45911] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:21.742910 2025] [:error] [pid 18826:tid 18852] [client 161.77.215.111:27807] [client 161.77.215.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lic44B8ytyS-T2IjH2wAAAJg"], referer: https://www.google.com/
[Tue Dec 02 02:59:22.497031 2025] [autoindex:error] [pid 18797:tid 18801] [client 116.212.189.32:39377] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:24.509880 2025] [autoindex:error] [pid 56397:tid 56411] [client 161.123.105.219:44459] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:26.042787 2025] [autoindex:error] [pid 25307:tid 25323] [client 203.109.53.225:44469] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:26.591393 2025] [autoindex:error] [pid 18734:tid 18755] [client 152.39.251.147:40535] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:27.287348 2025] [autoindex:error] [pid 25307:tid 25328] [client 45.142.95.101:43535] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:28.221427 2025] [:error] [pid 25307:tid 25332] [client 178.92.113.141:47457] [client 178.92.113.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lkHJ-V-CI00LOhTPfCQAAAVc"], referer: https://www.google.com/
[Tue Dec 02 02:59:29.213457 2025] [:error] [pid 18734:tid 18754] [client 84.55.2.15:28093] [client 84.55.2.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lkRDodp5NNlEyq_ASjwAAAFE"], referer: https://www.google.com/
[Tue Dec 02 02:59:29.834362 2025] [autoindex:error] [pid 18734:tid 18740] [client 91.245.235.116:41443] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:30.517561 2025] [:error] [pid 25307:tid 25319] [client 91.223.133.78:51061] [client 91.223.133.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lknJ-V-CI00LOhTPfCgAAAUo"], referer: https://www.google.com/
[Tue Dec 02 02:59:30.981151 2025] [autoindex:error] [pid 18826:tid 18849] [client 206.204.32.94:43359] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:31.487457 2025] [autoindex:error] [pid 25307:tid 25318] [client 206.204.25.20:41045] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:33.427122 2025] [autoindex:error] [pid 18735:tid 18776] [client 80.243.16.81:46001] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 02 02:59:34.096810 2025] [:error] [pid 18735:tid 18786] [client 175.29.130.14:47847] [client 175.29.130.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS3lliObBdpXdl5ZEt8OlQAAARY"], referer: https://www.google.com/
[Tue Dec 02 03:42:17.784222 2025] [:error] [pid 23714:tid 23794] [client 34.68.204.172:33176] [client 34.68.204.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aS3vmVl1cFSe7cg_UUSJ6wAAAI4"]
[Tue Dec 02 04:46:25.301204 2025] [:error] [pid 3648:tid 3690] [client 213.21.239.4:51218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aS3-oeQEp5icp6XOJr3cvQAAAEY"]
[Tue Dec 02 04:46:25.305488 2025] [:error] [pid 5232:tid 5250] [client 213.21.239.4:51142] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS3-oQApmO-auDy1ob7flQAAARA"]
[Tue Dec 02 04:46:25.307783 2025] [:error] [pid 5232:tid 5243] [client 213.21.239.4:51118] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS3-oQApmO-auDy1ob7flgAAAQk"]
[Tue Dec 02 04:46:25.309005 2025] [:error] [pid 3649:tid 3711] [client 213.21.239.4:51152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS3-obwjL4uqC6YFjxF7hwAAAIA"]
[Tue Dec 02 04:46:25.312011 2025] [:error] [pid 5232:tid 5241] [client 213.21.239.4:51130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS3-oQApmO-auDy1ob7flwAAAQc"]
[Tue Dec 02 04:46:25.314923 2025] [:error] [pid 3647:tid 3669] [client 213.21.239.4:51128] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cientifica.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cientifica.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS3-oVJaqGDFgh_0XI-0wwAAABA"]
[Tue Dec 02 04:46:25.317218 2025] [:error] [pid 5272:tid 5288] [client 213.21.239.4:51164] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aS3-oewbFoRzPGfZYVRcjgAAAU0"]
[Tue Dec 02 04:46:25.328285 2025] [:error] [pid 5232:tid 5258] [client 213.21.239.4:51202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS3-oQApmO-auDy1ob7fmAAAARg"]
[Tue Dec 02 04:46:27.562524 2025] [:error] [pid 5273:tid 5313] [client 213.21.239.4:51080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aS3-oyMmXO5H1kNwHHVILAAAAYs"]
[Tue Dec 02 04:46:27.562696 2025] [:error] [pid 3648:tid 3691] [client 213.21.239.4:51144] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aS3-o-QEp5icp6XOJr3cwgAAAEc"]
[Tue Dec 02 04:46:31.594657 2025] [:error] [pid 3760:tid 3764] [client 213.21.239.4:51106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aS3-p1jLYEjdWVcKgVVvaQAAAMI"]
[Tue Dec 02 04:46:31.606384 2025] [:error] [pid 5272:tid 5290] [client 213.21.239.4:51234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS3-p-wbFoRzPGfZYVRckwAAAU8"]
[Tue Dec 02 04:46:31.610043 2025] [:error] [pid 5272:tid 5284] [client 213.21.239.4:51092] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aS3-p-wbFoRzPGfZYVRclAAAAUk"]
[Tue Dec 02 04:46:31.618214 2025] [:error] [pid 5232:tid 5247] [client 213.21.239.4:51200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS3-pwApmO-auDy1ob7fmwAAAQ0"]
[Tue Dec 02 05:07:54.688290 2025] [autoindex:error] [pid 3647:tid 3671] [client 4.189.129.162:20421] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Dec 02 05:07:54.856290 2025] [proxy_fcgi:error] [pid 3647:tid 3659] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 05:07:55.651685 2025] [proxy_fcgi:error] [pid 3647:tid 3668] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:07:56.129083 2025] [proxy_fcgi:error] [pid 3647:tid 3653] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:07:56.280213 2025] [proxy_fcgi:error] [pid 3647:tid 3673] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:07:56.530761 2025] [proxy_fcgi:error] [pid 3647:tid 3676] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:07:56.682871 2025] [proxy_fcgi:error] [pid 3647:tid 3667] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:07:57.037383 2025] [proxy_fcgi:error] [pid 3647:tid 3660] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:07:57.535280 2025] [proxy_fcgi:error] [pid 3647:tid 3661] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:07:57.863171 2025] [proxy_fcgi:error] [pid 3647:tid 3654] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:07:58.268097 2025] [proxy_fcgi:error] [pid 3647:tid 3677] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 05:07:58.657753 2025] [proxy_fcgi:error] [pid 3647:tid 3666] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:07:58.822135 2025] [proxy_fcgi:error] [pid 3647:tid 3663] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:07:59.169862 2025] [proxy_fcgi:error] [pid 3647:tid 3657] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:07:59.948512 2025] [proxy_fcgi:error] [pid 3647:tid 3669] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:00.344106 2025] [proxy_fcgi:error] [pid 3647:tid 3659] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 05:08:00.573115 2025] [proxy_fcgi:error] [pid 3647:tid 3668] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 05:08:00.773402 2025] [proxy_fcgi:error] [pid 3647:tid 3653] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:00.924763 2025] [proxy_fcgi:error] [pid 3647:tid 3673] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 05:08:01.120749 2025] [proxy_fcgi:error] [pid 3647:tid 3676] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:01.282627 2025] [proxy_fcgi:error] [pid 3647:tid 3667] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:01.502098 2025] [proxy_fcgi:error] [pid 3647:tid 3660] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 05:08:02.356417 2025] [proxy_fcgi:error] [pid 3647:tid 3661] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 05:08:02.508739 2025] [proxy_fcgi:error] [pid 3647:tid 3675] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:08:02.688351 2025] [proxy_fcgi:error] [pid 3647:tid 3664] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 05:08:02.887456 2025] [proxy_fcgi:error] [pid 3647:tid 3654] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 05:08:03.520380 2025] [proxy_fcgi:error] [pid 3647:tid 3655] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:03.671926 2025] [proxy_fcgi:error] [pid 3647:tid 3677] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:08:04.220638 2025] [proxy_fcgi:error] [pid 3647:tid 3657] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:04.382568 2025] [proxy_fcgi:error] [pid 3647:tid 3672] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:05.213751 2025] [proxy_fcgi:error] [pid 3647:tid 3662] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:06.201336 2025] [proxy_fcgi:error] [pid 3647:tid 3669] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:06.584611 2025] [proxy_fcgi:error] [pid 3647:tid 3659] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 05:08:06.746815 2025] [proxy_fcgi:error] [pid 3647:tid 3674] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 05:08:06.901148 2025] [proxy_fcgi:error] [pid 3647:tid 3668] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:08:07.090894 2025] [proxy_fcgi:error] [pid 3647:tid 3653] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:08:07.406118 2025] [proxy_fcgi:error] [pid 3647:tid 3676] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:08:07.557642 2025] [proxy_fcgi:error] [pid 3647:tid 3667] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:07.710939 2025] [proxy_fcgi:error] [pid 3647:tid 3665] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:08.327674 2025] [proxy_fcgi:error] [pid 3647:tid 3675] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 05:08:08.481666 2025] [proxy_fcgi:error] [pid 3647:tid 3654] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 05:08:08.635761 2025] [proxy_fcgi:error] [pid 3647:tid 3655] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:08.922714 2025] [proxy_fcgi:error] [pid 3647:tid 3677] [client 4.189.129.162:20421] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:09.070530 2025] [:error] [pid 3647:tid 3666] [client 4.189.129.162:20421] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aS4DuVJaqGDFgh_0XI-5PwAAAA0"], referer: https://www.yahoo.com/
[Tue Dec 02 05:08:10.279658 2025] [proxy_fcgi:error] [pid 5272:tid 5299] [client 4.189.129.162:20419] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:08:15.258236 2025] [proxy_fcgi:error] [pid 5272:tid 5292] [client 4.189.129.162:20419] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:08:15.392521 2025] [proxy_fcgi:error] [pid 5272:tid 5284] [client 4.189.129.162:20419] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:08:15.999231 2025] [proxy_fcgi:error] [pid 5272:tid 5275] [client 4.189.129.162:20419] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 05:08:21.376842 2025] [proxy_fcgi:error] [pid 5272:tid 5294] [client 4.189.129.162:20419] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:08:21.769484 2025] [:error] [pid 5272:tid 5284] [client 4.189.129.162:20419] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aS4DxewbFoRzPGfZYVRkkQAAAUk"], referer: https://www.google.com/
[Tue Dec 02 05:08:26.562483 2025] [:error] [pid 5272:tid 5283] [client 4.189.129.162:20428] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aS4DyuwbFoRzPGfZYVRklAAAAUg"], referer: https://www.google.co.uk/
[Tue Dec 02 05:08:29.364881 2025] [:error] [pid 3760:tid 3765] [client 4.189.129.162:20362] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aS4DzVjLYEjdWVcKgVV0uwAAAMM"], referer: https://www.google.fr/
[Tue Dec 02 05:08:32.830299 2025] [:error] [pid 3760:tid 3775] [client 4.189.129.162:20440] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aS4D0FjLYEjdWVcKgVV00wAAAM0"], referer: https://www.google.de/
[Tue Dec 02 05:08:37.452216 2025] [:error] [pid 5273:tid 5312] [client 4.189.129.162:20470] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aS4D1SMmXO5H1kNwHHVNjwAAAYo"], referer: https://www.google.fr/
[Tue Dec 02 05:08:40.548247 2025] [:error] [pid 5273:tid 5314] [client 4.189.129.162:20465] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aS4D2CMmXO5H1kNwHHVNoAAAAYw"], referer: https://www.google.com/
[Tue Dec 02 05:08:44.862168 2025] [:error] [pid 3647:tid 3675] [client 4.189.129.162:20473] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aS4D3FJaqGDFgh_0XI-5WAAAABY"], referer: https://www.google.fr/
[Tue Dec 02 05:08:46.698114 2025] [:error] [pid 3648:tid 3707] [client 4.189.129.162:20429] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aS4D3uQEp5icp6XOJr3hEQAAAFc"], referer: https://duckduckgo.com/
[Tue Dec 02 05:08:49.986863 2025] [:error] [pid 5272:tid 5298] [client 4.189.129.162:20463] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS4D4ewbFoRzPGfZYVRktwAAAVc"], referer: https://www.bing.com/
[Tue Dec 02 05:08:53.790694 2025] [:error] [pid 5273:tid 5318] [client 4.189.129.162:20478] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aS4D5SMmXO5H1kNwHHVN0gAAAZA"], referer: https://www.google.com/
[Tue Dec 02 05:08:57.760612 2025] [:error] [pid 5272:tid 5282] [client 4.189.129.162:20455] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aS4D6ewbFoRzPGfZYVRkwgAAAUc"], referer: https://www.google.de/
[Tue Dec 02 05:08:59.761773 2025] [:error] [pid 5272:tid 5277] [client 4.189.129.162:20460] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aS4D6-wbFoRzPGfZYVRkyQAAAUI"], referer: https://www.google.com/
[Tue Dec 02 05:09:01.477596 2025] [:error] [pid 3649:tid 3723] [client 4.189.129.162:20380] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aS4D7bwjL4uqC6YFjxGAhwAAAIw"], referer: https://www.google.com/
[Tue Dec 02 05:09:06.886091 2025] [:error] [pid 3649:tid 3724] [client 4.189.129.162:20467] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aS4D8rwjL4uqC6YFjxGAmAAAAI0"], referer: https://www.google.com/
[Tue Dec 02 05:09:07.389918 2025] [:error] [pid 5272:tid 5291] [client 4.189.129.162:20364] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aS4D8-wbFoRzPGfZYVRk1AAAAVA"], referer: https://www.google.co.uk/
[Tue Dec 02 05:09:08.113258 2025] [:error] [pid 3760:tid 3783] [client 4.189.129.162:20354] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aS4D9FjLYEjdWVcKgVV1BAAAANU"], referer: https://duckduckgo.com/
[Tue Dec 02 05:09:09.430083 2025] [:error] [pid 5273:tid 5318] [client 4.189.129.162:20450] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aS4D9SMmXO5H1kNwHHVN9QAAAZA"], referer: https://www.google.com/
[Tue Dec 02 05:09:10.582851 2025] [:error] [pid 3647:tid 3677] [client 4.189.129.162:20355] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aS4D9lJaqGDFgh_0XI-5ZQAAABg"], referer: https://www.google.de/
[Tue Dec 02 05:09:13.089386 2025] [:error] [pid 3760:tid 3786] [client 4.189.129.162:20469] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aS4D-VjLYEjdWVcKgVV1DAAAANg"], referer: https://www.google.com/
[Tue Dec 02 05:09:17.263378 2025] [:error] [pid 5273:tid 5325] [client 4.189.129.162:20434] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aS4D_SMmXO5H1kNwHHVOCgAAAZc"], referer: https://www.google.com/
[Tue Dec 02 05:09:19.312643 2025] [:error] [pid 5272:tid 5280] [client 4.189.129.162:20372] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aS4D_-wbFoRzPGfZYVRk5wAAAUU"], referer: https://duckduckgo.com/
[Tue Dec 02 05:09:21.239352 2025] [:error] [pid 3647:tid 3660] [client 4.189.129.162:20381] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aS4EAVJaqGDFgh_0XI-5bQAAAAc"], referer: https://www.google.com/
[Tue Dec 02 05:09:22.006238 2025] [:error] [pid 5273:tid 5314] [client 4.189.129.162:20441] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS4EAiMmXO5H1kNwHHVOJQAAAYw"], referer: https://www.google.com/
[Tue Dec 02 05:09:22.768521 2025] [:error] [pid 3760:tid 3782] [client 4.189.129.162:20435] [client 4.189.129.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS4EAljLYEjdWVcKgVV1FgAAANQ"], referer: https://www.google.co.uk/
[Tue Dec 02 05:09:23.106450 2025] [proxy_fcgi:error] [pid 5273:tid 5325] [client 4.189.129.162:20442] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 05:09:23.234055 2025] [proxy_fcgi:error] [pid 5273:tid 5309] [client 4.189.129.162:20442] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 05:09:23.353668 2025] [proxy_fcgi:error] [pid 5273:tid 5305] [client 4.189.129.162:20442] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 05:09:23.483162 2025] [proxy_fcgi:error] [pid 5273:tid 5315] [client 4.189.129.162:20442] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 05:09:23.602188 2025] [proxy_fcgi:error] [pid 5273:tid 5302] [client 4.189.129.162:20442] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:22:53.523322 2025] [autoindex:error] [pid 5273:tid 5311] [client 5.133.192.131:58071] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 07:54:38.155651 2025] [:error] [pid 5232:tid 5237] [client 49.7.227.204:57604] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aS4qvgApmO-auDy1ob4kDAAAAQM"]
[Tue Dec 02 09:06:46.235798 2025] [autoindex:error] [pid 5273:tid 5318] [client 44.242.163.161:49934] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 09:06:50.491160 2025] [autoindex:error] [pid 3648:tid 3691] [client 44.242.163.161:48062] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 09:41:01.069093 2025] [:error] [pid 5232:tid 5238] [client 170.64.158.6:36608] [client 170.64.158.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aS5DrQApmO-auDy1ob5IyQAAAQQ"]
[Tue Dec 02 09:41:05.980678 2025] [:error] [pid 5232:tid 5244] [client 170.64.158.6:47524] [client 170.64.158.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aS5DsQApmO-auDy1ob5I6gAAAQo"]
[Tue Dec 02 10:28:40.372785 2025] [autoindex:error] [pid 5272:tid 5275] [client 181.214.164.153:64022] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 10:28:41.118873 2025] [:error] [pid 5272:tid 5296] [client 181.214.164.153:64022] [client 181.214.164.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.214.164.153, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aS5O2ewbFoRzPGfZYVTioAAAAVU"]
[Tue Dec 02 10:28:41.129830 2025] [proxy_fcgi:error] [pid 5272:tid 5296] [client 181.214.164.153:64022] AH01071: Got error 'Primary script unknown'
[Tue Dec 02 10:28:42.157920 2025] [:error] [pid 5272:tid 5290] [client 181.214.164.153:64022] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aS5O2uwbFoRzPGfZYVTisgAAAU8"]
[Tue Dec 02 10:28:42.699231 2025] [:error] [pid 3647:tid 3673] [client 181.214.164.153:1788] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aS5O2lJaqGDFgh_0XI8JwAAAABQ"]
[Tue Dec 02 10:28:43.204972 2025] [:error] [pid 3647:tid 3664] [client 181.214.164.153:63646] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aS5O21JaqGDFgh_0XI8JwQAAAAs"]
[Tue Dec 02 10:28:43.703755 2025] [:error] [pid 5272:tid 5279] [client 181.214.164.153:13582] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aS5O2-wbFoRzPGfZYVTitwAAAUQ"]
[Tue Dec 02 10:28:44.212252 2025] [:error] [pid 5272:tid 5291] [client 181.214.164.153:8870] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aS5O3OwbFoRzPGfZYVTiuQAAAVA"]
[Tue Dec 02 10:28:44.743670 2025] [:error] [pid 3760:tid 3772] [client 181.214.164.153:45428] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aS5O3FjLYEjdWVcKgVXppAAAAMo"]
[Tue Dec 02 10:28:45.256885 2025] [:error] [pid 3647:tid 3655] [client 181.214.164.153:26393] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aS5O3VJaqGDFgh_0XI8JxgAAAAI"]
[Tue Dec 02 10:28:45.752462 2025] [:error] [pid 5272:tid 5289] [client 181.214.164.153:58867] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aS5O3ewbFoRzPGfZYVTiugAAAU4"]
[Tue Dec 02 10:28:46.497764 2025] [:error] [pid 3760:tid 3769] [client 181.214.164.153:60458] [client 181.214.164.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aS5O3ljLYEjdWVcKgVXppgAAAMc"]
[Tue Dec 02 14:06:37.863060 2025] [autoindex:error] [pid 3649:tid 3725] [client 203.129.150.239:49998] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 14:33:42.744133 2025] [autoindex:error] [pid 5273:tid 5305] [client 100.30.193.180:54710] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 14:33:43.644618 2025] [autoindex:error] [pid 5232:tid 5256] [client 152.39.177.52:44641] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 16:40:03.063494 2025] [autoindex:error] [pid 3648:tid 3704] [client 100.30.193.180:42466] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 16:40:04.561369 2025] [autoindex:error] [pid 5232:tid 5257] [client 193.31.73.23:42911] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 16:55:27.642004 2025] [autoindex:error] [pid 3648:tid 3703] [client 62.141.44.236:53022] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 17:39:23.741067 2025] [autoindex:error] [pid 3760:tid 3786] [client 138.68.109.43:42378] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 17:39:25.225261 2025] [autoindex:error] [pid 3760:tid 3767] [client 138.68.109.43:43134] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 17:52:59.204730 2025] [autoindex:error] [pid 3648:tid 3702] [client 47.128.16.156:24850] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 19:00:06.739465 2025] [autoindex:error] [pid 3760:tid 3778] [client 100.30.193.180:56108] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 19:00:10.053887 2025] [autoindex:error] [pid 3649:tid 3720] [client 178.171.65.227:36835] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 20:07:02.757985 2025] [autoindex:error] [pid 5273:tid 5322] [client 52.224.232.207:12745] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 20:07:04.117869 2025] [autoindex:error] [pid 3648:tid 3706] [client 52.224.232.207:12737] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 20:37:58.761250 2025] [autoindex:error] [pid 48650:tid 48658] [client 74.7.243.216:44922] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 21:06:30.128899 2025] [autoindex:error] [pid 3649:tid 3720] [client 100.30.193.180:40868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 21:06:31.865222 2025] [autoindex:error] [pid 3649:tid 3722] [client 188.212.140.216:46043] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 21:14:15.381104 2025] [autoindex:error] [pid 5232:tid 5243] [client 185.39.19.34:52238] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Dec 02 21:14:15.952927 2025] [autoindex:error] [pid 48650:tid 48677] [client 185.39.19.34:52449] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Dec 02 21:14:16.526085 2025] [autoindex:error] [pid 5232:tid 5236] [client 185.39.19.34:52952] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Dec 02 21:14:17.090843 2025] [autoindex:error] [pid 5273:tid 5319] [client 185.39.19.34:53115] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Tue Dec 02 22:04:40.594611 2025] [:error] [pid 48650:tid 48674] [client 35.179.96.11:53056] [client 35.179.96.11] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cientifica.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aS7x-IQuWSn3xrJsXbnNvwAAAdM"]
[Wed Dec 03 00:49:14.844299 2025] [:error] [pid 47158:tid 47165] [client 94.250.187.20:59461] [client 94.250.187.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.250.187.20, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8Yil3-jeg4VwJRw7H-QwAAAMU"]
[Wed Dec 03 00:49:14.856571 2025] [proxy_fcgi:error] [pid 47158:tid 47165] [client 94.250.187.20:59461] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 01:03:31.375870 2025] [autoindex:error] [pid 47068:tid 47116] [client 51.68.186.52:51330] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 01:13:33.930739 2025] [autoindex:error] [pid 25475:tid 25527] [client 181.214.206.34:36757] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 03 01:13:34.493454 2025] [autoindex:error] [pid 47067:tid 47078] [client 181.214.206.34:36802] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 03 01:13:35.056563 2025] [autoindex:error] [pid 47068:tid 47118] [client 181.214.206.34:36856] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 03 01:13:35.620015 2025] [autoindex:error] [pid 47069:tid 47136] [client 181.214.206.34:36902] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 03 03:00:47.840343 2025] [:error] [pid 47158:tid 47166] [client 172.192.18.188:24147] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aS83X13-jeg4VwJRw7FQxQAAAMY"]
[Wed Dec 03 03:00:48.067508 2025] [:error] [pid 47158:tid 47182] [client 172.192.18.188:23687] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aS83YF3-jeg4VwJRw7FQxgAAANY"]
[Wed Dec 03 03:00:48.341828 2025] [:error] [pid 25475:tid 25525] [client 172.192.18.188:24181] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aS83YB7VdEeEe8GnPSV2QgAAAQ0"]
[Wed Dec 03 03:00:48.567973 2025] [:error] [pid 47067:tid 47079] [client 172.192.18.188:24175] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aS83YAcYJkWYuBnpVap2BAAAAAc"]
[Wed Dec 03 03:00:48.861440 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:23697] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aS83YB7VdEeEe8GnPSV2RAAAAQA"]
[Wed Dec 03 03:00:49.088143 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:24133] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aS83YR7VdEeEe8GnPSV2RgAAARY"]
[Wed Dec 03 03:00:49.360992 2025] [:error] [pid 47158:tid 47172] [client 172.192.18.188:24526] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aS83YV3-jeg4VwJRw7FQywAAAMw"]
[Wed Dec 03 03:00:49.589780 2025] [:error] [pid 25475:tid 25522] [client 172.192.18.188:24191] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aS83YR7VdEeEe8GnPSV2SAAAAQo"]
[Wed Dec 03 03:00:49.842819 2025] [:error] [pid 25475:tid 25533] [client 172.192.18.188:24162] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/"] [unique_id "aS83YR7VdEeEe8GnPSV2SgAAARU"]
[Wed Dec 03 03:00:50.070847 2025] [:error] [pid 25475:tid 25514] [client 172.192.18.188:24149] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/"] [unique_id "aS83Yh7VdEeEe8GnPSV2SwAAAQI"]
[Wed Dec 03 03:00:50.303596 2025] [:error] [pid 25475:tid 25519] [client 172.192.18.188:23712] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/"] [unique_id "aS83Yh7VdEeEe8GnPSV2TAAAAQc"]
[Wed Dec 03 03:00:50.534952 2025] [:error] [pid 47069:tid 47136] [client 172.192.18.188:24158] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/"] [unique_id "aS83YnliPX01jdRNUv24IQAAAIk"]
[Wed Dec 03 03:00:50.765403 2025] [:error] [pid 25475:tid 25524] [client 172.192.18.188:24160] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aS83Yh7VdEeEe8GnPSV2TQAAAQw"]
[Wed Dec 03 03:00:51.100844 2025] [:error] [pid 25475:tid 25515] [client 172.192.18.188:23692] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aS83Yx7VdEeEe8GnPSV2UAAAAQM"]
[Wed Dec 03 03:00:51.344303 2025] [:error] [pid 25475:tid 25526] [client 172.192.18.188:23726] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aS83Yx7VdEeEe8GnPSV2UQAAAQ4"]
[Wed Dec 03 03:00:51.621341 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:23693] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aS83Yx7VdEeEe8GnPSV2UgAAAQY"]
[Wed Dec 03 03:00:51.878021 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:24131] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/image/"] [unique_id "aS83Yx7VdEeEe8GnPSV2VgAAARY"]
[Wed Dec 03 03:00:52.116577 2025] [:error] [pid 25475:tid 25536] [client 172.192.18.188:23690] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/image/"] [unique_id "aS83ZB7VdEeEe8GnPSV2WgAAARg"]
[Wed Dec 03 03:00:52.351234 2025] [:error] [pid 25475:tid 25523] [client 172.192.18.188:23700] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/image/"] [unique_id "aS83ZB7VdEeEe8GnPSV2XQAAAQs"]
[Wed Dec 03 03:00:52.580102 2025] [:error] [pid 47067:tid 47074] [client 172.192.18.188:24154] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload/image/"] [unique_id "aS83ZAcYJkWYuBnpVap2CgAAAAI"]
[Wed Dec 03 03:00:52.807465 2025] [:error] [pid 25475:tid 25515] [client 172.192.18.188:24182] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/"] [unique_id "aS83ZB7VdEeEe8GnPSV2XwAAAQM"]
[Wed Dec 03 03:00:53.034743 2025] [:error] [pid 47067:tid 47076] [client 172.192.18.188:24166] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/"] [unique_id "aS83ZQcYJkWYuBnpVap2DAAAAAQ"]
[Wed Dec 03 03:00:53.265959 2025] [:error] [pid 47158:tid 47177] [client 172.192.18.188:23743] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/"] [unique_id "aS83ZV3-jeg4VwJRw7FQzQAAANE"]
[Wed Dec 03 03:00:53.496346 2025] [:error] [pid 47069:tid 47146] [client 172.192.18.188:23710] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/"] [unique_id "aS83ZXliPX01jdRNUv24JQAAAJM"]
[Wed Dec 03 03:00:53.724261 2025] [:error] [pid 47068:tid 47120] [client 172.192.18.188:23680] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/include/"] [unique_id "aS83ZSDFatpzeF4tcYW5-AAAAFQ"]
[Wed Dec 03 03:00:53.949629 2025] [:error] [pid 25475:tid 25516] [client 172.192.18.188:24143] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/include/"] [unique_id "aS83ZR7VdEeEe8GnPSV2YQAAAQQ"]
[Wed Dec 03 03:00:54.175019 2025] [:error] [pid 47069:tid 47141] [client 172.192.18.188:24188] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/include/"] [unique_id "aS83ZnliPX01jdRNUv24KQAAAI4"]
[Wed Dec 03 03:00:54.400850 2025] [:error] [pid 47069:tid 47138] [client 172.192.18.188:24132] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/include/"] [unique_id "aS83ZnliPX01jdRNUv24KwAAAIs"]
[Wed Dec 03 03:00:54.628439 2025] [:error] [pid 47158:tid 47170] [client 172.192.18.188:24130] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/"] [unique_id "aS83Zl3-jeg4VwJRw7FQ0AAAAMo"]
[Wed Dec 03 03:00:54.854483 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:24189] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/"] [unique_id "aS83Zh7VdEeEe8GnPSV2ZAAAAQA"]
[Wed Dec 03 03:00:55.081305 2025] [:error] [pid 25475:tid 25515] [client 172.192.18.188:24136] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/"] [unique_id "aS83Zx7VdEeEe8GnPSV2ZwAAAQM"]
[Wed Dec 03 03:00:55.323901 2025] [:error] [pid 25475:tid 25533] [client 172.192.18.188:23686] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/images/"] [unique_id "aS83Zx7VdEeEe8GnPSV2aQAAARU"]
[Wed Dec 03 03:00:55.550682 2025] [:error] [pid 25475:tid 25525] [client 172.192.18.188:24153] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/"] [unique_id "aS83Zx7VdEeEe8GnPSV2agAAAQ0"]
[Wed Dec 03 03:00:55.777751 2025] [:error] [pid 47069:tid 47129] [client 172.192.18.188:24152] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/"] [unique_id "aS83Z3liPX01jdRNUv24MgAAAII"]
[Wed Dec 03 03:00:56.003805 2025] [:error] [pid 47068:tid 47119] [client 172.192.18.188:24159] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/"] [unique_id "aS83aCDFatpzeF4tcYW5-gAAAFM"]
[Wed Dec 03 03:00:56.231610 2025] [:error] [pid 47068:tid 47101] [client 172.192.18.188:24170] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/"] [unique_id "aS83aCDFatpzeF4tcYW5-wAAAEE"]
[Wed Dec 03 03:00:56.458504 2025] [:error] [pid 47158:tid 47181] [client 172.192.18.188:23696] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83aF3-jeg4VwJRw7FQ1AAAANU"]
[Wed Dec 03 03:00:56.684170 2025] [:error] [pid 25475:tid 25530] [client 172.192.18.188:23704] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83aB7VdEeEe8GnPSV2cQAAARI"]
[Wed Dec 03 03:00:56.909984 2025] [:error] [pid 47158:tid 47172] [client 172.192.18.188:24140] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83aF3-jeg4VwJRw7FQ1gAAAMw"]
[Wed Dec 03 03:00:57.144692 2025] [:error] [pid 47068:tid 47108] [client 172.192.18.188:24167] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83aSDFatpzeF4tcYW5_AAAAEg"]
[Wed Dec 03 03:00:57.417542 2025] [:error] [pid 47068:tid 47104] [client 172.192.18.188:23691] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aS83aSDFatpzeF4tcYW5_QAAAEQ"]
[Wed Dec 03 03:00:57.652298 2025] [:error] [pid 47158:tid 47165] [client 172.192.18.188:24518] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aS83aV3-jeg4VwJRw7FQ2gAAAMU"]
[Wed Dec 03 03:00:57.925902 2025] [:error] [pid 47158:tid 47174] [client 172.192.18.188:24135] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aS83aV3-jeg4VwJRw7FQ3QAAAM4"]
[Wed Dec 03 03:00:58.152042 2025] [:error] [pid 47158:tid 47161] [client 172.192.18.188:23738] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aS83al3-jeg4VwJRw7FQ3wAAAME"]
[Wed Dec 03 03:00:58.382004 2025] [:error] [pid 47068:tid 47103] [client 172.192.18.188:23713] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aS83aiDFatpzeF4tcYW6AgAAAEM"]
[Wed Dec 03 03:00:58.610431 2025] [:error] [pid 47158:tid 47177] [client 172.192.18.188:23688] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aS83al3-jeg4VwJRw7FQ4AAAANE"]
[Wed Dec 03 03:00:58.884341 2025] [:error] [pid 47158:tid 47171] [client 172.192.18.188:24139] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aS83al3-jeg4VwJRw7FQ4gAAAMs"]
[Wed Dec 03 03:00:59.111602 2025] [:error] [pid 47158:tid 47180] [client 172.192.18.188:23685] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aS83a13-jeg4VwJRw7FQ4wAAANQ"]
[Wed Dec 03 03:00:59.337242 2025] [:error] [pid 47067:tid 47087] [client 172.192.18.188:24163] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/"] [unique_id "aS83awcYJkWYuBnpVap2EgAAAA8"]
[Wed Dec 03 03:00:59.571867 2025] [:error] [pid 47068:tid 47114] [client 172.192.18.188:24169] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/"] [unique_id "aS83ayDFatpzeF4tcYW6BQAAAE4"]
[Wed Dec 03 03:00:59.808186 2025] [:error] [pid 25475:tid 25521] [client 172.192.18.188:23682] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/"] [unique_id "aS83ax7VdEeEe8GnPSV2dAAAAQk"]
[Wed Dec 03 03:01:00.058993 2025] [:error] [pid 47069:tid 47135] [client 172.192.18.188:23702] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/"] [unique_id "aS83bHliPX01jdRNUv24NwAAAIg"]
[Wed Dec 03 03:01:00.289928 2025] [:error] [pid 25475:tid 25515] [client 172.192.18.188:24177] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-knownold/"] [unique_id "aS83bB7VdEeEe8GnPSV2dwAAAQM"]
[Wed Dec 03 03:01:00.520967 2025] [:error] [pid 47068:tid 47101] [client 172.192.18.188:24178] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-knownold/"] [unique_id "aS83bCDFatpzeF4tcYW6CAAAAEE"]
[Wed Dec 03 03:01:00.749492 2025] [:error] [pid 47158:tid 47170] [client 172.192.18.188:24171] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-knownold/"] [unique_id "aS83bF3-jeg4VwJRw7FQ5wAAAMo"]
[Wed Dec 03 03:01:00.976456 2025] [:error] [pid 47158:tid 47182] [client 172.192.18.188:23694] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-knownold/"] [unique_id "aS83bF3-jeg4VwJRw7FQ6AAAANY"]
[Wed Dec 03 03:01:01.205055 2025] [:error] [pid 47069:tid 47134] [client 172.192.18.188:23724] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aS83bXliPX01jdRNUv24OAAAAIc"]
[Wed Dec 03 03:01:01.436225 2025] [:error] [pid 47069:tid 47143] [client 172.192.18.188:24148] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aS83bXliPX01jdRNUv24OQAAAJA"]
[Wed Dec 03 03:01:01.717259 2025] [:error] [pid 47069:tid 47147] [client 172.192.18.188:24190] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aS83bXliPX01jdRNUv24PAAAAJQ"]
[Wed Dec 03 03:01:02.001608 2025] [:error] [pid 25475:tid 25524] [client 172.192.18.188:24146] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aS83bh7VdEeEe8GnPSV2eQAAAQw"]
[Wed Dec 03 03:01:02.237801 2025] [:error] [pid 47069:tid 47149] [client 172.192.18.188:23707] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aS83bnliPX01jdRNUv24PwAAAJY"]
[Wed Dec 03 03:01:02.510809 2025] [:error] [pid 47069:tid 47145] [client 172.192.18.188:23730] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aS83bnliPX01jdRNUv24QQAAAJI"]
[Wed Dec 03 03:01:02.795617 2025] [:error] [pid 25475:tid 25526] [client 172.192.18.188:24156] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aS83bh7VdEeEe8GnPSV2ewAAAQ4"]
[Wed Dec 03 03:01:03.028560 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24521] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aS83bx7VdEeEe8GnPSV2fQAAAQY"]
[Wed Dec 03 03:01:03.256543 2025] [:error] [pid 47067:tid 47094] [client 172.192.18.188:23736] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/"] [unique_id "aS83bwcYJkWYuBnpVap2FwAAABY"]
[Wed Dec 03 03:01:03.488323 2025] [:error] [pid 47158:tid 47170] [client 172.192.18.188:23711] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/"] [unique_id "aS83b13-jeg4VwJRw7FQ7wAAAMo"]
[Wed Dec 03 03:01:03.725253 2025] [:error] [pid 47068:tid 47105] [client 172.192.18.188:23723] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/"] [unique_id "aS83byDFatpzeF4tcYW6DAAAAEU"]
[Wed Dec 03 03:01:03.952128 2025] [:error] [pid 47067:tid 47073] [client 172.192.18.188:24141] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/uploads/"] [unique_id "aS83bwcYJkWYuBnpVap2GQAAAAE"]
[Wed Dec 03 03:01:04.195800 2025] [:error] [pid 47067:tid 47082] [client 172.192.18.188:24137] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aS83cAcYJkWYuBnpVap2GwAAAAo"]
[Wed Dec 03 03:01:04.423377 2025] [:error] [pid 47068:tid 47110] [client 172.192.18.188:23701] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aS83cCDFatpzeF4tcYW6DQAAAEo"]
[Wed Dec 03 03:01:04.650616 2025] [:error] [pid 47069:tid 47144] [client 172.192.18.188:23717] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aS83cHliPX01jdRNUv24RAAAAJE"]
[Wed Dec 03 03:01:04.877103 2025] [:error] [pid 47069:tid 47138] [client 172.192.18.188:24515] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aS83cHliPX01jdRNUv24RQAAAIs"]
[Wed Dec 03 03:01:05.110950 2025] [:error] [pid 47069:tid 47135] [client 172.192.18.188:24551] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-error.php"] [unique_id "aS83cXliPX01jdRNUv24RgAAAIg"]
[Wed Dec 03 03:01:05.429947 2025] [:error] [pid 47158:tid 47179] [client 172.192.18.188:24142] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-error.php"] [unique_id "aS83cV3-jeg4VwJRw7FQ8gAAANM"]
[Wed Dec 03 03:01:05.659238 2025] [:error] [pid 47067:tid 47085] [client 172.192.18.188:24187] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-error.php"] [unique_id "aS83cQcYJkWYuBnpVap2HwAAAA0"]
[Wed Dec 03 03:01:05.886570 2025] [:error] [pid 47069:tid 47130] [client 172.192.18.188:24180] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-error.php"] [unique_id "aS83cXliPX01jdRNUv24SAAAAIM"]
[Wed Dec 03 03:01:06.112520 2025] [:error] [pid 47068:tid 47121] [client 172.192.18.188:24535] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/"] [unique_id "aS83ciDFatpzeF4tcYW6EQAAAFU"]
[Wed Dec 03 03:01:06.402785 2025] [:error] [pid 25475:tid 25521] [client 172.192.18.188:24176] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/"] [unique_id "aS83ch7VdEeEe8GnPSV2fwAAAQk"]
[Wed Dec 03 03:01:06.645187 2025] [:error] [pid 25475:tid 25520] [client 172.192.18.188:24524] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/"] [unique_id "aS83ch7VdEeEe8GnPSV2gAAAAQg"]
[Wed Dec 03 03:01:06.873759 2025] [:error] [pid 47069:tid 47133] [client 172.192.18.188:24157] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/"] [unique_id "aS83cnliPX01jdRNUv24SgAAAIY"]
[Wed Dec 03 03:01:07.113748 2025] [:error] [pid 25475:tid 25531] [client 172.192.18.188:23698] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aS83cx7VdEeEe8GnPSV2gQAAARM"]
[Wed Dec 03 03:01:07.339820 2025] [:error] [pid 25475:tid 25515] [client 172.192.18.188:24544] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aS83cx7VdEeEe8GnPSV2ggAAAQM"]
[Wed Dec 03 03:01:07.580689 2025] [:error] [pid 47158:tid 47161] [client 172.192.18.188:23731] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aS83c13-jeg4VwJRw7FQ9wAAAME"]
[Wed Dec 03 03:01:07.823244 2025] [:error] [pid 25475:tid 25533] [client 172.192.18.188:23733] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aS83cx7VdEeEe8GnPSV2hQAAARU"]
[Wed Dec 03 03:01:08.051432 2025] [:error] [pid 25475:tid 25527] [client 172.192.18.188:23681] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aS83dB7VdEeEe8GnPSV2igAAAQ8"]
[Wed Dec 03 03:01:08.425619 2025] [:error] [pid 47067:tid 47072] [client 172.192.18.188:24165] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aS83dAcYJkWYuBnpVap2IQAAAAA"]
[Wed Dec 03 03:01:08.657155 2025] [:error] [pid 47158:tid 47171] [client 172.192.18.188:24183] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aS83dF3-jeg4VwJRw7FQ-AAAAMs"]
[Wed Dec 03 03:01:08.883460 2025] [:error] [pid 47067:tid 47081] [client 172.192.18.188:23708] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aS83dAcYJkWYuBnpVap2IgAAAAk"]
[Wed Dec 03 03:01:09.134659 2025] [:error] [pid 47158:tid 47163] [client 172.192.18.188:23719] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aS83dV3-jeg4VwJRw7FQ-QAAAMM"]
[Wed Dec 03 03:01:09.374142 2025] [:error] [pid 25475:tid 25536] [client 172.192.18.188:23706] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aS83dR7VdEeEe8GnPSV2jAAAARg"]
[Wed Dec 03 03:01:09.601134 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:23695] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aS83dR7VdEeEe8GnPSV2jQAAAQA"]
[Wed Dec 03 03:01:09.827622 2025] [:error] [pid 47158:tid 47164] [client 172.192.18.188:24523] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aS83dV3-jeg4VwJRw7FQ_gAAAMQ"]
[Wed Dec 03 03:01:10.053725 2025] [:error] [pid 47067:tid 47093] [client 172.192.18.188:23711] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aS83dgcYJkWYuBnpVap2IwAAABU"]
[Wed Dec 03 03:01:10.297412 2025] [:error] [pid 47158:tid 47181] [client 172.192.18.188:23689] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aS83dl3-jeg4VwJRw7FQ_wAAANU"]
[Wed Dec 03 03:01:10.522500 2025] [:error] [pid 47069:tid 47146] [client 172.192.18.188:24525] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aS83dnliPX01jdRNUv24TwAAAJM"]
[Wed Dec 03 03:01:10.757619 2025] [:error] [pid 47158:tid 47160] [client 172.192.18.188:23683] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aS83dl3-jeg4VwJRw7FRAQAAAMA"]
[Wed Dec 03 03:01:10.983886 2025] [:error] [pid 47067:tid 47094] [client 172.192.18.188:23739] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aS83dgcYJkWYuBnpVap2JAAAABY"]
[Wed Dec 03 03:01:11.213577 2025] [:error] [pid 47069:tid 47128] [client 172.192.18.188:24389] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aS83d3liPX01jdRNUv24UAAAAIE"]
[Wed Dec 03 03:01:11.448890 2025] [:error] [pid 47069:tid 47144] [client 172.192.18.188:24168] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aS83d3liPX01jdRNUv24UQAAAJE"]
[Wed Dec 03 03:01:11.682382 2025] [:error] [pid 47068:tid 47104] [client 172.192.18.188:23727] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aS83dyDFatpzeF4tcYW6FQAAAEQ"]
[Wed Dec 03 03:01:11.908697 2025] [:error] [pid 47158:tid 47169] [client 172.192.18.188:24537] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aS83d13-jeg4VwJRw7FRAwAAAMk"]
[Wed Dec 03 03:01:12.140996 2025] [:error] [pid 47067:tid 47073] [client 172.192.18.188:23684] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aS83eAcYJkWYuBnpVap2JQAAAAE"]
[Wed Dec 03 03:01:12.367482 2025] [:error] [pid 47068:tid 47105] [client 172.192.18.188:24172] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aS83eCDFatpzeF4tcYW6FwAAAEU"]
[Wed Dec 03 03:01:12.594738 2025] [:error] [pid 47069:tid 47138] [client 172.192.18.188:24516] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aS83eHliPX01jdRNUv24UgAAAIs"]
[Wed Dec 03 03:01:12.828130 2025] [:error] [pid 47069:tid 47135] [client 172.192.18.188:23709] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aS83eHliPX01jdRNUv24UwAAAIg"]
[Wed Dec 03 03:01:13.054876 2025] [:error] [pid 47158:tid 47173] [client 172.192.18.188:24547] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aS83eV3-jeg4VwJRw7FRBgAAAM0"]
[Wed Dec 03 03:01:13.286004 2025] [:error] [pid 47158:tid 47171] [client 172.192.18.188:24527] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aS83eV3-jeg4VwJRw7FRCAAAAMs"]
[Wed Dec 03 03:01:13.513701 2025] [:error] [pid 47068:tid 47113] [client 172.192.18.188:24161] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aS83eSDFatpzeF4tcYW6GgAAAE0"]
[Wed Dec 03 03:01:13.740060 2025] [:error] [pid 47067:tid 47078] [client 172.192.18.188:23742] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aS83eQcYJkWYuBnpVap2KgAAAAY"]
[Wed Dec 03 03:01:13.967523 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24548] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aS83eR7VdEeEe8GnPSV2mAAAAQY"]
[Wed Dec 03 03:01:14.193779 2025] [:error] [pid 25475:tid 25516] [client 172.192.18.188:24542] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aS83eh7VdEeEe8GnPSV2mQAAAQQ"]
[Wed Dec 03 03:01:14.423598 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:23720] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aS83eh7VdEeEe8GnPSV2mgAAARY"]
[Wed Dec 03 03:01:14.649453 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:23718] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aS83eh7VdEeEe8GnPSV2nQAAAQA"]
[Wed Dec 03 03:01:14.920811 2025] [:error] [pid 47067:tid 47086] [client 172.192.18.188:24416] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aS83egcYJkWYuBnpVap2LQAAAA4"]
[Wed Dec 03 03:01:15.147523 2025] [:error] [pid 47068:tid 47115] [client 172.192.18.188:24164] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aS83eyDFatpzeF4tcYW6GwAAAE8"]
[Wed Dec 03 03:01:15.380273 2025] [:error] [pid 47069:tid 47137] [client 172.192.18.188:24552] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aS83e3liPX01jdRNUv24WwAAAIo"]
[Wed Dec 03 03:01:15.607396 2025] [:error] [pid 47069:tid 47129] [client 172.192.18.188:23741] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aS83e3liPX01jdRNUv24XAAAAII"]
[Wed Dec 03 03:01:15.859225 2025] [:error] [pid 47068:tid 47119] [client 172.192.18.188:23722] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aS83eyDFatpzeF4tcYW6HgAAAFM"]
[Wed Dec 03 03:01:16.097939 2025] [:error] [pid 47158:tid 47164] [client 172.192.18.188:24129] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aS83fF3-jeg4VwJRw7FRDQAAAMQ"]
[Wed Dec 03 03:01:16.450023 2025] [:error] [pid 25475:tid 25514] [client 172.192.18.188:24554] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aS83fB7VdEeEe8GnPSV2oQAAAQI"]
[Wed Dec 03 03:01:16.675914 2025] [:error] [pid 47158:tid 47165] [client 172.192.18.188:23728] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aS83fF3-jeg4VwJRw7FREgAAAMU"]
[Wed Dec 03 03:01:16.902547 2025] [:error] [pid 47069:tid 47141] [client 172.192.18.188:23699] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aS83fHliPX01jdRNUv24XwAAAI4"]
[Wed Dec 03 03:01:17.153710 2025] [:error] [pid 47158:tid 47170] [client 172.192.18.188:24384] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aS83fV3-jeg4VwJRw7FRFgAAAMo"]
[Wed Dec 03 03:01:17.384172 2025] [:error] [pid 25475:tid 25516] [client 172.192.18.188:24512] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aS83fR7VdEeEe8GnPSV2pAAAAQQ"]
[Wed Dec 03 03:01:17.611362 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:24151] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aS83fR7VdEeEe8GnPSV2pQAAARY"]
[Wed Dec 03 03:01:17.887673 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:24541] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aS83fR7VdEeEe8GnPSV2pwAAAQA"]
[Wed Dec 03 03:01:18.145185 2025] [:error] [pid 47067:tid 47088] [client 172.192.18.188:24519] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS83fgcYJkWYuBnpVap2OAAAABA"]
[Wed Dec 03 03:01:18.400260 2025] [:error] [pid 47067:tid 47077] [client 172.192.18.188:24174] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS83fgcYJkWYuBnpVap2OQAAAAU"]
[Wed Dec 03 03:01:18.634201 2025] [:error] [pid 47069:tid 47143] [client 172.192.18.188:24179] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS83fnliPX01jdRNUv24ZAAAAJA"]
[Wed Dec 03 03:01:18.928404 2025] [:error] [pid 47069:tid 47139] [client 172.192.18.188:23715] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS83fnliPX01jdRNUv24ZQAAAIw"]
[Wed Dec 03 03:01:19.214674 2025] [:error] [pid 47158:tid 47160] [client 172.192.18.188:23729] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aS83f13-jeg4VwJRw7FRHQAAAMA"]
[Wed Dec 03 03:01:19.468991 2025] [:error] [pid 47067:tid 47090] [client 172.192.18.188:24138] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aS83fwcYJkWYuBnpVap2OgAAABI"]
[Wed Dec 03 03:01:19.703004 2025] [:error] [pid 25475:tid 25523] [client 172.192.18.188:24575] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aS83fx7VdEeEe8GnPSV2rAAAAQs"]
[Wed Dec 03 03:01:19.947994 2025] [:error] [pid 47069:tid 47131] [client 172.192.18.188:24550] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aS83f3liPX01jdRNUv24ZwAAAIQ"]
[Wed Dec 03 03:01:20.179622 2025] [:error] [pid 47069:tid 47145] [client 172.192.18.188:24538] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aS83gHliPX01jdRNUv24aQAAAJI"]
[Wed Dec 03 03:01:20.456798 2025] [:error] [pid 47069:tid 47148] [client 172.192.18.188:24150] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aS83gHliPX01jdRNUv24awAAAJU"]
[Wed Dec 03 03:01:20.699653 2025] [:error] [pid 47068:tid 47124] [client 172.192.18.188:24185] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aS83gCDFatpzeF4tcYW6JgAAAFg"]
[Wed Dec 03 03:01:20.930747 2025] [:error] [pid 47067:tid 47079] [client 172.192.18.188:24542] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aS83gAcYJkWYuBnpVap2PAAAAAc"]
[Wed Dec 03 03:01:21.211370 2025] [:error] [pid 25475:tid 25516] [client 172.192.18.188:23703] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aS83gR7VdEeEe8GnPSV2rgAAAQQ"]
[Wed Dec 03 03:01:21.440920 2025] [:error] [pid 25475:tid 25524] [client 172.192.18.188:24173] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aS83gR7VdEeEe8GnPSV2rwAAAQw"]
[Wed Dec 03 03:01:21.691377 2025] [:error] [pid 47067:tid 47091] [client 172.192.18.188:23732] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aS83gQcYJkWYuBnpVap2QAAAABM"]
[Wed Dec 03 03:01:21.929306 2025] [:error] [pid 47158:tid 47174] [client 172.192.18.188:24568] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aS83gV3-jeg4VwJRw7FRJAAAAM4"]
[Wed Dec 03 03:01:22.157357 2025] [:error] [pid 47158:tid 47168] [client 172.192.18.188:24566] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aS83gl3-jeg4VwJRw7FRJgAAAMg"]
[Wed Dec 03 03:01:22.425827 2025] [:error] [pid 47069:tid 47135] [client 172.192.18.188:23716] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aS83gnliPX01jdRNUv24cAAAAIg"]
[Wed Dec 03 03:01:22.650644 2025] [:error] [pid 47069:tid 47130] [client 172.192.18.188:24431] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aS83gnliPX01jdRNUv24cwAAAIM"]
[Wed Dec 03 03:01:22.876620 2025] [:error] [pid 25475:tid 25513] [client 172.192.18.188:24555] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aS83gh7VdEeEe8GnPSV2sAAAAQE"]
[Wed Dec 03 03:01:23.135976 2025] [:error] [pid 25475:tid 25527] [client 172.192.18.188:24513] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aS83gx7VdEeEe8GnPSV2sQAAAQ8"]
[Wed Dec 03 03:01:23.368503 2025] [:error] [pid 47067:tid 47089] [client 172.192.18.188:23737] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aS83gwcYJkWYuBnpVap2RAAAABE"]
[Wed Dec 03 03:01:23.594093 2025] [:error] [pid 47069:tid 47139] [client 172.192.18.188:24546] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aS83g3liPX01jdRNUv24dQAAAIw"]
[Wed Dec 03 03:01:23.828723 2025] [:error] [pid 47068:tid 47121] [client 172.192.18.188:24180] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aS83gyDFatpzeF4tcYW6KQAAAFU"]
[Wed Dec 03 03:01:24.059711 2025] [:error] [pid 25475:tid 25531] [client 172.192.18.188:24520] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aS83hB7VdEeEe8GnPSV2tgAAARM"]
[Wed Dec 03 03:01:24.292852 2025] [:error] [pid 47068:tid 47101] [client 172.192.18.188:24522] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aS83hCDFatpzeF4tcYW6KgAAAEE"]
[Wed Dec 03 03:01:24.520066 2025] [:error] [pid 47067:tid 47078] [client 172.192.18.188:23721] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aS83hAcYJkWYuBnpVap2RQAAAAY"]
[Wed Dec 03 03:01:24.782660 2025] [:error] [pid 47069:tid 47149] [client 172.192.18.188:24405] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aS83hHliPX01jdRNUv24eAAAAJY"]
[Wed Dec 03 03:01:25.011257 2025] [:error] [pid 47068:tid 47119] [client 172.192.18.188:24394] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aS83hSDFatpzeF4tcYW6LAAAAFM"]
[Wed Dec 03 03:01:25.246501 2025] [:error] [pid 47158:tid 47177] [client 172.192.18.188:24569] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aS83hV3-jeg4VwJRw7FRLgAAANE"]
[Wed Dec 03 03:01:25.496945 2025] [:error] [pid 25475:tid 25516] [client 172.192.18.188:24561] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aS83hR7VdEeEe8GnPSV2vQAAAQQ"]
[Wed Dec 03 03:01:25.724431 2025] [:error] [pid 47067:tid 47087] [client 172.192.18.188:24385] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aS83hQcYJkWYuBnpVap2SAAAAA8"]
[Wed Dec 03 03:01:25.958268 2025] [:error] [pid 47069:tid 47134] [client 172.192.18.188:24188] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aS83hXliPX01jdRNUv24ewAAAIc"]
[Wed Dec 03 03:01:26.194449 2025] [:error] [pid 47069:tid 47141] [client 172.192.18.188:24532] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aS83hnliPX01jdRNUv24fQAAAI4"]
[Wed Dec 03 03:01:26.425353 2025] [:error] [pid 47158:tid 47166] [client 172.192.18.188:24549] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aS83hl3-jeg4VwJRw7FRMAAAAMY"]
[Wed Dec 03 03:01:26.694632 2025] [:error] [pid 47067:tid 47072] [client 172.192.18.188:24545] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aS83hgcYJkWYuBnpVap2SwAAAAA"]
[Wed Dec 03 03:01:26.923969 2025] [:error] [pid 25475:tid 25529] [client 172.192.18.188:24264] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aS83hh7VdEeEe8GnPSV2vwAAARE"]
[Wed Dec 03 03:01:27.149908 2025] [:error] [pid 47069:tid 47127] [client 172.192.18.188:23740] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/functions.php"] [unique_id "aS83h3liPX01jdRNUv24gAAAAIA"]
[Wed Dec 03 03:01:27.405766 2025] [:error] [pid 47069:tid 47143] [client 172.192.18.188:24393] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/functions.php"] [unique_id "aS83h3liPX01jdRNUv24hAAAAJA"]
[Wed Dec 03 03:01:27.666421 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24423] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/functions.php"] [unique_id "aS83hx7VdEeEe8GnPSV2wgAAAQY"]
[Wed Dec 03 03:01:27.938325 2025] [:error] [pid 47067:tid 47092] [client 172.192.18.188:24415] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/functions.php"] [unique_id "aS83hwcYJkWYuBnpVap2UQAAABQ"]
[Wed Dec 03 03:01:28.173683 2025] [:error] [pid 47069:tid 47150] [client 172.192.18.188:24399] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aS83iHliPX01jdRNUv24hQAAAJc"]
[Wed Dec 03 03:01:28.407254 2025] [:error] [pid 25475:tid 25520] [client 172.192.18.188:24529] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aS83iB7VdEeEe8GnPSV2xQAAAQg"]
[Wed Dec 03 03:01:28.634252 2025] [:error] [pid 47069:tid 47131] [client 172.192.18.188:24438] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aS83iHliPX01jdRNUv24hwAAAIQ"]
[Wed Dec 03 03:01:28.866048 2025] [:error] [pid 25475:tid 25514] [client 172.192.18.188:24536] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aS83iB7VdEeEe8GnPSV2xwAAAQI"]
[Wed Dec 03 03:01:29.138347 2025] [:error] [pid 47069:tid 47137] [client 172.192.18.188:24564] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aS83iXliPX01jdRNUv24iAAAAIo"]
[Wed Dec 03 03:01:29.365609 2025] [:error] [pid 47068:tid 47100] [client 172.192.18.188:24155] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aS83iSDFatpzeF4tcYW6LgAAAEA"]
[Wed Dec 03 03:01:29.614334 2025] [:error] [pid 25475:tid 25517] [client 172.192.18.188:24406] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aS83iR7VdEeEe8GnPSV2yQAAAQU"]
[Wed Dec 03 03:01:29.845384 2025] [:error] [pid 25475:tid 25524] [client 172.192.18.188:24517] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aS83iR7VdEeEe8GnPSV2ygAAAQw"]
[Wed Dec 03 03:01:30.073069 2025] [:error] [pid 25475:tid 25525] [client 172.192.18.188:24145] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aS83ih7VdEeEe8GnPSV2zAAAAQ0"]
[Wed Dec 03 03:01:30.300735 2025] [:error] [pid 25475:tid 25521] [client 172.192.18.188:23725] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aS83ih7VdEeEe8GnPSV2zgAAAQk"]
[Wed Dec 03 03:01:30.529784 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24134] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aS83ih7VdEeEe8GnPSV20QAAAQY"]
[Wed Dec 03 03:01:30.755416 2025] [:error] [pid 47069:tid 47146] [client 172.192.18.188:24560] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aS83inliPX01jdRNUv24jQAAAJM"]
[Wed Dec 03 03:01:30.982649 2025] [:error] [pid 47068:tid 47110] [client 172.192.18.188:24271] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83iiDFatpzeF4tcYW6MQAAAEo"]
[Wed Dec 03 03:01:31.208715 2025] [:error] [pid 25475:tid 25528] [client 172.192.18.188:23734] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83ix7VdEeEe8GnPSV20wAAARA"]
[Wed Dec 03 03:01:31.439198 2025] [:error] [pid 47069:tid 47142] [client 172.192.18.188:24186] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83i3liPX01jdRNUv24jgAAAI8"]
[Wed Dec 03 03:01:31.674828 2025] [:error] [pid 47158:tid 47171] [client 172.192.18.188:24571] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aS83i13-jeg4VwJRw7FRPAAAAMs"]
[Wed Dec 03 03:01:31.908209 2025] [:error] [pid 47158:tid 47180] [client 172.192.18.188:24128] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aS83i13-jeg4VwJRw7FRPQAAANQ"]
[Wed Dec 03 03:01:32.139618 2025] [:error] [pid 25475:tid 25530] [client 172.192.18.188:24275] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aS83jB7VdEeEe8GnPSV21QAAARI"]
[Wed Dec 03 03:01:32.419685 2025] [:error] [pid 25475:tid 25531] [client 172.192.18.188:24574] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aS83jB7VdEeEe8GnPSV21gAAARM"]
[Wed Dec 03 03:01:32.670474 2025] [:error] [pid 47158:tid 47181] [client 172.192.18.188:24408] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aS83jF3-jeg4VwJRw7FRPwAAANU"]
[Wed Dec 03 03:01:32.897218 2025] [:error] [pid 47067:tid 47094] [client 172.192.18.188:24256] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aS83jAcYJkWYuBnpVap2WwAAABY"]
[Wed Dec 03 03:01:33.123687 2025] [:error] [pid 47068:tid 47120] [client 172.192.18.188:24565] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aS83jSDFatpzeF4tcYW6NwAAAFQ"]
[Wed Dec 03 03:01:33.349541 2025] [:error] [pid 25475:tid 25520] [client 172.192.18.188:24572] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aS83jR7VdEeEe8GnPSV22AAAAQg"]
[Wed Dec 03 03:01:33.578321 2025] [:error] [pid 47068:tid 47121] [client 172.192.18.188:24563] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aS83jSDFatpzeF4tcYW6OAAAAFU"]
[Wed Dec 03 03:01:33.804889 2025] [:error] [pid 47158:tid 47164] [client 172.192.18.188:24388] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aS83jV3-jeg4VwJRw7FRQQAAAMQ"]
[Wed Dec 03 03:01:34.033196 2025] [:error] [pid 47069:tid 47147] [client 172.192.18.188:24528] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aS83jnliPX01jdRNUv24kgAAAJQ"]
[Wed Dec 03 03:01:34.258686 2025] [:error] [pid 47067:tid 47083] [client 172.192.18.188:24441] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aS83jgcYJkWYuBnpVap2XgAAAAs"]
[Wed Dec 03 03:01:34.484948 2025] [:error] [pid 47068:tid 47117] [client 172.192.18.188:24388] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aS83jiDFatpzeF4tcYW6PQAAAFE"]
[Wed Dec 03 03:01:34.721619 2025] [:error] [pid 25475:tid 25517] [client 172.192.18.188:24400] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aS83jh7VdEeEe8GnPSV22wAAAQU"]
[Wed Dec 03 03:01:34.950036 2025] [:error] [pid 47067:tid 47088] [client 172.192.18.188:24412] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aS83jgcYJkWYuBnpVap2XwAAABA"]
[Wed Dec 03 03:01:35.178266 2025] [:error] [pid 47069:tid 47128] [client 172.192.18.188:24426] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aS83j3liPX01jdRNUv24lAAAAIE"]
[Wed Dec 03 03:01:35.407462 2025] [:error] [pid 47067:tid 47078] [client 172.192.18.188:23714] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aS83jwcYJkWYuBnpVap2YAAAAAY"]
[Wed Dec 03 03:01:35.636017 2025] [:error] [pid 25475:tid 25521] [client 172.192.18.188:24414] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aS83jx7VdEeEe8GnPSV23AAAAQk"]
[Wed Dec 03 03:01:35.879609 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24412] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aS83jx7VdEeEe8GnPSV23gAAAQY"]
[Wed Dec 03 03:01:36.127521 2025] [:error] [pid 25475:tid 25533] [client 172.192.18.188:24184] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aS83kB7VdEeEe8GnPSV23wAAARU"]
[Wed Dec 03 03:01:36.358580 2025] [:error] [pid 47067:tid 47075] [client 172.192.18.188:23735] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aS83kAcYJkWYuBnpVap2YQAAAAM"]
[Wed Dec 03 03:01:36.593226 2025] [:error] [pid 25475:tid 25530] [client 172.192.18.188:24540] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aS83kB7VdEeEe8GnPSV24QAAARI"]
[Wed Dec 03 03:01:36.842844 2025] [:error] [pid 47067:tid 47087] [client 172.192.18.188:24440] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aS83kAcYJkWYuBnpVap2YwAAAA8"]
[Wed Dec 03 03:01:37.075493 2025] [:error] [pid 47158:tid 47169] [client 172.192.18.188:24559] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aS83kV3-jeg4VwJRw7FRSAAAAMk"]
[Wed Dec 03 03:01:37.310982 2025] [:error] [pid 47069:tid 47133] [client 172.192.18.188:24266] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aS83kXliPX01jdRNUv24mQAAAIY"]
[Wed Dec 03 03:01:37.555433 2025] [:error] [pid 47069:tid 47146] [client 172.192.18.188:23705] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aS83kXliPX01jdRNUv24mwAAAJM"]
[Wed Dec 03 03:01:37.787625 2025] [:error] [pid 47067:tid 47086] [client 172.192.18.188:24396] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aS83kQcYJkWYuBnpVap2ZAAAAA4"]
[Wed Dec 03 03:01:38.021357 2025] [:error] [pid 47069:tid 47130] [client 172.192.18.188:24556] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aS83knliPX01jdRNUv24nAAAAIM"]
[Wed Dec 03 03:01:38.253595 2025] [:error] [pid 25475:tid 25515] [client 172.192.18.188:24558] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aS83kh7VdEeEe8GnPSV25AAAAQM"]
[Wed Dec 03 03:01:38.479213 2025] [:error] [pid 25475:tid 25514] [client 172.192.18.188:24557] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aS83kh7VdEeEe8GnPSV25gAAAQI"]
[Wed Dec 03 03:01:38.710156 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:24404] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aS83kh7VdEeEe8GnPSV26QAAARY"]
[Wed Dec 03 03:01:38.937313 2025] [:error] [pid 25475:tid 25517] [client 172.192.18.188:24439] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aS83kh7VdEeEe8GnPSV26gAAAQU"]
[Wed Dec 03 03:01:39.163894 2025] [:error] [pid 25475:tid 25524] [client 172.192.18.188:24417] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aS83kx7VdEeEe8GnPSV26wAAAQw"]
[Wed Dec 03 03:01:39.391403 2025] [:error] [pid 25475:tid 25522] [client 172.192.18.188:24424] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aS83kx7VdEeEe8GnPSV27AAAAQo"]
[Wed Dec 03 03:01:39.617504 2025] [:error] [pid 47068:tid 47111] [client 172.192.18.188:24402] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aS83kyDFatpzeF4tcYW6SgAAAEs"]
[Wed Dec 03 03:01:39.894780 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24531] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aS83kx7VdEeEe8GnPSV27gAAAQY"]
[Wed Dec 03 03:01:40.181122 2025] [:error] [pid 47158:tid 47164] [client 172.192.18.188:24471] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aS83lF3-jeg4VwJRw7FRTgAAAMQ"]
[Wed Dec 03 03:01:40.409515 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:24403] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aS83lB7VdEeEe8GnPSV28QAAAQA"]
[Wed Dec 03 03:01:40.650304 2025] [:error] [pid 47158:tid 47175] [client 172.192.18.188:24539] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aS83lF3-jeg4VwJRw7FRUwAAAM8"]
[Wed Dec 03 03:01:40.875934 2025] [:error] [pid 47158:tid 47180] [client 172.192.18.188:24272] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aS83lF3-jeg4VwJRw7FRVQAAANQ"]
[Wed Dec 03 03:01:41.193603 2025] [:error] [pid 47069:tid 47140] [client 172.192.18.188:24260] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aS83lXliPX01jdRNUv24oQAAAI0"]
[Wed Dec 03 03:01:41.443041 2025] [:error] [pid 47067:tid 47079] [client 172.192.18.188:24425] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aS83lQcYJkWYuBnpVap2bQAAAAc"]
[Wed Dec 03 03:01:41.681975 2025] [:error] [pid 47158:tid 47168] [client 172.192.18.188:24407] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aS83lV3-jeg4VwJRw7FRVwAAAMg"]
[Wed Dec 03 03:01:41.951804 2025] [:error] [pid 47158:tid 47174] [client 172.192.18.188:24280] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aS83lV3-jeg4VwJRw7FRWAAAAM4"]
[Wed Dec 03 03:01:42.255197 2025] [:error] [pid 25475:tid 25524] [client 172.192.18.188:24442] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aS83lh7VdEeEe8GnPSV2-AAAAQw"]
[Wed Dec 03 03:01:42.538446 2025] [:error] [pid 47158:tid 47162] [client 172.192.18.188:24397] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aS83ll3-jeg4VwJRw7FRWgAAAMI"]
[Wed Dec 03 03:01:42.775980 2025] [:error] [pid 47067:tid 47086] [client 172.192.18.188:23735] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aS83lgcYJkWYuBnpVap2cQAAAA4"]
[Wed Dec 03 03:01:43.004193 2025] [:error] [pid 47069:tid 47134] [client 172.192.18.188:24268] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aS83l3liPX01jdRNUv24owAAAIc"]
[Wed Dec 03 03:01:43.230785 2025] [:error] [pid 47069:tid 47145] [client 172.192.18.188:24257] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aS83l3liPX01jdRNUv24pAAAAJI"]
[Wed Dec 03 03:01:43.465125 2025] [:error] [pid 25475:tid 25519] [client 172.192.18.188:24538] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aS83lx7VdEeEe8GnPSV3AwAAAQc"]
[Wed Dec 03 03:01:43.708562 2025] [:error] [pid 47158:tid 47171] [client 172.192.18.188:24432] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aS83l13-jeg4VwJRw7FRXwAAAMs"]
[Wed Dec 03 03:01:43.937108 2025] [:error] [pid 47068:tid 47101] [client 172.192.18.188:24444] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aS83lyDFatpzeF4tcYW6UgAAAEE"]
[Wed Dec 03 03:01:44.217498 2025] [:error] [pid 25475:tid 25529] [client 172.192.18.188:24430] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aS83mB7VdEeEe8GnPSV3BgAAARE"]
[Wed Dec 03 03:01:44.457479 2025] [:error] [pid 47158:tid 47164] [client 172.192.18.188:24284] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aS83mF3-jeg4VwJRw7FRYQAAAMQ"]
[Wed Dec 03 03:01:44.685160 2025] [:error] [pid 47068:tid 47104] [client 172.192.18.188:24573] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aS83mCDFatpzeF4tcYW6UwAAAEQ"]
[Wed Dec 03 03:01:44.911391 2025] [:error] [pid 47068:tid 47111] [client 172.192.18.188:24295] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aS83mCDFatpzeF4tcYW6VQAAAEs"]
[Wed Dec 03 03:01:45.150037 2025] [:error] [pid 47068:tid 47100] [client 172.192.18.188:24443] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aS83mSDFatpzeF4tcYW6WQAAAEA"]
[Wed Dec 03 03:01:46.770358 2025] [:error] [pid 47068:tid 47111] [client 172.192.18.188:24514] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aS83miDFatpzeF4tcYW6YQAAAEs"]
[Wed Dec 03 03:01:47.597301 2025] [proxy_fcgi:error] [pid 25475:tid 25527] [client 172.192.18.188:24281] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 03:01:48.321439 2025] [:error] [pid 25475:tid 25522] [client 172.192.18.188:24281] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aS83nB7VdEeEe8GnPSV3IQAAAQo"]
[Wed Dec 03 03:01:48.547879 2025] [:error] [pid 47158:tid 47174] [client 172.192.18.188:24277] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aS83nF3-jeg4VwJRw7FRbgAAAM4"]
[Wed Dec 03 03:01:48.774400 2025] [:error] [pid 47158:tid 47170] [client 172.192.18.188:24276] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aS83nF3-jeg4VwJRw7FRcAAAAMo"]
[Wed Dec 03 03:01:49.008794 2025] [:error] [pid 47068:tid 47116] [client 172.192.18.188:24273] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aS83nSDFatpzeF4tcYW6ZwAAAFA"]
[Wed Dec 03 03:01:49.244627 2025] [:error] [pid 47067:tid 47080] [client 172.192.18.188:24434] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aS83nQcYJkWYuBnpVap2fQAAAAg"]
[Wed Dec 03 03:01:49.478785 2025] [:error] [pid 25475:tid 25521] [client 172.192.18.188:24386] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aS83nR7VdEeEe8GnPSV3JAAAAQk"]
[Wed Dec 03 03:01:49.709421 2025] [:error] [pid 47069:tid 47127] [client 172.192.18.188:24451] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aS83nXliPX01jdRNUv24swAAAIA"]
[Wed Dec 03 03:01:49.938244 2025] [:error] [pid 47067:tid 47072] [client 172.192.18.188:24446] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aS83nQcYJkWYuBnpVap2fwAAAAA"]
[Wed Dec 03 03:01:50.166842 2025] [:error] [pid 25475:tid 25522] [client 172.192.18.188:24534] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aS83nh7VdEeEe8GnPSV3JwAAAQo"]
[Wed Dec 03 03:01:50.403426 2025] [:error] [pid 47158:tid 47179] [client 172.192.18.188:24392] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aS83nl3-jeg4VwJRw7FRdgAAANM"]
[Wed Dec 03 03:01:50.630081 2025] [:error] [pid 47068:tid 47120] [client 172.192.18.188:24421] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aS83niDFatpzeF4tcYW6bAAAAFQ"]
[Wed Dec 03 03:01:50.906506 2025] [:error] [pid 47067:tid 47092] [client 172.192.18.188:24274] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aS83ngcYJkWYuBnpVap2gAAAABQ"]
[Wed Dec 03 03:01:51.301457 2025] [:error] [pid 47067:tid 47094] [client 172.192.18.188:24436] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aS83nwcYJkWYuBnpVap2gQAAABY"]
[Wed Dec 03 03:01:51.710110 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:24299] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aS83nx7VdEeEe8GnPSV3MAAAARY"]
[Wed Dec 03 03:01:51.948784 2025] [:error] [pid 47068:tid 47124] [client 172.192.18.188:24302] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aS83nyDFatpzeF4tcYW6bgAAAFg"]
[Wed Dec 03 03:01:52.335661 2025] [:error] [pid 47067:tid 47088] [client 172.192.18.188:24433] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aS83oAcYJkWYuBnpVap2hAAAABA"]
[Wed Dec 03 03:01:52.563245 2025] [:error] [pid 47068:tid 47109] [client 172.192.18.188:24315] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aS83oCDFatpzeF4tcYW6cAAAAEk"]
[Wed Dec 03 03:01:52.803107 2025] [:error] [pid 25475:tid 25519] [client 172.192.18.188:24491] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aS83oB7VdEeEe8GnPSV3NwAAAQc"]
[Wed Dec 03 03:01:53.059508 2025] [:error] [pid 47068:tid 47113] [client 172.192.18.188:24437] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aS83oSDFatpzeF4tcYW6cQAAAE0"]
[Wed Dec 03 03:01:53.286238 2025] [:error] [pid 47068:tid 47120] [client 172.192.18.188:24553] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aS83oSDFatpzeF4tcYW6cgAAAFQ"]
[Wed Dec 03 03:01:53.513467 2025] [:error] [pid 47068:tid 47105] [client 172.192.18.188:24293] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/class-config.php"] [unique_id "aS83oSDFatpzeF4tcYW6dgAAAEU"]
[Wed Dec 03 03:01:53.742383 2025] [:error] [pid 47068:tid 47121] [client 172.192.18.188:24269] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/class-config.php"] [unique_id "aS83oSDFatpzeF4tcYW6eAAAAFU"]
[Wed Dec 03 03:01:53.971865 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:24428] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/class-config.php"] [unique_id "aS83oR7VdEeEe8GnPSV3QAAAAQA"]
[Wed Dec 03 03:01:54.210435 2025] [:error] [pid 25475:tid 25532] [client 172.192.18.188:24009] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/class-config.php"] [unique_id "aS83oh7VdEeEe8GnPSV3QwAAARQ"]
[Wed Dec 03 03:01:54.452714 2025] [:error] [pid 25475:tid 25536] [client 172.192.18.188:24296] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aS83oh7VdEeEe8GnPSV3RQAAARg"]
[Wed Dec 03 03:01:54.682448 2025] [:error] [pid 25475:tid 25518] [client 172.192.18.188:24313] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aS83oh7VdEeEe8GnPSV3RwAAAQY"]
[Wed Dec 03 03:01:54.909051 2025] [:error] [pid 47069:tid 47139] [client 172.192.18.188:24270] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aS83onliPX01jdRNUv24twAAAIw"]
[Wed Dec 03 03:01:55.150616 2025] [:error] [pid 25475:tid 25513] [client 172.192.18.188:24387] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aS83ox7VdEeEe8GnPSV3SgAAAQE"]
[Wed Dec 03 03:01:55.376694 2025] [:error] [pid 47068:tid 47102] [client 172.192.18.188:24298] [client 172.192.18.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aS83oyDFatpzeF4tcYW6fQAAAEI"]
[Wed Dec 03 03:01:55.658139 2025] [:error] [pid 47158:tid 47161] [client 172.192.18.188:24391] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aS83o13-jeg4VwJRw7FRegAAAME"]
[Wed Dec 03 03:01:55.895036 2025] [:error] [pid 47068:tid 47120] [client 172.192.18.188:24390] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aS83oyDFatpzeF4tcYW6gQAAAFQ"]
[Wed Dec 03 03:01:56.169568 2025] [:error] [pid 47068:tid 47100] [client 172.192.18.188:24429] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aS83pCDFatpzeF4tcYW6gwAAAEA"]
[Wed Dec 03 03:01:56.396107 2025] [:error] [pid 47068:tid 47114] [client 172.192.18.188:24450] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aS83pCDFatpzeF4tcYW6hQAAAE4"]
[Wed Dec 03 03:01:56.672251 2025] [:error] [pid 47068:tid 47104] [client 172.192.18.188:24462] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aS83pCDFatpzeF4tcYW6iAAAAEQ"]
[Wed Dec 03 03:01:56.898211 2025] [:error] [pid 25475:tid 25532] [client 172.192.18.188:24422] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aS83pB7VdEeEe8GnPSV3TQAAARQ"]
[Wed Dec 03 03:01:57.130848 2025] [:error] [pid 47158:tid 47171] [client 172.192.18.188:24258] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aS83pV3-jeg4VwJRw7FRfAAAAMs"]
[Wed Dec 03 03:01:57.370151 2025] [:error] [pid 47158:tid 47180] [client 172.192.18.188:24013] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS83pV3-jeg4VwJRw7FRfgAAANQ"]
[Wed Dec 03 03:01:57.596600 2025] [:error] [pid 25475:tid 25514] [client 172.192.18.188:24298] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS83pR7VdEeEe8GnPSV3TwAAAQI"]
[Wed Dec 03 03:01:57.835081 2025] [:error] [pid 47158:tid 47167] [client 172.192.18.188:24419] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS83pV3-jeg4VwJRw7FRgQAAAMc"]
[Wed Dec 03 03:01:58.060959 2025] [:error] [pid 47068:tid 47113] [client 172.192.18.188:24307] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS83piDFatpzeF4tcYW6iwAAAE0"]
[Wed Dec 03 03:01:58.291841 2025] [:error] [pid 47158:tid 47174] [client 172.192.18.188:24503] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aS83pl3-jeg4VwJRw7FRgwAAAM4"]
[Wed Dec 03 03:01:58.518615 2025] [:error] [pid 47158:tid 47164] [client 172.192.18.188:24395] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aS83pl3-jeg4VwJRw7FRhAAAAMQ"]
[Wed Dec 03 03:01:58.746555 2025] [:error] [pid 25475:tid 25521] [client 172.192.18.188:24317] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aS83ph7VdEeEe8GnPSV3VAAAAQk"]
[Wed Dec 03 03:01:58.989322 2025] [:error] [pid 25475:tid 25522] [client 172.192.18.188:24289] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aS83ph7VdEeEe8GnPSV3VgAAAQo"]
[Wed Dec 03 03:01:59.216424 2025] [:error] [pid 25475:tid 25536] [client 172.192.18.188:24265] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aS83px7VdEeEe8GnPSV3WAAAARg"]
[Wed Dec 03 03:01:59.442919 2025] [:error] [pid 25475:tid 25534] [client 172.192.18.188:24286] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aS83px7VdEeEe8GnPSV3WgAAARY"]
[Wed Dec 03 03:01:59.673954 2025] [:error] [pid 47069:tid 47131] [client 172.192.18.188:24445] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aS83p3liPX01jdRNUv24uwAAAIQ"]
[Wed Dec 03 03:01:59.902386 2025] [:error] [pid 25475:tid 25513] [client 172.192.18.188:24477] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aS83px7VdEeEe8GnPSV3XAAAAQE"]
[Wed Dec 03 03:02:00.136586 2025] [:error] [pid 25475:tid 25512] [client 172.192.18.188:24499] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aS83qB7VdEeEe8GnPSV3XwAAAQA"]
[Wed Dec 03 03:02:00.363464 2025] [:error] [pid 47068:tid 47103] [client 172.192.18.188:24478] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aS83qCDFatpzeF4tcYW6kAAAAEM"]
[Wed Dec 03 03:02:00.638324 2025] [:error] [pid 47069:tid 47135] [client 172.192.18.188:24290] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aS83qHliPX01jdRNUv24vAAAAIg"]
[Wed Dec 03 03:02:00.864967 2025] [:error] [pid 47158:tid 47173] [client 172.192.18.188:24543] [client 172.192.18.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aS83qF3-jeg4VwJRw7FRiwAAAM0"]
[Wed Dec 03 03:11:33.842122 2025] [autoindex:error] [pid 47068:tid 47118] [client 74.7.243.205:50756] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 03:31:56.719804 2025] [:error] [pid 61938:tid 61949] [client 203.33.203.148:55556] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aS8-rOPiqqPeV4rvGMA_OwAAAMk"]
[Wed Dec 03 03:46:59.063178 2025] [:error] [pid 1973:tid 2035] [client 34.58.134.65:42500] [client 34.58.134.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aS9CMwfedWX_N6IrYC7UVAAAAAw"]
[Wed Dec 03 05:46:13.884451 2025] [autoindex:error] [pid 36048:tid 36056] [client 149.102.254.30:12720] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 06:29:51.264810 2025] [autoindex:error] [pid 33559:tid 33577] [client 149.102.254.30:24852] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 07:12:29.974240 2025] [autoindex:error] [pid 24019:tid 24024] [client 35.195.215.216:42490] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 13:05:14.423560 2025] [autoindex:error] [pid 22083:tid 22095] [client 82.80.249.214:52152] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 13:05:16.575437 2025] [autoindex:error] [pid 22014:tid 22068] [client 82.80.249.134:53419] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 13:05:17.169176 2025] [autoindex:error] [pid 11940:tid 11957] [client 82.80.249.134:53428] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 13:05:23.121139 2025] [autoindex:error] [pid 24019:tid 24024] [client 82.80.249.134:53491] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 13:05:23.722924 2025] [autoindex:error] [pid 22014:tid 22051] [client 82.80.249.134:53504] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 13:51:02.051820 2025] [proxy_fcgi:error] [pid 10559:tid 10594] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 03 13:51:02.171996 2025] [proxy_fcgi:error] [pid 10559:tid 10596] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 03 13:51:02.290035 2025] [proxy_fcgi:error] [pid 10559:tid 10608] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 03 13:51:02.410679 2025] [proxy_fcgi:error] [pid 10559:tid 10607] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 03 13:51:02.524868 2025] [:error] [pid 10559:tid 10597] [client 4.241.185.18:14368] [client 4.241.185.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.241.185.18, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aS_Pxr9PedrrNRd1_z2_1gAAAEM"], referer: https://www.google.de/
[Wed Dec 03 13:51:02.530958 2025] [proxy_fcgi:error] [pid 10559:tid 10597] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 03 13:51:02.649985 2025] [proxy_fcgi:error] [pid 10559:tid 10598] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 03 13:51:03.122152 2025] [proxy_fcgi:error] [pid 10559:tid 10599] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 03 13:51:03.240725 2025] [proxy_fcgi:error] [pid 10559:tid 10595] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 03 13:51:03.361354 2025] [proxy_fcgi:error] [pid 10559:tid 10603] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 03 13:51:03.479464 2025] [proxy_fcgi:error] [pid 10559:tid 10614] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 03 13:51:03.597494 2025] [proxy_fcgi:error] [pid 10559:tid 10602] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 03 13:51:03.715089 2025] [proxy_fcgi:error] [pid 10559:tid 10606] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 03 13:51:03.832392 2025] [proxy_fcgi:error] [pid 10559:tid 10617] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 03 13:51:03.952392 2025] [proxy_fcgi:error] [pid 10559:tid 10601] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 03 13:51:04.072681 2025] [proxy_fcgi:error] [pid 10559:tid 10610] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 03 13:51:04.191891 2025] [proxy_fcgi:error] [pid 10559:tid 10604] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 03 13:51:04.313135 2025] [proxy_fcgi:error] [pid 10559:tid 10605] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 03 13:51:04.432601 2025] [proxy_fcgi:error] [pid 10559:tid 10615] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 03 13:51:04.549805 2025] [proxy_fcgi:error] [pid 10559:tid 10613] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 03 13:51:04.669498 2025] [proxy_fcgi:error] [pid 10559:tid 10594] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 03 13:51:05.489740 2025] [:error] [pid 10559:tid 10600] [client 4.241.185.18:14368] [client 4.241.185.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.185.18, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aS_Pyb9PedrrNRd1_z2_7wAAAEY"], referer: https://duckduckgo.com/
[Wed Dec 03 13:51:06.673014 2025] [proxy_fcgi:error] [pid 10559:tid 10601] [client 4.241.185.18:14368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 03 13:51:06.907823 2025] [:error] [pid 10559:tid 10604] [client 4.241.185.18:14368] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aS_Pyr9PedrrNRd1_z2_-wAAAEo"], referer: https://www.google.de/
[Wed Dec 03 13:51:07.136036 2025] [:error] [pid 10558:tid 10580] [client 4.241.185.18:19214] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aS_PyzzOvOZiO9KGYU6UawAAAA0"], referer: https://www.google.fr/
[Wed Dec 03 13:51:07.364275 2025] [:error] [pid 10653:tid 10660] [client 4.241.185.18:14384] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS_Py_BLmUnB610vLpd9pgAAAMU"], referer: https://www.google.com/
[Wed Dec 03 13:51:07.594638 2025] [:error] [pid 12089:tid 12104] [client 4.241.185.18:19232] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aS_Py0bzcO5GLWwvn5qsCQAAAQ0"], referer: https://www.google.co.uk/
[Wed Dec 03 13:51:07.827394 2025] [:error] [pid 10560:tid 10627] [client 4.241.185.18:45253] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aS_Py1ICRUmwGLQBIWdAwAAAAIY"], referer: https://www.google.de/
[Wed Dec 03 13:51:08.294859 2025] [:error] [pid 10560:tid 10635] [client 4.241.185.18:19236] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aS_PzFICRUmwGLQBIWdAwwAAAI4"], referer: https://www.google.com/
[Wed Dec 03 13:51:08.526210 2025] [:error] [pid 12089:tid 12095] [client 4.241.185.18:20002] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aS_PzEbzcO5GLWwvn5qsDAAAAQQ"], referer: https://www.bing.com/
[Wed Dec 03 13:51:08.758229 2025] [:error] [pid 10653:tid 10667] [client 4.241.185.18:40800] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aS_PzPBLmUnB610vLpd9qQAAAMw"], referer: https://www.google.de/
[Wed Dec 03 13:51:08.986067 2025] [:error] [pid 12089:tid 12113] [client 4.241.185.18:19256] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS_PzEbzcO5GLWwvn5qsDQAAARY"], referer: https://www.yahoo.com/
[Wed Dec 03 13:51:09.333428 2025] [:error] [pid 10558:tid 10569] [client 4.241.185.18:15032] [client 4.241.185.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS_PzTzOvOZiO9KGYU6UbQAAAAI"], referer: https://www.google.co.uk/
[Wed Dec 03 13:51:09.577281 2025] [proxy_fcgi:error] [pid 10558:tid 10583] [client 4.241.185.18:14992] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 03 14:20:25.857287 2025] [:error] [pid 20608:tid 20637] [client 209.97.156.78:33082] [client 209.97.156.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aS_WqU5WGptz5j0ZvYdBIwAAAIA"]
[Wed Dec 03 14:20:28.119420 2025] [:error] [pid 32437:tid 32463] [client 209.97.156.78:35966] [client 209.97.156.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aS_WrKBId4T5gQoDbCEM6AAAABc"]
[Wed Dec 03 21:19:58.935037 2025] [:error] [pid 20607:tid 20633] [client 209.97.156.78:46272] [client 209.97.156.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTA4_vpiIcI2BRWBwqyOxgAAAFc"]
[Wed Dec 03 21:20:06.427471 2025] [:error] [pid 32437:tid 32461] [client 209.97.156.78:40528] [client 209.97.156.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTA5BqBId4T5gQoDbCFzHQAAABU"]
[Wed Dec 03 22:30:02.139221 2025] [autoindex:error] [pid 47926:tid 47929] [client 199.45.155.80:31470] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 22:41:44.700465 2025] [autoindex:error] [pid 20707:tid 20714] [client 144.31.4.124:37964] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 22:41:45.721818 2025] [autoindex:error] [pid 32437:tid 32451] [client 144.31.4.124:37972] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 00:07:00.863164 2025] [autoindex:error] [pid 20607:tid 20615] [client 130.89.144.163:34444] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 00:49:33.628328 2025] [:error] [pid 3938:tid 3944] [client 51.68.186.52:52445] [client 51.68.186.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aTBqHSAHKAmSjlzEts784wAAAgQ"]
[Thu Dec 04 03:38:54.930341 2025] [:error] [pid 3938:tid 3947] [client 51.38.96.239:64330] [client 51.38.96.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.38.96.239, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTCRziAHKAmSjlzEts49egAAAgc"]
[Thu Dec 04 03:38:54.936373 2025] [proxy_fcgi:error] [pid 3938:tid 3947] [client 51.38.96.239:64330] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:39:10.221948 2025] [:error] [pid 3840:tid 3855] [client 51.38.96.239:57459] [client 51.38.96.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.38.96.239, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTCR3pF_IDAg4wPRjg7htgAAAEc"]
[Thu Dec 04 03:39:10.227602 2025] [proxy_fcgi:error] [pid 3840:tid 3855] [client 51.38.96.239:57459] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 05:09:21.751119 2025] [:error] [pid 2161:tid 2237] [client 114.96.103.33:58053] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTCnASjiGdnP9Am2woVXfwAAAJQ"]
[Thu Dec 04 07:52:04.954283 2025] [autoindex:error] [pid 63321:tid 63338] [client 151.240.205.253:41918] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 11:01:34.615291 2025] [autoindex:error] [pid 63290:tid 63312] [client 199.244.88.228:49375] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 13:07:13.132076 2025] [:error] [pid 63381:tid 63453] [client 78.84.169.238:55004] [client 78.84.169.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTEXAeidz_S5muoRMEzNkAAAAko"]
[Thu Dec 04 17:47:17.203969 2025] [autoindex:error] [pid 38403:tid 38412] [client 34.239.182.202:55514] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 17:47:17.617825 2025] [autoindex:error] [pid 63322:tid 63365] [client 34.239.182.202:49350] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 18:17:03.605999 2025] [:error] [pid 2161:tid 2217] [client 182.43.70.143:45864] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTFfnyjiGdnP9Am2woUbDwAAAIA"]
[Thu Dec 04 18:23:25.836733 2025] [autoindex:error] [pid 63382:tid 63489] [client 164.92.106.141:59674] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 18:23:26.870114 2025] [autoindex:error] [pid 63321:tid 63342] [client 164.92.106.141:56466] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 20:58:07.731391 2025] [:error] [pid 63381:tid 63460] [client 223.237.150.130:63759] [client 223.237.150.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.237.150.130, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGFX-idz_S5muoRMEw92gAAAlE"]
[Thu Dec 04 20:58:07.745718 2025] [proxy_fcgi:error] [pid 63381:tid 63460] [client 223.237.150.130:63759] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 22:07:02.174401 2025] [autoindex:error] [pid 63383:tid 63435] [client 66.249.64.7:40875] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 22:52:28.565492 2025] [autoindex:error] [pid 63381:tid 63452] [client 47.252.21.241:63035] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 23:53:43.577025 2025] [:error] [pid 63383:tid 63426] [client 43.165.69.68:36458] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTGuh1JYyG_QEWdAPIXdhAAAAsk"]
[Fri Dec 05 02:00:50.502282 2025] [:error] [pid 4491:tid 4533] [client 182.42.110.255:60168] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTHMUiUq6tbvu6y_H_HXmAAAAMw"]
[Fri Dec 05 04:54:56.703291 2025] [autoindex:error] [pid 53838:tid 53885] [client 168.91.40.102:50651] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 04:54:59.606918 2025] [autoindex:error] [pid 53839:tid 53896] [client 168.91.40.102:5815] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 04:55:02.658904 2025] [autoindex:error] [pid 53839:tid 53916] [client 168.91.40.102:13177] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 04:55:05.655700 2025] [autoindex:error] [pid 24010:tid 24012] [client 168.91.40.102:58521] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 06:12:11.748025 2025] [autoindex:error] [pid 53839:tid 53908] [client 74.7.227.4:55688] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 06:31:02.415005 2025] [autoindex:error] [pid 24010:tid 24034] [client 93.158.91.244:51567] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 07:14:17.354011 2025] [autoindex:error] [pid 24010:tid 24016] [client 74.7.227.1:49882] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 07:59:51.639819 2025] [autoindex:error] [pid 24010:tid 24032] [client 47.252.21.203:35112] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 08:58:13.591203 2025] [autoindex:error] [pid 35173:tid 35175] [client 8.214.146.55:45784] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 08:58:14.465602 2025] [autoindex:error] [pid 35173:tid 35196] [client 8.214.146.55:57752] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 09:35:33.675171 2025] [autoindex:error] [pid 53838:tid 53881] [client 66.249.64.226:65079] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 14:58:08.195664 2025] [:error] [pid 24010:tid 24030] [client 43.166.246.180:58180] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTKCgKtjRoDpxa46mwcYvgAAARI"]
[Fri Dec 05 15:28:28.266675 2025] [:error] [pid 53837:tid 53851] [client 101.91.148.219:41459] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTKJnDbsUyTxys8OiMLf-wAAAAk"]
[Fri Dec 05 17:59:51.098322 2025] [autoindex:error] [pid 53839:tid 53898] [client 172.93.148.182:56712] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 18:35:19.349873 2025] [:error] [pid 18614:tid 18640] [client 152.56.133.196:55278] [client 152.56.133.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.56.133.196, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTK1Z3Hum9jj9plt7MUf-AAAAVg"]
[Fri Dec 05 18:35:19.360917 2025] [proxy_fcgi:error] [pid 18614:tid 18640] [client 152.56.133.196:55278] AH01071: Got error 'Primary script unknown'
[Fri Dec 05 18:49:55.669371 2025] [autoindex:error] [pid 18520:tid 18543] [client 172.93.148.182:44956] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 19:02:21.146176 2025] [autoindex:error] [pid 18614:tid 18635] [client 185.223.152.210:38601] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 20:04:01.719369 2025] [autoindex:error] [pid 18520:tid 18545] [client 34.221.198.131:50658] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 20:15:03.249107 2025] [autoindex:error] [pid 18614:tid 18640] [client 205.210.31.170:63100] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 20:23:05.077704 2025] [autoindex:error] [pid 18521:tid 18559] [client 158.173.158.43:10099] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 20:23:05.680583 2025] [autoindex:error] [pid 18614:tid 18640] [client 158.173.158.43:10268] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 20:23:10.739926 2025] [autoindex:error] [pid 35962:tid 35974] [client 35.209.198.222:46916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 20:23:11.642964 2025] [autoindex:error] [pid 35962:tid 35975] [client 133.18.234.13:45366] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 20:23:12.615110 2025] [autoindex:error] [pid 18614:tid 18634] [client 133.18.234.13:45370] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 21:46:51.022713 2025] [:error] [pid 18614:tid 18638] [client 18.234.242.206:56994] [client 18.234.242.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/"] [unique_id "aTLiS3Hum9jj9plt7MV1pgAAAVY"]
[Fri Dec 05 21:46:52.098436 2025] [:error] [pid 18614:tid 18634] [client 18.234.242.206:57006] [client 18.234.242.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aTLiTHHum9jj9plt7MV1qAAAAVI"]
[Fri Dec 05 22:04:13.482432 2025] [autoindex:error] [pid 18520:tid 18533] [client 100.42.185.115:39748] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 05 23:50:55.990921 2025] [autoindex:error] [pid 32416:tid 32432] [client 158.173.154.194:15698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 23:50:56.608527 2025] [autoindex:error] [pid 18579:tid 18595] [client 158.173.154.194:15728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 23:50:57.222101 2025] [autoindex:error] [pid 18521:tid 18551] [client 158.173.154.194:15783] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Dec 05 23:50:57.831729 2025] [autoindex:error] [pid 18579:tid 18598] [client 158.173.154.194:15826] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Dec 06 06:51:01.009308 2025] [:error] [pid 61215:tid 61219] [client 104.28.214.114:19521] [client 104.28.214.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aTNh1eOOZ8nTCBYuI-zduwAAAAA"]
[Sat Dec 06 08:14:55.446888 2025] [autoindex:error] [pid 35622:tid 35659] [client 34.245.77.195:53786] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 06 09:35:05.301528 2025] [:error] [pid 35622:tid 35675] [client 175.6.217.4:42847] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTOISSOSP_9DVLgFwI5mDAAAAZg"]
[Sat Dec 06 12:53:42.231740 2025] [:error] [pid 48399:tid 48406] [client 43.157.181.189:52560] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTO21ujNPOrIshd8EweD5QAAAcU"]
[Sat Dec 06 14:49:50.020664 2025] [:error] [pid 61215:tid 61219] [client 220.247.224.162:50757] [client 220.247.224.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTPSDuOOZ8nTCBYuI-wdqQAAAAA"]
[Sat Dec 06 17:13:48.710067 2025] [:error] [pid 61215:tid 61243] [client 104.28.214.117:63991] [client 104.28.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aTPzzOOOZ8nTCBYuI-wyAgAAABg"]
[Sat Dec 06 17:13:50.136131 2025] [:error] [pid 52809:tid 52833] [client 104.28.214.117:46996] [client 104.28.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/style.php"] [unique_id "aTPzzurRwgsmpIJQ2qZepAAAAhY"]
[Sat Dec 06 17:23:51.115519 2025] [:error] [pid 61303:tid 61322] [client 106.215.141.55:19938] [client 106.215.141.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.141.55, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTP2J9wK_fe00OH7zy55rQAAAM8"]
[Sat Dec 06 17:23:51.126217 2025] [proxy_fcgi:error] [pid 61303:tid 61322] [client 106.215.141.55:19938] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 21:50:26.691476 2025] [:error] [pid 61216:tid 61246] [client 182.44.10.67:56610] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTQ0ojHlXXVdP5ewviU7NQAAAEA"]
[Sat Dec 06 22:25:46.952174 2025] [:error] [pid 61215:tid 61227] [client 134.209.175.162:48388] [client 134.209.175.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTQ86uOOZ8nTCBYuI-xhewAAAAg"]
[Sat Dec 06 23:30:05.020995 2025] [autoindex:error] [pid 61303:tid 61321] [client 52.56.120.192:53799] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 06 23:30:06.102468 2025] [:error] [pid 61215:tid 61231] [client 52.56.120.192:53808] [client 52.56.120.192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cientifica.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aTRL_uOOZ8nTCBYuI-xqQwAAAAw"]
[Sun Dec 07 00:10:13.873857 2025] [:error] [pid 35591:tid 35603] [client 172.245.102.21:62567] [client 172.245.102.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.21, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTRVZYbmw-7bFvTxc9M81gAAAQo"]
[Sun Dec 07 00:10:13.885827 2025] [proxy_fcgi:error] [pid 35591:tid 35603] [client 172.245.102.21:62567] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 00:39:51.128463 2025] [autoindex:error] [pid 44818:tid 44855] [client 66.249.64.225:56101] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 01:23:38.035281 2025] [proxy_fcgi:error] [pid 29378:tid 29404] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.059272 2025] [proxy_fcgi:error] [pid 29378:tid 29398] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.086953 2025] [proxy_fcgi:error] [pid 29378:tid 29383] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.319191 2025] [proxy_fcgi:error] [pid 29378:tid 29396] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.339897 2025] [proxy_fcgi:error] [pid 29378:tid 29402] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.367486 2025] [proxy_fcgi:error] [pid 29378:tid 29382] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.386974 2025] [proxy_fcgi:error] [pid 29378:tid 29389] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.426243 2025] [proxy_fcgi:error] [pid 29378:tid 29394] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.446061 2025] [proxy_fcgi:error] [pid 29378:tid 29385] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.482010 2025] [proxy_fcgi:error] [pid 29378:tid 29393] [client 4.147.185.30:34399] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:23:38.500406 2025] [:error] [pid 29378:tid 29397] [client 4.147.185.30:34399] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aTRmmq0NYr_cN2P9iw6v3QAAAVE"]
[Sun Dec 07 01:23:39.092457 2025] [:error] [pid 44817:tid 44834] [client 4.147.185.30:26519] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aTRmm4q9cLyU8e8Cr9hFFAAAAAs"]
[Sun Dec 07 01:23:39.598527 2025] [:error] [pid 44818:tid 44875] [client 4.147.185.30:34369] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aTRmm1M8svkkGGrcPqO26QAAAFg"]
[Sun Dec 07 01:23:43.115950 2025] [:error] [pid 44818:tid 44868] [client 4.147.185.30:34379] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aTRmn1M8svkkGGrcPqO26gAAAFE"]
[Sun Dec 07 01:23:45.250891 2025] [:error] [pid 29378:tid 29380] [client 4.147.185.30:26553] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/85ohni.php"] [unique_id "aTRmoa0NYr_cN2P9iw6v_wAAAUA"]
[Sun Dec 07 01:23:47.945607 2025] [:error] [pid 44817:tid 44823] [client 4.147.185.30:26523] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/85ohni.php"] [unique_id "aTRmo4q9cLyU8e8Cr9hFGAAAAAA"]
[Sun Dec 07 01:23:48.929053 2025] [:error] [pid 29378:tid 29381] [client 4.147.185.30:34389] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/85ohni.php"] [unique_id "aTRmpK0NYr_cN2P9iw6wJQAAAUE"]
[Sun Dec 07 01:23:49.241365 2025] [:error] [pid 64409:tid 64481] [client 4.147.185.30:26527] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/85ohni.php"] [unique_id "aTRmpUGzBNWhWo-aXwQ1kQAAARQ"]
[Sun Dec 07 01:23:50.695873 2025] [:error] [pid 29378:tid 29386] [client 4.147.185.30:34373] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aTRmpq0NYr_cN2P9iw6wNgAAAUY"]
[Sun Dec 07 01:23:51.786243 2025] [:error] [pid 64409:tid 64465] [client 4.147.185.30:26509] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aTRmp0GzBNWhWo-aXwQ1lQAAAQU"]
[Sun Dec 07 01:23:52.915119 2025] [:error] [pid 64409:tid 64459] [client 4.147.185.30:34390] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aTRmqEGzBNWhWo-aXwQ1lwAAAQA"]
[Sun Dec 07 01:23:53.640728 2025] [:error] [pid 64409:tid 64476] [client 4.147.185.30:34414] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aTRmqUGzBNWhWo-aXwQ1mQAAAQ8"]
[Sun Dec 07 01:23:54.347922 2025] [:error] [pid 44818:tid 44857] [client 4.147.185.30:34386] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTRmqlM8svkkGGrcPqO2-QAAAEY"]
[Sun Dec 07 01:23:56.963141 2025] [:error] [pid 44817:tid 44844] [client 4.147.185.30:34428] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTRmrIq9cLyU8e8Cr9hFIQAAABU"]
[Sun Dec 07 01:23:57.153038 2025] [:error] [pid 64409:tid 64463] [client 4.147.185.30:26517] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTRmrUGzBNWhWo-aXwQ1mwAAAQM"]
[Sun Dec 07 01:23:57.377035 2025] [:error] [pid 44908:tid 44929] [client 4.147.185.30:26497] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTRmrcodqHTdtmkcdXDOOAAAANM"]
[Sun Dec 07 01:23:57.472416 2025] [:error] [pid 44818:tid 44863] [client 4.147.185.30:53471] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tyasd.php"] [unique_id "aTRmrVM8svkkGGrcPqO2-wAAAEw"]
[Sun Dec 07 01:23:57.569374 2025] [:error] [pid 64409:tid 64482] [client 4.147.185.30:26531] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tyasd.php"] [unique_id "aTRmrUGzBNWhWo-aXwQ1nAAAARU"]
[Sun Dec 07 01:23:57.748779 2025] [:error] [pid 64409:tid 64470] [client 4.147.185.30:26504] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tyasd.php"] [unique_id "aTRmrUGzBNWhWo-aXwQ1nQAAAQk"]
[Sun Dec 07 01:23:58.099390 2025] [:error] [pid 44817:tid 44823] [client 4.147.185.30:26536] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tyasd.php"] [unique_id "aTRmroq9cLyU8e8Cr9hFIgAAAAA"]
[Sun Dec 07 01:24:00.611098 2025] [:error] [pid 44817:tid 44836] [client 4.147.185.30:53484] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-set.php"] [unique_id "aTRmsIq9cLyU8e8Cr9hFIwAAAA0"]
[Sun Dec 07 01:24:01.850941 2025] [:error] [pid 29378:tid 29395] [client 4.147.185.30:26530] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-set.php"] [unique_id "aTRmsa0NYr_cN2P9iw6wVgAAAU8"]
[Sun Dec 07 01:24:03.220826 2025] [:error] [pid 64409:tid 64475] [client 4.147.185.30:26505] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-set.php"] [unique_id "aTRms0GzBNWhWo-aXwQ1qwAAAQ4"]
[Sun Dec 07 01:24:06.407915 2025] [:error] [pid 64409:tid 64465] [client 4.147.185.30:34387] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-set.php"] [unique_id "aTRmtkGzBNWhWo-aXwQ1rwAAAQU"]
[Sun Dec 07 01:24:08.810927 2025] [:error] [pid 44908:tid 44930] [client 4.147.185.30:26559] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AMW.php"] [unique_id "aTRmuModqHTdtmkcdXDOPgAAANQ"]
[Sun Dec 07 01:24:11.535653 2025] [:error] [pid 44819:tid 44890] [client 4.147.185.30:26501] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AMW.php"] [unique_id "aTRmuwOul9Pv7KHTFsh4FwAAAIw"]
[Sun Dec 07 01:24:12.164597 2025] [:error] [pid 44819:tid 44882] [client 4.147.185.30:26529] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AMW.php"] [unique_id "aTRmvAOul9Pv7KHTFsh4GgAAAIQ"]
[Sun Dec 07 01:24:14.015193 2025] [:error] [pid 64409:tid 64466] [client 4.147.185.30:53498] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AMW.php"] [unique_id "aTRmvkGzBNWhWo-aXwQ1sQAAAQY"]
[Sun Dec 07 01:24:14.195988 2025] [:error] [pid 44908:tid 44933] [client 4.147.185.30:26515] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file15.php"] [unique_id "aTRmvsodqHTdtmkcdXDOQAAAANc"]
[Sun Dec 07 01:24:14.685105 2025] [:error] [pid 44818:tid 44860] [client 4.147.185.30:34429] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file15.php"] [unique_id "aTRmvlM8svkkGGrcPqO3CwAAAEk"]
[Sun Dec 07 01:24:15.431356 2025] [:error] [pid 44819:tid 44901] [client 4.147.185.30:34368] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file15.php"] [unique_id "aTRmvwOul9Pv7KHTFsh4HQAAAJc"]
[Sun Dec 07 01:24:16.442351 2025] [:error] [pid 44819:tid 44899] [client 4.147.185.30:34419] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file15.php"] [unique_id "aTRmwAOul9Pv7KHTFsh4HwAAAJU"]
[Sun Dec 07 01:24:20.037510 2025] [:error] [pid 44819:tid 44883] [client 4.147.185.30:53465] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waba.php"] [unique_id "aTRmxAOul9Pv7KHTFsh4IQAAAIU"]
[Sun Dec 07 01:24:20.824085 2025] [:error] [pid 44818:tid 44862] [client 4.147.185.30:34385] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waba.php"] [unique_id "aTRmxFM8svkkGGrcPqO3DgAAAEs"]
[Sun Dec 07 01:24:21.350841 2025] [:error] [pid 64409:tid 64470] [client 4.147.185.30:26503] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waba.php"] [unique_id "aTRmxUGzBNWhWo-aXwQ1tgAAAQk"]
[Sun Dec 07 01:24:21.864136 2025] [:error] [pid 29378:tid 29380] [client 4.147.185.30:26502] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waba.php"] [unique_id "aTRmxa0NYr_cN2P9iw6wVwAAAUA"]
[Sun Dec 07 01:24:23.273172 2025] [:error] [pid 29378:tid 29404] [client 4.147.185.30:26554] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aTRmx60NYr_cN2P9iw6wWwAAAVg"]
[Sun Dec 07 01:24:25.045078 2025] [:error] [pid 44819:tid 44885] [client 4.147.185.30:26558] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aTRmyQOul9Pv7KHTFsh4JQAAAIc"]
[Sun Dec 07 01:24:26.602071 2025] [:error] [pid 29378:tid 29388] [client 4.147.185.30:34430] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aTRmyq0NYr_cN2P9iw6wYgAAAUg"]
[Sun Dec 07 01:24:28.435609 2025] [:error] [pid 44818:tid 44855] [client 4.147.185.30:53448] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aTRmzFM8svkkGGrcPqO3EwAAAEQ"]
[Sun Dec 07 01:24:29.694888 2025] [:error] [pid 29378:tid 29401] [client 4.147.185.30:50010] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aTRmza0NYr_cN2P9iw6waAAAAVU"]
[Sun Dec 07 01:24:30.365892 2025] [:error] [pid 29378:tid 29400] [client 4.147.185.30:26518] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aTRmzq0NYr_cN2P9iw6wagAAAVQ"]
[Sun Dec 07 01:24:32.438640 2025] [:error] [pid 64409:tid 64479] [client 4.147.185.30:26542] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aTRm0EGzBNWhWo-aXwQ1uQAAARI"]
[Sun Dec 07 01:24:32.916117 2025] [:error] [pid 44818:tid 44861] [client 4.147.185.30:34406] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aTRm0FM8svkkGGrcPqO3GAAAAEo"]
[Sun Dec 07 01:24:38.529505 2025] [proxy_fcgi:error] [pid 44818:tid 44867] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:38.550251 2025] [proxy_fcgi:error] [pid 44818:tid 44873] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:38.570210 2025] [proxy_fcgi:error] [pid 44818:tid 44859] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:38.862444 2025] [proxy_fcgi:error] [pid 44818:tid 44865] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:38.895826 2025] [proxy_fcgi:error] [pid 44818:tid 44862] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:38.936683 2025] [proxy_fcgi:error] [pid 44818:tid 44851] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:38.963242 2025] [proxy_fcgi:error] [pid 44818:tid 44863] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:39.135511 2025] [proxy_fcgi:error] [pid 44818:tid 44857] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:39.179672 2025] [proxy_fcgi:error] [pid 44818:tid 44875] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:39.209322 2025] [proxy_fcgi:error] [pid 44818:tid 44854] [client 4.147.185.30:26537] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:24:39.231566 2025] [:error] [pid 44818:tid 44855] [client 4.147.185.30:26537] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/11.php"] [unique_id "aTRm11M8svkkGGrcPqO3JQAAAEQ"]
[Sun Dec 07 01:24:45.452924 2025] [:error] [pid 44817:tid 44845] [client 4.147.185.30:34404] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aTRm3Yq9cLyU8e8Cr9hFLgAAABY"]
[Sun Dec 07 01:45:13.883942 2025] [autoindex:error] [pid 44908:tid 44929] [client 46.45.185.190:9239] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 01:54:43.771075 2025] [:error] [pid 44817:tid 44825] [client 38.246.33.200:51326] [client 38.246.33.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.200, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTRt44q9cLyU8e8Cr9hLdwAAAAI"]
[Sun Dec 07 01:54:43.782472 2025] [proxy_fcgi:error] [pid 44817:tid 44825] [client 38.246.33.200:51326] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 01:59:46.717181 2025] [autoindex:error] [pid 64409:tid 64477] [client 34.38.102.11:47368] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 01:59:47.250515 2025] [autoindex:error] [pid 44819:tid 44897] [client 34.38.102.11:46638] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:00:07.180842 2025] [autoindex:error] [pid 44908:tid 44910] [client 35.240.29.212:60102] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:00:07.709605 2025] [autoindex:error] [pid 44908:tid 44923] [client 35.240.29.212:33728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:02:00.854175 2025] [autoindex:error] [pid 44818:tid 44852] [client 34.78.11.25:51724] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:02:01.230531 2025] [autoindex:error] [pid 29378:tid 29381] [client 146.148.23.150:54348] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:02:36.918213 2025] [autoindex:error] [pid 44819:tid 44878] [client 35.195.253.50:41632] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:02:38.114898 2025] [autoindex:error] [pid 44817:tid 44839] [client 35.205.62.100:45244] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:16:15.990790 2025] [autoindex:error] [pid 44817:tid 44844] [client 34.96.44.107:29167] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 02:30:08.711725 2025] [:error] [pid 29378:tid 29386] [client 134.209.175.162:50568] [client 134.209.175.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTR2MK0NYr_cN2P9iw7KAgAAAUY"]
[Sun Dec 07 03:56:08.662227 2025] [:error] [pid 15506:tid 15540] [client 106.54.62.156:57414] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTSKWMhpKsRCeMVrVzcIyAAAAEE"]
[Sun Dec 07 04:26:56.632317 2025] [autoindex:error] [pid 34195:tid 34219] [client 37.19.223.3:64614] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 04:26:57.259245 2025] [autoindex:error] [pid 34195:tid 34217] [client 37.19.223.3:64731] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 04:26:58.280428 2025] [autoindex:error] [pid 34195:tid 34200] [client 23.247.136.254:28974] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 04:26:59.692210 2025] [autoindex:error] [pid 34195:tid 34204] [client 154.16.115.97:41402] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 04:27:00.941123 2025] [autoindex:error] [pid 34195:tid 34217] [client 154.16.115.97:41572] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 04:27:01.662227 2025] [autoindex:error] [pid 34195:tid 34218] [client 23.247.136.254:28976] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 05:06:45.813421 2025] [:error] [pid 13234:tid 13247] [client 209.38.31.76:34980] [client 209.38.31.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTSa5e6_dquQqQ60IZ-LkwAAAYY"]
[Sun Dec 07 05:06:50.908409 2025] [:error] [pid 13234:tid 13244] [client 209.38.31.76:48084] [client 209.38.31.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTSa6u6_dquQqQ60IZ-L1gAAAYM"]
[Sun Dec 07 05:51:13.932750 2025] [:error] [pid 7273:tid 7282] [client 136.144.43.240:55569] [client 136.144.43.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.240, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTSlUfpR7YTD7JcHjhG7TgAAAUc"]
[Sun Dec 07 05:51:14.005752 2025] [proxy_fcgi:error] [pid 7273:tid 7282] [client 136.144.43.240:55569] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 07:54:03.718095 2025] [autoindex:error] [pid 34195:tid 34220] [client 213.21.239.4:38842] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 09:16:38.407244 2025] [autoindex:error] [pid 34110:tid 34185] [client 37.19.223.100:52414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 09:16:39.036625 2025] [autoindex:error] [pid 13234:tid 13265] [client 37.19.223.100:52509] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 09:16:39.934826 2025] [autoindex:error] [pid 34109:tid 34156] [client 192.73.244.36:38202] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 09:16:46.511812 2025] [autoindex:error] [pid 34195:tid 34219] [client 202.55.67.194:43480] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 09:16:48.299630 2025] [autoindex:error] [pid 13234:tid 13250] [client 133.18.234.13:54076] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 09:16:54.017718 2025] [autoindex:error] [pid 7089:tid 7103] [client 192.73.244.36:50218] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Dec 07 09:28:33.251865 2025] [:error] [pid 25601:tid 25649] [client 5.252.55.178:54479] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTTYQatsSIqGPs4YVxHw0gAAAI4"]
[Sun Dec 07 09:28:34.351499 2025] [:error] [pid 25601:tid 25635] [client 5.252.55.178:58355] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTTYQqtsSIqGPs4YVxHxBAAAAIA"]
[Sun Dec 07 09:28:35.688112 2025] [:error] [pid 25601:tid 25646] [client 5.252.55.178:53044] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTTYQ6tsSIqGPs4YVxHxOQAAAIs"]
[Sun Dec 07 09:28:36.897646 2025] [:error] [pid 25694:tid 25700] [client 5.252.55.178:57357] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTTYREf7996cewJ5N2-3OQAAAQQ"]
[Sun Dec 07 09:28:38.059506 2025] [:error] [pid 25601:tid 25641] [client 5.252.55.178:55314] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTTYRqtsSIqGPs4YVxHxhwAAAIY"]
[Sun Dec 07 09:36:18.612218 2025] [:error] [pid 25694:tid 25700] [client 175.6.217.4:46692] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTTaEkf7996cewJ5N2-6ngAAAQQ"]
[Sun Dec 07 10:41:43.448248 2025] [:error] [pid 25600:tid 25628] [client 209.38.31.76:33166] [client 209.38.31.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTTpZ4X3SVrXRURpt5II2QAAAFU"]
[Sun Dec 07 10:41:53.541400 2025] [:error] [pid 25602:tid 25662] [client 209.38.31.76:55446] [client 209.38.31.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTTpcRMayYLriq9gRdec8wAAAMA"]
[Sun Dec 07 12:45:36.948071 2025] [autoindex:error] [pid 25600:tid 25610] [client 100.42.185.115:53402] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 13:03:22.602000 2025] [:error] [pid 25601:tid 25640] [client 85.209.135.111:58750] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTUKmqtsSIqGPs4YVxEhoQAAAIU"]
[Sun Dec 07 13:14:29.910817 2025] [proxy_fcgi:error] [pid 25601:tid 25643] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:30.215478 2025] [proxy_fcgi:error] [pid 25601:tid 25656] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:30.843140 2025] [proxy_fcgi:error] [pid 25601:tid 25639] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:31.164535 2025] [proxy_fcgi:error] [pid 25601:tid 25651] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:31.497154 2025] [proxy_fcgi:error] [pid 25601:tid 25638] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:31.810654 2025] [proxy_fcgi:error] [pid 25601:tid 25647] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:32.126623 2025] [proxy_fcgi:error] [pid 25601:tid 25635] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:32.443929 2025] [autoindex:error] [pid 25601:tid 25654] [client 45.86.202.169:59285] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 13:14:33.073256 2025] [proxy_fcgi:error] [pid 25601:tid 25644] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:33.379529 2025] [proxy_fcgi:error] [pid 25601:tid 25659] [client 45.86.202.169:59285] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 13:14:33.996644 2025] [:error] [pid 25601:tid 25655] [client 45.86.202.169:59285] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTUNOatsSIqGPs4YVxEjagAAAJQ"]
[Sun Dec 07 13:14:34.659423 2025] [:error] [pid 25694:tid 25706] [client 45.86.202.172:29381] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.example"] [unique_id "aTUNOkf7996cewJ5N2_6iwAAAQo"]
[Sun Dec 07 13:14:35.278135 2025] [:error] [pid 36068:tid 36094] [client 45.86.202.203:63127] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aTUNO1GuxqM4ZYob8lO80wAAABg"]
[Sun Dec 07 13:14:46.900719 2025] [:error] [pid 36068:tid 36089] [client 45.86.202.172:37713] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/config/.env"] [unique_id "aTUNRlGuxqM4ZYob8lO85QAAABM"]
[Sun Dec 07 13:21:26.677403 2025] [autoindex:error] [pid 25600:tid 25630] [client 38.242.154.95:48580] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 13:41:39.848513 2025] [:error] [pid 25600:tid 25611] [client 85.209.135.111:47766] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTUTk4X3SVrXRURpt5IuxgAAAEQ"]
[Sun Dec 07 13:41:40.522395 2025] [:error] [pid 25694:tid 25699] [client 85.209.135.111:58520] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTUTlEf7996cewJ5N28ALgAAAQM"]
[Sun Dec 07 14:39:08.177214 2025] [:error] [pid 25600:tid 25614] [client 143.198.224.89:55442] [client 143.198.224.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.224.89, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTUhDIX3SVrXRURpt5I4igAAAEc"]
[Sun Dec 07 14:39:08.190888 2025] [proxy_fcgi:error] [pid 25600:tid 25614] [client 143.198.224.89:55442] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 15:50:55.763300 2025] [:error] [pid 39560:tid 39577] [client 182.40.104.255:35182] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTUx3ytL21FvSzcnpi0XegAAAU8"]
[Sun Dec 07 15:57:47.770289 2025] [autoindex:error] [pid 25602:tid 25662] [client 143.198.216.45:59022] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 16:29:16.889024 2025] [:error] [pid 25602:tid 25686] [client 209.38.31.76:55124] [client 209.38.31.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTU63BMayYLriq9gRdflXwAAANg"]
[Sun Dec 07 16:29:21.964787 2025] [:error] [pid 25601:tid 25644] [client 209.38.31.76:55918] [client 209.38.31.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTU64atsSIqGPs4YVxFEGwAAAIk"]
[Sun Dec 07 16:57:21.069329 2025] [autoindex:error] [pid 36068:tid 36070] [client 74.7.227.27:36146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 17:02:19.079576 2025] [autoindex:error] [pid 25694:tid 25714] [client 74.7.227.153:50502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 20:24:35.487995 2025] [proxy_fcgi:error] [pid 5223:tid 5258] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:35.796278 2025] [proxy_fcgi:error] [pid 5223:tid 5265] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:36.409026 2025] [proxy_fcgi:error] [pid 5223:tid 5263] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:36.713658 2025] [proxy_fcgi:error] [pid 5223:tid 5266] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:37.019853 2025] [proxy_fcgi:error] [pid 5223:tid 5255] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:37.327102 2025] [proxy_fcgi:error] [pid 5223:tid 5260] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:37.634647 2025] [proxy_fcgi:error] [pid 5223:tid 5254] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:37.942643 2025] [autoindex:error] [pid 5223:tid 5274] [client 45.86.202.225:58199] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 20:24:38.554015 2025] [proxy_fcgi:error] [pid 5223:tid 5259] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:38.859766 2025] [proxy_fcgi:error] [pid 5223:tid 5264] [client 45.86.202.225:58199] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:24:39.476344 2025] [:error] [pid 5223:tid 5262] [client 45.86.202.225:58199] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTVyB_oRJa-T0FB0DNrg5AAAAIg"]
[Sun Dec 07 20:25:00.084841 2025] [:error] [pid 9610:tid 9632] [client 45.86.202.176:28363] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.backup"] [unique_id "aTVyHMZ4Zl9G0UhQ7w0skQAAARQ"]
[Sun Dec 07 20:25:00.687180 2025] [:error] [pid 9610:tid 9628] [client 45.86.202.173:31843] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/config/.env"] [unique_id "aTVyHMZ4Zl9G0UhQ7w0skwAAARA"]
[Sun Dec 07 21:02:49.961575 2025] [proxy_fcgi:error] [pid 5224:tid 5296] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:50.303610 2025] [proxy_fcgi:error] [pid 5224:tid 5305] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:50.990677 2025] [proxy_fcgi:error] [pid 5224:tid 5297] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:51.377611 2025] [proxy_fcgi:error] [pid 5224:tid 5299] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:51.973030 2025] [proxy_fcgi:error] [pid 5224:tid 5301] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:52.314359 2025] [proxy_fcgi:error] [pid 5224:tid 5291] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:52.651901 2025] [proxy_fcgi:error] [pid 5224:tid 5281] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:52.986980 2025] [autoindex:error] [pid 5224:tid 5292] [client 136.144.35.223:61481] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 21:02:53.661798 2025] [proxy_fcgi:error] [pid 5224:tid 5303] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:53.997772 2025] [proxy_fcgi:error] [pid 5224:tid 5289] [client 136.144.35.223:61481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 21:02:54.662189 2025] [:error] [pid 5224:tid 5288] [client 136.144.35.223:61481] [client 136.144.35.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTV6_vAAkbWt7RJBoF_nCQAAAMc"]
[Sun Dec 07 21:02:55.323680 2025] [:error] [pid 5224:tid 5285] [client 136.144.35.221:27943] [client 136.144.35.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.example"] [unique_id "aTV6__AAkbWt7RJBoF_nCwAAAMQ"]
[Sun Dec 07 21:02:55.988914 2025] [:error] [pid 9961:tid 9967] [client 136.144.35.239:43763] [client 136.144.35.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aTV6_2Qdnfbgcnzr89JZHwAAAUQ"]
[Sun Dec 07 21:02:56.650201 2025] [:error] [pid 9610:tid 9625] [client 136.144.35.215:59221] [client 136.144.35.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.backup"] [unique_id "aTV7AMZ4Zl9G0UhQ7w01SQAAAQ0"]
[Sun Dec 07 21:02:57.318035 2025] [:error] [pid 5312:tid 5332] [client 136.144.35.223:20213] [client 136.144.35.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/config/.env"] [unique_id "aTV7AeaM49rasZGg_o78KwAAABI"]
[Sun Dec 07 22:02:29.485542 2025] [:error] [pid 5223:tid 5273] [client 182.42.105.85:33410] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTWI9foRJa-T0FB0DNr0SgAAAJM"]
[Sun Dec 07 22:17:22.232564 2025] [autoindex:error] [pid 9610:tid 9626] [client 181.214.166.112:57253] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:24.165903 2025] [autoindex:error] [pid 9961:tid 9977] [client 207.182.25.49:16903] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:25.250673 2025] [autoindex:error] [pid 5312:tid 5321] [client 181.214.166.112:1510] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:26.410861 2025] [autoindex:error] [pid 5223:tid 5254] [client 148.59.185.48:27535] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:28.267083 2025] [autoindex:error] [pid 5222:tid 5250] [client 181.214.166.112:31957] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:30.428370 2025] [autoindex:error] [pid 5223:tid 5274] [client 168.245.206.22:25695] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:30.969258 2025] [autoindex:error] [pid 5312:tid 5332] [client 181.214.166.112:17046] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 22:17:31.759431 2025] [autoindex:error] [pid 5224:tid 5305] [client 168.245.206.22:47449] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 04:10:41.297940 2025] [:error] [pid 18634:tid 18642] [client 182.42.104.32:47744] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTXfQZ-H1wCBKPf4vhNlPgAAAAQ"]
[Mon Dec 08 06:19:57.405711 2025] [:error] [pid 18634:tid 18639] [client 179.107.114.48:64675] [client 179.107.114.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.107.114.48, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTX9jZ-H1wCBKPf4vhODFgAAAAE"]
[Mon Dec 08 06:19:57.419482 2025] [proxy_fcgi:error] [pid 18634:tid 18639] [client 179.107.114.48:64675] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 09:30:37.076446 2025] [:error] [pid 53927:tid 53933] [client 34.200.246.161:37050] [client 34.200.246.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTYqPbTtIvPZ1Cm2r05IpwAAAQQ"]
[Mon Dec 08 10:37:12.973108 2025] [:error] [pid 53927:tid 53936] [client 194.61.40.144:20279] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aTY52LTtIvPZ1Cm2r05uswAAAQc"]
[Mon Dec 08 10:37:13.339565 2025] [:error] [pid 53927:tid 53938] [client 194.61.40.113:60145] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aTY52bTtIvPZ1Cm2r05utQAAAQk"]
[Mon Dec 08 10:37:13.702450 2025] [:error] [pid 39261:tid 39273] [client 194.61.40.165:22805] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "aTY52XijlEqKrwMitDH2cQAAAMg"]
[Mon Dec 08 10:37:14.069500 2025] [:error] [pid 53927:tid 53933] [client 194.61.40.122:43145] [client 194.61.40.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "aTY52rTtIvPZ1Cm2r05uuAAAAQQ"]
[Mon Dec 08 10:37:14.437649 2025] [:error] [pid 53927:tid 53952] [client 194.61.40.114:46675] [client 194.61.40.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "aTY52rTtIvPZ1Cm2r05uuQAAARc"]
[Mon Dec 08 10:37:14.798005 2025] [:error] [pid 39161:tid 39229] [client 194.61.40.147:50143] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "aTY52uQBy-JdpUuZzWfftQAAAIk"]
[Mon Dec 08 10:37:15.389066 2025] [:error] [pid 39160:tid 39206] [client 194.61.40.139:34561] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "aTY52ym5Ndns0p3OT9Br6QAAAE4"]
[Mon Dec 08 10:37:15.750749 2025] [:error] [pid 39160:tid 39215] [client 194.61.40.161:31643] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "aTY52ym5Ndns0p3OT9Br6gAAAFY"]
[Mon Dec 08 10:37:16.111481 2025] [:error] [pid 39160:tid 39201] [client 194.61.40.146:44319] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTY53Cm5Ndns0p3OT9Br7AAAAEk"]
[Mon Dec 08 10:37:16.504406 2025] [:error] [pid 39159:tid 39188] [client 194.61.40.137:44591] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aTY53E48HaQt8jqjSbppowAAABc"]
[Mon Dec 08 10:37:16.866455 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.112:45911] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTY53Cm5Ndns0p3OT9Br7wAAAEc"]
[Mon Dec 08 10:37:17.228055 2025] [:error] [pid 39161:tid 39232] [client 194.61.40.146:46603] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "aTY53eQBy-JdpUuZzWffvAAAAIw"]
[Mon Dec 08 10:37:17.587951 2025] [:error] [pid 39161:tid 39234] [client 194.61.40.135:44647] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aTY53eQBy-JdpUuZzWffvgAAAI4"]
[Mon Dec 08 10:37:17.952026 2025] [:error] [pid 39161:tid 39236] [client 194.61.40.151:58495] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aTY53eQBy-JdpUuZzWffwAAAAJA"]
[Mon Dec 08 10:37:18.313913 2025] [:error] [pid 39159:tid 39184] [client 194.61.40.150:58843] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aTY53k48HaQt8jqjSbpppgAAABM"]
[Mon Dec 08 10:37:18.678836 2025] [:error] [pid 39160:tid 39204] [client 194.61.40.128:56749] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aTY53im5Ndns0p3OT9Br9AAAAEw"]
[Mon Dec 08 10:37:19.044587 2025] [:error] [pid 39159:tid 39180] [client 194.61.40.153:58641] [client 194.61.40.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aTY53048HaQt8jqjSbppqwAAAA8"]
[Mon Dec 08 10:37:19.418820 2025] [:error] [pid 53927:tid 53943] [client 194.61.40.110:27109] [client 194.61.40.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aTY537TtIvPZ1Cm2r05uuwAAAQ4"]
[Mon Dec 08 10:37:19.782606 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.134:36151] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aTY53ym5Ndns0p3OT9Br-AAAAEc"]
[Mon Dec 08 10:37:20.172976 2025] [:error] [pid 39160:tid 39202] [client 194.61.40.124:53853] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTY54Cm5Ndns0p3OT9Br_AAAAEo"]
[Mon Dec 08 10:37:20.534477 2025] [:error] [pid 39161:tid 39237] [client 194.61.40.133:57485] [client 194.61.40.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-mobile-detector/cache/settings_auto.php"] [unique_id "aTY54OQBy-JdpUuZzWffyQAAAJE"]
[Mon Dec 08 10:37:20.897064 2025] [:error] [pid 39159:tid 39187] [client 194.61.40.132:64523] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aTY54E48HaQt8jqjSbppwwAAABY"]
[Mon Dec 08 10:37:21.260127 2025] [:error] [pid 39159:tid 39175] [client 194.61.40.122:46459] [client 194.61.40.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTY54U48HaQt8jqjSbppyAAAAAo"]
[Mon Dec 08 10:37:21.623851 2025] [:error] [pid 53927:tid 53931] [client 194.61.40.117:64743] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aTY54bTtIvPZ1Cm2r05uvwAAAQI"]
[Mon Dec 08 10:37:21.987589 2025] [:error] [pid 39161:tid 39223] [client 194.61.40.147:32613] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTY54eQBy-JdpUuZzWff0AAAAIM"]
[Mon Dec 08 10:37:22.364718 2025] [:error] [pid 53927:tid 53952] [client 194.61.40.161:52747] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTY54rTtIvPZ1Cm2r05uwgAAARc"]
[Mon Dec 08 10:37:22.732864 2025] [:error] [pid 39261:tid 39273] [client 194.61.40.128:44403] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aTY54nijlEqKrwMitDH2jAAAAMg"]
[Mon Dec 08 10:37:23.093853 2025] [:error] [pid 53927:tid 53930] [client 194.61.40.161:20025] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTY547TtIvPZ1Cm2r05uwwAAAQE"]
[Mon Dec 08 10:37:23.459781 2025] [:error] [pid 39261:tid 39270] [client 194.61.40.149:57935] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTY543ijlEqKrwMitDH2jgAAAMU"]
[Mon Dec 08 10:37:23.822010 2025] [:error] [pid 53927:tid 53944] [client 194.61.40.115:57915] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aTY547TtIvPZ1Cm2r05uxwAAAQ8"]
[Mon Dec 08 10:37:24.183749 2025] [:error] [pid 39159:tid 39179] [client 194.61.40.114:54399] [client 194.61.40.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aTY55E48HaQt8jqjSbppzwAAAA4"]
[Mon Dec 08 10:37:24.545900 2025] [:error] [pid 39160:tid 39214] [client 194.61.40.163:44213] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "aTY55Cm5Ndns0p3OT9BsDgAAAFU"]
[Mon Dec 08 10:37:24.907460 2025] [:error] [pid 39159:tid 39175] [client 194.61.40.159:56527] [client 194.61.40.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aTY55E48HaQt8jqjSbpp0wAAAAo"]
[Mon Dec 08 10:37:25.274601 2025] [:error] [pid 39159:tid 39188] [client 194.61.40.150:35817] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aTY55U48HaQt8jqjSbpp1AAAABc"]
[Mon Dec 08 10:37:25.634363 2025] [:error] [pid 53927:tid 53938] [client 194.61.40.165:20197] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "aTY55bTtIvPZ1Cm2r05uyQAAAQk"]
[Mon Dec 08 10:37:25.995842 2025] [:error] [pid 39159:tid 39166] [client 194.61.40.136:43245] [client 194.61.40.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aTY55U48HaQt8jqjSbpp2gAAAAE"]
[Mon Dec 08 10:37:26.363021 2025] [:error] [pid 53927:tid 53942] [client 194.61.40.128:26897] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aTY55rTtIvPZ1Cm2r05uzAAAAQ0"]
[Mon Dec 08 10:37:26.728038 2025] [:error] [pid 39161:tid 39224] [client 194.61.40.111:51319] [client 194.61.40.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTY55uQBy-JdpUuZzWff1gAAAIQ"]
[Mon Dec 08 10:37:27.092792 2025] [:error] [pid 53927:tid 53930] [client 194.61.40.148:65461] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aTY557TtIvPZ1Cm2r05uzQAAAQE"]
[Mon Dec 08 10:37:27.455923 2025] [:error] [pid 53927:tid 53950] [client 194.61.40.124:21459] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aTY557TtIvPZ1Cm2r05u0AAAARU"]
[Mon Dec 08 10:37:27.819949 2025] [:error] [pid 39159:tid 39181] [client 194.61.40.117:40153] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTY55048HaQt8jqjSbpp4AAAABA"]
[Mon Dec 08 10:37:28.194632 2025] [:error] [pid 53927:tid 53942] [client 194.61.40.159:25907] [client 194.61.40.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "aTY56LTtIvPZ1Cm2r05u_gAAAQ0"]
[Mon Dec 08 10:37:28.560700 2025] [:error] [pid 53927:tid 53941] [client 194.61.40.128:48943] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aTY56LTtIvPZ1Cm2r05vHgAAAQw"]
[Mon Dec 08 10:37:28.999263 2025] [:error] [pid 53927:tid 53935] [client 194.61.40.163:49553] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTY56LTtIvPZ1Cm2r05vJQAAAQY"]
[Mon Dec 08 10:37:29.362420 2025] [:error] [pid 39261:tid 39272] [client 194.61.40.154:65265] [client 194.61.40.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTY56XijlEqKrwMitDH2qgAAAMc"]
[Mon Dec 08 10:37:29.723852 2025] [:error] [pid 39159:tid 39189] [client 194.61.40.116:26443] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aTY56U48HaQt8jqjSbpp7AAAABg"]
[Mon Dec 08 10:37:30.085399 2025] [:error] [pid 39159:tid 39166] [client 194.61.40.159:61197] [client 194.61.40.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aTY56k48HaQt8jqjSbpp7gAAAAE"]
[Mon Dec 08 10:37:30.448599 2025] [:error] [pid 53927:tid 53945] [client 194.61.40.136:44075] [client 194.61.40.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTY56rTtIvPZ1Cm2r05vLgAAARA"]
[Mon Dec 08 10:37:30.810964 2025] [:error] [pid 39161:tid 39237] [client 194.61.40.164:59313] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTY56uQBy-JdpUuZzWff3wAAAJE"]
[Mon Dec 08 10:37:31.175792 2025] [:error] [pid 53927:tid 53935] [client 194.61.40.123:26403] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTY567TtIvPZ1Cm2r05vMgAAAQY"]
[Mon Dec 08 10:37:31.538703 2025] [:error] [pid 53927:tid 53953] [client 194.61.40.122:26147] [client 194.61.40.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTY567TtIvPZ1Cm2r05vNAAAARg"]
[Mon Dec 08 10:37:31.901191 2025] [:error] [pid 39159:tid 39186] [client 194.61.40.166:58957] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTY56048HaQt8jqjSbpp-QAAABU"]
[Mon Dec 08 10:37:32.278444 2025] [:error] [pid 53927:tid 53937] [client 194.61.40.124:25871] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTY57LTtIvPZ1Cm2r05vWQAAAQg"]
[Mon Dec 08 10:37:32.643141 2025] [:error] [pid 53927:tid 53947] [client 194.61.40.147:55423] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTY57LTtIvPZ1Cm2r05vXQAAARI"]
[Mon Dec 08 10:37:33.007827 2025] [:error] [pid 39160:tid 39195] [client 194.61.40.161:62671] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTY57Sm5Ndns0p3OT9BsHAAAAEM"]
[Mon Dec 08 10:37:33.365989 2025] [:error] [pid 39261:tid 39272] [client 194.61.40.139:44211] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTY57XijlEqKrwMitDH2vgAAAMc"]
[Mon Dec 08 10:37:33.726797 2025] [:error] [pid 39261:tid 39265] [client 194.61.40.163:31139] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTY57XijlEqKrwMitDH2wAAAAMA"]
[Mon Dec 08 10:37:34.088604 2025] [:error] [pid 39261:tid 39275] [client 194.61.40.155:40161] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTY57nijlEqKrwMitDH2wgAAAMo"]
[Mon Dec 08 10:37:34.485987 2025] [:error] [pid 39160:tid 39216] [client 194.61.40.112:62273] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/plugins.php"] [unique_id "aTY57im5Ndns0p3OT9BsHgAAAFc"]
[Mon Dec 08 10:37:34.860850 2025] [:error] [pid 39161:tid 39227] [client 194.61.40.135:53475] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTY57uQBy-JdpUuZzWff4wAAAIc"]
[Mon Dec 08 10:37:35.225674 2025] [:error] [pid 53927:tid 53941] [client 194.61.40.161:47577] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTY577TtIvPZ1Cm2r05vZgAAAQw"]
[Mon Dec 08 10:37:35.616685 2025] [:error] [pid 53927:tid 53930] [client 194.61.40.166:45051] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/about.php"] [unique_id "aTY577TtIvPZ1Cm2r05vagAAAQE"]
[Mon Dec 08 10:37:35.978984 2025] [:error] [pid 53927:tid 53950] [client 194.61.40.154:24937] [client 194.61.40.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aTY577TtIvPZ1Cm2r05vbAAAARU"]
[Mon Dec 08 10:37:36.342164 2025] [:error] [pid 39261:tid 39272] [client 194.61.40.161:42233] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aTY58HijlEqKrwMitDH2yQAAAMc"]
[Mon Dec 08 10:37:36.706246 2025] [:error] [pid 39159:tid 39178] [client 194.61.40.132:29515] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTY58E48HaQt8jqjSbpqFgAAAA0"]
[Mon Dec 08 10:37:37.069492 2025] [:error] [pid 39159:tid 39189] [client 194.61.40.140:47007] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTY58U48HaQt8jqjSbpqFwAAABg"]
[Mon Dec 08 10:37:37.436504 2025] [:error] [pid 39160:tid 39208] [client 194.61.40.129:23047] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "aTY58Sm5Ndns0p3OT9BsIAAAAFA"]
[Mon Dec 08 10:37:37.800110 2025] [:error] [pid 39160:tid 39212] [client 194.61.40.166:56401] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/options.php"] [unique_id "aTY58Sm5Ndns0p3OT9BsIQAAAFM"]
[Mon Dec 08 10:37:38.174941 2025] [:error] [pid 39160:tid 39202] [client 194.61.40.122:40387] [client 194.61.40.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aTY58im5Ndns0p3OT9BsIgAAAEo"]
[Mon Dec 08 10:37:38.545067 2025] [:error] [pid 39261:tid 39281] [client 194.61.40.164:25227] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aTY58nijlEqKrwMitDH2ygAAANA"]
[Mon Dec 08 10:37:38.906381 2025] [:error] [pid 39160:tid 39203] [client 194.61.40.112:49191] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTY58im5Ndns0p3OT9BsIwAAAEs"]
[Mon Dec 08 10:37:39.270565 2025] [:error] [pid 53927:tid 53942] [client 194.61.40.124:21651] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTY587TtIvPZ1Cm2r05vdgAAAQ0"]
[Mon Dec 08 10:37:39.634433 2025] [:error] [pid 39161:tid 39222] [client 194.61.40.146:52717] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aTY58-QBy-JdpUuZzWff6wAAAII"]
[Mon Dec 08 10:37:39.995964 2025] [:error] [pid 39160:tid 39211] [client 194.61.40.149:46105] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wordfence-waf.php"] [unique_id "aTY58ym5Ndns0p3OT9BsJQAAAFI"]
[Mon Dec 08 10:37:40.382284 2025] [:error] [pid 53927:tid 53940] [client 194.61.40.152:35021] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah/function.php"] [unique_id "aTY59LTtIvPZ1Cm2r05veAAAAQs"]
[Mon Dec 08 10:37:40.748410 2025] [:error] [pid 39261:tid 39286] [client 194.61.40.114:47281] [client 194.61.40.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aTY59HijlEqKrwMitDH2zgAAANU"]
[Mon Dec 08 10:37:41.110886 2025] [:error] [pid 39161:tid 39244] [client 194.61.40.118:28637] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin.php"] [unique_id "aTY59eQBy-JdpUuZzWff8AAAAJg"]
[Mon Dec 08 10:37:41.477238 2025] [:error] [pid 53927:tid 53934] [client 194.61.40.149:45511] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aTY59bTtIvPZ1Cm2r05vfAAAAQU"]
[Mon Dec 08 10:37:41.842782 2025] [:error] [pid 39160:tid 39216] [client 194.61.40.109:24857] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aTY59Sm5Ndns0p3OT9BsJgAAAFc"]
[Mon Dec 08 10:37:42.205352 2025] [:error] [pid 39261:tid 39276] [client 194.61.40.123:26203] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aTY59nijlEqKrwMitDH21gAAAMs"]
[Mon Dec 08 10:37:42.565058 2025] [:error] [pid 39160:tid 39200] [client 194.61.40.149:49845] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aTY59im5Ndns0p3OT9BsKgAAAEg"]
[Mon Dec 08 10:37:42.927907 2025] [:error] [pid 39159:tid 39165] [client 194.61.40.155:50511] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aTY59k48HaQt8jqjSbpqHwAAAAA"]
[Mon Dec 08 10:37:43.607518 2025] [:error] [pid 39159:tid 39185] [client 194.61.40.141:35611] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/upload.php"] [unique_id "aTY59048HaQt8jqjSbpqIwAAABQ"]
[Mon Dec 08 10:37:43.969293 2025] [:error] [pid 39159:tid 39167] [client 194.61.40.109:28127] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aTY59048HaQt8jqjSbpqJQAAAAI"]
[Mon Dec 08 10:37:44.332613 2025] [:error] [pid 39160:tid 39205] [client 194.61.40.115:55661] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aTY5-Cm5Ndns0p3OT9BsLgAAAE0"]
[Mon Dec 08 10:37:44.697771 2025] [:error] [pid 39161:tid 39244] [client 194.61.40.111:48893] [client 194.61.40.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aTY5-OQBy-JdpUuZzWff-wAAAJg"]
[Mon Dec 08 10:37:45.060363 2025] [:error] [pid 39161:tid 39229] [client 194.61.40.164:35587] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xl2023.php"] [unique_id "aTY5-eQBy-JdpUuZzWff_QAAAIk"]
[Mon Dec 08 10:37:45.419367 2025] [:error] [pid 39161:tid 39238] [client 194.61.40.147:46501] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aTY5-eQBy-JdpUuZzWff_wAAAJI"]
[Mon Dec 08 10:37:45.779765 2025] [:error] [pid 39160:tid 39211] [client 194.61.40.112:47307] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/login.php"] [unique_id "aTY5-Sm5Ndns0p3OT9BsLwAAAFI"]
[Mon Dec 08 10:37:46.181615 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.159:27179] [client 194.61.40.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aTY5-im5Ndns0p3OT9BsMgAAAEc"]
[Mon Dec 08 10:37:46.548389 2025] [:error] [pid 39159:tid 39177] [client 194.61.40.155:42851] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aTY5-k48HaQt8jqjSbpqMAAAAAw"]
[Mon Dec 08 10:37:46.912016 2025] [:error] [pid 39161:tid 39225] [client 194.61.40.128:30617] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aTY5-uQBy-JdpUuZzWfgBwAAAIU"]
[Mon Dec 08 10:37:47.271942 2025] [:error] [pid 39160:tid 39217] [client 194.61.40.140:38653] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTY5-ym5Ndns0p3OT9BsNQAAAFg"]
[Mon Dec 08 10:37:47.634856 2025] [:error] [pid 39161:tid 39240] [client 194.61.40.120:60137] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTY5--QBy-JdpUuZzWfgCAAAAJQ"]
[Mon Dec 08 10:37:47.996314 2025] [:error] [pid 39159:tid 39189] [client 194.61.40.152:27545] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xleet.php"] [unique_id "aTY5-048HaQt8jqjSbpqMgAAABg"]
[Mon Dec 08 10:37:48.359773 2025] [:error] [pid 53927:tid 53948] [client 194.61.40.116:32489] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/pachr.php"] [unique_id "aTY5_LTtIvPZ1Cm2r05viwAAARM"]
[Mon Dec 08 10:37:48.726542 2025] [:error] [pid 39161:tid 39241] [client 194.61.40.163:38201] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTY5_OQBy-JdpUuZzWfgCwAAAJU"]
[Mon Dec 08 10:37:49.094251 2025] [:error] [pid 39159:tid 39172] [client 194.61.40.122:43985] [client 194.61.40.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aTY5_U48HaQt8jqjSbpqNwAAAAc"]
[Mon Dec 08 10:37:49.455228 2025] [:error] [pid 39160:tid 39206] [client 194.61.40.116:45301] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aTY5_Sm5Ndns0p3OT9BsOgAAAE4"]
[Mon Dec 08 10:37:49.817481 2025] [:error] [pid 39261:tid 39279] [client 194.61.40.166:48965] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aTY5_XijlEqKrwMitDH25AAAAM4"]
[Mon Dec 08 10:37:50.181604 2025] [:error] [pid 39160:tid 39201] [client 194.61.40.141:48113] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/user.php"] [unique_id "aTY5_im5Ndns0p3OT9BsOwAAAEk"]
[Mon Dec 08 10:37:50.546596 2025] [:error] [pid 39160:tid 39209] [client 194.61.40.163:27211] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aTY5_im5Ndns0p3OT9BsPAAAAFE"]
[Mon Dec 08 10:37:50.907659 2025] [:error] [pid 39159:tid 39189] [client 194.61.40.163:56859] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aTY5_k48HaQt8jqjSbpqOgAAABg"]
[Mon Dec 08 10:37:51.269940 2025] [:error] [pid 39160:tid 39200] [client 194.61.40.118:46267] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/text.php"] [unique_id "aTY5_ym5Ndns0p3OT9BsPgAAAEg"]
[Mon Dec 08 10:37:51.633566 2025] [:error] [pid 39261:tid 39281] [client 194.61.40.162:23943] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aTY5_3ijlEqKrwMitDH26QAAANA"]
[Mon Dec 08 10:37:51.995020 2025] [:error] [pid 39261:tid 39276] [client 194.61.40.112:32589] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTY5_3ijlEqKrwMitDH27AAAAMs"]
[Mon Dec 08 10:37:52.385135 2025] [:error] [pid 39261:tid 39277] [client 194.61.40.140:34109] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/demo.php"] [unique_id "aTY6AHijlEqKrwMitDH27QAAAMw"]
[Mon Dec 08 10:37:52.748809 2025] [:error] [pid 39261:tid 39269] [client 194.61.40.131:22949] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tiny.php"] [unique_id "aTY6AHijlEqKrwMitDH27gAAAMQ"]
[Mon Dec 08 10:37:53.112072 2025] [:error] [pid 53927:tid 53941] [client 194.61.40.158:38931] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aTY6AbTtIvPZ1Cm2r05vjgAAAQw"]
[Mon Dec 08 10:37:53.472958 2025] [:error] [pid 39159:tid 39177] [client 194.61.40.137:40733] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aTY6AU48HaQt8jqjSbpqPQAAAAw"]
[Mon Dec 08 10:37:53.845333 2025] [:error] [pid 39161:tid 39233] [client 194.61.40.150:61849] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aTY6AeQBy-JdpUuZzWfgFgAAAI0"]
[Mon Dec 08 10:37:54.205669 2025] [:error] [pid 53927:tid 53931] [client 194.61.40.113:55423] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTY6ArTtIvPZ1Cm2r05vjwAAAQI"]
[Mon Dec 08 10:37:54.566929 2025] [:error] [pid 39161:tid 39232] [client 194.61.40.158:50219] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aTY6AuQBy-JdpUuZzWfgGAAAAIw"]
[Mon Dec 08 10:37:54.930922 2025] [:error] [pid 39159:tid 39182] [client 194.61.40.117:34863] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xxx.php"] [unique_id "aTY6Ak48HaQt8jqjSbpqPwAAABE"]
[Mon Dec 08 10:37:55.294769 2025] [:error] [pid 39261:tid 39280] [client 194.61.40.147:47901] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aTY6A3ijlEqKrwMitDH29AAAAM8"]
[Mon Dec 08 10:37:55.658094 2025] [:error] [pid 39159:tid 39174] [client 194.61.40.109:30859] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTY6A048HaQt8jqjSbpqQgAAAAk"]
[Mon Dec 08 10:37:56.018866 2025] [:error] [pid 39159:tid 39181] [client 194.61.40.111:51439] [client 194.61.40.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aTY6BE48HaQt8jqjSbpqRAAAABA"]
[Mon Dec 08 10:37:56.385213 2025] [:error] [pid 39261:tid 39278] [client 194.61.40.128:26741] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTY6BHijlEqKrwMitDH29gAAAM0"]
[Mon Dec 08 10:37:56.757615 2025] [:error] [pid 53927:tid 53942] [client 194.61.40.141:39645] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aTY6BLTtIvPZ1Cm2r05vkgAAAQ0"]
[Mon Dec 08 10:37:57.123023 2025] [:error] [pid 39261:tid 39282] [client 194.61.40.118:50685] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aTY6BXijlEqKrwMitDH2-QAAANE"]
[Mon Dec 08 10:37:57.486844 2025] [:error] [pid 39261:tid 39276] [client 194.61.40.133:33955] [client 194.61.40.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTY6BXijlEqKrwMitDH2-wAAAMs"]
[Mon Dec 08 10:37:57.848165 2025] [:error] [pid 39160:tid 39192] [client 194.61.40.128:24109] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTY6BSm5Ndns0p3OT9BsSgAAAEA"]
[Mon Dec 08 10:37:58.213104 2025] [:error] [pid 53927:tid 53946] [client 194.61.40.120:34347] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aTY6BrTtIvPZ1Cm2r05vlgAAARE"]
[Mon Dec 08 10:37:58.573044 2025] [:error] [pid 39160:tid 39205] [client 194.61.40.149:53017] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aTY6Bim5Ndns0p3OT9BsTQAAAE0"]
[Mon Dec 08 10:37:58.937166 2025] [:error] [pid 39161:tid 39232] [client 194.61.40.112:55699] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez/admin.php"] [unique_id "aTY6BuQBy-JdpUuZzWfgHgAAAIw"]
[Mon Dec 08 10:37:59.298361 2025] [:error] [pid 39161:tid 39239] [client 194.61.40.135:37141] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "aTY6B-QBy-JdpUuZzWfgHwAAAJM"]
[Mon Dec 08 10:37:59.659920 2025] [:error] [pid 39159:tid 39179] [client 194.61.40.164:52425] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "aTY6B048HaQt8jqjSbpqSAAAAA4"]
[Mon Dec 08 10:38:00.019289 2025] [:error] [pid 39261:tid 39276] [client 194.61.40.116:46411] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "aTY6CHijlEqKrwMitDH3AgAAAMs"]
[Mon Dec 08 10:38:00.386660 2025] [:error] [pid 53927:tid 53941] [client 194.61.40.116:30719] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aTY6CLTtIvPZ1Cm2r05vmgAAAQw"]
[Mon Dec 08 10:38:00.747398 2025] [:error] [pid 39261:tid 39284] [client 194.61.40.121:41941] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Globy/index.php"] [unique_id "aTY6CHijlEqKrwMitDH3AwAAANM"]
[Mon Dec 08 10:38:01.114251 2025] [:error] [pid 53927:tid 53944] [client 194.61.40.129:52579] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "aTY6CbTtIvPZ1Cm2r05vnQAAAQ8"]
[Mon Dec 08 10:38:01.485132 2025] [:error] [pid 53927:tid 53939] [client 194.61.40.128:57021] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/atomic/error.php"] [unique_id "aTY6CbTtIvPZ1Cm2r05vnwAAAQo"]
[Mon Dec 08 10:38:01.889068 2025] [:error] [pid 39161:tid 39227] [client 194.61.40.117:53297] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez5/index.php"] [unique_id "aTY6CeQBy-JdpUuZzWfgIgAAAIc"]
[Mon Dec 08 10:38:02.279409 2025] [:error] [pid 39159:tid 39169] [client 194.61.40.135:39823] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "aTY6Ck48HaQt8jqjSbpqTAAAAAQ"]
[Mon Dec 08 10:38:02.838994 2025] [:error] [pid 39159:tid 39172] [client 194.61.40.134:42583] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "aTY6Ck48HaQt8jqjSbpqUgAAAAc"]
[Mon Dec 08 10:38:03.236014 2025] [:error] [pid 39159:tid 39185] [client 194.61.40.158:36129] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "aTY6C048HaQt8jqjSbpqVAAAABQ"]
[Mon Dec 08 10:38:03.601716 2025] [:error] [pid 39159:tid 39177] [client 194.61.40.115:42983] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "aTY6C048HaQt8jqjSbpqVQAAAAw"]
[Mon Dec 08 10:38:03.976014 2025] [:error] [pid 39159:tid 39167] [client 194.61.40.165:55827] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "aTY6C048HaQt8jqjSbpqWAAAAAI"]
[Mon Dec 08 10:38:04.347867 2025] [:error] [pid 39159:tid 39169] [client 194.61.40.159:46667] [client 194.61.40.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "aTY6DE48HaQt8jqjSbpqWgAAAAQ"]
[Mon Dec 08 10:38:04.723151 2025] [:error] [pid 39159:tid 39184] [client 194.61.40.125:35787] [client 194.61.40.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Globy/error.php"] [unique_id "aTY6DE48HaQt8jqjSbpqXAAAABM"]
[Mon Dec 08 10:38:05.088833 2025] [:error] [pid 53927:tid 53933] [client 194.61.40.128:50793] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "aTY6DbTtIvPZ1Cm2r05vpAAAAQQ"]
[Mon Dec 08 10:38:05.480703 2025] [:error] [pid 39159:tid 39165] [client 194.61.40.137:42605] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "aTY6DU48HaQt8jqjSbpqXwAAAAA"]
[Mon Dec 08 10:38:05.841150 2025] [:error] [pid 39261:tid 39272] [client 194.61.40.113:35767] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "aTY6DXijlEqKrwMitDH3BwAAAMc"]
[Mon Dec 08 10:38:06.201101 2025] [:error] [pid 39261:tid 39285] [client 194.61.40.141:49985] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/isis/error.php"] [unique_id "aTY6DnijlEqKrwMitDH3CgAAANQ"]
[Mon Dec 08 10:38:06.571295 2025] [:error] [pid 53927:tid 53931] [client 194.61.40.118:30207] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "aTY6DrTtIvPZ1Cm2r05vpwAAAQI"]
[Mon Dec 08 10:38:06.932285 2025] [:error] [pid 39161:tid 39242] [client 194.61.40.134:59939] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "aTY6DuQBy-JdpUuZzWfgKAAAAJY"]
[Mon Dec 08 10:38:07.294734 2025] [:error] [pid 39160:tid 39209] [client 194.61.40.121:24001] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Raees/index.php"] [unique_id "aTY6Dym5Ndns0p3OT9BsUQAAAFE"]
[Mon Dec 08 10:38:07.659629 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.146:56303] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "aTY6Dym5Ndns0p3OT9BsUgAAAEc"]
[Mon Dec 08 10:38:08.020299 2025] [:error] [pid 39261:tid 39267] [client 194.61.40.135:48941] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Binv/error.php"] [unique_id "aTY6EHijlEqKrwMitDH3DQAAAMI"]
[Mon Dec 08 10:38:08.384791 2025] [:error] [pid 39161:tid 39241] [client 194.61.40.163:40881] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "aTY6EOQBy-JdpUuZzWfgKQAAAJU"]
[Mon Dec 08 10:38:08.779031 2025] [:error] [pid 39159:tid 39178] [client 194.61.40.124:24715] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Atum/error.php"] [unique_id "aTY6EE48HaQt8jqjSbpqaAAAAA0"]
[Mon Dec 08 10:38:09.175687 2025] [:error] [pid 39161:tid 39230] [client 194.61.40.118:51129] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/protostar/error.php"] [unique_id "aTY6EeQBy-JdpUuZzWfgKwAAAIo"]
[Mon Dec 08 10:38:09.537254 2025] [:error] [pid 39159:tid 39174] [client 194.61.40.141:58871] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "aTY6EU48HaQt8jqjSbpqbAAAAAk"]
[Mon Dec 08 10:38:09.897788 2025] [:error] [pid 53927:tid 53933] [client 194.61.40.152:58621] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aTY6EbTtIvPZ1Cm2r05vrQAAAQQ"]
[Mon Dec 08 10:38:10.278883 2025] [:error] [pid 39159:tid 39166] [client 194.61.40.124:43543] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aTY6Ek48HaQt8jqjSbpqbQAAAAE"]
[Mon Dec 08 10:38:10.646376 2025] [:error] [pid 39159:tid 39186] [client 194.61.40.151:41571] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/protostar/index.php"] [unique_id "aTY6Ek48HaQt8jqjSbpqbgAAABU"]
[Mon Dec 08 10:38:11.008467 2025] [:error] [pid 39159:tid 39185] [client 194.61.40.140:55951] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Atum/index.php"] [unique_id "aTY6E048HaQt8jqjSbpqcQAAABQ"]
[Mon Dec 08 10:38:11.381179 2025] [:error] [pid 53927:tid 53929] [client 194.61.40.116:63863] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "aTY6E7TtIvPZ1Cm2r05vswAAAQA"]
[Mon Dec 08 10:38:11.771492 2025] [:error] [pid 53927:tid 53946] [client 194.61.40.114:48805] [client 194.61.40.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "aTY6E7TtIvPZ1Cm2r05vtQAAARE"]
[Mon Dec 08 10:38:12.134040 2025] [:error] [pid 53927:tid 53940] [client 194.61.40.152:34101] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/isis/index.php"] [unique_id "aTY6FLTtIvPZ1Cm2r05vtwAAAQs"]
[Mon Dec 08 10:38:12.496106 2025] [:error] [pid 53927:tid 53936] [client 194.61.40.141:38337] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "aTY6FLTtIvPZ1Cm2r05vuQAAAQc"]
[Mon Dec 08 10:38:12.876822 2025] [:error] [pid 53927:tid 53945] [client 194.61.40.152:41669] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Binv/index.php"] [unique_id "aTY6FLTtIvPZ1Cm2r05vuwAAARA"]
[Mon Dec 08 10:38:13.240780 2025] [:error] [pid 39161:tid 39242] [client 194.61.40.139:57839] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/JMart/error.php"] [unique_id "aTY6FeQBy-JdpUuZzWfgMAAAAJY"]
[Mon Dec 08 10:38:13.606028 2025] [:error] [pid 53927:tid 53940] [client 194.61.40.132:20053] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "aTY6FbTtIvPZ1Cm2r05vvQAAAQs"]
[Mon Dec 08 10:38:13.970889 2025] [:error] [pid 53927:tid 53934] [client 194.61.40.135:39831] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/atomic/index.php"] [unique_id "aTY6FbTtIvPZ1Cm2r05vwAAAAQU"]
[Mon Dec 08 10:38:14.336262 2025] [:error] [pid 39261:tid 39285] [client 194.61.40.116:50013] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "aTY6FnijlEqKrwMitDH3FgAAANQ"]
[Mon Dec 08 10:38:14.708751 2025] [:error] [pid 39159:tid 39172] [client 194.61.40.112:42425] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "aTY6Fk48HaQt8jqjSbpqdAAAAAc"]
[Mon Dec 08 10:38:15.083562 2025] [:error] [pid 39159:tid 39179] [client 194.61.40.166:41641] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "aTY6F048HaQt8jqjSbpqdQAAAA4"]
[Mon Dec 08 10:38:15.446902 2025] [:error] [pid 39159:tid 39184] [client 194.61.40.123:38313] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "aTY6F048HaQt8jqjSbpqdwAAABM"]
[Mon Dec 08 10:38:15.813831 2025] [:error] [pid 39161:tid 39224] [client 194.61.40.144:47655] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "aTY6F-QBy-JdpUuZzWfgNgAAAIQ"]
[Mon Dec 08 10:38:16.190799 2025] [:error] [pid 39161:tid 39226] [client 194.61.40.121:45677] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "aTY6GOQBy-JdpUuZzWfgNwAAAIY"]
[Mon Dec 08 10:38:16.574055 2025] [:error] [pid 39159:tid 39168] [client 194.61.40.162:28117] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "aTY6GE48HaQt8jqjSbpqewAAAAM"]
[Mon Dec 08 10:38:16.949976 2025] [:error] [pid 39160:tid 39212] [client 194.61.40.140:43541] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/hathor/index.php"] [unique_id "aTY6GCm5Ndns0p3OT9BsVwAAAFM"]
[Mon Dec 08 10:38:17.319688 2025] [:error] [pid 39159:tid 39165] [client 194.61.40.112:20455] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Genius/error.php"] [unique_id "aTY6GU48HaQt8jqjSbpqfwAAAAA"]
[Mon Dec 08 10:38:17.681284 2025] [:error] [pid 39261:tid 39288] [client 194.61.40.162:45785] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "aTY6GXijlEqKrwMitDH3GwAAANc"]
[Mon Dec 08 10:38:18.041945 2025] [:error] [pid 53927:tid 53946] [client 194.61.40.115:54945] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "aTY6GrTtIvPZ1Cm2r05vxgAAARE"]
[Mon Dec 08 10:38:18.405121 2025] [:error] [pid 39159:tid 39174] [client 194.61.40.121:29653] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "aTY6Gk48HaQt8jqjSbpqgwAAAAk"]
[Mon Dec 08 10:38:18.771750 2025] [:error] [pid 39261:tid 39275] [client 194.61.40.162:36397] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/hathor/error.php"] [unique_id "aTY6GnijlEqKrwMitDH3HgAAAMo"]
[Mon Dec 08 10:38:19.135351 2025] [:error] [pid 53927:tid 53932] [client 194.61.40.126:32403] [client 194.61.40.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "aTY6G7TtIvPZ1Cm2r05vywAAAQM"]
[Mon Dec 08 10:38:19.501691 2025] [:error] [pid 53927:tid 53929] [client 194.61.40.153:64823] [client 194.61.40.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aTY6G7TtIvPZ1Cm2r05vzQAAAQA"]
[Mon Dec 08 10:38:19.878747 2025] [:error] [pid 39160:tid 39198] [client 194.61.40.146:55233] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "aTY6Gym5Ndns0p3OT9BsWwAAAEY"]
[Mon Dec 08 10:38:20.422240 2025] [:error] [pid 39261:tid 39277] [client 194.61.40.129:58305] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/JMart/index.php"] [unique_id "aTY6HHijlEqKrwMitDH3JAAAAMw"]
[Mon Dec 08 10:38:20.789020 2025] [:error] [pid 39160:tid 39196] [client 194.61.40.147:48593] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez/index.php"] [unique_id "aTY6HCm5Ndns0p3OT9BsXAAAAEQ"]
[Mon Dec 08 10:38:21.165458 2025] [:error] [pid 39160:tid 39209] [client 194.61.40.126:55429] [client 194.61.40.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "aTY6HSm5Ndns0p3OT9BsXwAAAFE"]
[Mon Dec 08 10:38:21.531710 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.136:25937] [client 194.61.40.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/beez5/error.php"] [unique_id "aTY6HSm5Ndns0p3OT9BsYAAAAEc"]
[Mon Dec 08 10:38:21.897897 2025] [:error] [pid 39261:tid 39279] [client 194.61.40.161:30715] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Genius/index.php"] [unique_id "aTY6HXijlEqKrwMitDH3JgAAAM4"]
[Mon Dec 08 10:38:22.305662 2025] [:error] [pid 39261:tid 39282] [client 194.61.40.110:64065] [client 194.61.40.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "aTY6HnijlEqKrwMitDH3KgAAANE"]
[Mon Dec 08 10:38:22.667922 2025] [:error] [pid 39159:tid 39189] [client 194.61.40.128:46139] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Raees/error.php"] [unique_id "aTY6Hk48HaQt8jqjSbpqiQAAABg"]
[Mon Dec 08 10:38:23.037249 2025] [:error] [pid 39261:tid 39277] [client 194.61.40.153:31875] [client 194.61.40.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "aTY6H3ijlEqKrwMitDH3LwAAAMw"]
[Mon Dec 08 10:38:23.400757 2025] [:error] [pid 39159:tid 39187] [client 194.61.40.139:48549] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "aTY6H048HaQt8jqjSbpqjAAAABY"]
[Mon Dec 08 10:38:23.782626 2025] [:error] [pid 39159:tid 39188] [client 194.61.40.110:34009] [client 194.61.40.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "aTY6H048HaQt8jqjSbpqjwAAABc"]
[Mon Dec 08 10:38:24.173435 2025] [:error] [pid 39160:tid 39213] [client 194.61.40.112:33339] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "aTY6ICm5Ndns0p3OT9BsZQAAAFQ"]
[Mon Dec 08 10:38:24.539421 2025] [:error] [pid 53927:tid 53946] [client 194.61.40.112:31737] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "aTY6ILTtIvPZ1Cm2r05v2gAAARE"]
[Mon Dec 08 10:38:24.904468 2025] [:error] [pid 39160:tid 39198] [client 194.61.40.112:32343] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "aTY6ICm5Ndns0p3OT9BsaAAAAEY"]
[Mon Dec 08 10:38:25.267541 2025] [:error] [pid 39261:tid 39282] [client 194.61.40.149:36009] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "aTY6IXijlEqKrwMitDH3NQAAANE"]
[Mon Dec 08 10:38:25.873230 2025] [:error] [pid 53927:tid 53936] [client 194.61.40.124:59679] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aTY6IbTtIvPZ1Cm2r05v4QAAAQc"]
[Mon Dec 08 10:38:27.760160 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.118:31867] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aTY6Iym5Ndns0p3OT9BsawAAAEc"]
[Mon Dec 08 10:38:28.120901 2025] [:error] [pid 39261:tid 39276] [client 194.61.40.144:44771] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "aTY6JHijlEqKrwMitDH3OwAAAMs"]
[Mon Dec 08 10:38:28.483676 2025] [:error] [pid 39159:tid 39181] [client 194.61.40.162:59359] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "aTY6JE48HaQt8jqjSbpqmQAAABA"]
[Mon Dec 08 10:38:28.846122 2025] [:error] [pid 39160:tid 39217] [client 194.61.40.138:45615] [client 194.61.40.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "aTY6JCm5Ndns0p3OT9BsbQAAAFg"]
[Mon Dec 08 10:38:30.837460 2025] [:error] [pid 39159:tid 39170] [client 194.61.40.124:44559] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "aTY6Jk48HaQt8jqjSbpqoAAAAAU"]
[Mon Dec 08 10:38:31.222474 2025] [:error] [pid 39261:tid 39265] [client 194.61.40.151:56793] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "aTY6J3ijlEqKrwMitDH3QwAAAMA"]
[Mon Dec 08 10:38:31.588251 2025] [:error] [pid 39261:tid 39271] [client 194.61.40.121:57897] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "aTY6J3ijlEqKrwMitDH3RQAAAMY"]
[Mon Dec 08 10:38:31.948407 2025] [:error] [pid 39261:tid 39283] [client 194.61.40.129:56943] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/modules/modules.php"] [unique_id "aTY6J3ijlEqKrwMitDH3RgAAANI"]
[Mon Dec 08 10:38:32.312999 2025] [:error] [pid 39159:tid 39187] [client 194.61.40.155:41541] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "aTY6KE48HaQt8jqjSbpqoQAAABY"]
[Mon Dec 08 10:38:32.679870 2025] [:error] [pid 39159:tid 39181] [client 194.61.40.146:63397] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "aTY6KE48HaQt8jqjSbpqpAAAABA"]
[Mon Dec 08 10:38:33.042959 2025] [:error] [pid 39261:tid 39270] [client 194.61.40.141:29749] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "aTY6KXijlEqKrwMitDH3SQAAAMU"]
[Mon Dec 08 10:38:33.403729 2025] [:error] [pid 39261:tid 39276] [client 194.61.40.116:41831] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "aTY6KXijlEqKrwMitDH3TAAAAMs"]
[Mon Dec 08 10:38:33.767823 2025] [:error] [pid 39261:tid 39282] [client 194.61.40.124:36667] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/vendor/composer/about.php"] [unique_id "aTY6KXijlEqKrwMitDH3TgAAANE"]
[Mon Dec 08 10:38:34.139745 2025] [:error] [pid 39261:tid 39288] [client 194.61.40.118:26505] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "aTY6KnijlEqKrwMitDH3UQAAANc"]
[Mon Dec 08 10:38:34.507088 2025] [:error] [pid 39261:tid 39275] [client 194.61.40.118:34725] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "aTY6KnijlEqKrwMitDH3UgAAAMo"]
[Mon Dec 08 10:38:34.876412 2025] [:error] [pid 39160:tid 39214] [client 194.61.40.131:22407] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aTY6Kim5Ndns0p3OT9BsbgAAAFU"]
[Mon Dec 08 10:38:35.246940 2025] [:error] [pid 39160:tid 39201] [client 194.61.40.109:43073] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "aTY6Kym5Ndns0p3OT9BsbwAAAEk"]
[Mon Dec 08 10:38:35.608500 2025] [:error] [pid 53927:tid 53932] [client 194.61.40.113:54889] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "aTY6K7TtIvPZ1Cm2r05v6wAAAQM"]
[Mon Dec 08 10:38:35.970003 2025] [:error] [pid 39160:tid 39200] [client 194.61.40.130:61037] [client 194.61.40.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "aTY6Kym5Ndns0p3OT9BscgAAAEg"]
[Mon Dec 08 10:38:37.922793 2025] [:error] [pid 39159:tid 39173] [client 194.61.40.148:57913] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "aTY6LU48HaQt8jqjSbpqrwAAAAg"]
[Mon Dec 08 10:38:38.286130 2025] [:error] [pid 39261:tid 39282] [client 194.61.40.162:62167] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "aTY6LnijlEqKrwMitDH3WwAAANE"]
[Mon Dec 08 10:38:38.652301 2025] [:error] [pid 53927:tid 53945] [client 194.61.40.116:38549] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aTY6LrTtIvPZ1Cm2r05v8gAAARA"]
[Mon Dec 08 10:38:39.021670 2025] [:error] [pid 39159:tid 39186] [client 194.61.40.140:31007] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aTY6L048HaQt8jqjSbpqsQAAABU"]
[Mon Dec 08 10:38:39.382447 2025] [:error] [pid 53927:tid 53948] [client 194.61.40.163:43849] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aTY6L7TtIvPZ1Cm2r05v9QAAARM"]
[Mon Dec 08 10:38:39.772336 2025] [:error] [pid 53927:tid 53946] [client 194.61.40.140:26967] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aTY6L7TtIvPZ1Cm2r05v-AAAARE"]
[Mon Dec 08 10:38:40.141650 2025] [:error] [pid 39160:tid 39217] [client 194.61.40.147:34037] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/log.php"] [unique_id "aTY6MCm5Ndns0p3OT9BsdwAAAFg"]
[Mon Dec 08 10:38:40.503871 2025] [:error] [pid 39159:tid 39168] [client 194.61.40.135:20263] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/include/student.php"] [unique_id "aTY6ME48HaQt8jqjSbpqsgAAAAM"]
[Mon Dec 08 10:38:40.870658 2025] [:error] [pid 53927:tid 53940] [client 194.61.40.116:51411] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/cache.php"] [unique_id "aTY6MLTtIvPZ1Cm2r05v_QAAAQs"]
[Mon Dec 08 10:38:41.261185 2025] [:error] [pid 53927:tid 53953] [client 194.61.40.151:36449] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/administrator/index.php"] [unique_id "aTY6MbTtIvPZ1Cm2r05v_gAAARg"]
[Mon Dec 08 10:38:41.624760 2025] [:error] [pid 53927:tid 53945] [client 194.61.40.135:62657] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "aTY6MbTtIvPZ1Cm2r05v_wAAARA"]
[Mon Dec 08 10:38:41.987824 2025] [:error] [pid 53927:tid 53948] [client 194.61.40.157:39899] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/local/index.php"] [unique_id "aTY6MbTtIvPZ1Cm2r05wAAAAARM"]
[Mon Dec 08 10:38:42.355465 2025] [:error] [pid 39261:tid 39283] [client 194.61.40.131:55993] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/themes/classic/x.php"] [unique_id "aTY6MnijlEqKrwMitDH3XwAAANI"]
[Mon Dec 08 10:38:42.718661 2025] [:error] [pid 53927:tid 53949] [client 194.61.40.148:20189] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "aTY6MrTtIvPZ1Cm2r05wAwAAARQ"]
[Mon Dec 08 10:38:43.091772 2025] [:error] [pid 39160:tid 39199] [client 194.61.40.137:46533] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aTY6Mym5Ndns0p3OT9BsfAAAAEc"]
[Mon Dec 08 10:38:43.461139 2025] [:error] [pid 39160:tid 39216] [client 194.61.40.132:56555] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sites/default/files/index.php"] [unique_id "aTY6Mym5Ndns0p3OT9BsfgAAAFc"]
[Mon Dec 08 10:38:43.833900 2025] [:error] [pid 39161:tid 39224] [client 194.61.40.141:34035] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "aTY6M-QBy-JdpUuZzWfgOwAAAIQ"]
[Mon Dec 08 10:38:44.198790 2025] [:error] [pid 39160:tid 39217] [client 194.61.40.116:30163] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "aTY6NCm5Ndns0p3OT9BsgAAAAFg"]
[Mon Dec 08 10:38:44.565046 2025] [:error] [pid 39160:tid 39215] [client 194.61.40.152:48495] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "aTY6NCm5Ndns0p3OT9BsgQAAAFY"]
[Mon Dec 08 11:46:39.679033 2025] [:error] [pid 39161:tid 39235] [client 45.88.186.148:52667] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTZKH-QBy-JdpUuZzWf4FgAAAI8"]
[Mon Dec 08 11:46:40.092008 2025] [:error] [pid 39160:tid 39207] [client 45.88.186.148:52837] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTZKICm5Ndns0p3OT9CKbgAAAE8"]
[Mon Dec 08 11:46:40.495361 2025] [:error] [pid 53927:tid 53939] [client 45.88.186.148:52989] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTZKILTtIvPZ1Cm2r06bfAAAAQo"]
[Mon Dec 08 11:46:40.899731 2025] [:error] [pid 53927:tid 53936] [client 45.88.186.148:53164] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTZKILTtIvPZ1Cm2r06bkgAAAQc"]
[Mon Dec 08 11:46:41.303983 2025] [:error] [pid 43361:tid 43372] [client 45.88.186.148:53323] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTZKIcrZJ_dsPpuIXPnQfgAAAYg"]
[Mon Dec 08 16:08:17.206133 2025] [:error] [pid 2754:tid 2776] [client 111.172.249.49:45257] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTaHcbSzS4AFjS-DhTXcRgAAAVI"]
[Mon Dec 08 16:20:43.056146 2025] [:error] [pid 58847:tid 58865] [client 129.226.213.145:46352] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTaKW3y4UHQXWKMwpHm9qwAAAQw"]
[Mon Dec 08 17:19:10.699976 2025] [autoindex:error] [pid 2754:tid 2780] [client 93.123.109.205:49834] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 18:09:29.629915 2025] [autoindex:error] [pid 2754:tid 2775] [client 44.211.251.33:48912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 18:09:30.041663 2025] [autoindex:error] [pid 37840:tid 37856] [client 44.211.251.33:56152] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 19:00:30.775228 2025] [:error] [pid 2754:tid 2761] [client 209.97.156.74:55242] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/"] [unique_id "aTavzrSzS4AFjS-DhTU8fwAAAUQ"], referer: binance.com
[Mon Dec 08 19:00:39.615084 2025] [:error] [pid 58759:tid 58806] [client 209.97.156.74:56376] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/"] [unique_id "aTav1_6HZGkO2H0XX-iSFQAAANA"], referer: binance.com
[Mon Dec 08 19:00:47.182320 2025] [:error] [pid 37840:tid 37850] [client 209.97.156.74:57620] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aTav31nJIKqlie_aHNboMwAAAYc"], referer: binance.com
[Mon Dec 08 20:54:02.943501 2025] [proxy_fcgi:error] [pid 48573:tid 48598] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.064940 2025] [proxy_fcgi:error] [pid 48573:tid 48588] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.185957 2025] [proxy_fcgi:error] [pid 48573:tid 48587] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.307357 2025] [proxy_fcgi:error] [pid 48573:tid 48590] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.430196 2025] [proxy_fcgi:error] [pid 48573:tid 48581] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.566096 2025] [proxy_fcgi:error] [pid 48573:tid 48577] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.687065 2025] [proxy_fcgi:error] [pid 48573:tid 48594] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.816479 2025] [proxy_fcgi:error] [pid 48573:tid 48593] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:03.939755 2025] [proxy_fcgi:error] [pid 48573:tid 48580] [client 13.70.2.1:23709] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:54:04.068827 2025] [:error] [pid 48573:tid 48576] [client 13.70.2.1:23709] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aTbKbFIayuqwlm3CEkZ6AQAAAUE"]
[Mon Dec 08 20:54:04.395756 2025] [:error] [pid 48481:tid 48498] [client 13.70.2.1:23711] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aTbKbCe0pzx5KCi3S0IR_QAAAM0"]
[Mon Dec 08 20:54:04.733077 2025] [:error] [pid 48541:tid 48556] [client 13.70.2.1:23747] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aTbKbASNhJPArxLCdWHx4gAAAQ0"]
[Mon Dec 08 20:54:05.025459 2025] [:error] [pid 48541:tid 48554] [client 13.70.2.1:23705] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aTbKbQSNhJPArxLCdWHx5AAAAQs"]
[Mon Dec 08 20:54:05.289025 2025] [:error] [pid 48541:tid 48547] [client 13.70.2.1:23790] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTbKbQSNhJPArxLCdWHx5QAAAQQ"]
[Mon Dec 08 20:54:05.630266 2025] [:error] [pid 48541:tid 48543] [client 13.70.2.1:23690] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTbKbQSNhJPArxLCdWHx5wAAAQA"]
[Mon Dec 08 20:54:05.892239 2025] [:error] [pid 48481:tid 48485] [client 13.70.2.1:23765] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTbKbSe0pzx5KCi3S0ISAQAAAMA"]
[Mon Dec 08 20:54:06.186531 2025] [:error] [pid 50569:tid 50584] [client 13.70.2.1:23708] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTbKbvHhZxyKreYmWzKeiQAAAAw"]
[Mon Dec 08 20:54:06.432886 2025] [:error] [pid 50569:tid 50575] [client 13.70.2.1:23787] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTbKbvHhZxyKreYmWzKeigAAAAM"]
[Mon Dec 08 20:54:07.002069 2025] [:error] [pid 48481:tid 48489] [client 13.70.2.1:23782] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTbKbye0pzx5KCi3S0ISAgAAAMQ"]
[Mon Dec 08 20:54:07.297676 2025] [:error] [pid 48482:tid 48513] [client 13.70.2.1:23794] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTbKb323gV7gRu3vn815eAAAAIE"]
[Mon Dec 08 20:54:07.593423 2025] [:error] [pid 48482:tid 48529] [client 13.70.2.1:21449] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTbKb323gV7gRu3vn815eQAAAJE"]
[Mon Dec 08 20:54:07.908227 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:23687] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aTbKb_HhZxyKreYmWzKekQAAAA0"]
[Mon Dec 08 20:54:08.262741 2025] [:error] [pid 48482:tid 48522] [client 13.70.2.1:21444] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aTbKcH23gV7gRu3vn815fwAAAIo"]
[Mon Dec 08 20:54:08.521381 2025] [:error] [pid 48573:tid 48586] [client 13.70.2.1:23792] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aTbKcFIayuqwlm3CEkZ6BQAAAUs"]
[Mon Dec 08 20:54:08.814391 2025] [:error] [pid 50569:tid 50583] [client 13.70.2.1:23778] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aTbKcPHhZxyKreYmWzKelAAAAAs"]
[Mon Dec 08 20:54:09.086334 2025] [:error] [pid 48481:tid 48499] [client 13.70.2.1:23795] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aTbKcSe0pzx5KCi3S0ISBQAAAM4"]
[Mon Dec 08 20:54:09.410581 2025] [:error] [pid 48573:tid 48581] [client 13.70.2.1:23744] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aTbKcVIayuqwlm3CEkZ6CgAAAUY"]
[Mon Dec 08 20:54:09.724006 2025] [:error] [pid 50569:tid 50580] [client 13.70.2.1:23796] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aTbKcfHhZxyKreYmWzKelwAAAAg"]
[Mon Dec 08 20:54:10.076933 2025] [:error] [pid 48573:tid 48578] [client 13.70.2.1:23788] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aTbKclIayuqwlm3CEkZ6DQAAAUM"]
[Mon Dec 08 20:54:10.389581 2025] [:error] [pid 48573:tid 48584] [client 13.70.2.1:23692] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aTbKclIayuqwlm3CEkZ6DwAAAUk"]
[Mon Dec 08 20:54:10.739620 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:23760] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aTbKcvHhZxyKreYmWzKemwAAAA0"]
[Mon Dec 08 20:54:10.998969 2025] [:error] [pid 48573:tid 48587] [client 13.70.2.1:23772] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aTbKclIayuqwlm3CEkZ6FgAAAUw"]
[Mon Dec 08 20:54:11.241236 2025] [:error] [pid 48573:tid 48583] [client 13.70.2.1:23781] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aTbKc1Iayuqwlm3CEkZ6GAAAAUg"]
[Mon Dec 08 20:54:11.615624 2025] [:error] [pid 50569:tid 50586] [client 13.70.2.1:23791] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aTbKc_HhZxyKreYmWzKenwAAAA4"]
[Mon Dec 08 20:54:11.901166 2025] [:error] [pid 48482:tid 48533] [client 13.70.2.1:23802] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aTbKc323gV7gRu3vn815jAAAAJU"]
[Mon Dec 08 20:54:12.207911 2025] [:error] [pid 48541:tid 48553] [client 13.70.2.1:23767] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aTbKdASNhJPArxLCdWHx9QAAAQo"]
[Mon Dec 08 20:54:12.492119 2025] [:error] [pid 48573:tid 48578] [client 13.70.2.1:23803] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aTbKdFIayuqwlm3CEkZ6IAAAAUM"]
[Mon Dec 08 20:54:12.971837 2025] [:error] [pid 48573:tid 48598] [client 13.70.2.1:21442] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aTbKdFIayuqwlm3CEkZ6IQAAAVc"]
[Mon Dec 08 20:54:13.225233 2025] [:error] [pid 48573:tid 48586] [client 13.70.2.1:23749] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aTbKdVIayuqwlm3CEkZ6IwAAAUs"]
[Mon Dec 08 20:54:13.505616 2025] [:error] [pid 48481:tid 48487] [client 13.70.2.1:23800] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aTbKdSe0pzx5KCi3S0ISCgAAAMI"]
[Mon Dec 08 20:54:13.844492 2025] [:error] [pid 48481:tid 48503] [client 13.70.2.1:23694] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aTbKdSe0pzx5KCi3S0ISCwAAANI"]
[Mon Dec 08 20:54:14.112830 2025] [:error] [pid 48541:tid 48557] [client 13.70.2.1:23774] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTbKdgSNhJPArxLCdWHx-AAAAQ4"]
[Mon Dec 08 20:54:14.471807 2025] [:error] [pid 48541:tid 48561] [client 13.70.2.1:23775] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTbKdgSNhJPArxLCdWHx-QAAARI"]
[Mon Dec 08 20:54:14.751008 2025] [:error] [pid 48481:tid 48485] [client 13.70.2.1:23704] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTbKdie0pzx5KCi3S0ISDQAAAMA"]
[Mon Dec 08 20:54:14.997430 2025] [:error] [pid 48573:tid 48581] [client 13.70.2.1:23742] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTbKdlIayuqwlm3CEkZ6JQAAAUY"]
[Mon Dec 08 20:54:15.253776 2025] [:error] [pid 48482:tid 48531] [client 13.70.2.1:23734] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aTbKd323gV7gRu3vn815mQAAAJM"]
[Mon Dec 08 20:54:15.579472 2025] [:error] [pid 48573:tid 48598] [client 13.70.2.1:23702] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aTbKd1Iayuqwlm3CEkZ6JwAAAVc"]
[Mon Dec 08 20:54:15.864301 2025] [:error] [pid 48541:tid 48545] [client 13.70.2.1:23763] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aTbKdwSNhJPArxLCdWHx_AAAAQI"]
[Mon Dec 08 20:54:16.150889 2025] [:error] [pid 48482:tid 48517] [client 13.70.2.1:23703] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aTbKeH23gV7gRu3vn815oQAAAIU"]
[Mon Dec 08 20:54:16.403781 2025] [:error] [pid 48481:tid 48505] [client 13.70.2.1:23761] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aTbKeCe0pzx5KCi3S0ISEgAAANQ"]
[Mon Dec 08 20:54:16.791373 2025] [:error] [pid 50569:tid 50587] [client 13.70.2.1:23784] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aTbKePHhZxyKreYmWzKeqwAAAA8"]
[Mon Dec 08 20:54:17.053922 2025] [:error] [pid 48541:tid 48556] [client 13.70.2.1:23783] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aTbKeQSNhJPArxLCdWHyAAAAAQ0"]
[Mon Dec 08 20:54:17.375056 2025] [:error] [pid 50569:tid 50583] [client 13.70.2.1:21459] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aTbKefHhZxyKreYmWzKerAAAAAs"]
[Mon Dec 08 20:54:17.650595 2025] [:error] [pid 48541:tid 48547] [client 13.70.2.1:23758] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTbKeQSNhJPArxLCdWHyAgAAAQQ"]
[Mon Dec 08 20:54:17.966085 2025] [:error] [pid 48541:tid 48561] [client 13.70.2.1:23755] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTbKeQSNhJPArxLCdWHyBAAAARI"]
[Mon Dec 08 20:54:18.216450 2025] [:error] [pid 48541:tid 48565] [client 13.70.2.1:23740] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTbKegSNhJPArxLCdWHyBQAAARY"]
[Mon Dec 08 20:54:18.510565 2025] [:error] [pid 48541:tid 48553] [client 13.70.2.1:23683] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTbKegSNhJPArxLCdWHyBgAAAQo"]
[Mon Dec 08 20:54:18.798273 2025] [:error] [pid 48482:tid 48522] [client 13.70.2.1:23732] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aTbKen23gV7gRu3vn815qwAAAIo"]
[Mon Dec 08 20:54:19.151003 2025] [:error] [pid 50569:tid 50594] [client 13.70.2.1:23777] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aTbKe_HhZxyKreYmWzKerwAAABY"]
[Mon Dec 08 20:54:19.583851 2025] [:error] [pid 50569:tid 50581] [client 13.70.2.1:23798] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aTbKe_HhZxyKreYmWzKesQAAAAk"]
[Mon Dec 08 20:54:19.939953 2025] [:error] [pid 50569:tid 50572] [client 13.70.2.1:23785] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aTbKe_HhZxyKreYmWzKeswAAAAA"]
[Mon Dec 08 20:54:20.308406 2025] [:error] [pid 48541:tid 48551] [client 13.70.2.1:23771] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aTbKfASNhJPArxLCdWHyCwAAAQg"]
[Mon Dec 08 20:54:20.809847 2025] [:error] [pid 50569:tid 50588] [client 13.70.2.1:21476] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aTbKfPHhZxyKreYmWzKetgAAABA"]
[Mon Dec 08 20:54:21.125631 2025] [:error] [pid 50569:tid 50576] [client 13.70.2.1:23753] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aTbKffHhZxyKreYmWzKeugAAAAQ"]
[Mon Dec 08 20:54:21.453714 2025] [:error] [pid 48541:tid 48548] [client 13.70.2.1:23741] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aTbKfQSNhJPArxLCdWHyDwAAAQU"]
[Mon Dec 08 20:54:22.058833 2025] [:error] [pid 48573:tid 48585] [client 13.70.2.1:23707] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aTbKflIayuqwlm3CEkZ6MgAAAUo"]
[Mon Dec 08 20:54:22.370510 2025] [:error] [pid 48481:tid 48492] [client 13.70.2.1:23686] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aTbKfie0pzx5KCi3S0ISFgAAAMc"]
[Mon Dec 08 20:54:22.720975 2025] [:error] [pid 48482:tid 48534] [client 13.70.2.1:23754] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aTbKfn23gV7gRu3vn815swAAAJY"]
[Mon Dec 08 20:54:23.000248 2025] [:error] [pid 48541:tid 48564] [client 13.70.2.1:21457] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aTbKfgSNhJPArxLCdWHyEgAAARU"]
[Mon Dec 08 20:54:23.336173 2025] [:error] [pid 48573:tid 48576] [client 13.70.2.1:23748] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aTbKf1Iayuqwlm3CEkZ6MwAAAUE"]
[Mon Dec 08 20:54:23.879723 2025] [:error] [pid 48573:tid 48575] [client 13.70.2.1:23751] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aTbKf1Iayuqwlm3CEkZ6NQAAAUA"]
[Mon Dec 08 20:54:24.199198 2025] [:error] [pid 48541:tid 48549] [client 13.70.2.1:23725] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aTbKgASNhJPArxLCdWHyFQAAAQY"]
[Mon Dec 08 20:54:24.478476 2025] [:error] [pid 50569:tid 50588] [client 13.70.2.1:23766] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aTbKgPHhZxyKreYmWzKezwAAABA"]
[Mon Dec 08 20:54:24.796262 2025] [:error] [pid 50569:tid 50579] [client 13.70.2.1:21445] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aTbKgPHhZxyKreYmWzKe0wAAAAc"]
[Mon Dec 08 20:54:25.070787 2025] [:error] [pid 48482:tid 48523] [client 13.70.2.1:23752] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aTbKgX23gV7gRu3vn815wgAAAIs"]
[Mon Dec 08 20:54:25.348367 2025] [:error] [pid 50569:tid 50587] [client 13.70.2.1:23807] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aTbKgfHhZxyKreYmWzKe2AAAAA8"]
[Mon Dec 08 20:54:25.929477 2025] [:error] [pid 50569:tid 50594] [client 13.70.2.1:23738] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aTbKgfHhZxyKreYmWzKe3QAAABY"]
[Mon Dec 08 20:54:26.268897 2025] [:error] [pid 50569:tid 50579] [client 13.70.2.1:23786] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKgvHhZxyKreYmWzKe3wAAAAc"]
[Mon Dec 08 20:54:26.676441 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:21464] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKggSNhJPArxLCdWHyFwAAAQE"]
[Mon Dec 08 20:54:26.913881 2025] [:error] [pid 48481:tid 48489] [client 13.70.2.1:21475] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKgie0pzx5KCi3S0ISGQAAAMQ"]
[Mon Dec 08 20:54:27.194891 2025] [:error] [pid 48573:tid 48584] [client 13.70.2.1:23684] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKg1Iayuqwlm3CEkZ6OgAAAUk"]
[Mon Dec 08 20:54:27.519125 2025] [:error] [pid 48573:tid 48598] [client 13.70.2.1:23689] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aTbKg1Iayuqwlm3CEkZ6PAAAAVc"]
[Mon Dec 08 20:54:27.786168 2025] [:error] [pid 48573:tid 48585] [client 13.70.2.1:21491] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aTbKg1Iayuqwlm3CEkZ6PgAAAUo"]
[Mon Dec 08 20:54:28.049545 2025] [:error] [pid 50569:tid 50584] [client 13.70.2.1:23716] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aTbKhPHhZxyKreYmWzKe6AAAAAw"]
[Mon Dec 08 20:54:28.367110 2025] [:error] [pid 48573:tid 48594] [client 13.70.2.1:23733] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aTbKhFIayuqwlm3CEkZ6QgAAAVM"]
[Mon Dec 08 20:54:28.697012 2025] [:error] [pid 48541:tid 48558] [client 13.70.2.1:23699] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aTbKhASNhJPArxLCdWHyGQAAAQ8"]
[Mon Dec 08 20:54:29.024938 2025] [:error] [pid 48481:tid 48485] [client 13.70.2.1:23688] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aTbKhSe0pzx5KCi3S0ISHAAAAMA"]
[Mon Dec 08 20:54:29.369862 2025] [:error] [pid 50569:tid 50580] [client 13.70.2.1:21392] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aTbKhfHhZxyKreYmWzKe8AAAAAg"]
[Mon Dec 08 20:54:29.670030 2025] [:error] [pid 50569:tid 50594] [client 13.70.2.1:23701] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aTbKhfHhZxyKreYmWzKe8QAAABY"]
[Mon Dec 08 20:54:29.957339 2025] [:error] [pid 48541:tid 48565] [client 13.70.2.1:23685] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTbKhQSNhJPArxLCdWHyGwAAARY"]
[Mon Dec 08 20:54:30.201298 2025] [:error] [pid 48573:tid 48586] [client 13.70.2.1:23737] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTbKhlIayuqwlm3CEkZ6RAAAAUs"]
[Mon Dec 08 20:54:30.496071 2025] [:error] [pid 48481:tid 48492] [client 13.70.2.1:23743] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTbKhie0pzx5KCi3S0ISIQAAAMc"]
[Mon Dec 08 20:54:30.734800 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:23681] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTbKhgSNhJPArxLCdWHyHQAAAQE"]
[Mon Dec 08 20:54:30.994802 2025] [:error] [pid 48573:tid 48598] [client 13.70.2.1:23799] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aTbKhlIayuqwlm3CEkZ6RQAAAVc"]
[Mon Dec 08 20:54:31.278546 2025] [:error] [pid 48481:tid 48508] [client 13.70.2.1:23746] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aTbKhye0pzx5KCi3S0ISJAAAANc"]
[Mon Dec 08 20:54:31.590941 2025] [:error] [pid 48573:tid 48578] [client 13.70.2.1:23804] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aTbKh1Iayuqwlm3CEkZ6SQAAAUM"]
[Mon Dec 08 20:54:31.882112 2025] [:error] [pid 48481:tid 48509] [client 13.70.2.1:23728] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aTbKhye0pzx5KCi3S0ISJQAAANg"]
[Mon Dec 08 20:54:32.143564 2025] [:error] [pid 48541:tid 48550] [client 13.70.2.1:21448] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aTbKiASNhJPArxLCdWHyHwAAAQc"]
[Mon Dec 08 20:54:32.402779 2025] [:error] [pid 48481:tid 48506] [client 13.70.2.1:21458] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aTbKiCe0pzx5KCi3S0ISJwAAANU"]
[Mon Dec 08 20:54:32.665317 2025] [:error] [pid 48573:tid 48594] [client 13.70.2.1:21462] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aTbKiFIayuqwlm3CEkZ6TQAAAVM"]
[Mon Dec 08 20:54:32.902268 2025] [:error] [pid 48541:tid 48561] [client 13.70.2.1:21417] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aTbKiASNhJPArxLCdWHyIwAAARI"]
[Mon Dec 08 20:54:33.227332 2025] [:error] [pid 48541:tid 48553] [client 13.70.2.1:23789] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aTbKiQSNhJPArxLCdWHyJAAAAQo"]
[Mon Dec 08 20:54:33.572380 2025] [:error] [pid 48482:tid 48531] [client 13.70.2.1:21467] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aTbKiX23gV7gRu3vn8158wAAAJM"]
[Mon Dec 08 20:54:33.860661 2025] [:error] [pid 48573:tid 48596] [client 13.70.2.1:23736] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aTbKiVIayuqwlm3CEkZ6UAAAAVU"]
[Mon Dec 08 20:54:34.112357 2025] [:error] [pid 48481:tid 48486] [client 13.70.2.1:23718] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aTbKiie0pzx5KCi3S0ISKQAAAME"]
[Mon Dec 08 20:54:34.394206 2025] [:error] [pid 48482:tid 48536] [client 13.70.2.1:23731] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aTbKin23gV7gRu3vn8159AAAAJg"]
[Mon Dec 08 20:54:34.817098 2025] [:error] [pid 48482:tid 48533] [client 13.70.2.1:23768] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aTbKin23gV7gRu3vn8159QAAAJU"]
[Mon Dec 08 20:54:35.131767 2025] [:error] [pid 48482:tid 48524] [client 13.70.2.1:21480] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aTbKi323gV7gRu3vn8159gAAAIw"]
[Mon Dec 08 20:54:35.491962 2025] [:error] [pid 48573:tid 48585] [client 13.70.2.1:23756] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aTbKi1Iayuqwlm3CEkZ6VgAAAUo"]
[Mon Dec 08 20:54:35.956831 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:21443] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aTbKiwSNhJPArxLCdWHyKQAAAQE"]
[Mon Dec 08 20:54:36.252489 2025] [:error] [pid 48573:tid 48594] [client 13.70.2.1:23739] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aTbKjFIayuqwlm3CEkZ6WAAAAVM"]
[Mon Dec 08 20:54:36.540241 2025] [:error] [pid 48541:tid 48550] [client 13.70.2.1:23722] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aTbKjASNhJPArxLCdWHyLAAAAQc"]
[Mon Dec 08 20:54:36.863131 2025] [:error] [pid 48573:tid 48593] [client 13.70.2.1:23793] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aTbKjFIayuqwlm3CEkZ6WwAAAVI"]
[Mon Dec 08 20:54:37.138540 2025] [:error] [pid 48481:tid 48496] [client 13.70.2.1:23801] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aTbKjSe0pzx5KCi3S0ISLgAAAMs"]
[Mon Dec 08 20:54:37.403405 2025] [:error] [pid 48573:tid 48587] [client 13.70.2.1:23710] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aTbKjVIayuqwlm3CEkZ6XgAAAUw"]
[Mon Dec 08 20:54:38.041258 2025] [:error] [pid 48541:tid 48557] [client 13.70.2.1:23697] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aTbKjgSNhJPArxLCdWHyMwAAAQ4"]
[Mon Dec 08 20:54:38.362798 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:23759] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aTbKjlIayuqwlm3CEkZ6YAAAAUU"]
[Mon Dec 08 20:54:38.634373 2025] [:error] [pid 48573:tid 48592] [client 13.70.2.1:23779] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aTbKjlIayuqwlm3CEkZ6YQAAAVE"]
[Mon Dec 08 20:54:38.929071 2025] [:error] [pid 48481:tid 48489] [client 13.70.2.1:21474] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aTbKjie0pzx5KCi3S0ISMQAAAMQ"]
[Mon Dec 08 20:54:39.212593 2025] [:error] [pid 48573:tid 48576] [client 13.70.2.1:21399] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aTbKj1Iayuqwlm3CEkZ6YwAAAUE"]
[Mon Dec 08 20:54:39.460221 2025] [:error] [pid 50569:tid 50578] [client 13.70.2.1:21465] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aTbKj_HhZxyKreYmWzKe-wAAAAY"]
[Mon Dec 08 20:54:39.733090 2025] [:error] [pid 48541:tid 48543] [client 13.70.2.1:21447] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aTbKjwSNhJPArxLCdWHyOAAAAQA"]
[Mon Dec 08 20:54:40.095734 2025] [:error] [pid 50569:tid 50572] [client 13.70.2.1:23726] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aTbKkPHhZxyKreYmWzKe_QAAAAA"]
[Mon Dec 08 20:54:40.971164 2025] [:error] [pid 50569:tid 50593] [client 13.70.2.1:23769] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aTbKkPHhZxyKreYmWzKfAAAAABU"]
[Mon Dec 08 20:54:41.313756 2025] [:error] [pid 48482:tid 48523] [client 13.70.2.1:23773] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aTbKkX23gV7gRu3vn815-wAAAIs"]
[Mon Dec 08 20:54:41.581268 2025] [:error] [pid 50569:tid 50579] [client 13.70.2.1:21494] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aTbKkfHhZxyKreYmWzKfBAAAAAc"]
[Mon Dec 08 20:54:41.876481 2025] [:error] [pid 50569:tid 50577] [client 13.70.2.1:21394] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aTbKkfHhZxyKreYmWzKfBgAAAAU"]
[Mon Dec 08 20:54:42.137010 2025] [:error] [pid 48482:tid 48513] [client 13.70.2.1:21500] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aTbKkn23gV7gRu3vn815_gAAAIE"]
[Mon Dec 08 20:54:42.415906 2025] [:error] [pid 48482:tid 48516] [client 13.70.2.1:21405] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aTbKkn23gV7gRu3vn815_wAAAIQ"]
[Mon Dec 08 20:54:42.925171 2025] [:error] [pid 48482:tid 48534] [client 13.70.2.1:23730] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aTbKkn23gV7gRu3vn816AgAAAJY"]
[Mon Dec 08 20:54:43.197157 2025] [:error] [pid 48541:tid 48547] [client 13.70.2.1:21381] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aTbKkwSNhJPArxLCdWHyOwAAAQQ"]
[Mon Dec 08 20:54:43.467394 2025] [:error] [pid 48482:tid 48525] [client 13.70.2.1:23757] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aTbKk323gV7gRu3vn816AwAAAI0"]
[Mon Dec 08 20:54:43.763724 2025] [:error] [pid 50569:tid 50572] [client 13.70.2.1:23698] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aTbKk_HhZxyKreYmWzKfCQAAAAA"]
[Mon Dec 08 20:54:44.088959 2025] [:error] [pid 48573:tid 48591] [client 13.70.2.1:21466] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aTbKlFIayuqwlm3CEkZ6ZgAAAVA"]
[Mon Dec 08 20:54:44.363018 2025] [:error] [pid 48573:tid 48599] [client 13.70.2.1:23682] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aTbKlFIayuqwlm3CEkZ6ZwAAAVg"]
[Mon Dec 08 20:54:44.718679 2025] [:error] [pid 48573:tid 48593] [client 13.70.2.1:23706] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aTbKlFIayuqwlm3CEkZ6aAAAAVI"]
[Mon Dec 08 20:54:44.971659 2025] [:error] [pid 48541:tid 48565] [client 13.70.2.1:21461] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aTbKlASNhJPArxLCdWHyPwAAARY"]
[Mon Dec 08 20:54:45.265184 2025] [:error] [pid 48541:tid 48555] [client 13.70.2.1:21495] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKlQSNhJPArxLCdWHyQAAAAQw"]
[Mon Dec 08 20:54:45.717796 2025] [:error] [pid 48541:tid 48566] [client 13.70.2.1:21456] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKlQSNhJPArxLCdWHyQQAAARc"]
[Mon Dec 08 20:54:46.030883 2025] [:error] [pid 48541:tid 48562] [client 13.70.2.1:21460] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKlgSNhJPArxLCdWHyQwAAARM"]
[Mon Dec 08 20:54:46.298084 2025] [:error] [pid 48482:tid 48529] [client 13.70.2.1:23696] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aTbKln23gV7gRu3vn816CwAAAJE"]
[Mon Dec 08 20:54:46.586384 2025] [:error] [pid 50569:tid 50580] [client 13.70.2.1:23750] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTbKlvHhZxyKreYmWzKfDQAAAAg"]
[Mon Dec 08 20:54:46.916665 2025] [:error] [pid 48541:tid 48553] [client 13.70.2.1:21391] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTbKlgSNhJPArxLCdWHyRgAAAQo"]
[Mon Dec 08 20:54:47.215059 2025] [:error] [pid 50569:tid 50573] [client 13.70.2.1:23700] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTbKl_HhZxyKreYmWzKfEAAAAAE"]
[Mon Dec 08 20:54:47.561632 2025] [:error] [pid 50569:tid 50579] [client 13.70.2.1:21469] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTbKl_HhZxyKreYmWzKfEgAAAAc"]
[Mon Dec 08 20:54:47.919787 2025] [:error] [pid 48482:tid 48521] [client 13.70.2.1:21493] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aTbKl323gV7gRu3vn816DAAAAIk"]
[Mon Dec 08 20:54:48.199592 2025] [:error] [pid 48481:tid 48501] [client 13.70.2.1:23717] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aTbKmCe0pzx5KCi3S0ISQAAAANA"]
[Mon Dec 08 20:54:48.557018 2025] [:error] [pid 48573:tid 48596] [client 13.70.2.1:21450] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aTbKmFIayuqwlm3CEkZ6agAAAVU"]
[Mon Dec 08 20:54:48.840961 2025] [:error] [pid 48482:tid 48527] [client 13.70.2.1:21478] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aTbKmH23gV7gRu3vn816DwAAAI8"]
[Mon Dec 08 20:54:49.328042 2025] [:error] [pid 48573:tid 48588] [client 13.70.2.1:23713] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aTbKmVIayuqwlm3CEkZ6awAAAU0"]
[Mon Dec 08 20:54:49.861146 2025] [:error] [pid 48573:tid 48592] [client 13.70.2.1:23797] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aTbKmVIayuqwlm3CEkZ6bAAAAVE"]
[Mon Dec 08 20:54:50.199158 2025] [:error] [pid 48541:tid 48546] [client 13.70.2.1:21471] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aTbKmgSNhJPArxLCdWHySwAAAQM"]
[Mon Dec 08 20:54:50.497886 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:21441] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aTbKmgSNhJPArxLCdWHyTAAAAQE"]
[Mon Dec 08 20:54:50.788530 2025] [:error] [pid 48541:tid 48552] [client 13.70.2.1:21383] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aTbKmgSNhJPArxLCdWHyTgAAAQk"]
[Mon Dec 08 20:54:51.096219 2025] [:error] [pid 50569:tid 50586] [client 13.70.2.1:23723] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aTbKm_HhZxyKreYmWzKfFgAAAA4"]
[Mon Dec 08 20:54:51.426636 2025] [:error] [pid 50569:tid 50592] [client 13.70.2.1:23806] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aTbKm_HhZxyKreYmWzKfFwAAABQ"]
[Mon Dec 08 20:54:51.692299 2025] [:error] [pid 48481:tid 48499] [client 13.70.2.1:21498] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aTbKmye0pzx5KCi3S0ISRQAAAM4"]
[Mon Dec 08 20:54:52.711107 2025] [:error] [pid 48482:tid 48535] [client 13.70.2.1:23764] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aTbKnH23gV7gRu3vn816HQAAAJc"]
[Mon Dec 08 20:54:52.990130 2025] [:error] [pid 50569:tid 50589] [client 13.70.2.1:23724] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aTbKnPHhZxyKreYmWzKfGwAAABE"]
[Mon Dec 08 20:54:53.435716 2025] [:error] [pid 48481:tid 48507] [client 13.70.2.1:21484] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aTbKnSe0pzx5KCi3S0ISSgAAANY"]
[Mon Dec 08 20:54:53.705619 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:21382] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aTbKnVIayuqwlm3CEkZ6cgAAAUU"]
[Mon Dec 08 20:54:54.100101 2025] [:error] [pid 48573:tid 48591] [client 13.70.2.1:21455] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTbKnlIayuqwlm3CEkZ6cwAAAVA"]
[Mon Dec 08 20:54:54.352545 2025] [:error] [pid 48573:tid 48584] [client 13.70.2.1:21411] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTbKnlIayuqwlm3CEkZ6dQAAAUk"]
[Mon Dec 08 20:54:54.672076 2025] [:error] [pid 48573:tid 48575] [client 13.70.2.1:21492] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTbKnlIayuqwlm3CEkZ6dwAAAUA"]
[Mon Dec 08 20:54:54.951269 2025] [:error] [pid 48573:tid 48582] [client 13.70.2.1:23693] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTbKnlIayuqwlm3CEkZ6eQAAAUc"]
[Mon Dec 08 20:54:55.207685 2025] [:error] [pid 48573:tid 48577] [client 13.70.2.1:23715] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTbKn1Iayuqwlm3CEkZ6egAAAUI"]
[Mon Dec 08 20:54:55.505810 2025] [:error] [pid 48481:tid 48498] [client 13.70.2.1:21473] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTbKnye0pzx5KCi3S0ISUQAAAM0"]
[Mon Dec 08 20:54:55.864582 2025] [:error] [pid 48482:tid 48535] [client 13.70.2.1:21316] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTbKn323gV7gRu3vn816JQAAAJc"]
[Mon Dec 08 20:54:56.111500 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:21485] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTbKoASNhJPArxLCdWHyUwAAAQE"]
[Mon Dec 08 20:54:56.469350 2025] [:error] [pid 48481:tid 48509] [client 13.70.2.1:21446] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aTbKoCe0pzx5KCi3S0ISVAAAANg"]
[Mon Dec 08 20:54:56.757669 2025] [:error] [pid 48481:tid 48490] [client 13.70.2.1:21425] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aTbKoCe0pzx5KCi3S0ISVQAAAMU"]
[Mon Dec 08 20:54:57.017470 2025] [:error] [pid 48481:tid 48487] [client 13.70.2.1:21397] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aTbKoSe0pzx5KCi3S0ISVgAAAMI"]
[Mon Dec 08 20:54:57.281200 2025] [:error] [pid 48482:tid 48514] [client 13.70.2.1:23714] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aTbKoX23gV7gRu3vn816JwAAAII"]
[Mon Dec 08 20:54:57.567479 2025] [:error] [pid 50569:tid 50588] [client 13.70.2.1:23727] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aTbKofHhZxyKreYmWzKfHwAAABA"]
[Mon Dec 08 20:54:57.827039 2025] [:error] [pid 48481:tid 48502] [client 13.70.2.1:21503] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aTbKoSe0pzx5KCi3S0ISXAAAANE"]
[Mon Dec 08 20:54:58.570413 2025] [:error] [pid 50569:tid 50583] [client 13.70.2.1:23765] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aTbKovHhZxyKreYmWzKfIQAAAAs"]
[Mon Dec 08 20:54:58.983391 2025] [:error] [pid 48573:tid 48586] [client 13.70.2.1:21324] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aTbKolIayuqwlm3CEkZ6hAAAAUs"]
[Mon Dec 08 20:54:59.375235 2025] [:error] [pid 48573:tid 48588] [client 13.70.2.1:21488] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTbKo1Iayuqwlm3CEkZ6hgAAAU0"]
[Mon Dec 08 20:54:59.617195 2025] [:error] [pid 50569:tid 50576] [client 13.70.2.1:23691] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTbKo_HhZxyKreYmWzKfIwAAAAQ"]
[Mon Dec 08 20:54:59.886486 2025] [:error] [pid 50569:tid 50590] [client 13.70.2.1:21398] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTbKo_HhZxyKreYmWzKfJAAAABI"]
[Mon Dec 08 20:55:00.181825 2025] [:error] [pid 48482:tid 48514] [client 13.70.2.1:21402] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTbKpH23gV7gRu3vn816LQAAAII"]
[Mon Dec 08 20:55:00.463799 2025] [:error] [pid 48482:tid 48520] [client 13.70.2.1:21386] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aTbKpH23gV7gRu3vn816LgAAAIg"]
[Mon Dec 08 20:55:00.817090 2025] [:error] [pid 48573:tid 48578] [client 13.70.2.1:21501] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aTbKpFIayuqwlm3CEkZ6jQAAAUM"]
[Mon Dec 08 20:55:01.148071 2025] [:error] [pid 48573:tid 48575] [client 13.70.2.1:21436] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aTbKpVIayuqwlm3CEkZ6jgAAAUA"]
[Mon Dec 08 20:55:01.493318 2025] [:error] [pid 48541:tid 48558] [client 13.70.2.1:21410] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aTbKpQSNhJPArxLCdWHyWAAAAQ8"]
[Mon Dec 08 20:55:01.854462 2025] [:error] [pid 48541:tid 48554] [client 13.70.2.1:21470] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aTbKpQSNhJPArxLCdWHyWgAAAQs"]
[Mon Dec 08 20:55:02.184740 2025] [:error] [pid 48541:tid 48557] [client 13.70.2.1:21428] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aTbKpgSNhJPArxLCdWHyXAAAAQ4"]
[Mon Dec 08 20:55:02.501996 2025] [:error] [pid 48482:tid 48513] [client 13.70.2.1:23721] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aTbKpn23gV7gRu3vn816MwAAAIE"]
[Mon Dec 08 20:55:03.079175 2025] [proxy_fcgi:error] [pid 48481:tid 48497] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:03.201219 2025] [proxy_fcgi:error] [pid 48481:tid 48506] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:03.327597 2025] [proxy_fcgi:error] [pid 48481:tid 48486] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:03.516124 2025] [proxy_fcgi:error] [pid 48481:tid 48503] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:03.724974 2025] [proxy_fcgi:error] [pid 48481:tid 48492] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:03.846421 2025] [proxy_fcgi:error] [pid 48481:tid 48498] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:03.968816 2025] [proxy_fcgi:error] [pid 48481:tid 48496] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:04.089832 2025] [proxy_fcgi:error] [pid 48481:tid 48487] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:04.211408 2025] [proxy_fcgi:error] [pid 48481:tid 48488] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:04.339270 2025] [proxy_fcgi:error] [pid 48481:tid 48507] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:04.460817 2025] [proxy_fcgi:error] [pid 48481:tid 48489] [client 13.70.2.1:21468] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:55:04.578173 2025] [:error] [pid 48481:tid 48497] [client 13.70.2.1:21468] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTbKqCe0pzx5KCi3S0ISbgAAAMw"]
[Mon Dec 08 20:55:04.838010 2025] [:error] [pid 48482:tid 48518] [client 13.70.2.1:21454] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTbKqH23gV7gRu3vn816NwAAAIY"]
[Mon Dec 08 20:55:05.269977 2025] [:error] [pid 48573:tid 48598] [client 13.70.2.1:21435] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTbKqVIayuqwlm3CEkZ6mAAAAVc"]
[Mon Dec 08 20:55:05.533274 2025] [:error] [pid 48481:tid 48495] [client 13.70.2.1:21314] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTbKqSe0pzx5KCi3S0ISbwAAAMo"]
[Mon Dec 08 20:55:05.856371 2025] [:error] [pid 48482:tid 48516] [client 13.70.2.1:21387] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aTbKqX23gV7gRu3vn816OAAAAIQ"]
[Mon Dec 08 20:55:06.156225 2025] [:error] [pid 48573:tid 48584] [client 13.70.2.1:21463] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aTbKqlIayuqwlm3CEkZ6mgAAAUk"]
[Mon Dec 08 20:55:06.403354 2025] [:error] [pid 48482:tid 48531] [client 13.70.2.1:21424] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aTbKqn23gV7gRu3vn816OgAAAJM"]
[Mon Dec 08 20:55:06.671045 2025] [:error] [pid 48573:tid 48586] [client 13.70.2.1:21418] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aTbKqlIayuqwlm3CEkZ6nQAAAUs"]
[Mon Dec 08 20:55:06.982574 2025] [:error] [pid 48482:tid 48526] [client 13.70.2.1:23719] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTbKqn23gV7gRu3vn816PAAAAI4"]
[Mon Dec 08 20:55:07.249791 2025] [:error] [pid 48573:tid 48597] [client 13.70.2.1:21472] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTbKq1Iayuqwlm3CEkZ6oAAAAVY"]
[Mon Dec 08 20:55:07.514360 2025] [:error] [pid 48541:tid 48554] [client 13.70.2.1:21408] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTbKqwSNhJPArxLCdWHyZAAAAQs"]
[Mon Dec 08 20:55:07.796053 2025] [:error] [pid 48541:tid 48566] [client 13.70.2.1:23720] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTbKqwSNhJPArxLCdWHyZQAAARc"]
[Mon Dec 08 20:55:08.083612 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:21350] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aTbKrFIayuqwlm3CEkZ6ogAAAUU"]
[Mon Dec 08 20:55:08.360420 2025] [:error] [pid 48573:tid 48594] [client 13.70.2.1:23745] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aTbKrFIayuqwlm3CEkZ6pQAAAVM"]
[Mon Dec 08 20:55:08.615303 2025] [:error] [pid 48573:tid 48589] [client 13.70.2.1:21416] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aTbKrFIayuqwlm3CEkZ6pgAAAU4"]
[Mon Dec 08 20:55:08.903392 2025] [:error] [pid 48573:tid 48575] [client 13.70.2.1:21379] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aTbKrFIayuqwlm3CEkZ6qQAAAUA"]
[Mon Dec 08 20:55:09.170625 2025] [:error] [pid 50569:tid 50576] [client 13.70.2.1:21440] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aTbKrfHhZxyKreYmWzKfKQAAAAQ"]
[Mon Dec 08 20:55:09.500073 2025] [:error] [pid 48541:tid 48553] [client 13.70.2.1:21451] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aTbKrQSNhJPArxLCdWHyZwAAAQo"]
[Mon Dec 08 20:55:09.811686 2025] [:error] [pid 48541:tid 48559] [client 13.70.2.1:21388] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aTbKrQSNhJPArxLCdWHyaAAAARA"]
[Mon Dec 08 20:55:10.130445 2025] [:error] [pid 48541:tid 48565] [client 13.70.2.1:21336] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aTbKrgSNhJPArxLCdWHyaQAAARY"]
[Mon Dec 08 20:55:10.488169 2025] [:error] [pid 48573:tid 48576] [client 13.70.2.1:21378] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aTbKrlIayuqwlm3CEkZ6rAAAAUE"]
[Mon Dec 08 20:55:10.748414 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:21341] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aTbKrlIayuqwlm3CEkZ6rgAAAUU"]
[Mon Dec 08 20:55:11.082562 2025] [:error] [pid 48482:tid 48525] [client 13.70.2.1:23776] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aTbKr323gV7gRu3vn816PgAAAI0"]
[Mon Dec 08 20:55:11.375676 2025] [:error] [pid 48541:tid 48550] [client 13.70.2.1:21404] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aTbKrwSNhJPArxLCdWHybwAAAQc"]
[Mon Dec 08 20:55:11.731341 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:23770] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aTbKrwSNhJPArxLCdWHycwAAAQE"]
[Mon Dec 08 20:55:12.050536 2025] [:error] [pid 48482:tid 48516] [client 13.70.2.1:21483] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aTbKsH23gV7gRu3vn816QQAAAIQ"]
[Mon Dec 08 20:55:12.395012 2025] [:error] [pid 50569:tid 50577] [client 13.70.2.1:21415] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aTbKsPHhZxyKreYmWzKfKgAAAAU"]
[Mon Dec 08 20:55:12.686925 2025] [:error] [pid 48573:tid 48596] [client 13.70.2.1:21393] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aTbKsFIayuqwlm3CEkZ6swAAAVU"]
[Mon Dec 08 20:55:12.971309 2025] [:error] [pid 48482:tid 48529] [client 13.70.2.1:23762] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aTbKsH23gV7gRu3vn816QwAAAJE"]
[Mon Dec 08 20:55:13.245879 2025] [:error] [pid 50569:tid 50591] [client 13.70.2.1:21453] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aTbKsfHhZxyKreYmWzKfLQAAABM"]
[Mon Dec 08 20:55:13.735561 2025] [:error] [pid 48541:tid 48563] [client 13.70.2.1:23735] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aTbKsQSNhJPArxLCdWHyeAAAARQ"]
[Mon Dec 08 20:55:14.007245 2025] [:error] [pid 48482:tid 48526] [client 13.70.2.1:21351] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aTbKsn23gV7gRu3vn816RQAAAI4"]
[Mon Dec 08 20:55:14.390362 2025] [:error] [pid 48482:tid 48519] [client 13.70.2.1:21427] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aTbKsn23gV7gRu3vn816RwAAAIc"]
[Mon Dec 08 20:55:14.701352 2025] [:error] [pid 48541:tid 48559] [client 13.70.2.1:21486] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aTbKsgSNhJPArxLCdWHyewAAARA"]
[Mon Dec 08 20:55:15.010184 2025] [:error] [pid 48541:tid 48565] [client 13.70.2.1:21363] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aTbKswSNhJPArxLCdWHyfAAAARY"]
[Mon Dec 08 20:55:15.361152 2025] [:error] [pid 48481:tid 48499] [client 13.70.2.1:21490] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aTbKsye0pzx5KCi3S0IScgAAAM4"]
[Mon Dec 08 20:55:15.698510 2025] [:error] [pid 48482:tid 48515] [client 13.70.2.1:21479] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aTbKs323gV7gRu3vn816TAAAAIM"]
[Mon Dec 08 20:55:15.965205 2025] [:error] [pid 48482:tid 48525] [client 13.70.2.1:21322] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aTbKs323gV7gRu3vn816TgAAAI0"]
[Mon Dec 08 20:55:16.237510 2025] [:error] [pid 48573:tid 48592] [client 13.70.2.1:21431] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aTbKtFIayuqwlm3CEkZ6tQAAAVE"]
[Mon Dec 08 20:55:16.496598 2025] [:error] [pid 48573:tid 48598] [client 13.70.2.1:21497] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aTbKtFIayuqwlm3CEkZ6tgAAAVc"]
[Mon Dec 08 20:55:16.812727 2025] [:error] [pid 48541:tid 48561] [client 13.70.2.1:21496] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aTbKtASNhJPArxLCdWHygAAAARI"]
[Mon Dec 08 20:55:17.116107 2025] [:error] [pid 48573:tid 48597] [client 13.70.2.1:21325] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aTbKtVIayuqwlm3CEkZ6uQAAAVY"]
[Mon Dec 08 20:55:17.421698 2025] [:error] [pid 50569:tid 50588] [client 13.70.2.1:21477] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aTbKtfHhZxyKreYmWzKfNAAAABA"]
[Mon Dec 08 20:55:17.698246 2025] [:error] [pid 48573:tid 48584] [client 13.70.2.1:21389] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aTbKtVIayuqwlm3CEkZ6uwAAAUk"]
[Mon Dec 08 20:55:17.969264 2025] [:error] [pid 48481:tid 48488] [client 13.70.2.1:21489] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aTbKtSe0pzx5KCi3S0ISdQAAAMM"]
[Mon Dec 08 20:55:18.312037 2025] [:error] [pid 50569:tid 50593] [client 13.70.2.1:23805] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aTbKtvHhZxyKreYmWzKfOAAAABU"]
[Mon Dec 08 20:55:18.620380 2025] [:error] [pid 50569:tid 50592] [client 13.70.2.1:21279] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aTbKtvHhZxyKreYmWzKfOQAAABQ"]
[Mon Dec 08 20:55:18.880195 2025] [:error] [pid 50569:tid 50590] [client 13.70.2.1:21482] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aTbKtvHhZxyKreYmWzKfOgAAABI"]
[Mon Dec 08 20:55:19.137297 2025] [:error] [pid 50569:tid 50591] [client 13.70.2.1:21403] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aTbKt_HhZxyKreYmWzKfOwAAABM"]
[Mon Dec 08 20:55:19.393167 2025] [:error] [pid 50569:tid 50587] [client 13.70.2.1:21395] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aTbKt_HhZxyKreYmWzKfPgAAAA8"]
[Mon Dec 08 20:55:19.648983 2025] [:error] [pid 48541:tid 48564] [client 13.70.2.1:21261] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aTbKtwSNhJPArxLCdWHyhQAAARU"]
[Mon Dec 08 20:55:20.054490 2025] [:error] [pid 48573:tid 48581] [client 13.70.2.1:21407] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aTbKuFIayuqwlm3CEkZ6vQAAAUY"]
[Mon Dec 08 20:55:20.324517 2025] [:error] [pid 48482:tid 48536] [client 13.70.2.1:21499] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aTbKuH23gV7gRu3vn816VAAAAJg"]
[Mon Dec 08 20:55:20.671277 2025] [:error] [pid 50569:tid 50581] [client 13.70.2.1:21313] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aTbKuPHhZxyKreYmWzKfRAAAAAk"]
[Mon Dec 08 20:55:20.962843 2025] [:error] [pid 48573:tid 48577] [client 13.70.2.1:21276] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aTbKuFIayuqwlm3CEkZ6vwAAAUI"]
[Mon Dec 08 20:55:21.346436 2025] [:error] [pid 48482:tid 48534] [client 13.70.2.1:21262] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aTbKuX23gV7gRu3vn816VgAAAJY"]
[Mon Dec 08 20:55:21.832691 2025] [:error] [pid 48541:tid 48544] [client 13.70.2.1:21438] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aTbKuQSNhJPArxLCdWHyigAAAQE"]
[Mon Dec 08 20:55:22.100478 2025] [:error] [pid 48481:tid 48486] [client 13.70.2.1:21342] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aTbKuie0pzx5KCi3S0ISdgAAAME"]
[Mon Dec 08 20:55:22.477767 2025] [:error] [pid 48481:tid 48494] [client 13.70.2.1:21329] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aTbKuie0pzx5KCi3S0ISdwAAAMk"]
[Mon Dec 08 20:55:22.818342 2025] [:error] [pid 48481:tid 48508] [client 13.70.2.1:21390] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aTbKuie0pzx5KCi3S0ISeAAAANc"]
[Mon Dec 08 20:55:23.108885 2025] [:error] [pid 48481:tid 48503] [client 13.70.2.1:21439] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aTbKuye0pzx5KCi3S0ISeQAAANI"]
[Mon Dec 08 20:55:23.365435 2025] [:error] [pid 48481:tid 48500] [client 13.70.2.1:21265] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aTbKuye0pzx5KCi3S0ISfQAAAM8"]
[Mon Dec 08 20:55:23.982019 2025] [:error] [pid 48573:tid 48597] [client 13.70.2.1:21345] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aTbKu1Iayuqwlm3CEkZ6wgAAAVY"]
[Mon Dec 08 20:55:24.331531 2025] [:error] [pid 48482:tid 48534] [client 13.70.2.1:21502] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aTbKvH23gV7gRu3vn816XgAAAJY"]
[Mon Dec 08 20:55:24.643990 2025] [:error] [pid 48573:tid 48576] [client 13.70.2.1:21412] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aTbKvFIayuqwlm3CEkZ6wwAAAUE"]
[Mon Dec 08 20:55:24.927131 2025] [:error] [pid 48573:tid 48584] [client 13.70.2.1:21331] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aTbKvFIayuqwlm3CEkZ6xAAAAUk"]
[Mon Dec 08 20:55:25.282187 2025] [:error] [pid 48482:tid 48528] [client 13.70.2.1:21347] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aTbKvX23gV7gRu3vn816YgAAAJA"]
[Mon Dec 08 20:55:26.011189 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:21367] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aTbKvvHhZxyKreYmWzKfTAAAAA0"]
[Mon Dec 08 20:55:26.589788 2025] [:error] [pid 48482:tid 48529] [client 13.70.2.1:21429] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aTbKvn23gV7gRu3vn816ZwAAAJE"]
[Mon Dec 08 20:55:26.915694 2025] [:error] [pid 48482:tid 48521] [client 13.70.2.1:21426] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aTbKvn23gV7gRu3vn816aAAAAIk"]
[Mon Dec 08 20:55:27.396468 2025] [:error] [pid 48482:tid 48515] [client 13.70.2.1:21333] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aTbKv323gV7gRu3vn816agAAAIM"]
[Mon Dec 08 20:55:27.673895 2025] [:error] [pid 48481:tid 48502] [client 13.70.2.1:21452] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aTbKvye0pzx5KCi3S0ISigAAANE"]
[Mon Dec 08 20:55:28.068583 2025] [:error] [pid 48541:tid 48548] [client 13.70.2.1:21349] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aTbKwASNhJPArxLCdWHykAAAAQU"]
[Mon Dec 08 20:55:28.511380 2025] [:error] [pid 50569:tid 50589] [client 13.70.2.1:21312] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aTbKwPHhZxyKreYmWzKfUgAAABE"]
[Mon Dec 08 20:55:28.930964 2025] [:error] [pid 50569:tid 50579] [client 13.70.2.1:21288] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aTbKwPHhZxyKreYmWzKfVAAAAAc"]
[Mon Dec 08 20:55:29.297025 2025] [:error] [pid 50569:tid 50584] [client 13.70.2.1:21338] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aTbKwfHhZxyKreYmWzKfVQAAAAw"]
[Mon Dec 08 20:55:29.627940 2025] [:error] [pid 48482:tid 48513] [client 13.70.2.1:23780] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aTbKwX23gV7gRu3vn816cAAAAIE"]
[Mon Dec 08 20:55:29.928427 2025] [:error] [pid 50569:tid 50594] [client 13.70.2.1:21251] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aTbKwfHhZxyKreYmWzKfWAAAABY"]
[Mon Dec 08 20:55:30.338255 2025] [:error] [pid 50569:tid 50574] [client 13.70.2.1:21321] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aTbKwvHhZxyKreYmWzKfWgAAAAI"]
[Mon Dec 08 20:55:31.977887 2025] [:error] [pid 50569:tid 50588] [client 13.70.2.1:21371] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aTbKw_HhZxyKreYmWzKfXQAAABA"]
[Mon Dec 08 20:55:32.700891 2025] [:error] [pid 48482:tid 48514] [client 13.70.2.1:21419] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aTbKxH23gV7gRu3vn816dQAAAII"]
[Mon Dec 08 20:55:33.360382 2025] [:error] [pid 50569:tid 50586] [client 13.70.2.1:21369] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aTbKxfHhZxyKreYmWzKfYwAAAA4"]
[Mon Dec 08 20:55:33.632447 2025] [:error] [pid 50569:tid 50584] [client 13.70.2.1:21335] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aTbKxfHhZxyKreYmWzKfZAAAAAw"]
[Mon Dec 08 20:55:34.063040 2025] [:error] [pid 48541:tid 48561] [client 13.70.2.1:21259] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aTbKxgSNhJPArxLCdWHylgAAARI"]
[Mon Dec 08 20:55:34.435133 2025] [:error] [pid 50569:tid 50575] [client 13.70.2.1:21248] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aTbKxvHhZxyKreYmWzKfaAAAAAM"]
[Mon Dec 08 20:55:34.976371 2025] [:error] [pid 50569:tid 50593] [client 13.70.2.1:21409] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aTbKxvHhZxyKreYmWzKfbAAAABU"]
[Mon Dec 08 20:55:35.365970 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:21339] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aTbKx_HhZxyKreYmWzKfcQAAAA0"]
[Mon Dec 08 20:55:35.851681 2025] [:error] [pid 48482:tid 48535] [client 13.70.2.1:21481] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aTbKx323gV7gRu3vn816dwAAAJc"]
[Mon Dec 08 20:55:36.223234 2025] [:error] [pid 48541:tid 48563] [client 13.70.2.1:21255] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTbKyASNhJPArxLCdWHynQAAARQ"]
[Mon Dec 08 20:55:36.483650 2025] [:error] [pid 48541:tid 48566] [client 13.70.2.1:21376] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTbKyASNhJPArxLCdWHyoAAAARc"]
[Mon Dec 08 20:55:36.827821 2025] [:error] [pid 48541:tid 48556] [client 13.70.2.1:21253] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTbKyASNhJPArxLCdWHyoQAAAQ0"]
[Mon Dec 08 20:55:37.173908 2025] [:error] [pid 48541:tid 48543] [client 13.70.2.1:21332] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTbKyQSNhJPArxLCdWHypAAAAQA"]
[Mon Dec 08 20:55:37.579558 2025] [:error] [pid 50569:tid 50576] [client 13.70.2.1:21340] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aTbKyfHhZxyKreYmWzKfegAAAAQ"]
[Mon Dec 08 20:55:38.060472 2025] [:error] [pid 48541:tid 48546] [client 13.70.2.1:21317] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aTbKygSNhJPArxLCdWHyqQAAAQM"]
[Mon Dec 08 20:55:38.425188 2025] [:error] [pid 50569:tid 50592] [client 13.70.2.1:21377] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aTbKyvHhZxyKreYmWzKffAAAABQ"]
[Mon Dec 08 20:55:40.020278 2025] [:error] [pid 48482:tid 48536] [client 13.70.2.1:21432] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aTbKzH23gV7gRu3vn816ggAAAJg"]
[Mon Dec 08 20:55:40.369258 2025] [:error] [pid 50569:tid 50575] [client 13.70.2.1:21370] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aTbKzPHhZxyKreYmWzKffgAAAAM"]
[Mon Dec 08 20:55:40.783009 2025] [:error] [pid 48482:tid 48512] [client 13.70.2.1:21355] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aTbKzH23gV7gRu3vn816hgAAAIA"]
[Mon Dec 08 20:55:41.220088 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:21204] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aTbKzfHhZxyKreYmWzKfggAAAA0"]
[Mon Dec 08 20:55:41.821221 2025] [:error] [pid 48541:tid 48566] [client 13.70.2.1:21414] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aTbKzQSNhJPArxLCdWHyvAAAARc"]
[Mon Dec 08 20:55:42.247768 2025] [:error] [pid 48481:tid 48501] [client 13.70.2.1:21289] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aTbKzie0pzx5KCi3S0ISlAAAANA"]
[Mon Dec 08 20:55:42.581104 2025] [:error] [pid 48482:tid 48527] [client 13.70.2.1:21343] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aTbKzn23gV7gRu3vn816jQAAAI8"]
[Mon Dec 08 20:55:43.130967 2025] [:error] [pid 48541:tid 48551] [client 13.70.2.1:21368] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aTbKzwSNhJPArxLCdWHyvQAAAQg"]
[Mon Dec 08 20:55:44.037654 2025] [:error] [pid 50569:tid 50573] [client 13.70.2.1:21346] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aTbK0PHhZxyKreYmWzKfjAAAAAE"]
[Mon Dec 08 20:55:45.651926 2025] [:error] [pid 48482:tid 48523] [client 13.70.2.1:21328] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aTbK0X23gV7gRu3vn816kgAAAIs"]
[Mon Dec 08 20:55:46.223911 2025] [:error] [pid 48541:tid 48563] [client 13.70.2.1:21290] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aTbK0gSNhJPArxLCdWHyxAAAARQ"]
[Mon Dec 08 20:55:46.560024 2025] [:error] [pid 50569:tid 50593] [client 13.70.2.1:21334] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aTbK0vHhZxyKreYmWzKfkwAAABU"]
[Mon Dec 08 20:55:46.823924 2025] [:error] [pid 50569:tid 50575] [client 13.70.2.1:21356] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aTbK0vHhZxyKreYmWzKflQAAAAM"]
[Mon Dec 08 20:55:47.120210 2025] [:error] [pid 48573:tid 48578] [client 13.70.2.1:21400] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aTbK01Iayuqwlm3CEkZ65QAAAUM"]
[Mon Dec 08 20:55:47.505320 2025] [:error] [pid 48481:tid 48504] [client 13.70.2.1:21354] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aTbK0ye0pzx5KCi3S0ISoAAAANM"]
[Mon Dec 08 20:55:47.917456 2025] [:error] [pid 48573:tid 48577] [client 13.70.2.1:21318] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aTbK01Iayuqwlm3CEkZ66gAAAUI"]
[Mon Dec 08 20:55:48.266472 2025] [:error] [pid 48573:tid 48593] [client 13.70.2.1:23695] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aTbK1FIayuqwlm3CEkZ67QAAAVI"]
[Mon Dec 08 20:55:49.000519 2025] [:error] [pid 48573:tid 48585] [client 13.70.2.1:21330] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTbK1FIayuqwlm3CEkZ67wAAAUo"]
[Mon Dec 08 20:55:49.636325 2025] [:error] [pid 48541:tid 48547] [client 13.70.2.1:21320] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTbK1QSNhJPArxLCdWHyzgAAAQQ"]
[Mon Dec 08 20:55:50.848740 2025] [:error] [pid 48541:tid 48564] [client 13.70.2.1:21294] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTbK1gSNhJPArxLCdWHy0wAAARU"]
[Mon Dec 08 20:55:51.145225 2025] [:error] [pid 48541:tid 48546] [client 13.70.2.1:21372] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTbK1wSNhJPArxLCdWHy1AAAAQM"]
[Mon Dec 08 20:55:51.573796 2025] [:error] [pid 48481:tid 48500] [client 13.70.2.1:21252] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aTbK1ye0pzx5KCi3S0ISrwAAAM8"]
[Mon Dec 08 20:55:52.429338 2025] [:error] [pid 48481:tid 48507] [client 13.70.2.1:23680] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aTbK2Ce0pzx5KCi3S0ISsQAAANY"]
[Mon Dec 08 20:55:52.834810 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:21352] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aTbK2FIayuqwlm3CEkZ6-wAAAUU"]
[Mon Dec 08 20:55:53.107953 2025] [:error] [pid 50569:tid 50590] [client 13.70.2.1:21487] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aTbK2fHhZxyKreYmWzKfpgAAABI"]
[Mon Dec 08 20:55:53.452107 2025] [:error] [pid 50569:tid 50575] [client 13.70.2.1:21278] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aTbK2fHhZxyKreYmWzKfpwAAAAM"]
[Mon Dec 08 20:55:54.022340 2025] [:error] [pid 48482:tid 48513] [client 13.70.2.1:21348] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aTbK2n23gV7gRu3vn816sgAAAIE"]
[Mon Dec 08 20:55:54.368175 2025] [:error] [pid 50569:tid 50586] [client 13.70.2.1:21286] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aTbK2vHhZxyKreYmWzKfqgAAAA4"]
[Mon Dec 08 20:55:54.977977 2025] [:error] [pid 48541:tid 48567] [client 13.70.2.1:21421] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aTbK2gSNhJPArxLCdWHy4AAAARg"]
[Mon Dec 08 20:55:56.035625 2025] [:error] [pid 48482:tid 48512] [client 13.70.2.1:21257] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aTbK3H23gV7gRu3vn816ugAAAIA"]
[Mon Dec 08 20:55:57.155535 2025] [:error] [pid 48573:tid 48583] [client 13.70.2.1:21250] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aTbK3VIayuqwlm3CEkZ7AAAAAUg"]
[Mon Dec 08 20:55:57.656490 2025] [:error] [pid 50569:tid 50593] [client 13.70.2.1:21364] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aTbK3fHhZxyKreYmWzKfvAAAABU"]
[Mon Dec 08 20:55:58.177415 2025] [:error] [pid 48541:tid 48551] [client 13.70.2.1:21420] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aTbK3gSNhJPArxLCdWHy5wAAAQg"]
[Mon Dec 08 20:55:58.765741 2025] [:error] [pid 50569:tid 50588] [client 13.70.2.1:21360] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aTbK3vHhZxyKreYmWzKfvgAAABA"]
[Mon Dec 08 20:55:59.150961 2025] [:error] [pid 48481:tid 48509] [client 13.70.2.1:21292] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aTbK3ye0pzx5KCi3S0ISuAAAANg"]
[Mon Dec 08 20:55:59.522595 2025] [:error] [pid 48573:tid 48585] [client 13.70.2.1:21366] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aTbK31Iayuqwlm3CEkZ7CAAAAUo"]
[Mon Dec 08 20:55:59.840667 2025] [:error] [pid 50569:tid 50583] [client 13.70.2.1:21434] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aTbK3_HhZxyKreYmWzKfwgAAAAs"]
[Mon Dec 08 20:56:00.371886 2025] [:error] [pid 48481:tid 48505] [client 13.70.2.1:21433] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aTbK4Ce0pzx5KCi3S0ISuwAAANQ"]
[Mon Dec 08 20:56:00.983829 2025] [:error] [pid 48482:tid 48516] [client 13.70.2.1:21406] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aTbK4H23gV7gRu3vn816vwAAAIQ"]
[Mon Dec 08 20:56:01.317773 2025] [:error] [pid 48482:tid 48530] [client 13.70.2.1:21269] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aTbK4X23gV7gRu3vn816wQAAAJI"]
[Mon Dec 08 20:56:01.650768 2025] [:error] [pid 48482:tid 48531] [client 13.70.2.1:21401] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aTbK4X23gV7gRu3vn816xwAAAJM"]
[Mon Dec 08 20:56:02.018682 2025] [:error] [pid 50569:tid 50573] [client 13.70.2.1:23729] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aTbK4vHhZxyKreYmWzKfyQAAAAE"]
[Mon Dec 08 20:56:03.327536 2025] [:error] [pid 48481:tid 48497] [client 13.70.2.1:21384] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aTbK4ye0pzx5KCi3S0ISwAAAAMw"]
[Mon Dec 08 20:56:03.808083 2025] [:error] [pid 48481:tid 48501] [client 13.70.2.1:21423] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aTbK4ye0pzx5KCi3S0ISwQAAANA"]
[Mon Dec 08 20:56:04.292587 2025] [proxy_fcgi:error] [pid 48482:tid 48517] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:04.417018 2025] [proxy_fcgi:error] [pid 48482:tid 48525] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:04.541434 2025] [proxy_fcgi:error] [pid 48482:tid 48520] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:04.676922 2025] [proxy_fcgi:error] [pid 48482:tid 48518] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:04.798121 2025] [proxy_fcgi:error] [pid 48482:tid 48522] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:05.052104 2025] [proxy_fcgi:error] [pid 48482:tid 48526] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:05.184464 2025] [proxy_fcgi:error] [pid 48482:tid 48528] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:05.352904 2025] [proxy_fcgi:error] [pid 48482:tid 48529] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:05.553285 2025] [proxy_fcgi:error] [pid 48482:tid 48521] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:05.683354 2025] [proxy_fcgi:error] [pid 48482:tid 48530] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:05.804493 2025] [proxy_fcgi:error] [pid 48482:tid 48519] [client 13.70.2.1:21281] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 20:56:06.010708 2025] [:error] [pid 48482:tid 48524] [client 13.70.2.1:21281] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aTbK5n23gV7gRu3vn8163QAAAIw"]
[Mon Dec 08 20:56:06.521973 2025] [:error] [pid 48541:tid 48560] [client 13.70.2.1:21256] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aTbK5gSNhJPArxLCdWHy8AAAARE"]
[Mon Dec 08 20:56:06.826070 2025] [:error] [pid 50569:tid 50576] [client 13.70.2.1:21191] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aTbK5vHhZxyKreYmWzKf2wAAAAQ"]
[Mon Dec 08 20:56:07.103569 2025] [:error] [pid 48573:tid 48586] [client 13.70.2.1:23712] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aTbK51Iayuqwlm3CEkZ7FAAAAUs"]
[Mon Dec 08 20:56:07.622665 2025] [:error] [pid 50569:tid 50584] [client 13.70.2.1:21202] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aTbK5_HhZxyKreYmWzKf3gAAAAw"]
[Mon Dec 08 20:56:07.989643 2025] [:error] [pid 48482:tid 48514] [client 13.70.2.1:21228] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aTbK5323gV7gRu3vn8163wAAAII"]
[Mon Dec 08 20:56:08.271256 2025] [:error] [pid 48482:tid 48531] [client 13.70.2.1:21358] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aTbK6H23gV7gRu3vn8164AAAAJM"]
[Mon Dec 08 20:56:08.642729 2025] [:error] [pid 48481:tid 48503] [client 13.70.2.1:21430] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aTbK6Ce0pzx5KCi3S0IS0AAAANI"]
[Mon Dec 08 20:56:08.967601 2025] [:error] [pid 48573:tid 48599] [client 13.70.2.1:21198] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aTbK6FIayuqwlm3CEkZ7GQAAAVg"]
[Mon Dec 08 20:56:09.224835 2025] [:error] [pid 48541:tid 48564] [client 13.70.2.1:21285] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aTbK6QSNhJPArxLCdWHy-AAAARU"]
[Mon Dec 08 20:56:09.505525 2025] [:error] [pid 50569:tid 50593] [client 13.70.2.1:21258] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aTbK6fHhZxyKreYmWzKf5QAAABU"]
[Mon Dec 08 20:56:09.799039 2025] [:error] [pid 48573:tid 48592] [client 13.70.2.1:21365] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aTbK6VIayuqwlm3CEkZ7HQAAAVE"]
[Mon Dec 08 20:56:10.158260 2025] [:error] [pid 48573:tid 48579] [client 13.70.2.1:21284] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTbK6lIayuqwlm3CEkZ7HwAAAUQ"]
[Mon Dec 08 20:56:10.423721 2025] [:error] [pid 48482:tid 48516] [client 13.70.2.1:21214] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTbK6n23gV7gRu3vn8165wAAAIQ"]
[Mon Dec 08 20:56:10.916529 2025] [:error] [pid 48541:tid 48566] [client 13.70.2.1:21291] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTbK6gSNhJPArxLCdWHy_QAAARc"]
[Mon Dec 08 20:56:11.242332 2025] [:error] [pid 50569:tid 50577] [client 13.70.2.1:21274] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTbK6_HhZxyKreYmWzKf6QAAAAU"]
[Mon Dec 08 20:56:11.578986 2025] [:error] [pid 48482:tid 48513] [client 13.70.2.1:21437] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTbK6323gV7gRu3vn8167QAAAIE"]
[Mon Dec 08 20:56:12.044619 2025] [:error] [pid 48541:tid 48560] [client 13.70.2.1:21275] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTbK7ASNhJPArxLCdWHzAAAAARE"]
[Mon Dec 08 20:56:12.406323 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:21127] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTbK7PHhZxyKreYmWzKf9AAAAA0"]
[Mon Dec 08 20:56:12.728223 2025] [:error] [pid 48481:tid 48499] [client 13.70.2.1:21287] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTbK7Ce0pzx5KCi3S0IS1QAAAM4"]
[Mon Dec 08 20:56:12.990336 2025] [:error] [pid 48541:tid 48559] [client 13.70.2.1:21396] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aTbK7ASNhJPArxLCdWHzBQAAARA"]
[Mon Dec 08 20:56:13.301050 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:21207] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aTbK7VIayuqwlm3CEkZ7KgAAAUU"]
[Mon Dec 08 20:56:13.666241 2025] [:error] [pid 48541:tid 48566] [client 13.70.2.1:21413] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aTbK7QSNhJPArxLCdWHzCAAAARc"]
[Mon Dec 08 20:56:13.996404 2025] [:error] [pid 48573:tid 48585] [client 13.70.2.1:23707] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aTbK7VIayuqwlm3CEkZ7KwAAAUo"]
[Mon Dec 08 20:56:14.246041 2025] [:error] [pid 48541:tid 48562] [client 13.70.2.1:21307] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aTbK7gSNhJPArxLCdWHzCgAAARM"]
[Mon Dec 08 20:56:14.603419 2025] [:error] [pid 48573:tid 48594] [client 13.70.2.1:21323] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aTbK7lIayuqwlm3CEkZ7LgAAAVM"]
[Mon Dec 08 20:56:14.864787 2025] [:error] [pid 48482:tid 48526] [client 13.70.2.1:21283] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aTbK7n23gV7gRu3vn8168QAAAI4"]
[Mon Dec 08 20:56:15.172293 2025] [:error] [pid 50569:tid 50584] [client 13.70.2.1:21217] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aTbK7_HhZxyKreYmWzKgCgAAAAw"]
[Mon Dec 08 20:56:15.592102 2025] [:error] [pid 48573:tid 48580] [client 13.70.2.1:21327] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aTbK71Iayuqwlm3CEkZ7MgAAAUU"]
[Mon Dec 08 20:56:16.037910 2025] [:error] [pid 50569:tid 50585] [client 13.70.2.1:21385] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aTbK8PHhZxyKreYmWzKgEAAAAA0"]
[Mon Dec 08 20:56:16.327984 2025] [:error] [pid 50569:tid 50580] [client 13.70.2.1:21224] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aTbK8PHhZxyKreYmWzKgEQAAAAg"]
[Mon Dec 08 20:56:16.615321 2025] [:error] [pid 50569:tid 50589] [client 13.70.2.1:21196] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aTbK8PHhZxyKreYmWzKgEgAAABE"]
[Mon Dec 08 20:56:16.960423 2025] [:error] [pid 48573:tid 48576] [client 13.70.2.1:21357] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aTbK8FIayuqwlm3CEkZ7NQAAAUE"]
[Mon Dec 08 20:56:17.227997 2025] [:error] [pid 50569:tid 50573] [client 13.70.2.1:21249] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aTbK8fHhZxyKreYmWzKgFgAAAAE"]
[Mon Dec 08 20:56:17.666412 2025] [:error] [pid 48481:tid 48489] [client 13.70.2.1:21221] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aTbK8Se0pzx5KCi3S0IS4AAAAMQ"]
[Mon Dec 08 20:56:17.993373 2025] [:error] [pid 50569:tid 50582] [client 13.70.2.1:21299] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aTbK8fHhZxyKreYmWzKgGQAAAAo"]
[Mon Dec 08 22:56:28.364029 2025] [autoindex:error] [pid 48482:tid 48523] [client 34.229.197.21:47324] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 23:03:45.093240 2025] [autoindex:error] [pid 48481:tid 48492] [client 107.22.105.226:60476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 23:33:04.897727 2025] [autoindex:error] [pid 48482:tid 48513] [client 18.233.9.161:44872] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 23:33:07.166159 2025] [autoindex:error] [pid 48573:tid 48582] [client 134.199.70.118:35785] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 03:04:54.520744 2025] [proxy_fcgi:error] [pid 17589:tid 17654] [client 74.176.191.36:43112] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 09 03:04:55.487884 2025] [proxy_fcgi:error] [pid 17589:tid 17650] [client 74.176.191.36:43112] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 09 03:04:55.605918 2025] [proxy_fcgi:error] [pid 17589:tid 17669] [client 74.176.191.36:43112] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 09 03:04:55.719939 2025] [:error] [pid 17589:tid 17656] [client 74.176.191.36:43112] [client 74.176.191.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTchV43u_N_j630LWcCkcQAAAUk"], referer: https://www.google.de/
[Tue Dec 09 04:08:08.000976 2025] [autoindex:error] [pid 62040:tid 62092] [client 35.245.45.168:52818] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 04:34:19.391886 2025] [:error] [pid 62124:tid 62140] [client 192.144.148.122:46350] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTc2S1raBX51GaCVVuUtyQAAAM0"]
[Tue Dec 09 06:12:16.371080 2025] [:error] [pid 62124:tid 62128] [client 77.239.108.81:49732] [client 77.239.108.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTdNQFraBX51GaCVVuVFhQAAAME"]
[Tue Dec 09 08:19:31.876290 2025] [autoindex:error] [pid 62040:tid 62080] [client 206.189.225.181:35736] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:19:31.876622 2025] [autoindex:error] [pid 26689:tid 26760] [client 138.68.144.227:58938] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:19:32.432961 2025] [autoindex:error] [pid 6097:tid 6114] [client 138.68.144.227:58940] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:19:32.437900 2025] [autoindex:error] [pid 62039:tid 62043] [client 209.38.248.17:44020] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:19:33.549745 2025] [:error] [pid 62039:tid 62048] [client 209.38.248.17:44030] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTdrFa-WdjFepfLrlW6qmgAAAAU"]
[Tue Dec 09 08:19:34.686740 2025] [:error] [pid 62039:tid 62051] [client 209.38.248.17:44042] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/graphql"] [unique_id "aTdrFq-WdjFepfLrlW6qnwAAAAg"]
[Tue Dec 09 08:19:35.513108 2025] [:error] [pid 34783:tid 34801] [client 209.38.248.17:44052] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api"] [unique_id "aTdrF617odLapL7SFcxVtwAAAVA"]
[Tue Dec 09 08:19:36.392020 2025] [:error] [pid 6053:tid 6060] [client 209.38.248.17:44064] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api/graphql"] [unique_id "aTdrGCHz_Tnml8kdMwzQggAAAYU"]
[Tue Dec 09 08:19:36.574975 2025] [autoindex:error] [pid 62039:tid 62056] [client 206.189.225.181:35750] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:19:37.216578 2025] [:error] [pid 26689:tid 26738] [client 209.38.248.17:44070] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/graphql/api"] [unique_id "aTdrGdkbfj8nyBvIyRBicAAAAQM"]
[Tue Dec 09 08:19:38.047885 2025] [:error] [pid 62040:tid 62092] [client 209.38.248.17:44074] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api/gql"] [unique_id "aTdrGvkSVjwLGqZL-9KDrwAAAFY"]
[Tue Dec 09 08:19:39.914750 2025] [:error] [pid 62039:tid 62058] [client 209.38.248.17:44078] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/swagger-ui.html"] [unique_id "aTdrG6-WdjFepfLrlW6qqgAAAA8"]
[Tue Dec 09 08:19:40.929204 2025] [:error] [pid 6097:tid 6106] [client 209.38.248.17:38356] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/swagger/index.html"] [unique_id "aTdrHOY9nDD1R9gHO2S_1AAAAcc"]
[Tue Dec 09 08:19:41.929875 2025] [:error] [pid 62124:tid 62130] [client 209.38.248.17:38370] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aTdrHVraBX51GaCVVuVmNwAAAMM"]
[Tue Dec 09 08:19:42.949886 2025] [:error] [pid 26689:tid 26755] [client 209.38.248.17:38382] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aTdrHtkbfj8nyBvIyRBihQAAARM"]
[Tue Dec 09 08:19:43.226030 2025] [:error] [pid 62124:tid 62147] [client 138.68.144.227:38616] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2/api-docs"] [unique_id "aTdrH1raBX51GaCVVuVmOAAAANQ"]
[Tue Dec 09 08:19:43.940648 2025] [:error] [pid 6053:tid 6070] [client 209.38.248.17:38390] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/swagger.json"] [unique_id "aTdrHyHz_Tnml8kdMwzQjAAAAY8"]
[Tue Dec 09 08:19:44.233449 2025] [:error] [pid 6053:tid 6063] [client 138.68.144.227:47904] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v3/api-docs"] [unique_id "aTdrICHz_Tnml8kdMwzQjQAAAYg"]
[Tue Dec 09 08:19:44.940951 2025] [:error] [pid 62039:tid 62062] [client 209.38.248.17:38398] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aTdrIK-WdjFepfLrlW6qsgAAABM"]
[Tue Dec 09 08:19:45.220081 2025] [:error] [pid 62039:tid 62054] [client 138.68.144.227:47912] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aTdrIa-WdjFepfLrlW6qswAAAAs"]
[Tue Dec 09 08:19:45.940705 2025] [:error] [pid 62040:tid 62087] [client 209.38.248.17:38402] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v2/api-docs"] [unique_id "aTdrIfkSVjwLGqZL-9KDugAAAFE"]
[Tue Dec 09 08:19:46.222766 2025] [:error] [pid 6053:tid 6066] [client 138.68.144.227:47922] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api/swagger.json"] [unique_id "aTdrIiHz_Tnml8kdMwzQlAAAAYs"]
[Tue Dec 09 08:19:46.954862 2025] [:error] [pid 6053:tid 6064] [client 209.38.248.17:38416] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v3/api-docs"] [unique_id "aTdrIiHz_Tnml8kdMwzQlQAAAYk"]
[Tue Dec 09 08:19:47.223578 2025] [:error] [pid 62041:tid 62106] [client 138.68.144.227:47928] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/@vite/env"] [unique_id "aTdrI_OmnJGvfaNPxPNyUQAAAIk"]
[Tue Dec 09 08:19:47.945844 2025] [:error] [pid 6053:tid 6069] [client 209.38.248.17:38430] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aTdrIyHz_Tnml8kdMwzQlwAAAY4"]
[Tue Dec 09 08:19:48.129002 2025] [:error] [pid 62124:tid 62151] [client 206.189.225.181:44928] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2/api-docs"] [unique_id "aTdrJFraBX51GaCVVuVmPgAAANg"]
[Tue Dec 09 08:19:48.220007 2025] [:error] [pid 6053:tid 6061] [client 138.68.144.227:47936] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/actuator/env"] [unique_id "aTdrJCHz_Tnml8kdMwzQmQAAAYY"]
[Tue Dec 09 08:19:48.956414 2025] [:error] [pid 6053:tid 6075] [client 209.38.248.17:38438] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api/swagger.json"] [unique_id "aTdrJCHz_Tnml8kdMwzQnQAAAZQ"]
[Tue Dec 09 08:19:49.059056 2025] [:error] [pid 62039:tid 62056] [client 206.189.225.181:55736] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v3/api-docs"] [unique_id "aTdrJa-WdjFepfLrlW6quwAAAA0"]
[Tue Dec 09 08:19:49.223649 2025] [:error] [pid 62041:tid 62117] [client 138.68.144.227:47952] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/server"] [unique_id "aTdrJfOmnJGvfaNPxPNyUwAAAJQ"]
[Tue Dec 09 08:19:49.950154 2025] [:error] [pid 62124:tid 62140] [client 209.38.248.17:38454] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/@vite/env"] [unique_id "aTdrJVraBX51GaCVVuVmQwAAAM0"]
[Tue Dec 09 08:19:50.141610 2025] [:error] [pid 6097:tid 6106] [client 206.189.225.181:55740] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aTdrJuY9nDD1R9gHO2S_5QAAAcc"]
[Tue Dec 09 08:19:50.222527 2025] [:error] [pid 62040:tid 62076] [client 138.68.144.227:47954] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTdrJvkSVjwLGqZL-9KDwAAAAEY"]
[Tue Dec 09 08:19:50.942819 2025] [:error] [pid 62040:tid 62086] [client 209.38.248.17:49260] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/actuator/env"] [unique_id "aTdrJvkSVjwLGqZL-9KDwwAAAFA"]
[Tue Dec 09 08:19:51.062707 2025] [:error] [pid 62039:tid 62050] [client 206.189.225.181:55742] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api/swagger.json"] [unique_id "aTdrJ6-WdjFepfLrlW6qwAAAAAc"]
[Tue Dec 09 08:19:51.943315 2025] [:error] [pid 6097:tid 6119] [client 209.38.248.17:49272] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/server"] [unique_id "aTdrJ-Y9nDD1R9gHO2S_6wAAAdQ"]
[Tue Dec 09 08:19:52.064911 2025] [:error] [pid 62039:tid 62061] [client 206.189.225.181:55750] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/@vite/env"] [unique_id "aTdrKK-WdjFepfLrlW6qxQAAABI"]
[Tue Dec 09 08:19:52.226601 2025] [:error] [pid 62039:tid 62054] [client 138.68.144.227:47964] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about"] [unique_id "aTdrKK-WdjFepfLrlW6qyAAAAAs"]
[Tue Dec 09 08:19:52.944290 2025] [:error] [pid 6053:tid 6069] [client 209.38.248.17:49286] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTdrKCHz_Tnml8kdMwzQoQAAAY4"]
[Tue Dec 09 08:19:53.061108 2025] [:error] [pid 62040:tid 62080] [client 206.189.225.181:55758] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/actuator/env"] [unique_id "aTdrKfkSVjwLGqZL-9KDywAAAEo"]
[Tue Dec 09 08:19:53.222476 2025] [:error] [pid 6053:tid 6055] [client 138.68.144.227:47978] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug/default/view"] [unique_id "aTdrKSHz_Tnml8kdMwzQpQAAAYA"]
[Tue Dec 09 08:19:54.066648 2025] [:error] [pid 6097:tid 6122] [client 206.189.225.181:55768] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/server"] [unique_id "aTdrKuY9nDD1R9gHO2S_7QAAAdc"]
[Tue Dec 09 08:19:54.225776 2025] [:error] [pid 34783:tid 34809] [client 138.68.144.227:36760] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2/_catalog"] [unique_id "aTdrKq17odLapL7SFcxV0wAAAVg"]
[Tue Dec 09 08:19:54.954670 2025] [:error] [pid 62041:tid 62119] [client 209.38.248.17:49298] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about"] [unique_id "aTdrKvOmnJGvfaNPxPNyWAAAAJY"]
[Tue Dec 09 08:19:55.061971 2025] [:error] [pid 6097:tid 6117] [client 206.189.225.181:55780] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTdrK-Y9nDD1R9gHO2S_7gAAAdI"]
[Tue Dec 09 08:19:55.223224 2025] [:error] [pid 62039:tid 62050] [client 138.68.144.227:36776] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTdrK6-WdjFepfLrlW6q1AAAAAc"]
[Tue Dec 09 08:19:55.952976 2025] [:error] [pid 62039:tid 62067] [client 209.38.248.17:49304] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/debug/default/view"] [unique_id "aTdrK6-WdjFepfLrlW6q1wAAABg"]
[Tue Dec 09 08:19:56.225870 2025] [:error] [pid 26689:tid 26739] [client 138.68.144.227:36782] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/server-status"] [unique_id "aTdrLNkbfj8nyBvIyRBijQAAAQQ"]
[Tue Dec 09 08:19:56.944082 2025] [:error] [pid 62041:tid 62108] [client 209.38.248.17:49308] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v2/_catalog"] [unique_id "aTdrLPOmnJGvfaNPxPNyWwAAAIs"]
[Tue Dec 09 08:19:57.084853 2025] [:error] [pid 62041:tid 62103] [client 206.189.225.181:55796] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about"] [unique_id "aTdrLfOmnJGvfaNPxPNyXAAAAIY"]
[Tue Dec 09 08:19:57.226342 2025] [:error] [pid 62041:tid 62105] [client 138.68.144.227:36796] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/login.action"] [unique_id "aTdrLfOmnJGvfaNPxPNyXQAAAIg"]
[Tue Dec 09 08:19:57.954124 2025] [:error] [pid 34783:tid 34786] [client 209.38.248.17:49324] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTdrLa17odLapL7SFcxV2wAAAUE"]
[Tue Dec 09 08:19:58.065260 2025] [:error] [pid 6097:tid 6120] [client 206.189.225.181:55802] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug/default/view"] [unique_id "aTdrLuY9nDD1R9gHO2S_8wAAAdU"]
[Tue Dec 09 08:19:58.226376 2025] [:error] [pid 6097:tid 6108] [client 138.68.144.227:36812] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/_all_dbs"] [unique_id "aTdrLuY9nDD1R9gHO2S_9AAAAck"]
[Tue Dec 09 08:19:58.944639 2025] [:error] [pid 62124:tid 62144] [client 209.38.248.17:49330] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/server-status"] [unique_id "aTdrLlraBX51GaCVVuVmUQAAANE"]
[Tue Dec 09 08:19:59.065881 2025] [:error] [pid 6053:tid 6056] [client 206.189.225.181:53946] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2/_catalog"] [unique_id "aTdrLyHz_Tnml8kdMwzQswAAAYE"]
[Tue Dec 09 08:19:59.228107 2025] [:error] [pid 62039:tid 62043] [client 138.68.144.227:36822] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.DS_Store"] [unique_id "aTdrL6-WdjFepfLrlW6q3AAAAAA"]
[Tue Dec 09 08:19:59.945967 2025] [:error] [pid 62041:tid 62104] [client 209.38.248.17:49342] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/login.action"] [unique_id "aTdrL_OmnJGvfaNPxPNyYQAAAIc"]
[Tue Dec 09 08:20:00.063897 2025] [:error] [pid 6053:tid 6064] [client 206.189.225.181:53958] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTdrMCHz_Tnml8kdMwzQtAAAAYk"]
[Tue Dec 09 08:20:00.259767 2025] [:error] [pid 6053:tid 6072] [client 138.68.144.227:36824] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTdrMCHz_Tnml8kdMwzQtQAAAZE"]
[Tue Dec 09 08:20:00.959857 2025] [:error] [pid 6097:tid 6109] [client 209.38.248.17:34608] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/_all_dbs"] [unique_id "aTdrMOY9nDD1R9gHO2S__QAAAco"]
[Tue Dec 09 08:20:01.068688 2025] [:error] [pid 62039:tid 62058] [client 206.189.225.181:53970] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/server-status"] [unique_id "aTdrMa-WdjFepfLrlW6q3gAAAA8"]
[Tue Dec 09 08:20:01.968663 2025] [:error] [pid 6097:tid 6123] [client 209.38.248.17:34612] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.DS_Store"] [unique_id "aTdrMeY9nDD1R9gHO2S__wAAAdg"]
[Tue Dec 09 08:20:02.109965 2025] [:error] [pid 6097:tid 6120] [client 206.189.225.181:53976] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/login.action"] [unique_id "aTdrMuY9nDD1R9gHO2TAAAAAAdU"]
[Tue Dec 09 08:20:02.361246 2025] [:error] [pid 62041:tid 62097] [client 138.68.144.227:36836] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTdrMvOmnJGvfaNPxPNyYwAAAIA"]
[Tue Dec 09 08:20:02.945236 2025] [:error] [pid 62039:tid 62056] [client 209.38.248.17:34620] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env"] [unique_id "aTdrMq-WdjFepfLrlW6q5QAAAA0"]
[Tue Dec 09 08:20:03.076720 2025] [:error] [pid 62039:tid 62045] [client 206.189.225.181:53992] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/_all_dbs"] [unique_id "aTdrM6-WdjFepfLrlW6q5wAAAAI"]
[Tue Dec 09 08:20:03.318778 2025] [:error] [pid 62041:tid 62118] [client 138.68.144.227:36838] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTdrM_OmnJGvfaNPxPNyZgAAAJU"]
[Tue Dec 09 08:20:04.082201 2025] [:error] [pid 62039:tid 62046] [client 206.189.225.181:54000] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.DS_Store"] [unique_id "aTdrNK-WdjFepfLrlW6q7gAAAAM"]
[Tue Dec 09 08:20:04.288189 2025] [:error] [pid 62039:tid 62050] [client 138.68.144.227:56592] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.json"] [unique_id "aTdrNK-WdjFepfLrlW6q7wAAAAc"]
[Tue Dec 09 08:20:04.960280 2025] [:error] [pid 6053:tid 6078] [client 209.38.248.17:34624] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTdrNCHz_Tnml8kdMwzQvAAAAZc"]
[Tue Dec 09 08:20:05.065476 2025] [:error] [pid 62039:tid 62066] [client 206.189.225.181:54002] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTdrNa-WdjFepfLrlW6q8QAAABc"]
[Tue Dec 09 08:20:05.290363 2025] [:error] [pid 6053:tid 6073] [client 138.68.144.227:56596] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/telescope/requests"] [unique_id "aTdrNSHz_Tnml8kdMwzQvQAAAZI"]
[Tue Dec 09 08:20:05.959192 2025] [:error] [pid 6097:tid 6100] [client 209.38.248.17:34630] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTdrNeY9nDD1R9gHO2TABwAAAcE"]
[Tue Dec 09 08:20:06.289957 2025] [:error] [pid 62124:tid 62150] [client 138.68.144.227:56604] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTdrNlraBX51GaCVVuVmWAAAANc"]
[Tue Dec 09 08:20:06.964974 2025] [:error] [pid 26689:tid 26756] [client 209.38.248.17:34642] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/config.json"] [unique_id "aTdrNtkbfj8nyBvIyRBilQAAARQ"]
[Tue Dec 09 08:20:07.082008 2025] [:error] [pid 26689:tid 26748] [client 206.189.225.181:54016] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTdrN9kbfj8nyBvIyRBilgAAAQw"]
[Tue Dec 09 08:20:07.289227 2025] [:error] [pid 26689:tid 26739] [client 138.68.144.227:56614] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTdrN9kbfj8nyBvIyRBimAAAAQQ"]
[Tue Dec 09 08:20:07.967817 2025] [:error] [pid 62040:tid 62089] [client 209.38.248.17:34654] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/telescope/requests"] [unique_id "aTdrN_kSVjwLGqZL-9KD2AAAAFM"]
[Tue Dec 09 08:20:08.083643 2025] [:error] [pid 34783:tid 34796] [client 206.189.225.181:54030] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTdrOK17odLapL7SFcxV4QAAAUs"]
[Tue Dec 09 08:20:09.067739 2025] [:error] [pid 62041:tid 62117] [client 206.189.225.181:44036] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.json"] [unique_id "aTdrOfOmnJGvfaNPxPNyagAAAJQ"]
[Tue Dec 09 08:20:10.084186 2025] [:error] [pid 62124:tid 62131] [client 206.189.225.181:44050] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/telescope/requests"] [unique_id "aTdrOlraBX51GaCVVuVmXwAAAMQ"]
[Tue Dec 09 08:20:11.078500 2025] [:error] [pid 62039:tid 62054] [client 206.189.225.181:44054] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aTdrO6-WdjFepfLrlW6rCgAAAAs"]
[Tue Dec 09 08:20:12.083539 2025] [:error] [pid 62040:tid 62070] [client 206.189.225.181:44058] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTdrPPkSVjwLGqZL-9KD3QAAAEA"]
[Tue Dec 09 08:22:03.755731 2025] [autoindex:error] [pid 26689:tid 26744] [client 31.171.155.7:55912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:22:11.387929 2025] [autoindex:error] [pid 26689:tid 26744] [client 205.169.39.189:21545] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:22:31.886406 2025] [autoindex:error] [pid 62039:tid 62059] [client 34.116.199.70:7706] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:24:26.556268 2025] [autoindex:error] [pid 6097:tid 6099] [client 205.169.39.14:53345] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:35.663100 2025] [autoindex:error] [pid 62039:tid 62061] [client 46.202.42.164:11134] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:35.664451 2025] [autoindex:error] [pid 62124:tid 62130] [client 136.0.38.198:25504] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:35.717837 2025] [autoindex:error] [pid 6097:tid 6109] [client 92.112.1.235:50592] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:35.884206 2025] [autoindex:error] [pid 62041:tid 62113] [client 103.104.21.165:8642] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:36.656206 2025] [autoindex:error] [pid 62039:tid 62050] [client 166.0.50.19:20098] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:36.685873 2025] [autoindex:error] [pid 6053:tid 6073] [client 151.240.183.242:44056] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:36.915332 2025] [autoindex:error] [pid 6053:tid 6070] [client 104.253.206.170:9084] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:37.819057 2025] [autoindex:error] [pid 62124:tid 62140] [client 34.6.231.120:38238] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:38.901848 2025] [autoindex:error] [pid 34783:tid 34794] [client 34.90.226.144:46414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:32:40.921367 2025] [autoindex:error] [pid 6097:tid 6104] [client 34.6.231.120:53754] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:35:03.375118 2025] [autoindex:error] [pid 6053:tid 6067] [client 66.249.64.226:37169] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:42:29.683189 2025] [autoindex:error] [pid 6097:tid 6103] [client 91.231.89.33:33675] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:45:56.442183 2025] [autoindex:error] [pid 26689:tid 26735] [client 91.231.89.99:42089] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:52:05.269794 2025] [autoindex:error] [pid 26689:tid 26759] [client 205.169.39.25:47772] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:53:59.667767 2025] [autoindex:error] [pid 62039:tid 62048] [client 91.231.89.33:42495] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 08:54:49.719483 2025] [autoindex:error] [pid 62039:tid 62059] [client 91.231.89.101:55243] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 09:01:15.985788 2025] [autoindex:error] [pid 34783:tid 34787] [client 128.140.51.187:38576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 09:06:46.410083 2025] [autoindex:error] [pid 62039:tid 62061] [client 46.105.48.30:32841] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 09:27:58.746969 2025] [proxy_fcgi:error] [pid 62039:tid 62066] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:27:59.084740 2025] [proxy_fcgi:error] [pid 62039:tid 62063] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:27:59.788760 2025] [proxy_fcgi:error] [pid 62039:tid 62059] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:00.126287 2025] [proxy_fcgi:error] [pid 62039:tid 62048] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:00.464602 2025] [proxy_fcgi:error] [pid 62039:tid 62047] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:00.809441 2025] [proxy_fcgi:error] [pid 62039:tid 62045] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:01.146383 2025] [proxy_fcgi:error] [pid 62039:tid 62057] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:01.488736 2025] [autoindex:error] [pid 62039:tid 62043] [client 45.86.202.141:51735] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 09:28:02.166124 2025] [proxy_fcgi:error] [pid 62039:tid 62046] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:02.505785 2025] [proxy_fcgi:error] [pid 62039:tid 62064] [client 45.86.202.141:51735] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:28:03.196243 2025] [:error] [pid 62039:tid 62067] [client 45.86.202.141:51735] [client 45.86.202.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aTd7I6-WdjFepfLrlW7IOgAAABg"]
[Tue Dec 09 09:28:03.865062 2025] [:error] [pid 26689:tid 26754] [client 45.86.202.119:29083] [client 45.86.202.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.example"] [unique_id "aTd7I9kbfj8nyBvIyRByRwAAARI"]
[Tue Dec 09 09:28:04.536351 2025] [:error] [pid 26689:tid 26743] [client 45.86.202.103:50029] [client 45.86.202.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aTd7JNkbfj8nyBvIyRByUgAAAQg"]
[Tue Dec 09 09:28:06.213570 2025] [:error] [pid 6097:tid 6112] [client 45.86.202.144:38983] [client 45.86.202.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.backup"] [unique_id "aTd7JuY9nDD1R9gHO2TV2QAAAc0"]
[Tue Dec 09 09:28:06.882955 2025] [:error] [pid 6053:tid 6058] [client 45.86.202.144:28497] [client 45.86.202.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/config/.env"] [unique_id "aTd7JiHz_Tnml8kdMwzjJgAAAYM"]
[Tue Dec 09 10:29:30.718510 2025] [:error] [pid 34783:tid 34787] [client 1.15.52.154:53222] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTeJiq17odLapL7SFcxzLQAAAUI"]
[Tue Dec 09 11:17:25.542995 2025] [autoindex:error] [pid 6097:tid 6113] [client 52.56.120.192:55793] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 13:57:54.736992 2025] [autoindex:error] [pid 7287:tid 7301] [client 34.16.209.188:53598] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 15:13:11.280405 2025] [:error] [pid 7325:tid 7356] [client 43.157.95.131:52916] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTfMBwqEQlZnpyQAsW1gQQAAAYA"]
[Tue Dec 09 16:32:41.573588 2025] [:error] [pid 30498:tid 30509] [client 49.7.227.204:54398] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTfeqR2mcZJQ5qP_RC3vVAAAAAc"]
[Tue Dec 09 17:28:05.205117 2025] [autoindex:error] [pid 36456:tid 36477] [client 192.227.215.37:47444] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 18:08:46.988665 2025] [autoindex:error] [pid 30499:tid 30546] [client 192.227.215.37:46330] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 19:46:21.452813 2025] [autoindex:error] [pid 30591:tid 30606] [client 34.216.175.253:50382] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 19:46:22.570669 2025] [autoindex:error] [pid 30499:tid 30547] [client 34.216.175.253:60836] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 19:46:22.942534 2025] [autoindex:error] [pid 30591:tid 30612] [client 34.216.175.253:49218] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 19:46:23.314067 2025] [autoindex:error] [pid 30591:tid 30602] [client 34.216.175.253:37060] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 19:53:50.259369 2025] [:error] [pid 30498:tid 30512] [client 35.192.77.233:60719] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTgNzh2mcZJQ5qP_RC0m8QAAAAo"]
[Tue Dec 09 19:53:50.703863 2025] [:error] [pid 30500:tid 30562] [client 35.192.77.233:63309] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTgNzq2eIIK3JPWHCXXMZgAAAYU"]
[Tue Dec 09 19:53:51.119833 2025] [:error] [pid 36456:tid 36463] [client 35.192.77.233:60669] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzx0pAnOyfXl_v40dnAAAAIU"]
[Tue Dec 09 22:51:51.895153 2025] [autoindex:error] [pid 36456:tid 36481] [client 146.190.210.177:44874] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 22:51:53.442357 2025] [autoindex:error] [pid 30500:tid 30569] [client 146.190.210.177:49816] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 23:26:26.297729 2025] [autoindex:error] [pid 30591:tid 30601] [client 74.7.243.192:57112] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 09 23:36:06.671730 2025] [autoindex:error] [pid 30498:tid 30509] [client 74.7.242.17:35114] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 00:14:37.137217 2025] [autoindex:error] [pid 30499:tid 30552] [client 136.111.35.236:62453] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 00:33:24.108186 2025] [autoindex:error] [pid 2277:tid 2307] [client 213.21.239.4:45584] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 00:34:32.333571 2025] [:error] [pid 2279:tid 2321] [client 43.130.101.151:34522] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aThPmFmpdQscMcJOElWS7QAAAUs"]
[Wed Dec 10 00:40:24.794381 2025] [autoindex:error] [pid 37041:tid 37051] [client 34.19.51.230:54785] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 00:56:45.441367 2025] [autoindex:error] [pid 2280:tid 2359] [client 51.68.111.202:18325] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 03:33:48.998348 2025] [autoindex:error] [pid 58982:tid 59053] [client 34.252.18.197:46696] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 03:45:41.603072 2025] [autoindex:error] [pid 32082:tid 32115] [client 54.144.39.122:42394] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 04:05:37.946003 2025] [:error] [pid 11267:tid 11308] [client 45.148.10.154:52536] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTiBEYY2npWNIVl2IDxrJAAAAEs"]
[Wed Dec 10 05:16:41.035020 2025] [:error] [pid 11354:tid 11356] [client 185.238.231.26:62641] [client 185.238.231.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.26, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTiRue2TFO6mVSqWP8QAsQAAAMA"]
[Wed Dec 10 05:16:41.045983 2025] [proxy_fcgi:error] [pid 11354:tid 11356] [client 185.238.231.26:62641] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 06:25:30.013900 2025] [autoindex:error] [pid 11267:tid 11305] [client 54.228.130.17:49912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 07:13:13.664999 2025] [autoindex:error] [pid 21327:tid 21351] [client 54.144.39.122:34020] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 09:02:18.498285 2025] [autoindex:error] [pid 21327:tid 21345] [client 165.232.46.192:49944] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 09:02:20.972500 2025] [autoindex:error] [pid 21255:tid 21259] [client 165.232.46.192:44670] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 09:16:46.233939 2025] [autoindex:error] [pid 16597:tid 16642] [client 34.126.136.120:44340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 09:40:09.438464 2025] [autoindex:error] [pid 21255:tid 21266] [client 18.182.54.185:60600] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 10:15:37.481812 2025] [:error] [pid 16596:tid 16608] [client 121.229.185.160:54332] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTjXyXBe21fHOHH2RQo_PwAAAYg"]
[Wed Dec 10 10:39:48.627638 2025] [autoindex:error] [pid 16596:tid 16616] [client 149.88.22.150:55310] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 11:07:49.466404 2025] [autoindex:error] [pid 11266:tid 11292] [client 185.181.247.101:37721] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 11:07:50.806502 2025] [autoindex:error] [pid 11266:tid 11291] [client 185.181.247.101:37721] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 13:07:20.488471 2025] [autoindex:error] [pid 11354:tid 11377] [client 5.133.192.168:60437] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 13:12:49.495349 2025] [autoindex:error] [pid 21327:tid 21335] [client 54.144.39.122:37002] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 14:27:10.215277 2025] [autoindex:error] [pid 21291:tid 21311] [client 35.189.209.124:34912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 14:29:19.275284 2025] [autoindex:error] [pid 16596:tid 16614] [client 45.156.128.117:37835] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 16:18:27.088990 2025] [:error] [pid 36977:tid 37051] [client 182.44.2.148:40343] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTks08c-JLl-uoL-Au5-AAAAAFE"]
[Wed Dec 10 17:44:27.195529 2025] [autoindex:error] [pid 36975:tid 36994] [client 54.144.39.122:20260] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 18:50:47.201723 2025] [autoindex:error] [pid 36975:tid 37002] [client 149.102.254.5:54950] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 19:38:21.308568 2025] [autoindex:error] [pid 46868:tid 46879] [client 149.102.254.5:6956] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 20:55:02.236465 2025] [autoindex:error] [pid 36977:tid 37045] [client 35.196.15.12:64207] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 21:31:03.617999 2025] [autoindex:error] [pid 49095:tid 49116] [client 85.203.23.4:45039] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 21:48:18.304646 2025] [autoindex:error] [pid 49095:tid 49120] [client 34.26.115.24:65174] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 22:39:23.981007 2025] [:error] [pid 49095:tid 49110] [client 101.91.148.219:46091] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTmGG8orr4Jt2Tfx_EYiCAAAAU0"]
[Wed Dec 10 23:06:11.482977 2025] [autoindex:error] [pid 37062:tid 37087] [client 156.59.208.53:43934] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 23:06:12.547920 2025] [autoindex:error] [pid 49095:tid 49102] [client 156.59.174.46:52718] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 10 23:31:07.863313 2025] [autoindex:error] [pid 36975:tid 36987] [client 34.221.21.250:39352] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 00:09:04.384270 2025] [autoindex:error] [pid 36975:tid 36981] [client 35.243.189.160:37577] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 00:53:52.637905 2025] [autoindex:error] [pid 10520:tid 10543] [client 34.9.53.180:53679] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 01:07:53.233133 2025] [autoindex:error] [pid 27893:tid 27904] [client 100.42.185.115:33334] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 01:09:39.939697 2025] [autoindex:error] [pid 27893:tid 27903] [client 136.118.71.137:60362] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 01:34:18.881435 2025] [autoindex:error] [pid 42065:tid 42069] [client 35.243.189.160:40875] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 02:28:57.155143 2025] [autoindex:error] [pid 10435:tid 10517] [client 100.25.74.166:65528] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 02:44:40.879072 2025] [:error] [pid 27893:tid 27906] [client 83.168.61.131:15898] [client 83.168.61.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTm_mFAm_ScxuQGtQnR9twAAAIs"]
[Thu Dec 11 02:44:41.094411 2025] [:error] [pid 10434:tid 10485] [client 83.168.61.131:15908] [client 83.168.61.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTm_mWbAnZFInxx5bO_IpgAAAFI"]
[Thu Dec 11 02:44:42.185597 2025] [:error] [pid 10520:tid 10544] [client 83.168.61.131:41952] [client 83.168.61.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTm_mkNrVZZksrD9M7Ew1wAAARY"]
[Thu Dec 11 02:44:42.841718 2025] [:error] [pid 10520:tid 10537] [client 83.168.61.131:41954] [client 83.168.61.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTm_mkNrVZZksrD9M7Ew2AAAAQ8"]
[Thu Dec 11 03:53:41.796424 2025] [autoindex:error] [pid 41205:tid 41238] [client 34.75.101.47:39585] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 04:48:08.436462 2025] [:error] [pid 57992:tid 58054] [client 43.138.68.113:42194] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTnciOUeau0BMFF2vHnVlgAAAIU"]
[Thu Dec 11 05:15:33.648994 2025] [autoindex:error] [pid 58099:tid 58117] [client 34.75.101.47:36579] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 05:40:21.219798 2025] [autoindex:error] [pid 35112:tid 35129] [client 100.30.248.17:28622] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 06:26:14.055893 2025] [autoindex:error] [pid 57991:tid 58030] [client 35.183.148.252:47066] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 06:36:30.693592 2025] [autoindex:error] [pid 48261:tid 48286] [client 34.231.195.239:26326] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 06:57:47.311405 2025] [:error] [pid 27459:tid 27479] [client 103.217.111.73:62773] [client 103.217.111.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.111.73, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTn661hPEXihPBKMpROExAAAARI"]
[Thu Dec 11 06:57:47.322519 2025] [proxy_fcgi:error] [pid 27459:tid 27479] [client 103.217.111.73:62773] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 07:29:36.030346 2025] [:error] [pid 57991:tid 58046] [client 43.130.34.74:33650] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aToCYKPyGmNXA2ZsETb-EAAAAFg"]
[Thu Dec 11 07:45:47.886862 2025] [autoindex:error] [pid 58099:tid 58104] [client 136.111.181.174:46772] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 09:05:32.979091 2025] [autoindex:error] [pid 48261:tid 48269] [client 34.247.135.193:42464] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 10:20:14.781798 2025] [autoindex:error] [pid 48261:tid 48266] [client 165.231.182.141:42044] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 10:41:36.594314 2025] [:error] [pid 57992:tid 58055] [client 182.40.104.255:50276] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTovYOUeau0BMFF2vHkngwAAAIY"]
[Thu Dec 11 10:48:14.140452 2025] [autoindex:error] [pid 27459:tid 27471] [client 35.195.210.165:59108] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 11:35:29.040935 2025] [autoindex:error] [pid 57990:tid 57998] [client 66.249.64.226:49748] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 12:07:08.441769 2025] [autoindex:error] [pid 57992:tid 58061] [client 192.36.226.103:36407] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 12:50:55.351815 2025] [autoindex:error] [pid 58099:tid 58108] [client 15.204.182.106:8414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 12:58:30.047395 2025] [autoindex:error] [pid 57991:tid 58037] [client 34.23.128.208:56879] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 12:59:30.087291 2025] [autoindex:error] [pid 58099:tid 58114] [client 34.244.43.230:58202] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 13:57:36.067670 2025] [autoindex:error] [pid 57991:tid 58038] [client 15.204.182.106:56588] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:12:05.611757 2025] [autoindex:error] [pid 57990:tid 58005] [client 34.23.128.208:44531] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 16:22:10.310436 2025] [:error] [pid 57990:tid 58000] [client 103.187.94.77:56281] [client 103.187.94.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.94.77, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTp_MgqZT_dc36fQdXFJ9wAAAAU"]
[Thu Dec 11 16:22:10.320829 2025] [proxy_fcgi:error] [pid 57990:tid 58000] [client 103.187.94.77:56281] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 17:25:38.908495 2025] [:error] [pid 48261:tid 48268] [client 101.32.49.171:51682] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTqOEuyPI4WU-4JmiQOKNAAAAYQ"]
[Thu Dec 11 17:25:49.595523 2025] [autoindex:error] [pid 57991:tid 58028] [client 43.208.196.52:35174] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:33:00.424160 2025] [proxy_fcgi:error] [pid 48261:tid 48272] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 17:33:00.564380 2025] [:error] [pid 48261:tid 48283] [client 4.241.173.134:17748] [client 4.241.173.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.173.134, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTqPzOyPI4WU-4JmiQOOIgAAAZM"], referer: https://www.google.com/
[Thu Dec 11 17:33:00.569006 2025] [proxy_fcgi:error] [pid 48261:tid 48283] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:00.807215 2025] [proxy_fcgi:error] [pid 48261:tid 48277] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:00.936827 2025] [proxy_fcgi:error] [pid 48261:tid 48273] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 17:33:01.110200 2025] [proxy_fcgi:error] [pid 48261:tid 48282] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:01.234583 2025] [proxy_fcgi:error] [pid 48261:tid 48288] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 17:33:01.356055 2025] [proxy_fcgi:error] [pid 48261:tid 48264] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:01.481956 2025] [proxy_fcgi:error] [pid 48261:tid 48269] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:02.087543 2025] [proxy_fcgi:error] [pid 48261:tid 48271] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:02.223430 2025] [proxy_fcgi:error] [pid 48261:tid 48287] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:02.342393 2025] [proxy_fcgi:error] [pid 48261:tid 48286] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:02.467731 2025] [proxy_fcgi:error] [pid 48261:tid 48272] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:02.586593 2025] [proxy_fcgi:error] [pid 48261:tid 48270] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 17:33:03.064319 2025] [proxy_fcgi:error] [pid 48261:tid 48285] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:03.188928 2025] [proxy_fcgi:error] [pid 48261:tid 48277] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:03.449707 2025] [proxy_fcgi:error] [pid 48261:tid 48282] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:05.377906 2025] [proxy_fcgi:error] [pid 48261:tid 48278] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:05.497115 2025] [proxy_fcgi:error] [pid 48261:tid 48281] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:05.734105 2025] [proxy_fcgi:error] [pid 48261:tid 48285] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:05.856752 2025] [proxy_fcgi:error] [pid 48261:tid 48280] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:05.988191 2025] [proxy_fcgi:error] [pid 48261:tid 48282] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:06.107620 2025] [proxy_fcgi:error] [pid 48261:tid 48276] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:06.230255 2025] [proxy_fcgi:error] [pid 48261:tid 48284] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:07.202375 2025] [proxy_fcgi:error] [pid 48261:tid 48272] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:09.943067 2025] [proxy_fcgi:error] [pid 48261:tid 48283] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:10.130841 2025] [proxy_fcgi:error] [pid 48261:tid 48265] [client 4.241.173.134:17748] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:11.716959 2025] [:error] [pid 48261:tid 48272] [client 4.241.173.134:17748] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTqP1-yPI4WU-4JmiQOOcgAAAYg"], referer: https://www.google.com/
[Thu Dec 11 17:33:11.995201 2025] [:error] [pid 27459:tid 27477] [client 4.241.173.134:14363] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTqP11hPEXihPBKMpRMvswAAARA"], referer: https://www.google.com/
[Thu Dec 11 17:33:12.273751 2025] [:error] [pid 58099:tid 58113] [client 4.241.173.134:9862] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTqP2MKZVSF_bdPFqRjnVgAAAMw"], referer: https://www.google.de/
[Thu Dec 11 17:33:12.518889 2025] [:error] [pid 58099:tid 58122] [client 4.241.173.134:10138] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTqP2MKZVSF_bdPFqRjnVwAAANU"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:12.752701 2025] [:error] [pid 57990:tid 58008] [client 4.241.173.134:15370] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTqP2AqZT_dc36fQdXFbHAAAAA0"], referer: https://www.google.de/
[Thu Dec 11 17:33:12.988349 2025] [:error] [pid 58099:tid 58123] [client 4.241.173.134:51753] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTqP2MKZVSF_bdPFqRjnWAAAANY"], referer: https://www.google.de/
[Thu Dec 11 17:33:13.248788 2025] [:error] [pid 58099:tid 58110] [client 4.241.173.134:14355] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTqP2cKZVSF_bdPFqRjnWgAAAMk"], referer: https://www.google.fr/
[Thu Dec 11 17:33:13.505412 2025] [:error] [pid 57990:tid 58019] [client 4.241.173.134:3583] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTqP2QqZT_dc36fQdXFbHwAAABg"], referer: https://www.google.com/
[Thu Dec 11 17:33:13.838641 2025] [:error] [pid 57990:tid 58014] [client 4.241.173.134:8779] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTqP2QqZT_dc36fQdXFbIAAAABM"], referer: https://www.google.de/
[Thu Dec 11 17:33:14.073685 2025] [:error] [pid 58099:tid 58103] [client 4.241.173.134:9890] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTqP2sKZVSF_bdPFqRjnXAAAAMI"], referer: https://www.bing.com/
[Thu Dec 11 17:33:14.315144 2025] [:error] [pid 35112:tid 35121] [client 4.241.173.134:9797] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTqP2p9ZpQ0WIeJhsJc_EAAAAUc"], referer: https://www.google.de/
[Thu Dec 11 17:33:14.575025 2025] [:error] [pid 35112:tid 35128] [client 4.241.173.134:10166] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTqP2p9ZpQ0WIeJhsJc_EgAAAU4"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:14.938805 2025] [:error] [pid 35112:tid 35124] [client 4.241.173.134:10155] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTqP2p9ZpQ0WIeJhsJc_FAAAAUo"], referer: https://www.google.de/
[Thu Dec 11 17:33:15.215958 2025] [:error] [pid 48261:tid 48275] [client 4.241.173.134:9892] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTqP2-yPI4WU-4JmiQOOdQAAAYs"], referer: https://www.google.de/
[Thu Dec 11 17:33:15.461830 2025] [:error] [pid 57990:tid 58000] [client 4.241.173.134:40614] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTqP2wqZT_dc36fQdXFbIgAAAAU"], referer: https://www.google.com/
[Thu Dec 11 17:33:15.734106 2025] [:error] [pid 57992:tid 58073] [client 4.241.173.134:9816] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTqP2-Ueau0BMFF2vHmJYQAAAJg"], referer: https://www.google.de/
[Thu Dec 11 17:33:15.964447 2025] [:error] [pid 48261:tid 48283] [client 4.241.173.134:13276] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTqP2-yPI4WU-4JmiQOOdwAAAZM"], referer: https://www.google.fr/
[Thu Dec 11 17:33:24.643838 2025] [:error] [pid 27459:tid 27484] [client 4.241.173.134:15278] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTqP5FhPEXihPBKMpRMvxwAAARc"], referer: https://www.google.com/
[Thu Dec 11 17:33:24.880967 2025] [:error] [pid 57992:tid 58063] [client 4.241.173.134:16192] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTqP5OUeau0BMFF2vHmJdAAAAI4"], referer: https://www.google.fr/
[Thu Dec 11 17:33:25.131897 2025] [:error] [pid 27459:tid 27468] [client 4.241.173.134:41964] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTqP5VhPEXihPBKMpRMvzAAAAQc"], referer: https://www.google.fr/
[Thu Dec 11 17:33:25.384179 2025] [:error] [pid 48261:tid 48276] [client 4.241.173.134:9909] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTqP5eyPI4WU-4JmiQOOhgAAAYw"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:25.669958 2025] [:error] [pid 35112:tid 35120] [client 4.241.173.134:51744] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTqP5Z9ZpQ0WIeJhsJc_NQAAAUY"], referer: https://duckduckgo.com/
[Thu Dec 11 17:33:26.094743 2025] [:error] [pid 35112:tid 35135] [client 4.241.173.134:12492] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTqP5p9ZpQ0WIeJhsJc_OAAAAVU"], referer: https://duckduckgo.com/
[Thu Dec 11 17:33:26.365075 2025] [:error] [pid 57992:tid 58072] [client 4.241.173.134:10156] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTqP5uUeau0BMFF2vHmJdQAAAJc"], referer: https://duckduckgo.com/
[Thu Dec 11 17:33:26.608112 2025] [:error] [pid 57990:tid 58007] [client 4.241.173.134:14605] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTqP5gqZT_dc36fQdXFbKwAAAAw"], referer: https://www.google.com/
[Thu Dec 11 17:33:26.933404 2025] [:error] [pid 27459:tid 27480] [client 4.241.173.134:13258] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTqP5lhPEXihPBKMpRMv1AAAARM"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:28.813668 2025] [:error] [pid 57990:tid 57995] [client 4.241.173.134:13389] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTqP6AqZT_dc36fQdXFbLgAAAAA"], referer: https://www.google.com/
[Thu Dec 11 17:33:29.123589 2025] [:error] [pid 27459:tid 27473] [client 4.241.173.134:16255] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTqP6VhPEXihPBKMpRMv4wAAAQw"], referer: https://www.google.fr/
[Thu Dec 11 17:33:29.357696 2025] [:error] [pid 57992:tid 58050] [client 4.241.173.134:13496] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTqP6eUeau0BMFF2vHmJeAAAAIE"], referer: https://www.bing.com/
[Thu Dec 11 17:33:29.674640 2025] [:error] [pid 27459:tid 27469] [client 4.241.173.134:3560] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTqP6VhPEXihPBKMpRMv6AAAAQg"], referer: https://www.google.co.uk/
[Thu Dec 11 17:33:30.020450 2025] [:error] [pid 57991:tid 58045] [client 4.241.173.134:11603] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTqP6qPyGmNXA2ZsETaFYwAAAFc"], referer: https://www.google.de/
[Thu Dec 11 17:33:30.249982 2025] [:error] [pid 57992:tid 58064] [client 4.241.173.134:40576] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTqP6uUeau0BMFF2vHmJeQAAAI8"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:30.544384 2025] [proxy_fcgi:error] [pid 58099:tid 58111] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:32.304608 2025] [proxy_fcgi:error] [pid 58099:tid 58121] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:33.940443 2025] [proxy_fcgi:error] [pid 58099:tid 58106] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:34.057867 2025] [proxy_fcgi:error] [pid 58099:tid 58108] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:34.183757 2025] [proxy_fcgi:error] [pid 58099:tid 58116] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 17:33:34.312422 2025] [proxy_fcgi:error] [pid 58099:tid 58119] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:34.537022 2025] [proxy_fcgi:error] [pid 58099:tid 58113] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:34.654963 2025] [proxy_fcgi:error] [pid 58099:tid 58102] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:34.770220 2025] [:error] [pid 58099:tid 58101] [client 4.241.173.134:15041] [client 4.241.173.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.241.173.134, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTqP7sKZVSF_bdPFqRjnbgAAAMA"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:34.776395 2025] [proxy_fcgi:error] [pid 58099:tid 58101] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 17:33:34.897852 2025] [proxy_fcgi:error] [pid 58099:tid 58122] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 17:33:35.253026 2025] [proxy_fcgi:error] [pid 58099:tid 58123] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:35.373404 2025] [proxy_fcgi:error] [pid 58099:tid 58124] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:35.491926 2025] [proxy_fcgi:error] [pid 58099:tid 58117] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:35.610825 2025] [proxy_fcgi:error] [pid 58099:tid 58110] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:35.732422 2025] [proxy_fcgi:error] [pid 58099:tid 58109] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:36.040859 2025] [proxy_fcgi:error] [pid 58099:tid 58103] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 17:33:36.796102 2025] [proxy_fcgi:error] [pid 58099:tid 58118] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 17:33:37.725777 2025] [proxy_fcgi:error] [pid 58099:tid 58105] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:37.843739 2025] [proxy_fcgi:error] [pid 58099:tid 58111] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 17:33:37.967397 2025] [proxy_fcgi:error] [pid 58099:tid 58114] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:38.103626 2025] [proxy_fcgi:error] [pid 58099:tid 58107] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 17:33:38.327471 2025] [proxy_fcgi:error] [pid 58099:tid 58121] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 17:33:38.448071 2025] [proxy_fcgi:error] [pid 58099:tid 58106] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 17:33:38.570627 2025] [proxy_fcgi:error] [pid 58099:tid 58112] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:38.705166 2025] [proxy_fcgi:error] [pid 58099:tid 58108] [client 4.241.173.134:15041] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 17:33:39.731207 2025] [:error] [pid 58099:tid 58125] [client 4.241.173.134:15041] [client 4.241.173.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.173.134, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTqP88KZVSF_bdPFqRjniAAAANg"], referer: https://www.bing.com/
[Thu Dec 11 17:33:45.415190 2025] [:error] [pid 58099:tid 58103] [client 4.241.173.134:15041] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTqP-cKZVSF_bdPFqRjnqQAAAMI"], referer: https://www.google.co.uk/
[Thu Dec 11 17:33:45.668945 2025] [:error] [pid 57991:tid 58022] [client 4.241.173.134:12516] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTqP-aPyGmNXA2ZsETaFdQAAAEA"], referer: https://www.bing.com/
[Thu Dec 11 17:33:46.003208 2025] [:error] [pid 48261:tid 48271] [client 4.241.173.134:11345] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTqP-uyPI4WU-4JmiQOOswAAAYc"], referer: https://www.google.fr/
[Thu Dec 11 17:33:46.244216 2025] [:error] [pid 27459:tid 27483] [client 4.241.173.134:13440] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTqP-lhPEXihPBKMpRMwDQAAARY"], referer: https://www.yahoo.com/
[Thu Dec 11 17:33:46.501059 2025] [:error] [pid 57992:tid 58063] [client 4.241.173.134:16832] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTqP-uUeau0BMFF2vHmJoAAAAI4"], referer: https://www.google.fr/
[Thu Dec 11 17:33:46.976496 2025] [:error] [pid 35112:tid 35119] [client 4.241.173.134:9889] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTqP-p9ZpQ0WIeJhsJc_kQAAAUU"], referer: https://duckduckgo.com/
[Thu Dec 11 17:33:47.241843 2025] [:error] [pid 58099:tid 58118] [client 4.241.173.134:13926] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTqP-8KZVSF_bdPFqRjnqgAAANE"], referer: https://www.google.com/
[Thu Dec 11 17:33:47.478475 2025] [:error] [pid 35112:tid 35130] [client 4.241.173.134:13468] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTqP-59ZpQ0WIeJhsJc_kwAAAVA"], referer: https://www.google.fr/
[Thu Dec 11 17:33:47.876487 2025] [:error] [pid 27459:tid 27461] [client 4.241.173.134:19728] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTqP-1hPEXihPBKMpRMwFgAAAQA"], referer: https://www.google.fr/
[Thu Dec 11 17:33:48.317693 2025] [:error] [pid 48261:tid 48282] [client 4.241.173.134:16884] [client 4.241.173.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTqP_OyPI4WU-4JmiQOOugAAAZI"], referer: https://www.bing.com/
[Thu Dec 11 17:33:48.558567 2025] [proxy_fcgi:error] [pid 48261:tid 48273] [client 4.241.173.134:14639] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 17:33:51.784898 2025] [autoindex:error] [pid 48261:tid 48267] [client 4.241.173.134:14639] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 11 18:09:00.776266 2025] [autoindex:error] [pid 57990:tid 57996] [client 15.222.251.109:44460] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 18:40:38.282495 2025] [proxy_fcgi:error] [pid 27459:tid 27477] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 18:40:38.404080 2025] [proxy_fcgi:error] [pid 27459:tid 27469] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 18:40:38.524482 2025] [proxy_fcgi:error] [pid 27459:tid 27461] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:38.644191 2025] [proxy_fcgi:error] [pid 27459:tid 27465] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 18:40:38.762528 2025] [proxy_fcgi:error] [pid 27459:tid 27474] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 18:40:38.880396 2025] [proxy_fcgi:error] [pid 27459:tid 27483] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:39.000487 2025] [proxy_fcgi:error] [pid 27459:tid 27471] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 18:40:39.118227 2025] [proxy_fcgi:error] [pid 27459:tid 27466] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:39.235777 2025] [proxy_fcgi:error] [pid 27459:tid 27485] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 18:40:39.589286 2025] [proxy_fcgi:error] [pid 27459:tid 27475] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 18:40:39.707649 2025] [proxy_fcgi:error] [pid 27459:tid 27484] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 18:40:39.825245 2025] [proxy_fcgi:error] [pid 27459:tid 27476] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 18:40:39.947753 2025] [proxy_fcgi:error] [pid 27459:tid 27480] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 18:40:40.065854 2025] [proxy_fcgi:error] [pid 27459:tid 27473] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 18:40:40.419075 2025] [proxy_fcgi:error] [pid 27459:tid 27472] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 18:40:40.537973 2025] [proxy_fcgi:error] [pid 27459:tid 27469] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:40.658926 2025] [proxy_fcgi:error] [pid 27459:tid 27465] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:40.776737 2025] [proxy_fcgi:error] [pid 27459:tid 27481] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 18:40:40.896064 2025] [proxy_fcgi:error] [pid 27459:tid 27474] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 18:40:41.013728 2025] [proxy_fcgi:error] [pid 27459:tid 27471] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 18:40:41.132005 2025] [proxy_fcgi:error] [pid 27459:tid 27466] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 18:40:41.372321 2025] [proxy_fcgi:error] [pid 27459:tid 27462] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:41.490159 2025] [proxy_fcgi:error] [pid 27459:tid 27478] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 18:40:41.846734 2025] [proxy_fcgi:error] [pid 27459:tid 27467] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:41.965034 2025] [proxy_fcgi:error] [pid 27459:tid 27476] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:42.083911 2025] [proxy_fcgi:error] [pid 27459:tid 27480] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 18:40:42.203631 2025] [proxy_fcgi:error] [pid 27459:tid 27473] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:42.443295 2025] [proxy_fcgi:error] [pid 27459:tid 27482] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 18:40:42.680269 2025] [proxy_fcgi:error] [pid 27459:tid 27470] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 18:40:42.799724 2025] [proxy_fcgi:error] [pid 27459:tid 27472] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 18:40:42.917968 2025] [proxy_fcgi:error] [pid 27459:tid 27477] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:43.273565 2025] [proxy_fcgi:error] [pid 27459:tid 27474] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 18:40:43.393352 2025] [proxy_fcgi:error] [pid 27459:tid 27471] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 18:40:45.284591 2025] [proxy_fcgi:error] [pid 27459:tid 27465] [client 172.192.13.142:15894] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 18:48:47.016365 2025] [autoindex:error] [pid 58814:tid 58817] [client 149.18.168.220:60002] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 18:49:30.936889 2025] [autoindex:error] [pid 58814:tid 58836] [client 205.169.39.8:44498] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 19:37:33.905114 2025] [:error] [pid 58814:tid 58824] [client 170.106.72.93:37212] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTqs_diz0l9AD_3pkMwb7wAAAcg"]
[Thu Dec 11 20:42:43.663874 2025] [autoindex:error] [pid 57992:tid 58072] [client 156.59.208.41:47246] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 20:48:12.586994 2025] [:error] [pid 58814:tid 58824] [client 31.44.238.25:22421] [client 31.44.238.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTq9jNiz0l9AD_3pkMw1ewAAAcg"]
[Thu Dec 11 20:48:19.953528 2025] [:error] [pid 27459:tid 27471] [client 45.13.225.78:56388] [client 45.13.225.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTq9k1hPEXihPBKMpRNfbwAAAQo"]
[Thu Dec 11 20:48:23.446789 2025] [:error] [pid 57992:tid 58052] [client 185.247.226.95:36084] [client 185.247.226.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.DS_Store"] [unique_id "aTq9l-Ueau0BMFF2vHmzKQAAAIM"]
[Thu Dec 11 20:48:38.136562 2025] [:error] [pid 48261:tid 48266] [client 209.141.40.68:39926] [client 209.141.40.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aTq9puyPI4WU-4JmiQPB9QAAAYI"]
[Thu Dec 11 20:48:42.105428 2025] [:error] [pid 27459:tid 27463] [client 45.66.35.27:39930] [client 45.66.35.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aTq9qlhPEXihPBKMpRNffAAAAQI"]
[Thu Dec 11 20:48:42.533155 2025] [:error] [pid 27459:tid 27477] [client 185.220.101.140:28333] [client 185.220.101.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.cientifica.com.au"] [uri "/.DS_Store"] [unique_id "aTq9qlhPEXihPBKMpRNffgAAARA"]
[Thu Dec 11 21:51:07.937271 2025] [autoindex:error] [pid 35112:tid 35127] [client 143.198.185.150:33818] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 21:51:09.608563 2025] [autoindex:error] [pid 35112:tid 35133] [client 143.198.185.150:57922] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 23:09:46.498198 2025] [:error] [pid 4464:tid 4535] [client 182.43.70.143:41396] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTreuk74RHTpQwGFIyZU6wAAAIk"]
[Thu Dec 11 23:46:38.722182 2025] [proxy_fcgi:error] [pid 4564:tid 4584] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:38.982529 2025] [proxy_fcgi:error] [pid 4564:tid 4581] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:40.409617 2025] [proxy_fcgi:error] [pid 4564:tid 4579] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:40.655769 2025] [proxy_fcgi:error] [pid 4564:tid 4583] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:40.898940 2025] [proxy_fcgi:error] [pid 4564:tid 4588] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:41.026002 2025] [proxy_fcgi:error] [pid 4564:tid 4587] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:41.153111 2025] [proxy_fcgi:error] [pid 4564:tid 4585] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:41.293761 2025] [proxy_fcgi:error] [pid 4564:tid 4584] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:41.422189 2025] [proxy_fcgi:error] [pid 4564:tid 4591] [client 52.147.65.155:28000] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:46:41.698695 2025] [:error] [pid 4564:tid 4575] [client 52.147.65.155:28000] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aTrnYZjzC8Q_-qV1DxWspAAAAMg"]
[Thu Dec 11 23:46:42.437322 2025] [:error] [pid 4564:tid 4578] [client 52.147.65.155:3334] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aTrnYpjzC8Q_-qV1DxWspgAAAMs"]
[Thu Dec 11 23:46:42.914376 2025] [:error] [pid 4464:tid 4544] [client 52.147.65.155:41039] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aTrnYk74RHTpQwGFIyZdnAAAAJI"]
[Thu Dec 11 23:46:43.766799 2025] [:error] [pid 4463:tid 4513] [client 52.147.65.155:30114] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aTrnY8WRoGq8qZybgKXxZAAAAFE"]
[Thu Dec 11 23:46:44.672723 2025] [:error] [pid 4463:tid 4500] [client 52.147.65.155:41073] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTrnZMWRoGq8qZybgKXxaAAAAEQ"]
[Thu Dec 11 23:46:45.005483 2025] [:error] [pid 4463:tid 4498] [client 52.147.65.155:38020] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTrnZcWRoGq8qZybgKXxaQAAAEI"]
[Thu Dec 11 23:46:45.723491 2025] [:error] [pid 4464:tid 4531] [client 52.147.65.155:34922] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTrnZU74RHTpQwGFIyZdngAAAIU"]
[Thu Dec 11 23:46:46.197685 2025] [:error] [pid 4463:tid 4517] [client 52.147.65.155:28023] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aTrnZsWRoGq8qZybgKXxbQAAAFU"]
[Thu Dec 11 23:46:46.691180 2025] [:error] [pid 4463:tid 4508] [client 52.147.65.155:30132] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTrnZsWRoGq8qZybgKXxbgAAAEw"]
[Thu Dec 11 23:46:47.030305 2025] [:error] [pid 4463:tid 4506] [client 52.147.65.155:3795] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTrnZ8WRoGq8qZybgKXxbwAAAEo"]
[Thu Dec 11 23:46:47.482005 2025] [:error] [pid 4864:tid 4885] [client 52.147.65.155:60189] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTrnZ2VhcrADVU33AP45KgAAARM"]
[Thu Dec 11 23:46:48.355526 2025] [:error] [pid 4463:tid 4497] [client 52.147.65.155:3728] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTrnaMWRoGq8qZybgKXxcgAAAEE"]
[Thu Dec 11 23:46:49.163619 2025] [:error] [pid 4911:tid 4925] [client 52.147.65.155:27991] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aTrnaQ-tKegTX9jNpJks6gAAAUs"]
[Thu Dec 11 23:46:49.640437 2025] [:error] [pid 4911:tid 4919] [client 52.147.65.155:3827] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aTrnaQ-tKegTX9jNpJks6wAAAUU"]
[Thu Dec 11 23:46:50.539715 2025] [:error] [pid 4911:tid 4917] [client 52.147.65.155:28013] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aTrnag-tKegTX9jNpJks7gAAAUM"]
[Thu Dec 11 23:46:51.085730 2025] [:error] [pid 4864:tid 4867] [client 52.147.65.155:3735] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aTrna2VhcrADVU33AP45LwAAAQE"]
[Thu Dec 11 23:46:52.342134 2025] [:error] [pid 4564:tid 4587] [client 52.147.65.155:60219] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTrnbJjzC8Q_-qV1DxWsrgAAANQ"]
[Thu Dec 11 23:46:54.804843 2025] [:error] [pid 4911:tid 4937] [client 52.147.65.155:60165] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTrnbg-tKegTX9jNpJks-gAAAVc"]
[Thu Dec 11 23:46:56.389051 2025] [:error] [pid 4911:tid 4926] [client 52.147.65.155:38053] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTrncA-tKegTX9jNpJktAAAAAUw"]
[Thu Dec 11 23:46:58.107115 2025] [:error] [pid 4564:tid 4587] [client 52.147.65.155:34937] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTrncpjzC8Q_-qV1DxWsvAAAANQ"]
[Thu Dec 11 23:46:59.315732 2025] [:error] [pid 4464:tid 4548] [client 52.147.65.155:38061] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ok.php"] [unique_id "aTrnc074RHTpQwGFIyZdqQAAAJY"]
[Thu Dec 11 23:47:00.481909 2025] [:error] [pid 4463:tid 4514] [client 52.147.65.155:3818] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ok.php"] [unique_id "aTrndMWRoGq8qZybgKXxfAAAAFI"]
[Thu Dec 11 23:47:02.145002 2025] [:error] [pid 4564:tid 4567] [client 52.147.65.155:3807] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ok.php"] [unique_id "aTrndpjzC8Q_-qV1DxWsvgAAAMA"]
[Thu Dec 11 23:47:03.868224 2025] [:error] [pid 4464:tid 4528] [client 52.147.65.155:60180] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ok.php"] [unique_id "aTrnd074RHTpQwGFIyZdrAAAAII"]
[Thu Dec 11 23:47:04.254173 2025] [:error] [pid 4464:tid 4526] [client 52.147.65.155:38066] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/fm.php"] [unique_id "aTrneE74RHTpQwGFIyZdrQAAAIA"]
[Thu Dec 11 23:47:05.005799 2025] [:error] [pid 4462:tid 4483] [client 52.147.65.155:38073] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/fm.php"] [unique_id "aTrnecxEbl7Af0FrMT-eJgAAAA4"]
[Thu Dec 11 23:47:06.169237 2025] [:error] [pid 4564:tid 4580] [client 52.147.65.155:30108] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/fm.php"] [unique_id "aTrnepjzC8Q_-qV1DxWsxAAAAM0"]
[Thu Dec 11 23:47:07.153697 2025] [:error] [pid 4864:tid 4875] [client 52.147.65.155:28019] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/fm.php"] [unique_id "aTrne2VhcrADVU33AP45TQAAAQk"]
[Thu Dec 11 23:47:08.478491 2025] [:error] [pid 4564:tid 4588] [client 52.147.65.155:3812] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aTrnfJjzC8Q_-qV1DxWsxgAAANU"]
[Thu Dec 11 23:47:09.104990 2025] [:error] [pid 4564:tid 4591] [client 52.147.65.155:27972] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aTrnfZjzC8Q_-qV1DxWsyAAAANg"]
[Thu Dec 11 23:47:09.472561 2025] [autoindex:error] [pid 4911:tid 4914] [client 15.204.183.221:25086] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 23:47:10.199199 2025] [:error] [pid 4911:tid 4929] [client 52.147.65.155:41060] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aTrnfg-tKegTX9jNpJktDwAAAU8"]
[Thu Dec 11 23:47:10.975427 2025] [:error] [pid 4864:tid 4880] [client 52.147.65.155:28016] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aTrnfmVhcrADVU33AP45VgAAAQ4"]
[Thu Dec 11 23:47:11.514739 2025] [:error] [pid 4564:tid 4590] [client 52.147.65.155:30092] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aTrnf5jzC8Q_-qV1DxWszAAAANc"]
[Thu Dec 11 23:47:12.435093 2025] [:error] [pid 4462:tid 4491] [client 52.147.65.155:3739] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aTrngMxEbl7Af0FrMT-eLAAAABY"]
[Thu Dec 11 23:47:13.237715 2025] [:error] [pid 4462:tid 4483] [client 52.147.65.155:27973] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aTrngcxEbl7Af0FrMT-eLgAAAA4"]
[Thu Dec 11 23:47:13.979417 2025] [:error] [pid 4463:tid 4503] [client 52.147.65.155:27980] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aTrngcWRoGq8qZybgKXxhQAAAEc"]
[Thu Dec 11 23:47:16.634138 2025] [:error] [pid 4911:tid 4917] [client 52.147.65.155:3774] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrnhA-tKegTX9jNpJktKAAAAUM"]
[Thu Dec 11 23:47:17.491961 2025] [:error] [pid 4864:tid 4874] [client 52.147.65.155:60161] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrnhWVhcrADVU33AP45YgAAAQg"]
[Thu Dec 11 23:47:18.278690 2025] [:error] [pid 4462:tid 4481] [client 52.147.65.155:28025] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrnhsxEbl7Af0FrMT-eNQAAAAw"]
[Thu Dec 11 23:47:19.115117 2025] [:error] [pid 4911:tid 4916] [client 52.147.65.155:41035] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrnhw-tKegTX9jNpJktMQAAAUI"]
[Thu Dec 11 23:47:19.958191 2025] [:error] [pid 4864:tid 4871] [client 52.147.65.155:3816] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aTrnh2VhcrADVU33AP45ZwAAAQU"]
[Thu Dec 11 23:47:20.610912 2025] [:error] [pid 4464:tid 4526] [client 52.147.65.155:3722] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aTrniE74RHTpQwGFIyZdtwAAAIA"]
[Thu Dec 11 23:47:22.216379 2025] [:error] [pid 4463:tid 4506] [client 52.147.65.155:30135] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aTrnisWRoGq8qZybgKXxiQAAAEo"]
[Thu Dec 11 23:47:23.540782 2025] [:error] [pid 4463:tid 4497] [client 52.147.65.155:42107] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aTrni8WRoGq8qZybgKXxiwAAAEE"]
[Thu Dec 11 23:47:24.106838 2025] [:error] [pid 4564:tid 4574] [client 52.147.65.155:3790] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTrnjJjzC8Q_-qV1DxWs2QAAAMc"]
[Thu Dec 11 23:47:24.819539 2025] [:error] [pid 4463:tid 4520] [client 52.147.65.155:41064] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTrnjMWRoGq8qZybgKXxjAAAAFg"]
[Thu Dec 11 23:47:26.263195 2025] [:error] [pid 4462:tid 4471] [client 52.147.65.155:60172] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTrnjsxEbl7Af0FrMT-eOQAAAAI"]
[Thu Dec 11 23:47:26.629919 2025] [:error] [pid 4864:tid 4887] [client 52.147.65.155:3831] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aTrnjmVhcrADVU33AP45cQAAARU"]
[Thu Dec 11 23:47:27.804640 2025] [:error] [pid 4911:tid 4924] [client 52.147.65.155:27986] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hoot.php"] [unique_id "aTrnjw-tKegTX9jNpJktNwAAAUo"]
[Thu Dec 11 23:47:30.779445 2025] [:error] [pid 4463:tid 4496] [client 52.147.65.155:41074] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hoot.php"] [unique_id "aTrnksWRoGq8qZybgKXxjQAAAEA"]
[Thu Dec 11 23:47:31.626881 2025] [:error] [pid 4564:tid 4581] [client 52.147.65.155:3788] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hoot.php"] [unique_id "aTrnk5jzC8Q_-qV1DxWs3QAAAM4"]
[Thu Dec 11 23:47:32.072374 2025] [:error] [pid 4463:tid 4515] [client 52.147.65.155:3753] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hoot.php"] [unique_id "aTrnlMWRoGq8qZybgKXxjgAAAFM"]
[Thu Dec 11 23:47:32.604518 2025] [:error] [pid 4864:tid 4885] [client 52.147.65.155:3715] [client 52.147.65.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTrnlGVhcrADVU33AP45eQAAARM"]
[Thu Dec 11 23:47:33.321131 2025] [:error] [pid 4463:tid 4507] [client 52.147.65.155:27996] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aTrnlcWRoGq8qZybgKXxjwAAAEs"]
[Thu Dec 11 23:47:34.130413 2025] [:error] [pid 4463:tid 4502] [client 52.147.65.155:30112] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aTrnlsWRoGq8qZybgKXxkAAAAEY"]
[Thu Dec 11 23:47:35.487679 2025] [:error] [pid 4564:tid 4579] [client 52.147.65.155:30140] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aTrnl5jzC8Q_-qV1DxWs4QAAAMw"]
[Thu Dec 11 23:47:37.130201 2025] [:error] [pid 4864:tid 4882] [client 52.147.65.155:40790] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aTrnmWVhcrADVU33AP45ewAAARA"]
[Thu Dec 11 23:47:38.666492 2025] [:error] [pid 4911:tid 4915] [client 52.147.65.155:3348] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aTrnmg-tKegTX9jNpJktRQAAAUE"]
[Thu Dec 11 23:47:39.370897 2025] [:error] [pid 4463:tid 4516] [client 52.147.65.155:38024] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aTrnm8WRoGq8qZybgKXxkwAAAFQ"]
[Thu Dec 11 23:47:40.528821 2025] [:error] [pid 4911:tid 4924] [client 52.147.65.155:3814] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aTrnnA-tKegTX9jNpJktSwAAAUo"]
[Thu Dec 11 23:47:40.950064 2025] [:error] [pid 4464:tid 4544] [client 52.147.65.155:3791] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aTrnnE74RHTpQwGFIyZdwAAAAJI"]
[Thu Dec 11 23:47:42.457761 2025] [proxy_fcgi:error] [pid 4463:tid 4512] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:42.596222 2025] [proxy_fcgi:error] [pid 4463:tid 4501] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:42.794901 2025] [proxy_fcgi:error] [pid 4463:tid 4508] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.077184 2025] [proxy_fcgi:error] [pid 4463:tid 4506] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.216651 2025] [proxy_fcgi:error] [pid 4463:tid 4497] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.362635 2025] [proxy_fcgi:error] [pid 4463:tid 4510] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.492332 2025] [proxy_fcgi:error] [pid 4463:tid 4520] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.635132 2025] [proxy_fcgi:error] [pid 4463:tid 4518] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.787302 2025] [proxy_fcgi:error] [pid 4463:tid 4496] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:43.913516 2025] [proxy_fcgi:error] [pid 4463:tid 4515] [client 52.147.65.155:34890] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 23:47:44.036540 2025] [:error] [pid 4463:tid 4507] [client 52.147.65.155:34890] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTrnoMWRoGq8qZybgKXxogAAAEs"]
[Thu Dec 11 23:47:45.253331 2025] [:error] [pid 4911:tid 4934] [client 52.147.65.155:38065] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTrnoQ-tKegTX9jNpJktTAAAAVQ"]
[Thu Dec 11 23:47:46.138439 2025] [:error] [pid 4911:tid 4917] [client 52.147.65.155:34910] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTrnog-tKegTX9jNpJktTQAAAUM"]
[Thu Dec 11 23:47:47.170436 2025] [:error] [pid 4464:tid 4549] [client 52.147.65.155:42066] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTrno074RHTpQwGFIyZdwwAAAJc"]
[Thu Dec 11 23:47:48.304738 2025] [:error] [pid 4911:tid 4915] [client 52.147.65.155:30142] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTrnpA-tKegTX9jNpJktUAAAAUE"]
[Thu Dec 11 23:47:49.002747 2025] [:error] [pid 4462:tid 4484] [client 52.147.65.155:39282] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTrnpcxEbl7Af0FrMT-eRQAAAA8"]
[Thu Dec 11 23:47:50.047672 2025] [:error] [pid 4463:tid 4501] [client 52.147.65.155:34818] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTrnpsWRoGq8qZybgKXxpgAAAEU"]
[Thu Dec 11 23:47:51.126131 2025] [:error] [pid 4463:tid 4504] [client 52.147.65.155:39240] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aTrnp8WRoGq8qZybgKXxqwAAAEg"]
[Thu Dec 11 23:47:52.492181 2025] [:error] [pid 4564:tid 4574] [client 52.147.65.155:34873] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aTrnqJjzC8Q_-qV1DxWs7AAAAMc"]
[Thu Dec 11 23:47:53.420692 2025] [:error] [pid 4911:tid 4938] [client 52.147.65.155:39238] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aTrnqQ-tKegTX9jNpJktVQAAAVg"]
[Thu Dec 11 23:47:54.868811 2025] [:error] [pid 4462:tid 4478] [client 52.147.65.155:37192] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aTrnqsxEbl7Af0FrMT-eSgAAAAk"]
[Thu Dec 11 23:47:55.791265 2025] [:error] [pid 4462:tid 4483] [client 52.147.65.155:39258] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aTrnq8xEbl7Af0FrMT-eSwAAAA4"]
[Thu Dec 11 23:47:56.948214 2025] [:error] [pid 4462:tid 4480] [client 52.147.65.155:39264] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTrnrMxEbl7Af0FrMT-eTAAAAAs"]
[Thu Dec 11 23:47:58.398398 2025] [:error] [pid 4464:tid 4534] [client 52.147.65.155:28021] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTrnrk74RHTpQwGFIyZdzAAAAIg"]
[Thu Dec 11 23:47:59.939766 2025] [:error] [pid 4564:tid 4587] [client 52.147.65.155:3729] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTrnr5jzC8Q_-qV1DxWs8gAAANQ"]
[Thu Dec 11 23:48:01.499345 2025] [:error] [pid 4463:tid 4501] [client 52.147.65.155:34864] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTrnscWRoGq8qZybgKXxsQAAAEU"]
[Thu Dec 11 23:48:03.511007 2025] [:error] [pid 4564:tid 4581] [client 52.147.65.155:3387] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTrns5jzC8Q_-qV1DxWs9gAAAM4"]
[Thu Dec 11 23:48:04.633445 2025] [:error] [pid 4911:tid 4927] [client 52.147.65.155:3731] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTrntA-tKegTX9jNpJktWQAAAU0"]
[Thu Dec 11 23:48:07.774250 2025] [:error] [pid 4463:tid 4509] [client 52.147.65.155:34895] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTrnt8WRoGq8qZybgKXxswAAAE0"]
[Thu Dec 11 23:48:12.076641 2025] [:error] [pid 4864:tid 4870] [client 52.147.65.155:30111] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTrnvGVhcrADVU33AP45nAAAAQQ"]
[Thu Dec 11 23:48:14.287466 2025] [:error] [pid 4564:tid 4571] [client 52.147.65.155:60212] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aTrnvpjzC8Q_-qV1DxWtAQAAAMQ"]
[Thu Dec 11 23:48:19.310486 2025] [:error] [pid 4864:tid 4886] [client 52.147.65.155:33048] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aTrnw2VhcrADVU33AP45uQAAARQ"]
[Thu Dec 11 23:48:21.274699 2025] [:error] [pid 4463:tid 4511] [client 52.147.65.155:37131] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aTrnxcWRoGq8qZybgKXxvgAAAE8"]
[Thu Dec 11 23:48:21.807409 2025] [:error] [pid 4463:tid 4512] [client 52.147.65.155:36562] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aTrnxcWRoGq8qZybgKXxvwAAAFA"]
[Thu Dec 11 23:48:22.266960 2025] [:error] [pid 4463:tid 4504] [client 52.147.65.155:28463] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aTrnxsWRoGq8qZybgKXxwQAAAEg"]
[Thu Dec 11 23:48:22.785270 2025] [:error] [pid 4464:tid 4532] [client 52.147.65.155:33505] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aTrnxk74RHTpQwGFIyZd5wAAAIY"]
[Thu Dec 11 23:48:23.406630 2025] [:error] [pid 4911:tid 4936] [client 52.147.65.155:61122] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aTrnxw-tKegTX9jNpJktdgAAAVY"]
[Thu Dec 11 23:48:24.304422 2025] [:error] [pid 4911:tid 4928] [client 52.147.65.155:61154] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aTrnyA-tKegTX9jNpJkteQAAAU4"]
[Thu Dec 11 23:48:25.522658 2025] [:error] [pid 4462:tid 4490] [client 52.147.65.155:35662] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTrnycxEbl7Af0FrMT-eZQAAABU"]
[Thu Dec 11 23:48:25.986431 2025] [:error] [pid 4564:tid 4571] [client 52.147.65.155:46662] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTrnyZjzC8Q_-qV1DxWtEQAAAMQ"]
[Thu Dec 11 23:48:26.815064 2025] [:error] [pid 4462:tid 4485] [client 52.147.65.155:40489] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTrnysxEbl7Af0FrMT-eagAAABA"]
[Thu Dec 11 23:48:27.429733 2025] [:error] [pid 4564:tid 4572] [client 52.147.65.155:14748] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aTrny5jzC8Q_-qV1DxWtFgAAAMU"]
[Thu Dec 11 23:48:27.897083 2025] [:error] [pid 4911:tid 4932] [client 52.147.65.155:28679] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTrnyw-tKegTX9jNpJktfQAAAVI"]
[Thu Dec 11 23:48:29.533925 2025] [:error] [pid 4911:tid 4925] [client 52.147.65.155:36924] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTrnzQ-tKegTX9jNpJktgQAAAUs"]
[Thu Dec 11 23:48:30.353800 2025] [:error] [pid 4911:tid 4918] [client 52.147.65.155:37484] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTrnzg-tKegTX9jNpJktggAAAUQ"]
[Thu Dec 11 23:48:31.183816 2025] [:error] [pid 4864:tid 4886] [client 52.147.65.155:30438] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTrnz2VhcrADVU33AP45xQAAARQ"]
[Thu Dec 11 23:48:32.701983 2025] [:error] [pid 4911:tid 4916] [client 52.147.65.155:60880] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aTrn0A-tKegTX9jNpJkthgAAAUI"]
[Thu Dec 11 23:48:33.632829 2025] [:error] [pid 4864:tid 4870] [client 52.147.65.155:37451] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aTrn0WVhcrADVU33AP45xwAAAQQ"]
[Thu Dec 11 23:48:34.174698 2025] [:error] [pid 4911:tid 4932] [client 52.147.65.155:28489] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aTrn0g-tKegTX9jNpJktiQAAAVI"]
[Thu Dec 11 23:48:35.007145 2025] [:error] [pid 4911:tid 4922] [client 52.147.65.155:28715] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aTrn0w-tKegTX9jNpJktjQAAAUg"]
[Thu Dec 11 23:48:37.012443 2025] [:error] [pid 4911:tid 4927] [client 52.147.65.155:33430] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aTrn1Q-tKegTX9jNpJktlAAAAU0"]
[Thu Dec 11 23:48:37.817686 2025] [:error] [pid 4462:tid 4472] [client 52.147.65.155:40977] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aTrn1cxEbl7Af0FrMT-ecAAAAAM"]
[Thu Dec 11 23:48:38.538125 2025] [:error] [pid 4564:tid 4589] [client 52.147.65.155:61993] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aTrn1pjzC8Q_-qV1DxWtGQAAANY"]
[Thu Dec 11 23:48:39.479092 2025] [:error] [pid 4462:tid 4476] [client 52.147.65.155:61551] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aTrn18xEbl7Af0FrMT-ecwAAAAc"]
[Thu Dec 11 23:48:40.650145 2025] [:error] [pid 4911:tid 4937] [client 52.147.65.155:60240] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aTrn2A-tKegTX9jNpJktmgAAAVc"]
[Thu Dec 11 23:48:41.711174 2025] [:error] [pid 4564:tid 4577] [client 52.147.65.155:40983] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aTrn2ZjzC8Q_-qV1DxWtHQAAAMo"]
[Thu Dec 11 23:48:42.539789 2025] [:error] [pid 4564:tid 4583] [client 52.147.65.155:33429] [client 52.147.65.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aTrn2pjzC8Q_-qV1DxWtHwAAANA"]
[Thu Dec 11 23:48:44.441968 2025] [proxy_fcgi:error] [pid 4464:tid 4540] [client 52.147.65.155:43347] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 00:11:36.431406 2025] [autoindex:error] [pid 53465:tid 53502] [client 34.48.174.71:60629] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 00:31:21.456920 2025] [autoindex:error] [pid 65374:tid 65401] [client 34.168.50.197:64358] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 00:39:13.589501 2025] [autoindex:error] [pid 65374:tid 65401] [client 15.204.183.221:42288] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 00:53:38.373354 2025] [autoindex:error] [pid 53465:tid 53507] [client 34.75.82.160:53559] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 01:15:39.214332 2025] [autoindex:error] [pid 53522:tid 53534] [client 194.187.178.197:9018] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 01:30:37.665864 2025] [proxy_fcgi:error] [pid 53522:tid 53538] [client 68.218.111.65:1069] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Dec 12 01:30:37.753497 2025] [autoindex:error] [pid 53464:tid 53489] [client 68.218.111.65:1061] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 01:30:37.755726 2025] [proxy_fcgi:error] [pid 53522:tid 53545] [client 68.218.111.65:1069] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Dec 12 01:30:41.098441 2025] [proxy_fcgi:error] [pid 53522:tid 53531] [client 68.218.111.65:1086] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Dec 12 01:30:41.121877 2025] [proxy_fcgi:error] [pid 53522:tid 53534] [client 68.218.111.65:1086] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Dec 12 01:47:40.294193 2025] [:error] [pid 53464:tid 53489] [client 183.87.224.94:62353] [client 183.87.224.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.87.224.94, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTsDvI6Oxa1m77UpSzlIqQAAANU"]
[Fri Dec 12 01:47:40.306173 2025] [proxy_fcgi:error] [pid 53464:tid 53489] [client 183.87.224.94:62353] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 02:30:19.516912 2025] [autoindex:error] [pid 48225:tid 48234] [client 15.156.76.223:53678] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 02:59:04.770403 2025] [autoindex:error] [pid 47935:tid 47942] [client 149.102.254.30:36694] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 03:15:01.642889 2025] [autoindex:error] [pid 5904:tid 5965] [client 15.204.161.7:23076] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 03:20:31.040285 2025] [autoindex:error] [pid 6841:tid 6854] [client 35.231.175.17:57677] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 03:46:00.031416 2025] [autoindex:error] [pid 47154:tid 47194] [client 149.102.254.30:7182] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 03:56:50.262123 2025] [autoindex:error] [pid 26519:tid 26546] [client 15.204.161.7:44062] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 04:19:04.361661 2025] [autoindex:error] [pid 60649:tid 60657] [client 34.26.43.66:51697] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 04:44:24.196300 2025] [:error] [pid 26607:tid 26613] [client 2.58.56.14:49408] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aTstKMb_b0tOEWTL2KnUuwAAAMQ"]
[Fri Dec 12 04:44:26.559396 2025] [:error] [pid 26607:tid 26623] [client 2.58.56.14:61127] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/style.php"] [unique_id "aTstKsb_b0tOEWTL2KnUvwAAAM4"]
[Fri Dec 12 04:44:27.621122 2025] [:error] [pid 26521:tid 26594] [client 2.58.56.14:63567] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aTstK5dhcAPU617AKTBOgQAAAI8"]
[Fri Dec 12 04:44:28.493309 2025] [:error] [pid 60649:tid 60656] [client 2.58.56.14:59861] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/style.php"] [unique_id "aTstLFOcUGKU3sgfHP8-SQAAAQQ"]
[Fri Dec 12 04:44:29.196081 2025] [:error] [pid 26519:tid 26538] [client 2.58.56.14:57426] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style.php"] [unique_id "aTstLc8TRgSGOeWqEhdKEgAAAA8"]
[Fri Dec 12 04:44:30.427119 2025] [:error] [pid 26521:tid 26586] [client 2.58.56.14:60259] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aTstLpdhcAPU617AKTBOggAAAIc"]
[Fri Dec 12 04:44:31.298085 2025] [:error] [pid 26521:tid 26584] [client 2.58.56.14:56028] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTstL5dhcAPU617AKTBOgwAAAIU"]
[Fri Dec 12 04:44:31.983482 2025] [:error] [pid 60649:tid 60662] [client 2.58.56.14:50695] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aTstL1OcUGKU3sgfHP8-UQAAAQo"]
[Fri Dec 12 04:44:32.786505 2025] [:error] [pid 60649:tid 60668] [client 2.58.56.14:56675] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aTstMFOcUGKU3sgfHP8-VAAAARA"]
[Fri Dec 12 04:44:33.596674 2025] [:error] [pid 26519:tid 26529] [client 2.58.56.14:61591] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aTstMc8TRgSGOeWqEhdKFQAAAAY"]
[Fri Dec 12 04:44:34.347156 2025] [:error] [pid 60649:tid 60654] [client 2.58.56.14:57182] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aTstMlOcUGKU3sgfHP8-VQAAAQI"]
[Fri Dec 12 04:44:34.995983 2025] [:error] [pid 26520:tid 26566] [client 2.58.56.14:60656] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aTstMkG_frlY5vNXu_BSBgAAAE4"]
[Fri Dec 12 04:44:35.569628 2025] [:error] [pid 26519:tid 26532] [client 2.58.56.14:50205] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aTstM88TRgSGOeWqEhdKGQAAAAk"]
[Fri Dec 12 04:44:36.426923 2025] [:error] [pid 26520:tid 26552] [client 2.58.56.14:57694] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aTstNEG_frlY5vNXu_BSBwAAAEA"]
[Fri Dec 12 04:44:37.053925 2025] [:error] [pid 60649:tid 60672] [client 2.58.56.14:50204] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/flex.php"] [unique_id "aTstNVOcUGKU3sgfHP8-VgAAARQ"]
[Fri Dec 12 04:44:37.941665 2025] [:error] [pid 60649:tid 60655] [client 2.58.56.14:63747] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aTstNVOcUGKU3sgfHP8-WAAAAQM"]
[Fri Dec 12 04:44:39.532973 2025] [:error] [pid 26519:tid 26535] [client 2.58.56.14:65501] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aTstN88TRgSGOeWqEhdKHwAAAAw"]
[Fri Dec 12 04:44:40.644824 2025] [:error] [pid 26521:tid 26597] [client 2.58.56.14:56823] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/akc.php"] [unique_id "aTstOJdhcAPU617AKTBOhgAAAJI"]
[Fri Dec 12 04:44:41.363844 2025] [:error] [pid 26607:tid 26620] [client 2.58.56.14:51262] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/zoo.php"] [unique_id "aTstOcb_b0tOEWTL2KnUzwAAAMs"]
[Fri Dec 12 04:44:41.999763 2025] [:error] [pid 26607:tid 26611] [client 2.58.56.14:62762] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aTstOcb_b0tOEWTL2KnU0AAAAMI"]
[Fri Dec 12 04:44:42.593535 2025] [:error] [pid 26607:tid 26619] [client 2.58.56.14:51807] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aTstOsb_b0tOEWTL2KnU0wAAAMo"]
[Fri Dec 12 04:44:43.190480 2025] [:error] [pid 26607:tid 26628] [client 2.58.56.14:59132] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aTstO8b_b0tOEWTL2KnU1gAAANM"]
[Fri Dec 12 04:44:43.772861 2025] [:error] [pid 26520:tid 26571] [client 2.58.56.14:57654] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shlo.php"] [unique_id "aTstO0G_frlY5vNXu_BSCgAAAFM"]
[Fri Dec 12 04:44:44.553614 2025] [:error] [pid 26607:tid 26632] [client 2.58.56.14:61014] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aTstPMb_b0tOEWTL2KnU1wAAANc"]
[Fri Dec 12 04:44:45.417422 2025] [:error] [pid 26519:tid 26535] [client 2.58.56.14:50279] [client 2.58.56.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-editor.php"] [unique_id "aTstPc8TRgSGOeWqEhdKKQAAAAw"]
[Fri Dec 12 04:52:18.087785 2025] [:error] [pid 60649:tid 60652] [client 45.8.17.94:51167] [client 45.8.17.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.94, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTsvAlOcUGKU3sgfHP9AdAAAAQA"]
[Fri Dec 12 04:52:18.101841 2025] [proxy_fcgi:error] [pid 60649:tid 60652] [client 45.8.17.94:51167] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 05:16:11.657450 2025] [:error] [pid 26519:tid 26523] [client 43.140.247.223:37098] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTs0m88TRgSGOeWqEhdQXAAAAAA"]
[Fri Dec 12 05:43:45.993516 2025] [autoindex:error] [pid 26521:tid 26582] [client 40.160.16.154:26494] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 06:13:23.017811 2025] [autoindex:error] [pid 60649:tid 60655] [client 40.160.16.154:37122] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 06:41:48.395096 2025] [autoindex:error] [pid 26519:tid 26534] [client 34.73.143.33:43971] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 06:45:01.333981 2025] [proxy_fcgi:error] [pid 26519:tid 26543] [client 4.241.233.183:54760] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Dec 12 06:45:01.454115 2025] [proxy_fcgi:error] [pid 26519:tid 26532] [client 4.241.233.183:54760] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Dec 12 06:45:01.574239 2025] [proxy_fcgi:error] [pid 26519:tid 26526] [client 4.241.233.183:54760] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Dec 12 06:45:01.695044 2025] [proxy_fcgi:error] [pid 26519:tid 26524] [client 4.241.233.183:54760] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Dec 12 06:45:01.814809 2025] [proxy_fcgi:error] [pid 26519:tid 26546] [client 4.241.233.183:54760] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Dec 12 06:45:01.936183 2025] [proxy_fcgi:error] [pid 26519:tid 26523] [client 4.241.233.183:54760] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Dec 12 06:53:23.862756 2025] [autoindex:error] [pid 26607:tid 26626] [client 209.141.61.93:17045] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.google.com.hk
[Fri Dec 12 07:13:00.802975 2025] [autoindex:error] [pid 26519:tid 26536] [client 74.7.227.136:53550] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 08:28:19.617771 2025] [autoindex:error] [pid 26519:tid 26538] [client 34.26.193.30:47041] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 08:41:10.422607 2025] [autoindex:error] [pid 26519:tid 26544] [client 75.142.106.199:49798] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 08:43:58.614971 2025] [autoindex:error] [pid 60649:tid 60652] [client 107.140.122.8:60230] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 08:58:05.373680 2025] [autoindex:error] [pid 26521:tid 26583] [client 165.232.185.128:33128] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 08:58:06.712170 2025] [autoindex:error] [pid 26521:tid 26589] [client 165.232.185.128:42774] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 09:45:06.873969 2025] [autoindex:error] [pid 27950:tid 27966] [client 45.156.128.108:60545] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 10:20:07.582239 2025] [autoindex:error] [pid 60649:tid 60661] [client 34.26.204.56:47435] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 11:13:49.858879 2025] [:error] [pid 26520:tid 26573] [client 182.42.104.32:56746] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTuIbUG_frlY5vNXu_CX7AAAAFU"]
[Fri Dec 12 11:14:52.086616 2025] [autoindex:error] [pid 27950:tid 27964] [client 3.96.146.150:58524] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 11:18:24.860190 2025] [autoindex:error] [pid 26607:tid 26611] [client 15.164.164.229:44986] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 11:32:13.382449 2025] [:error] [pid 26521:tid 26588] [client 43.157.191.20:36320] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTuMvZdhcAPU617AKTDNMwAAAIk"]
[Fri Dec 12 12:29:47.858172 2025] [autoindex:error] [pid 26521:tid 26600] [client 34.26.204.56:44105] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 12:49:56.654854 2025] [autoindex:error] [pid 27950:tid 27957] [client 104.244.75.37:53378] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.google.com.hk
[Fri Dec 12 12:51:11.827476 2025] [autoindex:error] [pid 26519:tid 26535] [client 104.244.75.37:65401] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.google.com.hk
[Fri Dec 12 17:51:19.752828 2025] [autoindex:error] [pid 26521:tid 26597] [client 54.161.30.176:42620] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:51:20.163026 2025] [autoindex:error] [pid 26521:tid 26587] [client 54.161.30.176:59762] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 18:51:56.261328 2025] [autoindex:error] [pid 26607:tid 26632] [client 15.164.214.61:56616] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 20:26:45.244232 2025] [autoindex:error] [pid 26521:tid 26596] [client 40.160.26.78:35770] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.bing.com/
[Fri Dec 12 20:30:22.932133 2025] [autoindex:error] [pid 26520:tid 26553] [client 209.141.48.80:24795] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.google.com.hk
[Fri Dec 12 20:32:27.189321 2025] [autoindex:error] [pid 27950:tid 27972] [client 209.141.48.80:35143] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.google.com.hk
[Fri Dec 12 20:52:50.386072 2025] [autoindex:error] [pid 26521:tid 26591] [client 74.7.241.47:45918] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:18.230403 2025] [autoindex:error] [pid 26520:tid 26552] [client 34.34.247.117:34722] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:40.807160 2025] [autoindex:error] [pid 60649:tid 60652] [client 34.34.247.0:27913] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:46.434786 2025] [autoindex:error] [pid 55760:tid 55779] [client 203.30.2.71:50157] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:47.916016 2025] [autoindex:error] [pid 26521:tid 26597] [client 120.156.65.56:63745] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:49.418123 2025] [autoindex:error] [pid 26521:tid 26592] [client 27.33.148.121:56824] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:51.203315 2025] [autoindex:error] [pid 26520:tid 26576] [client 149.167.37.69:10314] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:52.606777 2025] [autoindex:error] [pid 26520:tid 26559] [client 122.148.38.217:61350] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:02:54.564968 2025] [autoindex:error] [pid 26521:tid 26588] [client 89.117.155.22:45283] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:03:01.389870 2025] [autoindex:error] [pid 26607:tid 26631] [client 89.117.155.22:56513] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:03:07.623233 2025] [autoindex:error] [pid 60649:tid 60652] [client 50.174.29.43:8957] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:03:13.150783 2025] [autoindex:error] [pid 26521:tid 26583] [client 50.174.29.43:35891] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:03:19.976783 2025] [autoindex:error] [pid 60649:tid 60676] [client 192.200.148.145:50912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 21:03:25.714335 2025] [autoindex:error] [pid 55760:tid 55763] [client 192.200.148.145:50922] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 22:11:21.302524 2025] [autoindex:error] [pid 55760:tid 55770] [client 34.138.114.218:60407] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 22:16:45.960312 2025] [autoindex:error] [pid 26607:tid 26626] [client 34.132.17.92:51564] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 22:42:48.155360 2025] [autoindex:error] [pid 26521:tid 26597] [client 140.206.236.91:33090] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Fri Dec 12 23:11:23.735962 2025] [autoindex:error] [pid 27950:tid 27971] [client 34.46.44.227:56465] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 23:47:18.928452 2025] [:error] [pid 27950:tid 27956] [client 156.193.110.72:60848] [client 156.193.110.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.193.110.72, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw5BoVLRvkrdsSc1F3J_wAAAUQ"]
[Fri Dec 12 23:47:18.955254 2025] [proxy_fcgi:error] [pid 27950:tid 27956] [client 156.193.110.72:60848] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 23:52:41.983201 2025] [autoindex:error] [pid 26521:tid 26591] [client 104.252.191.157:26978] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 23:52:41.994695 2025] [autoindex:error] [pid 27950:tid 27954] [client 103.196.9.177:6868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 23:52:46.403604 2025] [autoindex:error] [pid 26521:tid 26590] [client 103.196.9.30:64376] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 00:01:24.104790 2025] [autoindex:error] [pid 27950:tid 27964] [client 136.118.145.124:54059] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 00:14:11.533822 2025] [proxy_fcgi:error] [pid 27950:tid 27975] [client 216.126.227.233:61452] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:15:22.337894 2025] [proxy_fcgi:error] [pid 26521:tid 26599] [client 216.126.227.233:63570] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:17:58.642337 2025] [proxy_fcgi:error] [pid 55760:tid 55778] [client 216.126.227.233:50738] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:22:11.855613 2025] [proxy_fcgi:error] [pid 27950:tid 27974] [client 216.126.227.233:57383] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:22:27.988183 2025] [:error] [pid 27950:tid 27956] [client 216.126.227.233:57940] [client 216.126.227.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aTxBQ4VLRvkrdsSc1F3SIwAAAUQ"]
[Sat Dec 13 00:25:13.960619 2025] [proxy_fcgi:error] [pid 27950:tid 27966] [client 216.126.227.233:63286] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:25:14.161704 2025] [proxy_fcgi:error] [pid 26520:tid 26560] [client 216.126.227.233:63302] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:25:14.863454 2025] [:error] [pid 55760:tid 55784] [client 216.126.227.233:63337] [client 216.126.227.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTxB6lObDQlftFDyGaxNBwAAAZY"]
[Sat Dec 13 00:32:53.942381 2025] [:error] [pid 26519:tid 26543] [client 49.235.136.28:57160] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aTxDtc8TRgSGOeWqEhcaswAAABQ"]
[Sat Dec 13 00:34:47.800975 2025] [:error] [pid 26519:tid 26541] [client 216.126.227.233:63090] [client 216.126.227.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.126.227.233, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTxEJ88TRgSGOeWqEhca_gAAABI"]
[Sat Dec 13 00:34:47.811780 2025] [proxy_fcgi:error] [pid 26519:tid 26541] [client 216.126.227.233:63090] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:37.677753 2025] [proxy_fcgi:error] [pid 26519:tid 26532] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:37.801424 2025] [proxy_fcgi:error] [pid 26519:tid 26533] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:37.929621 2025] [proxy_fcgi:error] [pid 26519:tid 26543] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:38.054657 2025] [proxy_fcgi:error] [pid 26519:tid 26546] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:38.199265 2025] [proxy_fcgi:error] [pid 26519:tid 26539] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:38.535093 2025] [proxy_fcgi:error] [pid 26519:tid 26542] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:38.990916 2025] [proxy_fcgi:error] [pid 26519:tid 26547] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:39.178769 2025] [proxy_fcgi:error] [pid 26519:tid 26524] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:39.377970 2025] [proxy_fcgi:error] [pid 26519:tid 26540] [client 20.18.142.105:27601] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:49:39.522059 2025] [:error] [pid 26519:tid 26541] [client 20.18.142.105:27601] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aTxHo88TRgSGOeWqEhcdjwAAABI"]
[Sat Dec 13 00:49:40.114343 2025] [:error] [pid 26520:tid 26565] [client 20.18.142.105:27613] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aTxHpEG_frlY5vNXu_AnjQAAAE0"]
[Sat Dec 13 00:49:40.595712 2025] [:error] [pid 26519:tid 26537] [client 20.18.142.105:27540] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aTxHpM8TRgSGOeWqEhcdkAAAAA4"]
[Sat Dec 13 00:49:40.968898 2025] [:error] [pid 26521:tid 26582] [client 20.18.142.105:27592] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aTxHpJdhcAPU617AKTDSBQAAAIM"]
[Sat Dec 13 00:49:41.289007 2025] [:error] [pid 55760:tid 55764] [client 20.18.142.105:27646] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxHpVObDQlftFDyGaxSIwAAAYI"]
[Sat Dec 13 00:49:41.737535 2025] [:error] [pid 55760:tid 55773] [client 20.18.142.105:27595] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxHpVObDQlftFDyGaxSJAAAAYs"]
[Sat Dec 13 00:49:42.176806 2025] [:error] [pid 26520:tid 26575] [client 20.18.142.105:27619] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxHpkG_frlY5vNXu_AnkQAAAFc"]
[Sat Dec 13 00:49:42.938130 2025] [:error] [pid 26520:tid 26555] [client 20.18.142.105:27626] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxHpkG_frlY5vNXu_AnlQAAAEM"]
[Sat Dec 13 00:49:43.336080 2025] [:error] [pid 26521:tid 26584] [client 20.18.142.105:27618] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTxHp5dhcAPU617AKTDSBwAAAIU"]
[Sat Dec 13 00:49:43.647260 2025] [:error] [pid 26521:tid 26589] [client 20.18.142.105:27591] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTxHp5dhcAPU617AKTDSCAAAAIo"]
[Sat Dec 13 00:49:44.027926 2025] [:error] [pid 26521:tid 26595] [client 20.18.142.105:27549] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTxHqJdhcAPU617AKTDSCwAAAJA"]
[Sat Dec 13 00:49:44.559070 2025] [:error] [pid 26521:tid 26601] [client 20.18.142.105:27589] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTxHqJdhcAPU617AKTDSDgAAAJY"]
[Sat Dec 13 00:49:45.162271 2025] [:error] [pid 27950:tid 27975] [client 20.18.142.105:27525] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aTxHqYVLRvkrdsSc1F3WpAAAAVc"]
[Sat Dec 13 00:49:45.752362 2025] [:error] [pid 55760:tid 55772] [client 20.18.142.105:27602] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aTxHqVObDQlftFDyGaxSJQAAAYo"]
[Sat Dec 13 00:49:46.392634 2025] [:error] [pid 26521:tid 26600] [client 20.18.142.105:27625] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aTxHqpdhcAPU617AKTDSEQAAAJU"]
[Sat Dec 13 00:49:47.704566 2025] [:error] [pid 26607:tid 26622] [client 20.18.142.105:27585] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aTxHq8b_b0tOEWTL2KnOkAAAAM0"]
[Sat Dec 13 00:49:48.219789 2025] [:error] [pid 26521:tid 26596] [client 20.18.142.105:27632] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aTxHrJdhcAPU617AKTDSEgAAAJE"]
[Sat Dec 13 00:49:48.649516 2025] [:error] [pid 26521:tid 26592] [client 20.18.142.105:27643] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aTxHrJdhcAPU617AKTDSEwAAAI0"]
[Sat Dec 13 00:49:49.076296 2025] [:error] [pid 55760:tid 55766] [client 20.18.142.105:27597] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aTxHrVObDQlftFDyGaxSJwAAAYQ"]
[Sat Dec 13 00:49:49.388209 2025] [:error] [pid 26521:tid 26582] [client 20.18.142.105:27530] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aTxHrZdhcAPU617AKTDSFQAAAIM"]
[Sat Dec 13 00:49:49.759057 2025] [:error] [pid 55760:tid 55782] [client 20.18.142.105:27617] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aTxHrVObDQlftFDyGaxSKQAAAZQ"]
[Sat Dec 13 00:49:50.042025 2025] [:error] [pid 26521:tid 26595] [client 20.18.142.105:27539] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aTxHrpdhcAPU617AKTDSFwAAAJA"]
[Sat Dec 13 00:49:50.313503 2025] [:error] [pid 26520:tid 26563] [client 20.18.142.105:27534] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aTxHrkG_frlY5vNXu_AnlwAAAEs"]
[Sat Dec 13 00:49:50.892607 2025] [:error] [pid 26607:tid 26617] [client 20.18.142.105:6097] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aTxHrsb_b0tOEWTL2KnOkQAAAMg"]
[Sat Dec 13 00:49:51.379866 2025] [:error] [pid 26521:tid 26580] [client 20.18.142.105:27605] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aTxHr5dhcAPU617AKTDSGAAAAIE"]
[Sat Dec 13 00:49:51.858103 2025] [:error] [pid 27950:tid 27976] [client 20.18.142.105:27637] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aTxHr4VLRvkrdsSc1F3WpgAAAVg"]
[Sat Dec 13 00:49:52.143187 2025] [:error] [pid 26521:tid 26593] [client 20.18.142.105:27537] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aTxHsJdhcAPU617AKTDSGgAAAI4"]
[Sat Dec 13 00:49:52.756312 2025] [:error] [pid 55760:tid 55767] [client 20.18.142.105:27582] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aTxHsFObDQlftFDyGaxSLAAAAYU"]
[Sat Dec 13 00:49:53.406077 2025] [:error] [pid 55760:tid 55779] [client 20.18.142.105:27647] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aTxHsVObDQlftFDyGaxSLQAAAZE"]
[Sat Dec 13 00:49:53.899990 2025] [:error] [pid 55760:tid 55785] [client 20.18.142.105:27644] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aTxHsVObDQlftFDyGaxSLgAAAZc"]
[Sat Dec 13 00:49:54.275630 2025] [:error] [pid 26521:tid 26591] [client 20.18.142.105:27543] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aTxHspdhcAPU617AKTDSHQAAAIw"]
[Sat Dec 13 00:49:54.914800 2025] [:error] [pid 26519:tid 26523] [client 20.18.142.105:27608] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aTxHss8TRgSGOeWqEhcdkwAAAAA"]
[Sat Dec 13 00:49:55.812675 2025] [:error] [pid 26521:tid 26579] [client 20.18.142.105:27607] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aTxHs5dhcAPU617AKTDSHgAAAIA"]
[Sat Dec 13 00:49:56.366654 2025] [:error] [pid 55760:tid 55777] [client 20.18.142.105:27594] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aTxHtFObDQlftFDyGaxSMAAAAY8"]
[Sat Dec 13 00:49:56.778875 2025] [:error] [pid 55760:tid 55784] [client 20.18.142.105:6105] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aTxHtFObDQlftFDyGaxSMgAAAZY"]
[Sat Dec 13 00:49:57.109850 2025] [:error] [pid 55760:tid 55764] [client 20.18.142.105:27524] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aTxHtVObDQlftFDyGaxSMwAAAYI"]
[Sat Dec 13 00:49:57.403215 2025] [:error] [pid 55760:tid 55773] [client 20.18.142.105:27572] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aTxHtVObDQlftFDyGaxSNAAAAYs"]
[Sat Dec 13 00:49:57.882464 2025] [:error] [pid 26520:tid 26557] [client 20.18.142.105:27624] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aTxHtUG_frlY5vNXu_AnmQAAAEU"]
[Sat Dec 13 00:49:58.440260 2025] [:error] [pid 26521:tid 26596] [client 20.18.142.105:27645] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aTxHtpdhcAPU617AKTDSIAAAAJE"]
[Sat Dec 13 00:49:59.156634 2025] [:error] [pid 26521:tid 26583] [client 20.18.142.105:27621] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aTxHt5dhcAPU617AKTDSIQAAAIQ"]
[Sat Dec 13 00:50:00.161988 2025] [:error] [pid 26521:tid 26581] [client 20.18.142.105:27535] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aTxHuJdhcAPU617AKTDSJAAAAII"]
[Sat Dec 13 00:50:01.102807 2025] [:error] [pid 26520:tid 26574] [client 20.18.142.105:6090] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aTxHuUG_frlY5vNXu_AnmgAAAFY"]
[Sat Dec 13 00:50:01.600958 2025] [:error] [pid 26521:tid 26588] [client 20.18.142.105:27550] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aTxHuZdhcAPU617AKTDSJgAAAIk"]
[Sat Dec 13 00:50:02.107448 2025] [:error] [pid 26519:tid 26543] [client 20.18.142.105:27596] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aTxHus8TRgSGOeWqEhcdlgAAABQ"]
[Sat Dec 13 00:50:02.385645 2025] [:error] [pid 26520:tid 26568] [client 20.18.142.105:27623] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aTxHukG_frlY5vNXu_AnmwAAAFA"]
[Sat Dec 13 00:50:03.042103 2025] [:error] [pid 26520:tid 26564] [client 20.18.142.105:27579] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aTxHu0G_frlY5vNXu_AnnQAAAEw"]
[Sat Dec 13 00:50:03.763824 2025] [:error] [pid 26519:tid 26546] [client 20.18.142.105:27610] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aTxHu88TRgSGOeWqEhcdlwAAABc"]
[Sat Dec 13 00:50:04.134826 2025] [:error] [pid 26521:tid 26595] [client 20.18.142.105:27541] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aTxHvJdhcAPU617AKTDSJwAAAJA"]
[Sat Dec 13 00:50:04.589805 2025] [:error] [pid 26520:tid 26567] [client 20.18.142.105:27634] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aTxHvEG_frlY5vNXu_AnngAAAE8"]
[Sat Dec 13 00:50:05.263651 2025] [:error] [pid 26521:tid 26602] [client 20.18.142.105:27520] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aTxHvZdhcAPU617AKTDSKAAAAJc"]
[Sat Dec 13 00:50:06.175290 2025] [:error] [pid 26521:tid 26591] [client 20.18.142.105:27521] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aTxHvpdhcAPU617AKTDSKwAAAIw"]
[Sat Dec 13 00:50:07.940232 2025] [:error] [pid 26519:tid 26542] [client 20.18.142.105:27609] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aTxHv88TRgSGOeWqEhcdmQAAABM"]
[Sat Dec 13 00:50:09.032802 2025] [:error] [pid 26519:tid 26529] [client 20.18.142.105:27528] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aTxHwc8TRgSGOeWqEhcdmgAAAAY"]
[Sat Dec 13 00:50:09.634645 2025] [:error] [pid 26520:tid 26571] [client 20.18.142.105:6116] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aTxHwUG_frlY5vNXu_AnqQAAAFM"]
[Sat Dec 13 00:50:10.136128 2025] [:error] [pid 27950:tid 27961] [client 20.18.142.105:27554] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aTxHwoVLRvkrdsSc1F3WpwAAAUk"]
[Sat Dec 13 00:50:10.455600 2025] [:error] [pid 55760:tid 55785] [client 20.18.142.105:27612] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aTxHwlObDQlftFDyGaxSQAAAAZc"]
[Sat Dec 13 00:50:10.883872 2025] [:error] [pid 26521:tid 26585] [client 20.18.142.105:27523] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aTxHwpdhcAPU617AKTDSLQAAAIY"]
[Sat Dec 13 00:50:11.530373 2025] [:error] [pid 55760:tid 55777] [client 20.18.142.105:27642] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aTxHw1ObDQlftFDyGaxSRgAAAY8"]
[Sat Dec 13 00:50:12.523621 2025] [:error] [pid 55760:tid 55772] [client 20.18.142.105:6085] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aTxHxFObDQlftFDyGaxSSwAAAYo"]
[Sat Dec 13 00:50:13.747297 2025] [:error] [pid 26607:tid 26629] [client 20.18.142.105:27565] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aTxHxcb_b0tOEWTL2KnOlwAAANQ"]
[Sat Dec 13 00:50:14.366682 2025] [:error] [pid 26519:tid 26540] [client 20.18.142.105:27604] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aTxHxs8TRgSGOeWqEhcdmwAAABE"]
[Sat Dec 13 00:50:14.848955 2025] [:error] [pid 26519:tid 26541] [client 20.18.142.105:27545] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aTxHxs8TRgSGOeWqEhcdnQAAABI"]
[Sat Dec 13 00:50:15.651525 2025] [:error] [pid 27950:tid 27964] [client 20.18.142.105:6100] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aTxHx4VLRvkrdsSc1F3WqAAAAUw"]
[Sat Dec 13 00:50:15.952642 2025] [:error] [pid 60649:tid 60676] [client 20.18.142.105:27555] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aTxHx1OcUGKU3sgfHP8r1QAAARg"]
[Sat Dec 13 00:50:16.685675 2025] [:error] [pid 26521:tid 26586] [client 20.18.142.105:6132] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aTxHyJdhcAPU617AKTDSLwAAAIc"]
[Sat Dec 13 00:50:17.689164 2025] [:error] [pid 26520:tid 26557] [client 20.18.142.105:27548] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aTxHyUG_frlY5vNXu_AnyAAAAEU"]
[Sat Dec 13 00:50:18.224227 2025] [:error] [pid 26520:tid 26567] [client 20.18.142.105:27641] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aTxHykG_frlY5vNXu_AnyQAAAE8"]
[Sat Dec 13 00:50:19.169533 2025] [:error] [pid 26519:tid 26538] [client 20.18.142.105:27638] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aTxHy88TRgSGOeWqEhcdoQAAAA8"]
[Sat Dec 13 00:50:19.927251 2025] [:error] [pid 60649:tid 60672] [client 20.18.142.105:27542] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aTxHy1OcUGKU3sgfHP8r1gAAARQ"]
[Sat Dec 13 00:50:20.496092 2025] [:error] [pid 60649:tid 60654] [client 20.18.142.105:6133] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aTxHzFOcUGKU3sgfHP8r1wAAAQI"]
[Sat Dec 13 00:50:21.036311 2025] [:error] [pid 26521:tid 26603] [client 20.18.142.105:27587] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aTxHzZdhcAPU617AKTDSMQAAAJg"]
[Sat Dec 13 00:50:21.486072 2025] [:error] [pid 27950:tid 27954] [client 20.18.142.105:27629] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aTxHzYVLRvkrdsSc1F3WrAAAAUI"]
[Sat Dec 13 00:50:22.094084 2025] [:error] [pid 26607:tid 26628] [client 20.18.142.105:27529] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aTxHzsb_b0tOEWTL2KnOnAAAANM"]
[Sat Dec 13 00:50:22.421357 2025] [:error] [pid 26607:tid 26633] [client 20.18.142.105:27580] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aTxHzsb_b0tOEWTL2KnOnQAAANg"]
[Sat Dec 13 00:50:22.906044 2025] [:error] [pid 27950:tid 27962] [client 20.18.142.105:6086] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aTxHzoVLRvkrdsSc1F3WrQAAAUo"]
[Sat Dec 13 00:50:23.427761 2025] [:error] [pid 26521:tid 26584] [client 20.18.142.105:27553] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aTxHz5dhcAPU617AKTDSMgAAAIU"]
[Sat Dec 13 00:50:23.868615 2025] [:error] [pid 26519:tid 26546] [client 20.18.142.105:27571] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aTxHz88TRgSGOeWqEhcdpAAAABc"]
[Sat Dec 13 00:50:24.498540 2025] [:error] [pid 27950:tid 27974] [client 20.18.142.105:27603] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aTxH0IVLRvkrdsSc1F3WrgAAAVY"]
[Sat Dec 13 00:50:24.920785 2025] [:error] [pid 26521:tid 26583] [client 20.18.142.105:27531] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aTxH0JdhcAPU617AKTDSMwAAAIQ"]
[Sat Dec 13 00:50:25.345847 2025] [:error] [pid 55760:tid 55780] [client 20.18.142.105:6108] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aTxH0VObDQlftFDyGaxSUgAAAZI"]
[Sat Dec 13 00:50:26.424804 2025] [:error] [pid 55760:tid 55765] [client 20.18.142.105:27568] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTxH0lObDQlftFDyGaxSUwAAAYM"]
[Sat Dec 13 00:50:27.692048 2025] [:error] [pid 60649:tid 60657] [client 20.18.142.105:27527] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTxH01OcUGKU3sgfHP8r2wAAAQU"]
[Sat Dec 13 00:50:28.947520 2025] [:error] [pid 55760:tid 55777] [client 20.18.142.105:6106] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTxH1FObDQlftFDyGaxSVAAAAY8"]
[Sat Dec 13 00:50:30.124243 2025] [:error] [pid 55760:tid 55784] [client 20.18.142.105:27567] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTxH1lObDQlftFDyGaxSVQAAAZY"]
[Sat Dec 13 00:50:31.571957 2025] [:error] [pid 26519:tid 26526] [client 20.18.142.105:6096] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTxH188TRgSGOeWqEhcdpgAAAAM"]
[Sat Dec 13 00:50:32.427612 2025] [:error] [pid 27950:tid 27952] [client 20.18.142.105:6088] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTxH2IVLRvkrdsSc1F3WsAAAAUA"]
[Sat Dec 13 00:50:33.098940 2025] [:error] [pid 27950:tid 27975] [client 20.18.142.105:6102] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTxH2YVLRvkrdsSc1F3WsQAAAVc"]
[Sat Dec 13 00:50:33.483600 2025] [:error] [pid 26520:tid 26570] [client 20.18.142.105:27574] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aTxH2UG_frlY5vNXu_AnzgAAAFI"]
[Sat Dec 13 00:50:33.793111 2025] [:error] [pid 55760:tid 55764] [client 20.18.142.105:27551] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aTxH2VObDQlftFDyGaxSWAAAAYI"]
[Sat Dec 13 00:50:34.099412 2025] [:error] [pid 26520:tid 26572] [client 20.18.142.105:27547] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aTxH2kG_frlY5vNXu_AnzwAAAFQ"]
[Sat Dec 13 00:50:34.444857 2025] [:error] [pid 60649:tid 60652] [client 20.18.142.105:27631] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aTxH2lOcUGKU3sgfHP8r3gAAAQA"]
[Sat Dec 13 00:50:34.991330 2025] [:error] [pid 55760:tid 55771] [client 20.18.142.105:27575] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aTxH2lObDQlftFDyGaxSWQAAAYk"]
[Sat Dec 13 00:50:35.343820 2025] [:error] [pid 26520:tid 26557] [client 20.18.142.105:27578] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aTxH20G_frlY5vNXu_An0QAAAEU"]
[Sat Dec 13 00:50:35.831679 2025] [:error] [pid 26521:tid 26591] [client 20.18.142.105:27636] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aTxH25dhcAPU617AKTDSOAAAAIw"]
[Sat Dec 13 00:50:36.652890 2025] [:error] [pid 27950:tid 27966] [client 20.18.142.105:6119] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aTxH3IVLRvkrdsSc1F3WtAAAAU4"]
[Sat Dec 13 00:50:37.630047 2025] [:error] [pid 26521:tid 26579] [client 20.18.142.105:6114] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aTxH3ZdhcAPU617AKTDSOQAAAIA"]
[Sat Dec 13 00:50:38.488743 2025] [:error] [pid 26521:tid 26594] [client 20.18.142.105:27573] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/krypton.php"] [unique_id "aTxH3pdhcAPU617AKTDSOgAAAI8"]
[Sat Dec 13 00:50:39.081170 2025] [proxy_fcgi:error] [pid 26521:tid 26585] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:39.205937 2025] [proxy_fcgi:error] [pid 26521:tid 26599] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:39.331145 2025] [proxy_fcgi:error] [pid 26521:tid 26600] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:39.762482 2025] [proxy_fcgi:error] [pid 26521:tid 26596] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:39.888389 2025] [proxy_fcgi:error] [pid 26521:tid 26586] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:40.069299 2025] [proxy_fcgi:error] [pid 26521:tid 26598] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:40.210361 2025] [proxy_fcgi:error] [pid 26521:tid 26581] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:40.352214 2025] [proxy_fcgi:error] [pid 26521:tid 26592] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:40.490666 2025] [proxy_fcgi:error] [pid 26521:tid 26603] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:40.614657 2025] [proxy_fcgi:error] [pid 26521:tid 26589] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:50:40.882786 2025] [proxy_fcgi:error] [pid 26521:tid 26588] [client 20.18.142.105:27557] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 01:09:31.117699 2025] [autoindex:error] [pid 26519:tid 26544] [client 103.4.251.243:54954] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 01:09:43.446276 2025] [autoindex:error] [pid 26520:tid 26563] [client 104.164.173.22:46840] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 01:09:52.958223 2025] [autoindex:error] [pid 55760:tid 55781] [client 104.252.191.79:9194] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 01:38:10.233051 2025] [:error] [pid 60649:tid 60663] [client 4.190.196.169:18953] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aTxTAlOcUGKU3sgfHP80LQAAAQs"]
[Sat Dec 13 01:38:10.653950 2025] [:error] [pid 26519:tid 26523] [client 4.190.196.169:19009] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTxTAs8TRgSGOeWqEhcl3wAAAAA"]
[Sat Dec 13 01:38:11.011269 2025] [proxy_fcgi:error] [pid 27950:tid 27963] [client 4.190.196.169:19008] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 01:38:11.187942 2025] [:error] [pid 27950:tid 27953] [client 4.190.196.169:19008] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aTxTA4VLRvkrdsSc1F3gggAAAUE"]
[Sat Dec 13 01:38:11.959262 2025] [proxy_fcgi:error] [pid 27950:tid 27970] [client 4.190.196.169:18946] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 01:38:12.082038 2025] [:error] [pid 27950:tid 27972] [client 4.190.196.169:18946] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp.php"] [unique_id "aTxTBIVLRvkrdsSc1F3gigAAAVQ"]
[Sat Dec 13 01:38:12.548696 2025] [proxy_fcgi:error] [pid 26520:tid 26574] [client 4.190.196.169:19016] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 01:38:12.668562 2025] [:error] [pid 26520:tid 26555] [client 4.190.196.169:19016] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aTxTBEG_frlY5vNXu_A3hwAAAEM"]
[Sat Dec 13 01:38:12.964290 2025] [:error] [pid 27950:tid 27963] [client 4.190.196.169:19042] [client 4.190.196.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.196.169, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aTxTBIVLRvkrdsSc1F3gjQAAAUs"]
[Sat Dec 13 01:38:13.482531 2025] [:error] [pid 27950:tid 27957] [client 4.190.196.169:19042] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aTxTBYVLRvkrdsSc1F3gkQAAAUU"]
[Sat Dec 13 01:38:14.050389 2025] [:error] [pid 26520:tid 26563] [client 4.190.196.169:19056] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aTxTBkG_frlY5vNXu_A3jgAAAEs"]
[Sat Dec 13 01:38:14.461490 2025] [:error] [pid 26519:tid 26529] [client 4.190.196.169:19029] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxTBs8TRgSGOeWqEhcl5wAAAAY"]
[Sat Dec 13 01:38:14.787759 2025] [:error] [pid 26519:tid 26533] [client 4.190.196.169:19063] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxTBs8TRgSGOeWqEhcl6QAAAAo"]
[Sat Dec 13 01:38:15.070236 2025] [:error] [pid 27950:tid 27973] [client 4.190.196.169:19050] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxTB4VLRvkrdsSc1F3glQAAAVU"]
[Sat Dec 13 01:38:15.457480 2025] [:error] [pid 26519:tid 26531] [client 4.190.196.169:19040] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTxTB88TRgSGOeWqEhcl6gAAAAg"]
[Sat Dec 13 01:38:15.900613 2025] [:error] [pid 27950:tid 27955] [client 4.190.196.169:19047] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTxTB4VLRvkrdsSc1F3glwAAAUM"]
[Sat Dec 13 01:38:16.141195 2025] [:error] [pid 26521:tid 26598] [client 4.190.196.169:19064] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aTxTCJdhcAPU617AKTDfHAAAAJM"]
[Sat Dec 13 01:38:16.452846 2025] [:error] [pid 26607:tid 26615] [client 4.190.196.169:18961] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTxTCMb_b0tOEWTL2KnX_gAAAMY"]
[Sat Dec 13 01:38:16.713596 2025] [:error] [pid 26519:tid 26524] [client 4.190.196.169:19057] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTxTCM8TRgSGOeWqEhcl6wAAAAE"]
[Sat Dec 13 01:38:16.965762 2025] [:error] [pid 26521:tid 26591] [client 4.190.196.169:18964] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTxTCJdhcAPU617AKTDfHgAAAIw"]
[Sat Dec 13 01:38:17.325352 2025] [:error] [pid 26519:tid 26523] [client 4.190.196.169:19041] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTxTCc8TRgSGOeWqEhcl7AAAAAA"]
[Sat Dec 13 01:38:17.605782 2025] [:error] [pid 26519:tid 26534] [client 4.190.196.169:19021] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTxTCc8TRgSGOeWqEhcl7QAAAAs"]
[Sat Dec 13 01:38:17.883806 2025] [:error] [pid 26521:tid 26601] [client 4.190.196.169:18968] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTxTCZdhcAPU617AKTDfIQAAAJY"]
[Sat Dec 13 01:38:18.127115 2025] [:error] [pid 26521:tid 26599] [client 4.190.196.169:19030] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/404.php"] [unique_id "aTxTCpdhcAPU617AKTDfIgAAAJQ"]
[Sat Dec 13 01:38:18.419287 2025] [:error] [pid 26607:tid 26612] [client 4.190.196.169:19018] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/404.php"] [unique_id "aTxTCsb_b0tOEWTL2KnYAAAAAMM"]
[Sat Dec 13 01:38:18.694868 2025] [:error] [pid 26607:tid 26629] [client 4.190.196.169:19032] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/404.php"] [unique_id "aTxTCsb_b0tOEWTL2KnYAQAAANQ"]
[Sat Dec 13 01:38:18.940413 2025] [:error] [pid 26519:tid 26539] [client 4.190.196.169:18972] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/404.php"] [unique_id "aTxTCs8TRgSGOeWqEhcl7wAAABA"]
[Sat Dec 13 01:38:19.293345 2025] [:error] [pid 55760:tid 55772] [client 4.190.196.169:18958] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTxTC1ObDQlftFDyGaxdZgAAAYo"]
[Sat Dec 13 01:38:19.553888 2025] [:error] [pid 55760:tid 55771] [client 4.190.196.169:19046] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTxTC1ObDQlftFDyGaxdZwAAAYk"]
[Sat Dec 13 01:38:19.823654 2025] [:error] [pid 26607:tid 26611] [client 4.190.196.169:19036] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTxTC8b_b0tOEWTL2KnYBQAAAMI"]
[Sat Dec 13 01:38:20.082283 2025] [:error] [pid 26607:tid 26614] [client 4.190.196.169:18956] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTxTDMb_b0tOEWTL2KnYBgAAAMU"]
[Sat Dec 13 01:38:20.359487 2025] [:error] [pid 26520:tid 26561] [client 4.190.196.169:8154] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTxTDEG_frlY5vNXu_A3kgAAAEk"]
[Sat Dec 13 01:38:20.627090 2025] [:error] [pid 26520:tid 26564] [client 4.190.196.169:19038] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTxTDEG_frlY5vNXu_A3kwAAAEw"]
[Sat Dec 13 01:38:20.870278 2025] [:error] [pid 26521:tid 26602] [client 4.190.196.169:19060] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTxTDJdhcAPU617AKTDfJQAAAJc"]
[Sat Dec 13 01:38:21.170621 2025] [:error] [pid 26607:tid 26632] [client 4.190.196.169:19069] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTxTDcb_b0tOEWTL2KnYDgAAANc"]
[Sat Dec 13 01:38:21.493866 2025] [:error] [pid 26607:tid 26625] [client 4.190.196.169:19048] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTxTDcb_b0tOEWTL2KnYEgAAANA"]
[Sat Dec 13 01:38:21.739006 2025] [:error] [pid 26519:tid 26545] [client 4.190.196.169:19010] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTxTDc8TRgSGOeWqEhcl8gAAABY"]
[Sat Dec 13 01:38:22.032751 2025] [:error] [pid 26607:tid 26624] [client 4.190.196.169:19020] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTxTDsb_b0tOEWTL2KnYFQAAAM8"]
[Sat Dec 13 01:38:22.313464 2025] [:error] [pid 26521:tid 26600] [client 4.190.196.169:19044] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTxTDpdhcAPU617AKTDfJwAAAJU"]
[Sat Dec 13 01:38:22.563678 2025] [:error] [pid 26607:tid 26613] [client 4.190.196.169:18952] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTxTDsb_b0tOEWTL2KnYFwAAAMQ"]
[Sat Dec 13 01:38:22.809359 2025] [:error] [pid 26519:tid 26530] [client 4.190.196.169:18957] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTxTDs8TRgSGOeWqEhcl9gAAAAc"]
[Sat Dec 13 01:38:23.081419 2025] [:error] [pid 60649:tid 60674] [client 4.190.196.169:19071] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTxTD1OcUGKU3sgfHP80MgAAARY"]
[Sat Dec 13 01:38:23.363825 2025] [:error] [pid 60649:tid 60669] [client 4.190.196.169:8134] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTxTD1OcUGKU3sgfHP80NAAAARE"]
[Sat Dec 13 01:38:23.713811 2025] [:error] [pid 26519:tid 26543] [client 4.190.196.169:18987] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12wudscz.php"] [unique_id "aTxTD88TRgSGOeWqEhcl-gAAABQ"]
[Sat Dec 13 01:38:24.053199 2025] [:error] [pid 26521:tid 26597] [client 4.190.196.169:8171] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12wudscz.php"] [unique_id "aTxTEJdhcAPU617AKTDfKQAAAJI"]
[Sat Dec 13 01:38:24.392119 2025] [:error] [pid 60649:tid 60664] [client 4.190.196.169:19000] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12wudscz.php"] [unique_id "aTxTEFOcUGKU3sgfHP80NgAAAQw"]
[Sat Dec 13 01:38:24.673832 2025] [:error] [pid 26519:tid 26533] [client 4.190.196.169:19049] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12wudscz.php"] [unique_id "aTxTEM8TRgSGOeWqEhcl_QAAAAo"]
[Sat Dec 13 01:38:24.952313 2025] [:error] [pid 26521:tid 26598] [client 4.190.196.169:19012] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTxTEJdhcAPU617AKTDfLAAAAJM"]
[Sat Dec 13 01:38:25.352544 2025] [:error] [pid 26607:tid 26616] [client 4.190.196.169:19022] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTxTEcb_b0tOEWTL2KnYGAAAAMc"]
[Sat Dec 13 01:38:25.653804 2025] [:error] [pid 26520:tid 26553] [client 4.190.196.169:19059] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTxTEUG_frlY5vNXu_A3lAAAAEE"]
[Sat Dec 13 01:38:25.914784 2025] [:error] [pid 26521:tid 26595] [client 4.190.196.169:18955] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTxTEZdhcAPU617AKTDfLgAAAJA"]
[Sat Dec 13 01:38:26.198138 2025] [:error] [pid 26519:tid 26523] [client 4.190.196.169:19025] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTxTEs8TRgSGOeWqEhcmAQAAAAA"]
[Sat Dec 13 01:38:26.492507 2025] [:error] [pid 26521:tid 26589] [client 4.190.196.169:19013] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTxTEpdhcAPU617AKTDfMgAAAIo"]
[Sat Dec 13 01:38:26.783461 2025] [:error] [pid 55760:tid 55785] [client 4.190.196.169:19058] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTxTElObDQlftFDyGaxdagAAAZc"]
[Sat Dec 13 01:38:27.134011 2025] [:error] [pid 55760:tid 55781] [client 4.190.196.169:19002] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTxTE1ObDQlftFDyGaxdawAAAZM"]
[Sat Dec 13 01:38:27.408428 2025] [:error] [pid 55760:tid 55765] [client 4.190.196.169:19055] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTxTE1ObDQlftFDyGaxdbQAAAYM"]
[Sat Dec 13 01:38:27.655333 2025] [:error] [pid 55760:tid 55775] [client 4.190.196.169:19070] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTxTE1ObDQlftFDyGaxdbgAAAY0"]
[Sat Dec 13 01:38:27.955538 2025] [:error] [pid 26519:tid 26526] [client 4.190.196.169:8178] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTxTE88TRgSGOeWqEhcmAwAAAAM"]
[Sat Dec 13 01:38:28.312639 2025] [:error] [pid 26521:tid 26587] [client 4.190.196.169:19061] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTxTFJdhcAPU617AKTDfOgAAAIg"]
[Sat Dec 13 01:38:28.649749 2025] [:error] [pid 26519:tid 26545] [client 4.190.196.169:19034] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aTxTFM8TRgSGOeWqEhcmBgAAABY"]
[Sat Dec 13 01:38:29.045618 2025] [:error] [pid 26521:tid 26588] [client 4.190.196.169:18963] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aTxTFZdhcAPU617AKTDfOwAAAIk"]
[Sat Dec 13 01:38:29.368789 2025] [:error] [pid 26520:tid 26574] [client 4.190.196.169:19065] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTxTFUG_frlY5vNXu_A3lQAAAFY"]
[Sat Dec 13 01:38:29.727432 2025] [:error] [pid 55760:tid 55777] [client 4.190.196.169:18996] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTxTFVObDQlftFDyGaxddAAAAY8"]
[Sat Dec 13 01:38:30.111927 2025] [:error] [pid 26521:tid 26598] [client 4.190.196.169:8144] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTxTFpdhcAPU617AKTDfPQAAAJM"]
[Sat Dec 13 01:38:30.444984 2025] [:error] [pid 55760:tid 55763] [client 4.190.196.169:18950] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTxTFlObDQlftFDyGaxdeAAAAYE"]
[Sat Dec 13 01:38:30.726361 2025] [:error] [pid 55760:tid 55786] [client 4.190.196.169:18960] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTxTFlObDQlftFDyGaxdeQAAAZg"]
[Sat Dec 13 01:38:31.054023 2025] [:error] [pid 26521:tid 26584] [client 4.190.196.169:19068] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aTxTF5dhcAPU617AKTDfPgAAAIU"]
[Sat Dec 13 01:38:31.514819 2025] [:error] [pid 26521:tid 26602] [client 4.190.196.169:18966] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/about.php"] [unique_id "aTxTF5dhcAPU617AKTDfQgAAAJc"]
[Sat Dec 13 01:38:31.786770 2025] [:error] [pid 26521:tid 26585] [client 4.190.196.169:19031] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/about.php"] [unique_id "aTxTF5dhcAPU617AKTDfQwAAAIY"]
[Sat Dec 13 01:38:32.111053 2025] [:error] [pid 26520:tid 26569] [client 4.190.196.169:8147] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/about.php"] [unique_id "aTxTGEG_frlY5vNXu_A3mgAAAFE"]
[Sat Dec 13 01:38:32.458935 2025] [:error] [pid 26521:tid 26580] [client 4.190.196.169:18983] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/about.php"] [unique_id "aTxTGJdhcAPU617AKTDfRAAAAIE"]
[Sat Dec 13 01:38:32.745173 2025] [:error] [pid 26520:tid 26575] [client 4.190.196.169:19066] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTxTGEG_frlY5vNXu_A3nQAAAFc"]
[Sat Dec 13 01:38:33.208035 2025] [:error] [pid 26521:tid 26590] [client 4.190.196.169:18954] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTxTGZdhcAPU617AKTDfRQAAAIs"]
[Sat Dec 13 01:38:33.546011 2025] [:error] [pid 26520:tid 26561] [client 4.190.196.169:18973] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTxTGUG_frlY5vNXu_A3ogAAAEk"]
[Sat Dec 13 01:38:33.927666 2025] [:error] [pid 26520:tid 26565] [client 4.190.196.169:18997] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aTxTGUG_frlY5vNXu_A3owAAAE0"]
[Sat Dec 13 01:38:34.277324 2025] [:error] [pid 55760:tid 55780] [client 4.190.196.169:19006] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTxTGlObDQlftFDyGaxdggAAAZI"]
[Sat Dec 13 01:38:34.557043 2025] [:error] [pid 26519:tid 26529] [client 4.190.196.169:18967] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTxTGs8TRgSGOeWqEhcmBwAAAAY"]
[Sat Dec 13 01:38:34.812601 2025] [:error] [pid 26521:tid 26587] [client 4.190.196.169:18969] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTxTGpdhcAPU617AKTDfSQAAAIg"]
[Sat Dec 13 01:38:35.249995 2025] [:error] [pid 27950:tid 27959] [client 4.190.196.169:8135] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTxTG4VLRvkrdsSc1F3gowAAAUc"]
[Sat Dec 13 01:38:35.597536 2025] [:error] [pid 27950:tid 27960] [client 4.190.196.169:19039] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTxTG4VLRvkrdsSc1F3gpAAAAUg"]
[Sat Dec 13 01:38:35.985337 2025] [:error] [pid 26520:tid 26557] [client 4.190.196.169:18958] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTxTG0G_frlY5vNXu_A3pgAAAEU"]
[Sat Dec 13 01:38:37.221581 2025] [:error] [pid 60649:tid 60675] [client 4.190.196.169:19052] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTxTHVOcUGKU3sgfHP80QAAAARc"]
[Sat Dec 13 01:38:38.437056 2025] [:error] [pid 60649:tid 60674] [client 4.190.196.169:8133] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTxTHlOcUGKU3sgfHP80RQAAARY"]
[Sat Dec 13 01:38:40.471507 2025] [:error] [pid 60649:tid 60671] [client 4.190.196.169:18989] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aTxTIFOcUGKU3sgfHP80SgAAARM"]
[Sat Dec 13 01:38:41.327326 2025] [:error] [pid 26520:tid 26568] [client 4.190.196.169:18978] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTxTIUG_frlY5vNXu_A3rAAAAFA"]
[Sat Dec 13 01:38:43.071757 2025] [:error] [pid 27950:tid 27967] [client 4.190.196.169:8142] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTxTI4VLRvkrdsSc1F3grAAAAU8"]
[Sat Dec 13 01:38:52.539175 2025] [:error] [pid 26607:tid 26631] [client 4.190.196.169:18970] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTxTLMb_b0tOEWTL2KnYHgAAANY"]
[Sat Dec 13 01:38:53.416489 2025] [:error] [pid 26520:tid 26552] [client 4.190.196.169:19045] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTxTLUG_frlY5vNXu_A31AAAAEA"]
[Sat Dec 13 01:38:55.222997 2025] [:error] [pid 26519:tid 26534] [client 4.190.196.169:19011] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aTxTL88TRgSGOeWqEhcmDQAAAAs"]
[Sat Dec 13 01:38:58.497208 2025] [:error] [pid 26520:tid 26557] [client 4.190.196.169:18951] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTxTMkG_frlY5vNXu_A32AAAAEU"]
[Sat Dec 13 01:39:01.872465 2025] [:error] [pid 26607:tid 26616] [client 4.190.196.169:18980] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTxTNcb_b0tOEWTL2KnYJAAAAMc"]
[Sat Dec 13 01:39:02.215298 2025] [:error] [pid 26519:tid 26538] [client 4.190.196.169:8128] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTxTNs8TRgSGOeWqEhcmEAAAAA8"]
[Sat Dec 13 01:39:02.598107 2025] [:error] [pid 26519:tid 26544] [client 4.190.196.169:18959] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTxTNs8TRgSGOeWqEhcmEQAAABU"]
[Sat Dec 13 01:39:02.980607 2025] [:error] [pid 26519:tid 26535] [client 4.190.196.169:8131] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTxTNs8TRgSGOeWqEhcmEgAAAAw"]
[Sat Dec 13 01:39:03.296651 2025] [:error] [pid 55760:tid 55768] [client 4.190.196.169:18962] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTxTN1ObDQlftFDyGaxdmwAAAYY"]
[Sat Dec 13 01:39:03.739443 2025] [:error] [pid 26520:tid 26567] [client 4.190.196.169:19043] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTxTN0G_frlY5vNXu_A33gAAAE8"]
[Sat Dec 13 01:39:04.038724 2025] [:error] [pid 26520:tid 26563] [client 4.190.196.169:19007] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTxTOEG_frlY5vNXu_A33wAAAEs"]
[Sat Dec 13 01:39:04.658767 2025] [:error] [pid 26520:tid 26573] [client 4.190.196.169:18999] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTxTOEG_frlY5vNXu_A34AAAAFU"]
[Sat Dec 13 01:39:05.021489 2025] [:error] [pid 26520:tid 26570] [client 4.190.196.169:19067] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTxTOUG_frlY5vNXu_A34gAAAFI"]
[Sat Dec 13 01:39:05.352528 2025] [:error] [pid 26521:tid 26596] [client 4.190.196.169:8140] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTxTOZdhcAPU617AKTDfTgAAAJE"]
[Sat Dec 13 01:39:05.786064 2025] [:error] [pid 60649:tid 60670] [client 4.190.196.169:19023] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTxTOVOcUGKU3sgfHP80XwAAARI"]
[Sat Dec 13 01:39:06.087458 2025] [:error] [pid 27950:tid 27952] [client 4.190.196.169:8094] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aTxTOoVLRvkrdsSc1F3grgAAAUA"]
[Sat Dec 13 01:39:06.394942 2025] [:error] [pid 55760:tid 55782] [client 4.190.196.169:19054] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aTxTOlObDQlftFDyGaxdnQAAAZQ"]
[Sat Dec 13 01:39:06.665488 2025] [:error] [pid 26607:tid 26630] [client 4.190.196.169:8190] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aTxTOsb_b0tOEWTL2KnYKAAAANU"]
[Sat Dec 13 01:39:07.063960 2025] [:error] [pid 27950:tid 27965] [client 4.190.196.169:18974] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/network.php"] [unique_id "aTxTO4VLRvkrdsSc1F3grwAAAU0"]
[Sat Dec 13 01:39:07.577179 2025] [:error] [pid 26521:tid 26595] [client 4.190.196.169:19004] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTxTO5dhcAPU617AKTDfUQAAAJA"]
[Sat Dec 13 01:39:07.942246 2025] [:error] [pid 26521:tid 26590] [client 4.190.196.169:18993] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTxTO5dhcAPU617AKTDfUwAAAIs"]
[Sat Dec 13 01:39:08.351744 2025] [:error] [pid 26607:tid 26623] [client 4.190.196.169:18985] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTxTPMb_b0tOEWTL2KnYKgAAAM4"]
[Sat Dec 13 01:39:08.602477 2025] [:error] [pid 26520:tid 26554] [client 4.190.196.169:19062] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTxTPEG_frlY5vNXu_A35wAAAEI"]
[Sat Dec 13 01:39:08.966538 2025] [:error] [pid 26607:tid 26631] [client 4.190.196.169:8075] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTxTPMb_b0tOEWTL2KnYKwAAANY"]
[Sat Dec 13 01:39:09.606200 2025] [:error] [pid 55760:tid 55775] [client 4.190.196.169:8157] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTxTPVObDQlftFDyGaxdoAAAAY0"]
[Sat Dec 13 01:39:09.972914 2025] [:error] [pid 26607:tid 26615] [client 4.190.196.169:18947] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTxTPcb_b0tOEWTL2KnYLAAAAMY"]
[Sat Dec 13 01:39:10.357318 2025] [:error] [pid 26520:tid 26558] [client 4.190.196.169:18992] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTxTPkG_frlY5vNXu_A36QAAAEY"]
[Sat Dec 13 01:39:10.713271 2025] [:error] [pid 27950:tid 27964] [client 4.190.196.169:18975] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTxTPoVLRvkrdsSc1F3gsAAAAUw"]
[Sat Dec 13 01:39:11.097410 2025] [:error] [pid 26607:tid 26625] [client 4.190.196.169:8093] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTxTP8b_b0tOEWTL2KnYLQAAANA"]
[Sat Dec 13 01:39:11.520032 2025] [:error] [pid 26520:tid 26559] [client 4.190.196.169:8080] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTxTP0G_frlY5vNXu_A36gAAAEc"]
[Sat Dec 13 01:39:11.799688 2025] [:error] [pid 60649:tid 60665] [client 4.190.196.169:8185] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTxTP1OcUGKU3sgfHP80YQAAAQ0"]
[Sat Dec 13 01:39:12.404873 2025] [:error] [pid 26521:tid 26591] [client 4.190.196.169:8130] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aTxTQJdhcAPU617AKTDfVgAAAIw"]
[Sat Dec 13 01:39:14.064141 2025] [:error] [pid 27950:tid 27970] [client 4.190.196.169:8073] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aTxTQoVLRvkrdsSc1F3gtAAAAVI"]
[Sat Dec 13 01:39:14.455398 2025] [:error] [pid 60649:tid 60662] [client 4.190.196.169:8149] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aTxTQlOcUGKU3sgfHP80YwAAAQo"]
[Sat Dec 13 01:39:14.852589 2025] [proxy_fcgi:error] [pid 60649:tid 60671] [client 4.190.196.169:8139] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 01:39:16.331883 2025] [:error] [pid 60649:tid 60658] [client 4.190.196.169:8139] [client 4.190.196.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.196.169, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTxTRFOcUGKU3sgfHP80ZgAAAQY"]
[Sat Dec 13 01:39:16.460284 2025] [proxy_fcgi:error] [pid 60649:tid 60654] [client 4.190.196.169:8139] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 01:39:17.174026 2025] [:error] [pid 60649:tid 60668] [client 4.190.196.169:8139] [client 4.190.196.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.196.169, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTxTRVOcUGKU3sgfHP80bAAAARA"]
[Sat Dec 13 01:39:17.422428 2025] [:error] [pid 60649:tid 60673] [client 4.190.196.169:8139] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aTxTRVOcUGKU3sgfHP80bgAAARU"]
[Sat Dec 13 01:39:17.826700 2025] [:error] [pid 26520:tid 26565] [client 4.190.196.169:8173] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTxTRUG_frlY5vNXu_A37AAAAE0"]
[Sat Dec 13 01:39:18.143234 2025] [:error] [pid 26607:tid 26629] [client 4.190.196.169:19051] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTxTRsb_b0tOEWTL2KnYMQAAANQ"]
[Sat Dec 13 01:39:18.487574 2025] [:error] [pid 27950:tid 27960] [client 4.190.196.169:8064] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTxTRoVLRvkrdsSc1F3gtwAAAUg"]
[Sat Dec 13 01:39:18.882759 2025] [:error] [pid 27950:tid 27976] [client 4.190.196.169:18949] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTxTRoVLRvkrdsSc1F3guAAAAVg"]
[Sat Dec 13 01:39:19.168455 2025] [:error] [pid 26607:tid 26622] [client 4.190.196.169:8177] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTxTR8b_b0tOEWTL2KnYMwAAAM0"]
[Sat Dec 13 01:39:19.505868 2025] [:error] [pid 26520:tid 26567] [client 4.190.196.169:8096] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTxTR0G_frlY5vNXu_A37QAAAE8"]
[Sat Dec 13 01:39:19.791547 2025] [:error] [pid 55760:tid 55762] [client 4.190.196.169:19053] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTxTR1ObDQlftFDyGaxdpQAAAYA"]
[Sat Dec 13 01:39:20.139172 2025] [:error] [pid 27950:tid 27956] [client 4.190.196.169:8169] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTxTSIVLRvkrdsSc1F3guQAAAUQ"]
[Sat Dec 13 01:39:20.468665 2025] [:error] [pid 26607:tid 26611] [client 4.190.196.169:18977] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTxTSMb_b0tOEWTL2KnYNAAAAMI"]
[Sat Dec 13 01:39:20.775650 2025] [:error] [pid 26520:tid 26570] [client 4.190.196.169:8082] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aTxTSEG_frlY5vNXu_A37wAAAFI"]
[Sat Dec 13 01:39:21.080530 2025] [:error] [pid 26520:tid 26574] [client 4.190.196.169:18991] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/style.php"] [unique_id "aTxTSUG_frlY5vNXu_A38AAAAFY"]
[Sat Dec 13 01:39:21.369048 2025] [:error] [pid 26521:tid 26603] [client 4.190.196.169:8179] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/style.php"] [unique_id "aTxTSZdhcAPU617AKTDfXAAAAJg"]
[Sat Dec 13 01:39:21.637804 2025] [:error] [pid 60649:tid 60661] [client 4.190.196.169:8038] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/style.php"] [unique_id "aTxTSVOcUGKU3sgfHP80bwAAAQk"]
[Sat Dec 13 01:39:21.943590 2025] [:error] [pid 27950:tid 27958] [client 4.190.196.169:8151] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js/style.php"] [unique_id "aTxTSYVLRvkrdsSc1F3gugAAAUY"]
[Sat Dec 13 01:39:22.210111 2025] [:error] [pid 26520:tid 26553] [client 4.190.196.169:8164] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTxTSkG_frlY5vNXu_A38gAAAEE"]
[Sat Dec 13 01:39:22.479932 2025] [:error] [pid 27950:tid 27971] [client 4.190.196.169:8146] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTxTSoVLRvkrdsSc1F3gvAAAAVM"]
[Sat Dec 13 01:39:22.773740 2025] [:error] [pid 26520:tid 26556] [client 4.190.196.169:18944] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTxTSkG_frlY5vNXu_A38wAAAEQ"]
[Sat Dec 13 01:39:23.062203 2025] [:error] [pid 26520:tid 26566] [client 4.190.196.169:8138] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTxTS0G_frlY5vNXu_A39AAAAE4"]
[Sat Dec 13 01:39:23.397684 2025] [:error] [pid 26520:tid 26562] [client 4.190.196.169:19017] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTxTS0G_frlY5vNXu_A39QAAAEo"]
[Sat Dec 13 01:39:23.649093 2025] [:error] [pid 26520:tid 26569] [client 4.190.196.169:8189] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTxTS0G_frlY5vNXu_A39gAAAFE"]
[Sat Dec 13 01:39:23.972229 2025] [:error] [pid 26520:tid 26557] [client 4.190.196.169:18994] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTxTS0G_frlY5vNXu_A39wAAAEU"]
[Sat Dec 13 01:39:24.256214 2025] [:error] [pid 26520:tid 26560] [client 4.190.196.169:18965] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aTxTTEG_frlY5vNXu_A3-AAAAEg"]
[Sat Dec 13 01:39:24.546533 2025] [:error] [pid 26520:tid 26558] [client 4.190.196.169:19033] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aTxTTEG_frlY5vNXu_A3-QAAAEY"]
[Sat Dec 13 01:39:24.814303 2025] [:error] [pid 26520:tid 26559] [client 4.190.196.169:8129] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aTxTTEG_frlY5vNXu_A3_AAAAEc"]
[Sat Dec 13 01:39:25.134253 2025] [:error] [pid 26520:tid 26555] [client 4.190.196.169:18998] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTxTTUG_frlY5vNXu_A3_QAAAEM"]
[Sat Dec 13 01:39:25.414793 2025] [:error] [pid 26520:tid 26561] [client 4.190.196.169:8148] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTxTTUG_frlY5vNXu_A3_gAAAEk"]
[Sat Dec 13 01:39:25.700981 2025] [:error] [pid 60649:tid 60660] [client 4.190.196.169:19026] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTxTTVOcUGKU3sgfHP80cgAAAQg"]
[Sat Dec 13 01:39:26.047740 2025] [:error] [pid 55760:tid 55763] [client 4.190.196.169:8153] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTxTTlObDQlftFDyGaxdqAAAAYE"]
[Sat Dec 13 01:39:26.373692 2025] [:error] [pid 60649:tid 60652] [client 4.190.196.169:18986] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTxTTlOcUGKU3sgfHP80dAAAAQA"]
[Sat Dec 13 01:39:26.699511 2025] [:error] [pid 60649:tid 60662] [client 4.190.196.169:8111] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aTxTTlOcUGKU3sgfHP80dQAAAQo"]
[Sat Dec 13 01:39:27.030620 2025] [:error] [pid 60649:tid 60671] [client 4.190.196.169:18948] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aTxTT1OcUGKU3sgfHP80eQAAARM"]
[Sat Dec 13 01:39:27.470344 2025] [:error] [pid 60649:tid 60658] [client 4.190.196.169:18990] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aTxTT1OcUGKU3sgfHP80egAAAQY"]
[Sat Dec 13 01:39:27.810347 2025] [:error] [pid 26607:tid 26621] [client 4.190.196.169:8098] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aTxTT8b_b0tOEWTL2KnYNwAAAMw"]
[Sat Dec 13 01:39:28.107848 2025] [:error] [pid 60649:tid 60666] [client 4.190.196.169:18979] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aTxTUFOcUGKU3sgfHP80ewAAAQ4"]
[Sat Dec 13 01:39:28.364478 2025] [:error] [pid 26521:tid 26581] [client 4.190.196.169:8072] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aTxTUJdhcAPU617AKTDfYwAAAII"]
[Sat Dec 13 01:39:28.701072 2025] [:error] [pid 55760:tid 55771] [client 4.190.196.169:8125] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aTxTUFObDQlftFDyGaxdqQAAAYk"]
[Sat Dec 13 01:39:29.143652 2025] [:error] [pid 55760:tid 55770] [client 4.190.196.169:8092] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aTxTUVObDQlftFDyGaxdqgAAAYg"]
[Sat Dec 13 01:39:29.388266 2025] [:error] [pid 26521:tid 26589] [client 4.190.196.169:8168] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTxTUZdhcAPU617AKTDfZgAAAIo"]
[Sat Dec 13 01:39:29.668630 2025] [:error] [pid 60649:tid 60659] [client 4.190.196.169:8160] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTxTUVOcUGKU3sgfHP80fQAAAQc"]
[Sat Dec 13 01:39:29.960301 2025] [:error] [pid 60649:tid 60664] [client 4.190.196.169:18984] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTxTUVOcUGKU3sgfHP80fgAAAQw"]
[Sat Dec 13 01:39:30.256460 2025] [:error] [pid 55760:tid 55768] [client 4.190.196.169:8095] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTxTUlObDQlftFDyGaxdrAAAAYY"]
[Sat Dec 13 01:39:30.771464 2025] [:error] [pid 26521:tid 26602] [client 4.190.196.169:18982] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTxTUpdhcAPU617AKTDfbAAAAJc"]
[Sat Dec 13 01:39:31.059188 2025] [:error] [pid 26520:tid 26553] [client 4.190.196.169:19028] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTxTU0G_frlY5vNXu_A4AQAAAEE"]
[Sat Dec 13 01:39:31.377476 2025] [:error] [pid 26521:tid 26590] [client 4.190.196.169:8081] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTxTU5dhcAPU617AKTDfbQAAAIs"]
[Sat Dec 13 01:39:31.667597 2025] [:error] [pid 26519:tid 26529] [client 4.190.196.169:8132] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTxTU88TRgSGOeWqEhcmEwAAAAY"]
[Sat Dec 13 01:39:32.016314 2025] [:error] [pid 26520:tid 26557] [client 4.190.196.169:8143] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTxTVEG_frlY5vNXu_A4BAAAAEU"]
[Sat Dec 13 01:39:32.361396 2025] [:error] [pid 26520:tid 26571] [client 4.190.196.169:8127] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTxTVEG_frlY5vNXu_A4BQAAAFM"]
[Sat Dec 13 01:39:32.727611 2025] [:error] [pid 26521:tid 26591] [client 4.190.196.169:8017] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTxTVJdhcAPU617AKTDfbwAAAIw"]
[Sat Dec 13 01:39:32.992868 2025] [:error] [pid 26521:tid 26588] [client 4.190.196.169:19035] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTxTVJdhcAPU617AKTDfcAAAAIk"]
[Sat Dec 13 01:39:33.261237 2025] [:error] [pid 26519:tid 26543] [client 4.190.196.169:8088] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTxTVc8TRgSGOeWqEhcmFAAAABQ"]
[Sat Dec 13 01:39:33.697819 2025] [:error] [pid 26520:tid 26555] [client 4.190.196.169:8079] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTxTVUG_frlY5vNXu_A4CQAAAEM"]
[Sat Dec 13 01:39:33.960776 2025] [:error] [pid 26520:tid 26561] [client 4.190.196.169:8156] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTxTVUG_frlY5vNXu_A4CgAAAEk"]
[Sat Dec 13 01:39:34.217463 2025] [:error] [pid 26521:tid 26593] [client 4.190.196.169:8011] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTxTVpdhcAPU617AKTDfcQAAAI4"]
[Sat Dec 13 01:39:34.546306 2025] [:error] [pid 26521:tid 26587] [client 4.190.196.169:8152] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTxTVpdhcAPU617AKTDfcgAAAIg"]
[Sat Dec 13 01:39:34.792978 2025] [:error] [pid 26520:tid 26552] [client 4.190.196.169:8181] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTxTVkG_frlY5vNXu_A4CwAAAEA"]
[Sat Dec 13 01:39:35.039543 2025] [:error] [pid 26520:tid 26567] [client 4.190.196.169:8069] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTxTV0G_frlY5vNXu_A4DQAAAE8"]
[Sat Dec 13 01:39:35.389879 2025] [:error] [pid 26519:tid 26527] [client 4.190.196.169:8008] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTxTV88TRgSGOeWqEhcmGQAAAAQ"]
[Sat Dec 13 01:39:35.658462 2025] [:error] [pid 60649:tid 60670] [client 4.190.196.169:8170] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTxTV1OcUGKU3sgfHP80fwAAARI"]
[Sat Dec 13 01:39:35.925407 2025] [:error] [pid 55760:tid 55775] [client 4.190.196.169:8115] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTxTV1ObDQlftFDyGaxdrwAAAY0"]
[Sat Dec 13 01:39:36.190116 2025] [:error] [pid 55760:tid 55764] [client 4.190.196.169:8101] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTxTWFObDQlftFDyGaxdsAAAAYI"]
[Sat Dec 13 01:39:36.458704 2025] [:error] [pid 26520:tid 26573] [client 4.190.196.169:18995] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTxTWEG_frlY5vNXu_A4DgAAAFU"]
[Sat Dec 13 01:39:36.710448 2025] [:error] [pid 60649:tid 60663] [client 4.190.196.169:8004] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTxTWFOcUGKU3sgfHP80hAAAAQs"]
[Sat Dec 13 01:39:36.960390 2025] [:error] [pid 60649:tid 60671] [client 4.190.196.169:8124] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTxTWFOcUGKU3sgfHP80hgAAARM"]
[Sat Dec 13 01:39:37.280107 2025] [:error] [pid 26520:tid 26560] [client 4.190.196.169:8188] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTxTWUG_frlY5vNXu_A4FgAAAEg"]
[Sat Dec 13 01:39:37.694401 2025] [:error] [pid 26520:tid 26573] [client 4.190.196.169:8172] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTxTWUG_frlY5vNXu_A4HQAAAFU"]
[Sat Dec 13 01:39:38.078211 2025] [:error] [pid 27950:tid 27975] [client 4.190.196.169:18988] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/x.php"] [unique_id "aTxTWoVLRvkrdsSc1F3gyQAAAVc"]
[Sat Dec 13 01:39:38.442303 2025] [:error] [pid 26521:tid 26583] [client 4.190.196.169:8112] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/x.php"] [unique_id "aTxTWpdhcAPU617AKTDfegAAAIQ"]
[Sat Dec 13 01:39:38.792453 2025] [:error] [pid 27950:tid 27973] [client 4.190.196.169:8163] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/x.php"] [unique_id "aTxTWoVLRvkrdsSc1F3gygAAAVU"]
[Sat Dec 13 01:39:39.074051 2025] [:error] [pid 26607:tid 26630] [client 4.190.196.169:19027] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/x.php"] [unique_id "aTxTW8b_b0tOEWTL2KnYOAAAANU"]
[Sat Dec 13 01:39:39.386431 2025] [:error] [pid 55760:tid 55778] [client 4.190.196.169:8083] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTxTW1ObDQlftFDyGaxdswAAAZA"]
[Sat Dec 13 01:39:39.655099 2025] [:error] [pid 27950:tid 27970] [client 4.190.196.169:18981] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTxTW4VLRvkrdsSc1F3gywAAAVI"]
[Sat Dec 13 01:39:39.912799 2025] [:error] [pid 55760:tid 55772] [client 4.190.196.169:8051] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTxTW1ObDQlftFDyGaxdtgAAAYo"]
[Sat Dec 13 01:39:40.229182 2025] [:error] [pid 60649:tid 60653] [client 4.190.196.169:19005] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTxTXFOcUGKU3sgfHP80kgAAAQE"]
[Sat Dec 13 01:39:40.498075 2025] [:error] [pid 26519:tid 26534] [client 4.190.196.169:8086] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTxTXM8TRgSGOeWqEhcmHAAAAAs"]
[Sat Dec 13 01:39:40.771595 2025] [:error] [pid 26607:tid 26627] [client 4.190.196.169:19024] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aTxTXMb_b0tOEWTL2KnYOgAAANI"]
[Sat Dec 13 01:39:41.078762 2025] [:error] [pid 26607:tid 26615] [client 4.190.196.169:8166] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTxTXcb_b0tOEWTL2KnYPAAAAMY"]
[Sat Dec 13 01:39:41.374194 2025] [:error] [pid 55760:tid 55783] [client 4.190.196.169:8121] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTxTXVObDQlftFDyGaxdtwAAAZU"]
[Sat Dec 13 01:39:41.621564 2025] [:error] [pid 26607:tid 26625] [client 4.190.196.169:8141] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTxTXcb_b0tOEWTL2KnYPQAAANA"]
[Sat Dec 13 01:39:41.991735 2025] [:error] [pid 27950:tid 27956] [client 4.190.196.169:8174] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTxTXYVLRvkrdsSc1F3gzgAAAUQ"]
[Sat Dec 13 01:39:42.296709 2025] [:error] [pid 55760:tid 55771] [client 4.190.196.169:8085] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/cong.php"] [unique_id "aTxTXlObDQlftFDyGaxduAAAAYk"]
[Sat Dec 13 01:39:42.607419 2025] [:error] [pid 26520:tid 26570] [client 4.190.196.169:8068] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/cong.php"] [unique_id "aTxTXkG_frlY5vNXu_A4QAAAAFI"]
[Sat Dec 13 01:39:42.890663 2025] [:error] [pid 26521:tid 26600] [client 4.190.196.169:8025] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/cong.php"] [unique_id "aTxTXpdhcAPU617AKTDffwAAAJU"]
[Sat Dec 13 01:39:43.186927 2025] [:error] [pid 26521:tid 26589] [client 4.190.196.169:8002] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/cong.php"] [unique_id "aTxTX5dhcAPU617AKTDfgQAAAIo"]
[Sat Dec 13 01:39:43.465272 2025] [:error] [pid 26521:tid 26595] [client 4.190.196.169:8019] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "aTxTX5dhcAPU617AKTDfggAAAJA"]
[Sat Dec 13 01:39:43.779790 2025] [:error] [pid 60649:tid 60671] [client 4.190.196.169:8184] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTxTX1OcUGKU3sgfHP80lQAAARM"]
[Sat Dec 13 01:39:44.106848 2025] [:error] [pid 27950:tid 27974] [client 4.190.196.169:8167] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTxTYIVLRvkrdsSc1F3g0gAAAVY"]
[Sat Dec 13 01:39:44.373218 2025] [:error] [pid 27950:tid 27953] [client 4.190.196.169:7620] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTxTYIVLRvkrdsSc1F3g0wAAAUE"]
[Sat Dec 13 01:39:44.671307 2025] [:error] [pid 27950:tid 27967] [client 4.190.196.169:8136] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTxTYIVLRvkrdsSc1F3g1gAAAU8"]
[Sat Dec 13 01:39:45.161005 2025] [:error] [pid 27950:tid 27957] [client 4.190.196.169:8100] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTxTYYVLRvkrdsSc1F3g1wAAAUU"]
[Sat Dec 13 01:39:45.444714 2025] [:error] [pid 55760:tid 55768] [client 4.190.196.169:8137] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTxTYVObDQlftFDyGaxdugAAAYY"]
[Sat Dec 13 01:39:45.784641 2025] [:error] [pid 60649:tid 60675] [client 4.190.196.169:8026] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTxTYVOcUGKU3sgfHP80lwAAARc"]
[Sat Dec 13 01:39:46.084683 2025] [:error] [pid 26519:tid 26545] [client 4.190.196.169:8000] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTxTYs8TRgSGOeWqEhcmHgAAABY"]
[Sat Dec 13 01:39:46.368974 2025] [:error] [pid 60649:tid 60664] [client 4.190.196.169:8161] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aTxTYlOcUGKU3sgfHP80mQAAAQw"]
[Sat Dec 13 01:39:46.702898 2025] [:error] [pid 60649:tid 60657] [client 4.190.196.169:8159] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aTxTYlOcUGKU3sgfHP80mwAAAQU"]
[Sat Dec 13 01:39:47.018977 2025] [:error] [pid 26521:tid 26588] [client 4.190.196.169:8103] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aTxTY5dhcAPU617AKTDfhAAAAIk"]
[Sat Dec 13 01:39:47.489387 2025] [:error] [pid 27950:tid 27955] [client 4.190.196.169:8180] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aTxTY4VLRvkrdsSc1F3g3gAAAUM"]
[Sat Dec 13 01:39:47.772590 2025] [:error] [pid 26521:tid 26587] [client 4.190.196.169:8113] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTxTY5dhcAPU617AKTDfiAAAAIg"]
[Sat Dec 13 01:39:48.058722 2025] [:error] [pid 27950:tid 27960] [client 4.190.196.169:8067] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTxTZIVLRvkrdsSc1F3g4AAAAUg"]
[Sat Dec 13 01:39:48.417096 2025] [:error] [pid 27950:tid 27956] [client 4.190.196.169:8091] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTxTZIVLRvkrdsSc1F3g4QAAAUQ"]
[Sat Dec 13 01:39:48.677023 2025] [:error] [pid 27950:tid 27958] [client 4.190.196.169:7623] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTxTZIVLRvkrdsSc1F3g4gAAAUY"]
[Sat Dec 13 01:39:48.923961 2025] [:error] [pid 26520:tid 26565] [client 4.190.196.169:8043] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aTxTZEG_frlY5vNXu_A4SQAAAE0"]
[Sat Dec 13 01:39:49.191476 2025] [:error] [pid 26521:tid 26598] [client 4.190.196.169:8001] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aTxTZZdhcAPU617AKTDfjwAAAJM"]
[Sat Dec 13 01:39:49.474486 2025] [:error] [pid 26521:tid 26603] [client 4.190.196.169:19015] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aTxTZZdhcAPU617AKTDfkQAAAJg"]
[Sat Dec 13 01:39:49.760740 2025] [:error] [pid 26520:tid 26570] [client 4.190.196.169:7646] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aTxTZUG_frlY5vNXu_A4SwAAAFI"]
[Sat Dec 13 01:39:50.016146 2025] [:error] [pid 26520:tid 26562] [client 4.190.196.169:8070] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aTxTZkG_frlY5vNXu_A4TAAAAEo"]
[Sat Dec 13 01:39:50.278326 2025] [:error] [pid 26520:tid 26575] [client 4.190.196.169:8089] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aTxTZkG_frlY5vNXu_A4TwAAAFc"]
[Sat Dec 13 01:39:50.564792 2025] [:error] [pid 26607:tid 26615] [client 4.190.196.169:19037] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTxTZsb_b0tOEWTL2KnYUgAAAMY"]
[Sat Dec 13 01:39:50.817303 2025] [:error] [pid 26520:tid 26572] [client 4.190.196.169:8037] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTxTZkG_frlY5vNXu_A4UAAAAFQ"]
[Sat Dec 13 01:39:51.110162 2025] [:error] [pid 26607:tid 26625] [client 4.190.196.169:7624] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTxTZ8b_b0tOEWTL2KnYUwAAANA"]
[Sat Dec 13 01:39:51.428462 2025] [:error] [pid 26607:tid 26620] [client 4.190.196.169:8018] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTxTZ8b_b0tOEWTL2KnYVAAAAMs"]
[Sat Dec 13 01:39:51.704780 2025] [:error] [pid 55760:tid 55773] [client 4.190.196.169:8145] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aTxTZ1ObDQlftFDyGaxduwAAAYs"]
[Sat Dec 13 01:39:51.995098 2025] [:error] [pid 55760:tid 55775] [client 4.190.196.169:8186] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aTxTZ1ObDQlftFDyGaxdvAAAAY0"]
[Sat Dec 13 01:39:52.277420 2025] [:error] [pid 26521:tid 26583] [client 4.190.196.169:8007] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aTxTaJdhcAPU617AKTDflgAAAIQ"]
[Sat Dec 13 01:39:52.568463 2025] [:error] [pid 26521:tid 26591] [client 4.190.196.169:8023] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aTxTaJdhcAPU617AKTDflwAAAIw"]
[Sat Dec 13 01:39:52.818199 2025] [:error] [pid 55760:tid 55764] [client 4.190.196.169:8119] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aTxTaFObDQlftFDyGaxdvgAAAYI"]
[Sat Dec 13 01:39:53.112338 2025] [:error] [pid 26520:tid 26561] [client 4.190.196.169:8042] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aTxTaUG_frlY5vNXu_A4UwAAAEk"]
[Sat Dec 13 01:39:53.374133 2025] [:error] [pid 26521:tid 26585] [client 4.190.196.169:8030] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/item.php"] [unique_id "aTxTaZdhcAPU617AKTDfmAAAAIY"]
[Sat Dec 13 01:39:53.639390 2025] [:error] [pid 26521:tid 26579] [client 4.190.196.169:8027] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTxTaZdhcAPU617AKTDfmQAAAIA"]
[Sat Dec 13 01:39:53.963536 2025] [:error] [pid 26607:tid 26629] [client 4.190.196.169:8046] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTxTacb_b0tOEWTL2KnYVQAAANQ"]
[Sat Dec 13 01:39:54.256367 2025] [:error] [pid 26520:tid 26568] [client 4.190.196.169:8162] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTxTakG_frlY5vNXu_A4VQAAAFA"]
[Sat Dec 13 01:39:54.527224 2025] [:error] [pid 26520:tid 26576] [client 4.190.196.169:8058] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTxTakG_frlY5vNXu_A4VwAAAFg"]
[Sat Dec 13 01:39:54.783772 2025] [:error] [pid 26520:tid 26563] [client 4.190.196.169:8084] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTxTakG_frlY5vNXu_A4WAAAAEs"]
[Sat Dec 13 01:39:55.106592 2025] [:error] [pid 26520:tid 26573] [client 4.190.196.169:8012] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTxTa0G_frlY5vNXu_A4WQAAAFU"]
[Sat Dec 13 01:39:55.429865 2025] [:error] [pid 26521:tid 26586] [client 4.190.196.169:7626] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTxTa5dhcAPU617AKTDfnAAAAIc"]
[Sat Dec 13 01:39:55.776800 2025] [:error] [pid 26520:tid 26570] [client 4.190.196.169:8158] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTxTa0G_frlY5vNXu_A4XQAAAFI"]
[Sat Dec 13 01:39:56.028877 2025] [:error] [pid 26519:tid 26525] [client 4.190.196.169:8187] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTxTbM8TRgSGOeWqEhcmLgAAAAI"]
[Sat Dec 13 01:39:56.313003 2025] [:error] [pid 60649:tid 60653] [client 4.190.196.169:7631] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTxTbFOcUGKU3sgfHP80nwAAAQE"]
[Sat Dec 13 01:39:56.574916 2025] [:error] [pid 60649:tid 60660] [client 4.190.196.169:8175] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTxTbFOcUGKU3sgfHP80oAAAAQg"]
[Sat Dec 13 01:39:56.886440 2025] [:error] [pid 60649:tid 60672] [client 4.190.196.169:8065] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTxTbFOcUGKU3sgfHP80oQAAARQ"]
[Sat Dec 13 01:39:57.199979 2025] [:error] [pid 60649:tid 60662] [client 4.190.196.169:8074] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aTxTbVOcUGKU3sgfHP80owAAAQo"]
[Sat Dec 13 01:39:57.546524 2025] [:error] [pid 60649:tid 60675] [client 4.190.196.169:8034] [client 4.190.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aTxTbVOcUGKU3sgfHP80pQAAARc"]
[Sat Dec 13 01:39:57.845048 2025] [:error] [pid 26520:tid 26562] [client 4.190.196.169:8118] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTxTbUG_frlY5vNXu_A4XwAAAEo"]
[Sat Dec 13 01:39:58.122528 2025] [:error] [pid 60649:tid 60676] [client 4.190.196.169:8102] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTxTblOcUGKU3sgfHP80qwAAARg"]
[Sat Dec 13 01:39:58.390638 2025] [:error] [pid 26520:tid 26572] [client 4.190.196.169:8105] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTxTbkG_frlY5vNXu_A4YQAAAFQ"]
[Sat Dec 13 01:39:58.645794 2025] [:error] [pid 26520:tid 26559] [client 4.190.196.169:8076] [client 4.190.196.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aTxTbkG_frlY5vNXu_A4YwAAAEc"]
[Sat Dec 13 03:24:27.686971 2025] [autoindex:error] [pid 26519:tid 26528] [client 40.160.26.78:15988] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://com.lullar.com/
[Sat Dec 13 03:29:04.464974 2025] [autoindex:error] [pid 26519:tid 26534] [client 206.217.6.128:36744] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.ebook-search-queen.com/
[Sat Dec 13 03:46:48.007862 2025] [autoindex:error] [pid 23515:tid 23538] [client 20.27.217.49:2645] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 03:46:48.018406 2025] [proxy_fcgi:error] [pid 23324:tid 23455] [client 20.27.217.49:2633] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:46:48.199895 2025] [proxy_fcgi:error] [pid 23324:tid 23451] [client 20.27.217.49:2633] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:46:53.655978 2025] [proxy_fcgi:error] [pid 23515:tid 23530] [client 20.27.217.49:2627] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:46:53.835124 2025] [proxy_fcgi:error] [pid 23515:tid 23538] [client 20.27.217.49:2627] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:58:27.527098 2025] [autoindex:error] [pid 60545:tid 60619] [client 4.194.0.41:1146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 03:58:27.650640 2025] [proxy_fcgi:error] [pid 60545:tid 60628] [client 4.194.0.41:1099] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:58:27.793643 2025] [proxy_fcgi:error] [pid 60545:tid 60624] [client 4.194.0.41:1099] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:58:32.720979 2025] [proxy_fcgi:error] [pid 60636:tid 60639] [client 4.194.0.41:1106] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 03:58:32.834997 2025] [proxy_fcgi:error] [pid 60636:tid 60659] [client 4.194.0.41:1106] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 04:01:25.326059 2025] [:error] [pid 60636:tid 60654] [client 45.128.199.126:24459] [client 45.128.199.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.126, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aTx0lQJ8lx44YGrK5aIAMwAAAM8"]
[Sat Dec 13 04:01:25.339586 2025] [proxy_fcgi:error] [pid 60636:tid 60654] [client 45.128.199.126:24459] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 06:03:06.547964 2025] [:error] [pid 43836:tid 43862] [client 85.203.23.209:49409] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aTyRGmAEOBirsxb11naHVwAAANg"]
[Sat Dec 13 06:03:06.908454 2025] [:error] [pid 43836:tid 43840] [client 85.203.23.192:40891] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTyRGmAEOBirsxb11naHWAAAAMI"]
[Sat Dec 13 06:03:17.273296 2025] [:error] [pid 43836:tid 43847] [client 85.203.23.215:40999] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aTyRJWAEOBirsxb11naHYQAAAMk"]
[Sat Dec 13 06:04:02.639944 2025] [:error] [pid 43748:tid 43781] [client 85.203.23.219:24595] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aTyRUqrTT0VzE3gYjcA4GQAAAEI"]
[Sat Dec 13 06:04:03.000828 2025] [:error] [pid 43747:tid 43753] [client 85.203.23.187:37869] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aTyRUpYw3twBd_JQEHimDAAAAAI"]
[Sat Dec 13 06:04:13.366796 2025] [:error] [pid 43749:tid 43823] [client 85.203.23.204:61025] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/updates.php"] [unique_id "aTyRXXOk7VNylTjPi3yOyQAAAJE"]
[Sat Dec 13 06:04:38.731291 2025] [:error] [pid 43836:tid 43844] [client 85.203.23.172:23665] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aTyRdmAEOBirsxb11naHrQAAAMY"]
[Sat Dec 13 06:04:39.092691 2025] [:error] [pid 43836:tid 43840] [client 85.203.23.183:24667] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aTyRd2AEOBirsxb11naHrwAAAMI"]
[Sat Dec 13 06:04:40.907785 2025] [:error] [pid 43749:tid 43811] [client 85.203.23.209:22075] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aTyReHOk7VNylTjPi3yO4QAAAIU"]
[Sat Dec 13 06:04:41.269930 2025] [:error] [pid 43836:tid 43843] [client 85.203.23.204:28415] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTyReWAEOBirsxb11naHtQAAAMU"]
[Sat Dec 13 06:05:11.655093 2025] [:error] [pid 43748:tid 43799] [client 85.203.23.201:57599] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/class.api.php"] [unique_id "aTyRl6rTT0VzE3gYjcA4PgAAAFQ"]
[Sat Dec 13 06:05:12.026259 2025] [:error] [pid 43748:tid 43782] [client 85.203.23.204:21591] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aTyRmKrTT0VzE3gYjcA4PwAAAEM"]
[Sat Dec 13 06:05:22.393718 2025] [:error] [pid 43836:tid 43847] [client 85.203.23.192:61357] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aTyRomAEOBirsxb11naH8gAAAMk"]
[Sat Dec 13 06:05:27.761787 2025] [:error] [pid 43748:tid 43785] [client 85.203.23.187:56249] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aTyRp6rTT0VzE3gYjcA4QwAAAEY"]
[Sat Dec 13 06:05:48.126464 2025] [:error] [pid 43748:tid 43804] [client 85.203.23.201:54019] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aTyRvKrTT0VzE3gYjcA4UwAAAFg"]
[Sat Dec 13 06:05:58.489748 2025] [:error] [pid 43749:tid 43815] [client 85.203.23.171:31895] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aTyRxnOk7VNylTjPi3yPDQAAAIk"]
[Sat Dec 13 06:06:03.850905 2025] [:error] [pid 43836:tid 43860] [client 85.203.23.171:35763] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aTyRy2AEOBirsxb11naIHwAAANY"]
[Sat Dec 13 06:06:04.210480 2025] [:error] [pid 43836:tid 43852] [client 85.203.23.192:47853] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-config-sample.php"] [unique_id "aTyRzGAEOBirsxb11naIIAAAAM4"]
[Sat Dec 13 06:06:04.575855 2025] [:error] [pid 43836:tid 43846] [client 85.203.23.219:40889] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTyRzGAEOBirsxb11naIIQAAAMg"]
[Sat Dec 13 06:06:04.940272 2025] [:error] [pid 43749:tid 43824] [client 85.203.23.172:49809] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aTyRzHOk7VNylTjPi3yPFAAAAJI"]
[Sat Dec 13 06:06:10.301388 2025] [:error] [pid 43749:tid 43820] [client 85.203.23.183:38321] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aTyR0nOk7VNylTjPi3yPGAAAAI4"]
[Sat Dec 13 06:06:10.664068 2025] [:error] [pid 43749:tid 43829] [client 85.203.23.183:34451] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aTyR0nOk7VNylTjPi3yPGwAAAJc"]
[Sat Dec 13 06:06:26.060325 2025] [:error] [pid 43836:tid 43842] [client 85.203.23.166:24339] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/function/function.php"] [unique_id "aTyR4mAEOBirsxb11naIMQAAAMQ"]
[Sat Dec 13 06:06:26.421358 2025] [:error] [pid 43749:tid 43821] [client 85.203.23.219:59361] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aTyR4nOk7VNylTjPi3yPLQAAAI8"]
[Sat Dec 13 06:06:31.783195 2025] [:error] [pid 43747:tid 43767] [client 85.203.23.219:64567] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/network_xo.php"] [unique_id "aTyR55Yw3twBd_JQEHimVgAAABA"]
[Sat Dec 13 06:06:52.144815 2025] [:error] [pid 43748:tid 43800] [client 85.203.23.172:63859] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aTyR_KrTT0VzE3gYjcA4dAAAAFU"]
[Sat Dec 13 06:07:07.507874 2025] [:error] [pid 43748:tid 43800] [client 85.203.23.214:32857] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aTySC6rTT0VzE3gYjcA4iAAAAFU"]
[Sat Dec 13 06:07:27.879351 2025] [:error] [pid 43836:tid 43844] [client 85.203.23.166:26417] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aTySH2AEOBirsxb11naIdAAAAMY"]
[Sat Dec 13 06:07:33.241481 2025] [:error] [pid 43836:tid 43854] [client 85.203.23.184:36525] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aTySJWAEOBirsxb11naIfgAAANA"]
[Sat Dec 13 06:07:48.594507 2025] [:error] [pid 43836:tid 43852] [client 85.203.23.172:59377] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aTySNGAEOBirsxb11naIogAAAM4"]
[Sat Dec 13 06:07:53.955474 2025] [:error] [pid 43749:tid 43823] [client 85.203.23.166:58541] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aTySOXOk7VNylTjPi3yPnQAAAJE"]
[Sat Dec 13 06:08:24.319467 2025] [:error] [pid 43836:tid 43857] [client 85.203.23.169:37521] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aTySWGAEOBirsxb11naIxgAAANM"]
[Sat Dec 13 06:08:29.682348 2025] [:error] [pid 43836:tid 43847] [client 85.203.23.169:44059] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aTySXWAEOBirsxb11naIzQAAAMk"]
[Sat Dec 13 06:08:40.043690 2025] [:error] [pid 43747:tid 43751] [client 85.203.23.182:21391] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aTySaJYw3twBd_JQEHim-wAAAAA"]
[Sat Dec 13 06:08:40.414158 2025] [:error] [pid 43836:tid 43855] [client 85.203.23.184:29401] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTySaGAEOBirsxb11naI5wAAANE"]
[Sat Dec 13 06:08:50.775080 2025] [:error] [pid 43749:tid 43813] [client 85.203.23.214:40723] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aTyScnOk7VNylTjPi3yQEgAAAIc"]
[Sat Dec 13 06:08:56.136291 2025] [:error] [pid 43749:tid 43808] [client 85.203.23.192:31359] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aTySeHOk7VNylTjPi3yQHQAAAII"]
[Sat Dec 13 06:08:56.498027 2025] [:error] [pid 43747:tid 43770] [client 85.203.23.169:58815] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/worksec.php"] [unique_id "aTySeJYw3twBd_JQEHinBwAAABM"]
[Sat Dec 13 06:08:56.861851 2025] [:error] [pid 43749:tid 43828] [client 85.203.23.204:52261] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aTySeHOk7VNylTjPi3yQHgAAAJY"]
[Sat Dec 13 06:09:27.226605 2025] [:error] [pid 43748:tid 43790] [client 85.203.23.177:55679] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aTySl6rTT0VzE3gYjcA5gQAAAEs"]
[Sat Dec 13 06:09:52.588905 2025] [:error] [pid 43748:tid 43786] [client 85.203.23.201:44223] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aTySsKrTT0VzE3gYjcA5jwAAAEc"]
[Sat Dec 13 06:09:57.949084 2025] [:error] [pid 43836:tid 43848] [client 85.203.23.220:21799] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aTyStWAEOBirsxb11naJkQAAAMo"]
[Sat Dec 13 06:09:58.309811 2025] [:error] [pid 43836:tid 43855] [client 85.203.23.192:58827] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aTyStmAEOBirsxb11naJkgAAANE"]
[Sat Dec 13 06:09:58.669796 2025] [:error] [pid 43836:tid 43850] [client 85.203.23.220:21347] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aTyStmAEOBirsxb11naJlAAAAMw"]
[Sat Dec 13 06:10:09.033780 2025] [:error] [pid 43747:tid 43769] [client 85.203.23.182:38253] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aTySwZYw3twBd_JQEHinPwAAABI"]
[Sat Dec 13 06:10:19.396269 2025] [:error] [pid 43748:tid 43787] [client 85.203.23.183:51681] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aTySy6rTT0VzE3gYjcA5pQAAAEg"]
[Sat Dec 13 06:11:04.763784 2025] [:error] [pid 43836:tid 43838] [client 85.203.23.182:44029] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aTyS-GAEOBirsxb11naJ5QAAAMA"]
[Sat Dec 13 06:11:06.608380 2025] [:error] [pid 43836:tid 43842] [client 85.203.23.166:60435] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aTyS-mAEOBirsxb11naJ6gAAAMQ"]
[Sat Dec 13 06:11:21.970118 2025] [:error] [pid 43836:tid 43843] [client 85.203.23.184:52867] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aTyTCWAEOBirsxb11naKCAAAAMU"]
[Sat Dec 13 06:11:22.329300 2025] [:error] [pid 43836:tid 43842] [client 85.203.23.183:37701] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aTyTCmAEOBirsxb11naKCQAAAMQ"]
[Sat Dec 13 06:11:52.691609 2025] [:error] [pid 43748:tid 43790] [client 85.203.23.215:31735] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aTyTKKrTT0VzE3gYjcA59wAAAEs"]
[Sat Dec 13 06:12:03.055057 2025] [:error] [pid 43836:tid 43839] [client 85.203.23.204:44875] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aTyTM2AEOBirsxb11naKKgAAAME"]
[Sat Dec 13 06:12:03.417687 2025] [:error] [pid 43749:tid 43813] [client 85.203.23.169:21005] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aTyTM3Ok7VNylTjPi3yQ-AAAAIc"]
[Sat Dec 13 06:12:18.781732 2025] [:error] [pid 43747:tid 43758] [client 85.203.23.192:39385] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aTyTQpYw3twBd_JQEHinpgAAAAc"]
[Sat Dec 13 06:12:39.142824 2025] [:error] [pid 43747:tid 43756] [client 85.203.23.220:43249] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aTyTV5Yw3twBd_JQEHinvQAAAAU"]
[Sat Dec 13 06:12:39.504522 2025] [:error] [pid 43749:tid 43813] [client 85.203.23.209:62977] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aTyTV3Ok7VNylTjPi3yREwAAAIc"]
[Sat Dec 13 06:12:39.865458 2025] [:error] [pid 43749:tid 43819] [client 85.203.23.215:55441] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aTyTV3Ok7VNylTjPi3yRFAAAAI0"]
[Sat Dec 13 06:12:40.233458 2025] [:error] [pid 43836:tid 43855] [client 85.203.23.183:50523] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content.php"] [unique_id "aTyTWGAEOBirsxb11naKbQAAANE"]
[Sat Dec 13 06:12:50.597965 2025] [:error] [pid 43836:tid 43858] [client 85.203.23.215:53109] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/"] [unique_id "aTyTYmAEOBirsxb11naKegAAANQ"]
[Sat Dec 13 06:12:55.963641 2025] [:error] [pid 43836:tid 43844] [client 85.203.23.220:41811] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTyTZ2AEOBirsxb11naKfQAAAMY"]
[Sat Dec 13 06:13:16.324539 2025] [:error] [pid 43836:tid 43839] [client 85.203.23.204:49041] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/m.php"] [unique_id "aTyTfGAEOBirsxb11naKjwAAAME"]
[Sat Dec 13 06:13:26.688761 2025] [:error] [pid 43836:tid 43857] [client 85.203.23.204:49507] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/et-cache/taxonomy/project_category/21/about.php"] [unique_id "aTyThmAEOBirsxb11naKowAAANM"]
[Sat Dec 13 06:13:42.053344 2025] [:error] [pid 43748:tid 43779] [client 85.203.23.214:57381] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aTyTlqrTT0VzE3gYjcA6ZAAAAEA"]
[Sat Dec 13 06:13:42.414941 2025] [:error] [pid 43749:tid 43829] [client 85.203.23.220:29341] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aTyTlnOk7VNylTjPi3yROwAAAJc"]
[Sat Dec 13 06:14:12.779210 2025] [:error] [pid 43748:tid 43796] [client 85.203.23.209:61697] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aTyTtKrTT0VzE3gYjcA6oAAAAFE"]
[Sat Dec 13 06:14:13.142153 2025] [:error] [pid 43748:tid 43798] [client 85.203.23.220:24383] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/1.php"] [unique_id "aTyTtarTT0VzE3gYjcA6oQAAAFM"]
[Sat Dec 13 06:14:13.513564 2025] [:error] [pid 43748:tid 43788] [client 85.203.23.166:63447] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aTyTtarTT0VzE3gYjcA6ogAAAEk"]
[Sat Dec 13 06:14:23.876634 2025] [:error] [pid 43836:tid 43848] [client 85.203.23.214:38279] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aTyTv2AEOBirsxb11naK6AAAAMo"]
[Sat Dec 13 06:14:34.240198 2025] [:error] [pid 43748:tid 43798] [client 85.203.23.182:60239] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-sweep/1.php"] [unique_id "aTyTyqrTT0VzE3gYjcA6wQAAAFM"]
[Sat Dec 13 06:14:44.602344 2025] [:error] [pid 43836:tid 43847] [client 85.203.23.219:58335] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/ubermenu-icons/thom-hardy.php"] [unique_id "aTyT1GAEOBirsxb11naLHQAAAMk"]
[Sat Dec 13 06:15:14.967698 2025] [:error] [pid 43747:tid 43755] [client 85.203.23.209:26219] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/public_html/shell.php"] [unique_id "aTyT8pYw3twBd_JQEHiobgAAAAQ"]
[Sat Dec 13 06:15:25.331610 2025] [:error] [pid 43749:tid 43814] [client 85.203.23.215:44953] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/www/shell.php"] [unique_id "aTyT_XOk7VNylTjPi3yRwgAAAIg"]
[Sat Dec 13 06:15:50.695315 2025] [:error] [pid 43748:tid 43794] [client 85.203.23.187:51039] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aTyUFqrTT0VzE3gYjcA7LgAAAE8"]
[Sat Dec 13 06:16:06.058006 2025] [:error] [pid 43836:tid 43860] [client 85.203.23.201:23575] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTyUJmAEOBirsxb11naLoAAAANY"]
[Sat Dec 13 06:16:16.420787 2025] [:error] [pid 43748:tid 43788] [client 85.203.23.166:33947] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aTyUMKrTT0VzE3gYjcA7QwAAAEk"]
[Sat Dec 13 06:16:26.782105 2025] [:error] [pid 43836:tid 43858] [client 85.203.23.172:54253] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aTyUOmAEOBirsxb11naLwwAAANQ"]
[Sat Dec 13 06:16:42.145678 2025] [:error] [pid 43749:tid 43825] [client 85.203.23.177:59989] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/latest-posts/latest-posts/faq-builder.php"] [unique_id "aTyUSnOk7VNylTjPi3ySTAAAAJM"]
[Sat Dec 13 06:16:42.507119 2025] [:error] [pid 43749:tid 43811] [client 85.203.23.219:53809] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aTyUSnOk7VNylTjPi3ySTQAAAIU"]
[Sat Dec 13 06:17:07.875516 2025] [:error] [pid 43747:tid 43755] [client 85.203.23.171:56385] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-speed.php"] [unique_id "aTyUY5Yw3twBd_JQEHiozQAAAAQ"]
[Sat Dec 13 06:18:03.244132 2025] [:error] [pid 43747:tid 43757] [client 85.203.23.187:42059] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aTyUm5Yw3twBd_JQEHio-QAAAAY"]
[Sat Dec 13 06:18:03.603890 2025] [:error] [pid 43748:tid 43787] [client 85.203.23.204:65507] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aTyUm6rTT0VzE3gYjcA7lAAAAEg"]
[Sat Dec 13 06:18:03.963294 2025] [:error] [pid 43748:tid 43783] [client 85.203.23.201:48013] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aTyUm6rTT0VzE3gYjcA7lQAAAEQ"]
[Sat Dec 13 06:18:04.323861 2025] [:error] [pid 43748:tid 43795] [client 85.203.23.171:44049] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aTyUnKrTT0VzE3gYjcA7lwAAAFA"]
[Sat Dec 13 06:18:09.689754 2025] [:error] [pid 43749:tid 43827] [client 85.203.23.215:58691] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/checker/wsa.php"] [unique_id "aTyUoXOk7VNylTjPi3ySvQAAAJU"]
[Sat Dec 13 06:18:10.050938 2025] [:error] [pid 43747:tid 43774] [client 85.203.23.209:32503] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/Contrller.php"] [unique_id "aTyUopYw3twBd_JQEHipAAAAABc"]
[Sat Dec 13 06:18:10.416355 2025] [:error] [pid 43748:tid 43794] [client 85.203.23.169:65171] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/goup.php"] [unique_id "aTyUoqrTT0VzE3gYjcA7qgAAAE8"]
[Sat Dec 13 06:18:10.776276 2025] [:error] [pid 43836:tid 43839] [client 85.203.23.169:64511] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-super-cache/partials/about.php"] [unique_id "aTyUomAEOBirsxb11naMQgAAAME"]
[Sat Dec 13 06:18:31.138068 2025] [:error] [pid 43748:tid 43785] [client 85.203.23.182:63721] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/xddqann/"] [unique_id "aTyUt6rTT0VzE3gYjcA7uQAAAEY"]
[Sat Dec 13 06:18:36.499067 2025] [:error] [pid 43836:tid 43860] [client 85.203.23.182:44793] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/tetracl/"] [unique_id "aTyUvGAEOBirsxb11naMbQAAANY"]
[Sat Dec 13 06:18:51.864973 2025] [:error] [pid 43748:tid 43785] [client 85.203.23.209:58759] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/twentytwentyfive/locks.php"] [unique_id "aTyUy6rTT0VzE3gYjcA7wwAAAEY"]
[Sat Dec 13 06:19:12.229054 2025] [:error] [pid 43747:tid 43772] [client 85.203.23.166:31083] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/foter.php"] [unique_id "aTyU4JYw3twBd_JQEHipNQAAABU"]
[Sat Dec 13 06:19:17.590210 2025] [:error] [pid 43748:tid 43782] [client 85.203.23.169:63647] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/amp/assets/images/about.php"] [unique_id "aTyU5arTT0VzE3gYjcA75gAAAEM"]
[Sat Dec 13 06:19:17.952016 2025] [:error] [pid 43748:tid 43780] [client 85.203.23.183:29019] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/rstsgd.php"] [unique_id "aTyU5arTT0VzE3gYjcA75wAAAEE"]
[Sat Dec 13 06:19:23.323104 2025] [:error] [pid 43836:tid 43850] [client 85.203.23.220:41695] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTyU62AEOBirsxb11naMvAAAAMw"]
[Sat Dec 13 06:19:38.685165 2025] [:error] [pid 43749:tid 43821] [client 85.203.23.177:45169] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dup-installer/tmp/src/"] [unique_id "aTyU-nOk7VNylTjPi3yTTQAAAI8"]
[Sat Dec 13 06:19:54.048759 2025] [:error] [pid 43836:tid 43853] [client 85.203.23.204:36675] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dup-installer/wp-includes/blocks/post-author-biography/"] [unique_id "aTyVCmAEOBirsxb11naNPwAAAM8"]
[Sat Dec 13 06:20:14.455854 2025] [:error] [pid 43747:tid 43758] [client 85.203.23.187:21707] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aTyVHpYw3twBd_JQEHipvgAAAAc"]
[Sat Dec 13 06:20:24.819434 2025] [:error] [pid 43748:tid 43782] [client 85.203.23.169:63395] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/target/admin/"] [unique_id "aTyVKKrTT0VzE3gYjcA8NQAAAEM"]
[Sat Dec 13 06:20:25.179484 2025] [:error] [pid 43748:tid 43792] [client 85.203.23.219:24433] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/dt-the7/inc/mods/mod-woocommerce/assets/"] [unique_id "aTyVKarTT0VzE3gYjcA8NwAAAE0"]
[Sat Dec 13 06:20:25.542921 2025] [:error] [pid 43748:tid 43789] [client 85.203.23.201:47119] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aTyVKarTT0VzE3gYjcA8OgAAAEo"]
[Sat Dec 13 06:20:45.905277 2025] [:error] [pid 43748:tid 43800] [client 85.203.23.187:21447] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/maintenance.php"] [unique_id "aTyVParTT0VzE3gYjcA8iQAAAFU"]
[Sat Dec 13 06:21:26.269157 2025] [:error] [pid 43749:tid 43822] [client 85.203.23.214:28859] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aTyVZnOk7VNylTjPi3yT7AAAAJA"]
[Sat Dec 13 06:21:26.650725 2025] [:error] [pid 43836:tid 43859] [client 85.203.23.177:63959] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aTyVZmAEOBirsxb11naN3gAAANU"]
[Sat Dec 13 06:21:32.014977 2025] [:error] [pid 43748:tid 43800] [client 85.203.23.215:22143] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aTyVbKrTT0VzE3gYjcA8sAAAAFU"]
[Sat Dec 13 06:21:52.377713 2025] [:error] [pid 43749:tid 43814] [client 85.203.23.169:20621] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aTyVgHOk7VNylTjPi3yUCQAAAIg"]
[Sat Dec 13 06:21:52.739448 2025] [:error] [pid 43749:tid 43819] [client 85.203.23.171:46537] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aTyVgHOk7VNylTjPi3yUCgAAAI0"]
[Sat Dec 13 06:21:53.107785 2025] [:error] [pid 43748:tid 43789] [client 85.203.23.201:56675] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/mabar88/inc/compatibility/learndash/customizer/sections/layout/lock.php"] [unique_id "aTyVgarTT0VzE3gYjcA8zwAAAEo"]
[Sat Dec 13 06:22:18.473367 2025] [:error] [pid 43836:tid 43848] [client 85.203.23.182:56011] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includesdgfsa/Text/Diff/"] [unique_id "aTyVmmAEOBirsxb11naOLQAAAMo"]
[Sat Dec 13 06:22:28.841216 2025] [:error] [pid 43748:tid 43779] [client 85.203.23.166:53735] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aTyVpKrTT0VzE3gYjcA84gAAAEA"]
[Sat Dec 13 06:22:34.201394 2025] [:error] [pid 43748:tid 43804] [client 85.203.23.184:31467] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/mapiezRi.php"] [unique_id "aTyVqqrTT0VzE3gYjcA87wAAAFg"]
[Sat Dec 13 06:22:34.566395 2025] [:error] [pid 43836:tid 43857] [client 85.203.23.220:21971] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aTyVqmAEOBirsxb11naOOgAAANM"]
[Sat Dec 13 06:22:34.927843 2025] [:error] [pid 43836:tid 43852] [client 85.203.23.192:50407] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aTyVqmAEOBirsxb11naOOwAAAM4"]
[Sat Dec 13 06:22:40.292127 2025] [:error] [pid 43748:tid 43787] [client 85.203.23.204:55355] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aTyVsKrTT0VzE3gYjcA88wAAAEg"]
[Sat Dec 13 06:22:40.656965 2025] [:error] [pid 43836:tid 43854] [client 85.203.23.204:61437] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/uuj_gagal.php"] [unique_id "aTyVsGAEOBirsxb11naOQwAAANA"]
[Sat Dec 13 06:22:41.017371 2025] [:error] [pid 43749:tid 43824] [client 85.203.23.201:61177] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aTyVsXOk7VNylTjPi3yUKQAAAJI"]
[Sat Dec 13 06:23:06.385161 2025] [:error] [pid 43748:tid 43797] [client 85.203.23.215:42789] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/codex.php"] [unique_id "aTyVyqrTT0VzE3gYjcA9BgAAAFI"]
[Sat Dec 13 06:23:06.746596 2025] [:error] [pid 43836:tid 43845] [client 85.203.23.192:30475] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/codex.php"] [unique_id "aTyVymAEOBirsxb11naOeQAAAMc"]
[Sat Dec 13 06:23:07.108850 2025] [:error] [pid 43748:tid 43794] [client 85.203.23.182:42795] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/areak1.php"] [unique_id "aTyVy6rTT0VzE3gYjcA9BwAAAE8"]
[Sat Dec 13 06:23:32.469698 2025] [:error] [pid 43748:tid 43793] [client 85.203.23.192:58297] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/class-IXR-client-sql.php"] [unique_id "aTyV5KrTT0VzE3gYjcA9EgAAAE4"]
[Sat Dec 13 06:23:32.833040 2025] [:error] [pid 43747:tid 43752] [client 85.203.23.201:52529] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/222.php"] [unique_id "aTyV5JYw3twBd_JQEHiqfAAAAAE"]
[Sat Dec 13 06:23:33.192916 2025] [:error] [pid 43749:tid 43827] [client 85.203.23.171:21129] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aTyV5XOk7VNylTjPi3yUSAAAAJU"]
[Sat Dec 13 06:23:33.552742 2025] [:error] [pid 43836:tid 43859] [client 85.203.23.183:36241] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/require-static-blocks-add.php"] [unique_id "aTyV5WAEOBirsxb11naOlAAAANU"]
[Sat Dec 13 06:23:38.916324 2025] [:error] [pid 43749:tid 43813] [client 85.203.23.172:20495] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/post-thumbnail-template-call.php"] [unique_id "aTyV6nOk7VNylTjPi3yUSgAAAIc"]
[Sat Dec 13 06:23:39.278175 2025] [:error] [pid 43749:tid 43817] [client 85.203.23.182:44507] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/site-logo/admin.php"] [unique_id "aTyV63Ok7VNylTjPi3yUSwAAAIs"]
[Sat Dec 13 06:24:14.643595 2025] [:error] [pid 43836:tid 43850] [client 85.203.23.172:32437] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/mabar88/inc/addons/transparent-header/assets/lock.php"] [unique_id "aTyWDmAEOBirsxb11naOyAAAAMw"]
[Sat Dec 13 06:24:40.009606 2025] [:error] [pid 43836:tid 43855] [client 85.203.23.220:57615] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comment-edit-link/admin.php"] [unique_id "aTyWKGAEOBirsxb11naO4QAAANE"]
[Sat Dec 13 06:24:45.369315 2025] [:error] [pid 43836:tid 43841] [client 85.203.23.187:51711] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wso.php"] [unique_id "aTyWLWAEOBirsxb11naO-QAAAMM"]
[Sat Dec 13 06:25:10.732648 2025] [:error] [pid 43749:tid 43823] [client 85.203.23.169:26809] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/all-in-one-wp-migration/about.php"] [unique_id "aTyWRnOk7VNylTjPi3yUoAAAAJE"]
[Sat Dec 13 06:25:21.096658 2025] [:error] [pid 43749:tid 43811] [client 85.203.23.201:27603] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aTyWUXOk7VNylTjPi3yUpgAAAIU"]
[Sat Dec 13 06:25:21.457622 2025] [:error] [pid 43748:tid 43793] [client 85.203.23.171:47111] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/nux/about.php"] [unique_id "aTyWUarTT0VzE3gYjcA9XgAAAE4"]
[Sat Dec 13 06:25:31.887981 2025] [:error] [pid 43749:tid 43818] [client 85.203.23.166:33109] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/ahax.php"] [unique_id "aTyWW3Ok7VNylTjPi3yUsQAAAIw"]
[Sat Dec 13 06:25:37.251097 2025] [:error] [pid 43749:tid 43811] [client 85.203.23.219:51899] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/unlimited-elements-for-elementor-premium/vendor/spucon/"] [unique_id "aTyWYXOk7VNylTjPi3yUuQAAAIU"]
[Sat Dec 13 06:25:42.613087 2025] [:error] [pid 43749:tid 43805] [client 85.203.23.219:28481] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aTyWZnOk7VNylTjPi3yUvQAAAIA"]
[Sat Dec 13 06:25:42.973331 2025] [:error] [pid 43748:tid 43798] [client 85.203.23.171:57637] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aTyWZqrTT0VzE3gYjcA9awAAAFM"]
[Sat Dec 13 06:25:48.335751 2025] [:error] [pid 43748:tid 43791] [client 85.203.23.192:44959] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aTyWbKrTT0VzE3gYjcA9bwAAAEw"]
[Sat Dec 13 06:25:53.697796 2025] [:error] [pid 43749:tid 43817] [client 85.203.23.177:20109] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aTyWcXOk7VNylTjPi3yUyAAAAIs"]
[Sat Dec 13 06:25:54.059148 2025] [:error] [pid 43836:tid 43859] [client 85.203.23.201:57013] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTyWcmAEOBirsxb11naPNwAAANU"]
[Sat Dec 13 06:25:59.420144 2025] [:error] [pid 43836:tid 43852] [client 85.203.23.166:64721] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTyWd2AEOBirsxb11naPPgAAAM4"]
[Sat Dec 13 06:26:04.779778 2025] [:error] [pid 43836:tid 43844] [client 85.203.23.215:56469] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aTyWfGAEOBirsxb11naPSgAAAMY"]
[Sat Dec 13 06:26:05.139709 2025] [:error] [pid 43747:tid 43768] [client 85.203.23.214:65307] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aTyWfZYw3twBd_JQEHiq8AAAABE"]
[Sat Dec 13 06:26:25.512242 2025] [:error] [pid 43836:tid 43846] [client 85.203.23.184:63767] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aTyWkWAEOBirsxb11naPZwAAAMg"]
[Sat Dec 13 06:26:30.878716 2025] [:error] [pid 43749:tid 43825] [client 85.203.23.192:47323] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/litespeed/autoload_classmap.php"] [unique_id "aTyWlnOk7VNylTjPi3yU6AAAAJM"]
[Sat Dec 13 06:26:51.242607 2025] [:error] [pid 43836:tid 43838] [client 85.203.23.171:45883] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/Bypass-System.php"] [unique_id "aTyWq2AEOBirsxb11naPeAAAAMA"]
[Sat Dec 13 06:26:51.608182 2025] [:error] [pid 43836:tid 43861] [client 85.203.23.209:52209] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aTyWq2AEOBirsxb11naPeQAAANc"]
[Sat Dec 13 06:27:01.972334 2025] [:error] [pid 43748:tid 43795] [client 85.203.23.187:27577] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/akses.php"] [unique_id "aTyWtarTT0VzE3gYjcA9nAAAAFA"]
[Sat Dec 13 06:27:02.334975 2025] [:error] [pid 43747:tid 43765] [client 85.203.23.187:31021] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/updated/wp-includes/rest-api/file.php"] [unique_id "aTyWtpYw3twBd_JQEHirHAAAAA4"]
[Sat Dec 13 06:27:02.697381 2025] [:error] [pid 43836:tid 43858] [client 85.203.23.172:62455] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/abc.php"] [unique_id "aTyWtmAEOBirsxb11naPhgAAANQ"]
[Sat Dec 13 06:27:08.062264 2025] [:error] [pid 43836:tid 43841] [client 85.203.23.201:52479] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/audio/wp-conflg.php"] [unique_id "aTyWvGAEOBirsxb11naPiwAAAMM"]
[Sat Dec 13 06:27:18.424621 2025] [:error] [pid 43748:tid 43795] [client 85.203.23.184:47207] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/comment-editor/about.php"] [unique_id "aTyWxqrTT0VzE3gYjcA9pgAAAFA"]
[Sat Dec 13 06:27:18.787795 2025] [:error] [pid 43836:tid 43853] [client 85.203.23.187:29373] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/about.php"] [unique_id "aTyWxmAEOBirsxb11naPmgAAAM8"]
[Sat Dec 13 06:27:29.152251 2025] [:error] [pid 43748:tid 43790] [client 85.203.23.183:38621] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/dokan/content-"] [unique_id "aTyW0arTT0VzE3gYjcA9sQAAAEs"]
[Sat Dec 13 06:27:29.512977 2025] [:error] [pid 43749:tid 43821] [client 85.203.23.209:44205] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pridmag/ot.php"] [unique_id "aTyW0XOk7VNylTjPi3yVCAAAAI8"]
[Sat Dec 13 06:27:34.874803 2025] [:error] [pid 43749:tid 43816] [client 85.203.23.184:57493] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpadmin/acp.php"] [unique_id "aTyW1nOk7VNylTjPi3yVCwAAAIo"]
[Sat Dec 13 06:27:40.236365 2025] [:error] [pid 43749:tid 43829] [client 85.203.23.182:38473] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/ioxi-o.php"] [unique_id "aTyW3HOk7VNylTjPi3yVDgAAAJc"]
[Sat Dec 13 06:27:45.602501 2025] [:error] [pid 43749:tid 43826] [client 85.203.23.166:25573] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/namespaced/admin.php"] [unique_id "aTyW4XOk7VNylTjPi3yVEAAAAJQ"]
[Sat Dec 13 06:28:10.966648 2025] [:error] [pid 43747:tid 43763] [client 85.203.23.214:23719] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/media-module.php"] [unique_id "aTyW-pYw3twBd_JQEHirOQAAAAw"]
[Sat Dec 13 06:28:11.336945 2025] [:error] [pid 43748:tid 43787] [client 85.203.23.219:27503] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/elementor/css/filesss.php"] [unique_id "aTyW-6rTT0VzE3gYjcA9wQAAAEg"]
[Sat Dec 13 06:28:16.700406 2025] [:error] [pid 43749:tid 43815] [client 85.203.23.166:63905] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aTyXAHOk7VNylTjPi3yVHwAAAIk"]
[Sat Dec 13 06:28:27.064274 2025] [:error] [pid 43836:tid 43852] [client 85.203.23.204:33203] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-template/gssdd.php"] [unique_id "aTyXC2AEOBirsxb11naPzQAAAM4"]
[Sat Dec 13 06:28:27.425916 2025] [:error] [pid 43836:tid 43838] [client 85.203.23.214:34765] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/image/wp-conflg.php"] [unique_id "aTyXC2AEOBirsxb11naP0AAAAMA"]
[Sat Dec 13 06:28:27.786167 2025] [:error] [pid 43747:tid 43756] [client 85.203.23.204:20767] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "aTyXC5Yw3twBd_JQEHirRQAAAAU"]
[Sat Dec 13 06:28:28.150021 2025] [:error] [pid 43836:tid 43853] [client 85.203.23.172:42799] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aTyXDGAEOBirsxb11naP0QAAAM8"]
[Sat Dec 13 06:28:38.528099 2025] [:error] [pid 43836:tid 43855] [client 85.203.23.215:27807] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/xxfile.php"] [unique_id "aTyXFmAEOBirsxb11naP2QAAANE"]
[Sat Dec 13 06:28:48.878702 2025] [:error] [pid 43747:tid 43775] [client 85.203.23.183:41243] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/reusable-blocks/"] [unique_id "aTyXIJYw3twBd_JQEHirUQAAABg"]
[Sat Dec 13 06:28:49.237793 2025] [:error] [pid 43748:tid 43792] [client 85.203.23.182:22211] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/flatsome/inc/admin/options/helpers/"] [unique_id "aTyXIarTT0VzE3gYjcA92wAAAE0"]
[Sat Dec 13 06:28:54.601662 2025] [:error] [pid 43747:tid 43761] [client 85.203.23.214:32493] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/zero.php"] [unique_id "aTyXJpYw3twBd_JQEHirUwAAAAo"]
[Sat Dec 13 06:28:59.962502 2025] [:error] [pid 43747:tid 43768] [client 85.203.23.220:54355] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aTyXK5Yw3twBd_JQEHirVgAAABE"]
[Sat Dec 13 06:29:05.325414 2025] [:error] [pid 43749:tid 43823] [client 85.203.23.183:47157] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aTyXMXOk7VNylTjPi3yVOQAAAJE"]
[Sat Dec 13 06:29:15.687516 2025] [:error] [pid 43749:tid 43825] [client 85.203.23.183:65525] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/2k.php"] [unique_id "aTyXO3Ok7VNylTjPi3yVQQAAAJM"]
[Sat Dec 13 06:29:31.067810 2025] [:error] [pid 43749:tid 43808] [client 85.203.23.219:61787] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/src/about.php"] [unique_id "aTyXS3Ok7VNylTjPi3yVUwAAAII"]
[Sat Dec 13 06:29:31.427082 2025] [:error] [pid 43836:tid 43843] [client 85.203.23.204:32807] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aTyXS2AEOBirsxb11naQBwAAAMU"]
[Sat Dec 13 06:29:56.792388 2025] [:error] [pid 43748:tid 43784] [client 85.203.23.192:25121] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aTyXZKrTT0VzE3gYjcA99gAAAEU"]
[Sat Dec 13 06:29:57.153054 2025] [:error] [pid 43836:tid 43851] [client 85.203.23.166:50807] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-author/about.php"] [unique_id "aTyXZWAEOBirsxb11naQJgAAAM0"]
[Sat Dec 13 06:30:02.517809 2025] [:error] [pid 43836:tid 43855] [client 85.203.23.177:53439] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aTyXamAEOBirsxb11naQNwAAANE"]
[Sat Dec 13 06:30:17.881384 2025] [:error] [pid 43748:tid 43783] [client 85.203.23.219:57707] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/root.php"] [unique_id "aTyXearTT0VzE3gYjcA-JAAAAEQ"]
[Sat Dec 13 06:30:33.244789 2025] [:error] [pid 39287:tid 39312] [client 85.203.23.182:49427] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aTyXiTBwBW1JRRoCYqYf4QAAARc"]
[Sat Dec 13 06:30:33.605536 2025] [:error] [pid 39287:tid 39289] [client 85.203.23.214:55625] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aTyXiTBwBW1JRRoCYqYf4gAAAQA"]
[Sat Dec 13 06:30:53.968505 2025] [:error] [pid 39287:tid 39296] [client 85.203.23.220:23535] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/library/"] [unique_id "aTyXnTBwBW1JRRoCYqYf_QAAAQc"]
[Sat Dec 13 06:30:59.329465 2025] [:error] [pid 43747:tid 43774] [client 85.203.23.192:35339] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aTyXo5Yw3twBd_JQEHir1AAAABc"]
[Sat Dec 13 06:30:59.691480 2025] [:error] [pid 43836:tid 43862] [client 85.203.23.220:52079] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/m.php"] [unique_id "aTyXo2AEOBirsxb11naQvgAAANg"]
[Sat Dec 13 06:31:00.051259 2025] [:error] [pid 39287:tid 39304] [client 85.203.23.192:36225] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp/wp-admin/user/aws.php"] [unique_id "aTyXpDBwBW1JRRoCYqYgDgAAAQ8"]
[Sat Dec 13 06:31:05.411920 2025] [:error] [pid 43749:tid 43823] [client 85.203.23.220:25143] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp/wp-content/plugins/peptide/peptide2.php"] [unique_id "aTyXqXOk7VNylTjPi3yWIQAAAJE"]
[Sat Dec 13 06:31:10.776312 2025] [:error] [pid 43836:tid 43856] [client 85.203.23.215:63843] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/css/dist/commands/"] [unique_id "aTyXrmAEOBirsxb11naRHAAAANI"]
[Sat Dec 13 06:31:11.136474 2025] [:error] [pid 43836:tid 43847] [client 85.203.23.220:35069] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/fonts/jost/"] [unique_id "aTyXr2AEOBirsxb11naRIAAAAMk"]
[Sat Dec 13 06:31:12.984377 2025] [:error] [pid 43749:tid 43818] [client 85.203.23.171:57779] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/parts/"] [unique_id "aTyXsHOk7VNylTjPi3yWMQAAAIw"]
[Sat Dec 13 06:31:23.344800 2025] [:error] [pid 39287:tid 39290] [client 85.203.23.172:29645] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin00/css/colors/midnight/"] [unique_id "aTyXuzBwBW1JRRoCYqYgUwAAAQE"]
[Sat Dec 13 06:31:23.710915 2025] [:error] [pid 39287:tid 39304] [client 85.203.23.171:51739] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/v2/itw/"] [unique_id "aTyXuzBwBW1JRRoCYqYgVgAAAQ8"]
[Sat Dec 13 06:31:49.073817 2025] [:error] [pid 43748:tid 43782] [client 85.203.23.171:42951] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aTyX1arTT0VzE3gYjcA-YwAAAEM"]
[Sat Dec 13 06:33:32.449260 2025] [autoindex:error] [pid 43836:tid 43847] [client 51.89.39.44:62864] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 06:46:17.998102 2025] [:error] [pid 39287:tid 39309] [client 106.227.49.113:35749] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTybOTBwBW1JRRoCYqYj3wAAARQ"]
[Sat Dec 13 06:56:38.039565 2025] [autoindex:error] [pid 43748:tid 43796] [client 185.117.225.234:38492] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 06:56:41.445740 2025] [autoindex:error] [pid 43747:tid 43763] [client 185.117.225.234:42618] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 08:56:35.648042 2025] [:error] [pid 43749:tid 43809] [client 43.131.243.61:34944] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aTy5w3Ok7VNylTjPi3yv-AAAAIM"]
[Sat Dec 13 09:02:44.369740 2025] [autoindex:error] [pid 43748:tid 43790] [client 40.160.26.78:44426] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.zuula.com/
[Sat Dec 13 09:04:54.637285 2025] [autoindex:error] [pid 55071:tid 55078] [client 107.9.247.191:44540] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://roozzy.com/
[Sat Dec 13 09:09:56.232936 2025] [autoindex:error] [pid 55071:tid 55074] [client 103.4.250.229:7058] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 09:09:56.234469 2025] [autoindex:error] [pid 43748:tid 43794] [client 107.172.195.227:2774] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 09:10:02.813537 2025] [autoindex:error] [pid 55037:tid 55060] [client 103.196.9.137:40268] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 10:50:18.362236 2025] [autoindex:error] [pid 55037:tid 55044] [client 109.199.118.129:49982] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 11:42:18.346830 2025] [autoindex:error] [pid 43747:tid 43752] [client 66.249.64.226:47264] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 12:18:34.553455 2025] [autoindex:error] [pid 43747:tid 43767] [client 45.43.14.121:35834] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 13:15:41.319375 2025] [autoindex:error] [pid 3418:tid 3443] [client 98.91.192.94:46178] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 15:33:10.525296 2025] [autoindex:error] [pid 22505:tid 22512] [client 66.249.64.225:40928] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 16:06:00.725054 2025] [:error] [pid 22505:tid 22523] [client 43.130.111.40:56280] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aT0eaDvNI-35hW16TnUE9gAAA5A"]
[Sat Dec 13 16:56:31.638318 2025] [autoindex:error] [pid 8242:tid 8249] [client 98.91.192.94:53610] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 19:11:46.086955 2025] [proxy_fcgi:error] [pid 20799:tid 20803] [client 195.24.236.45:53659] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 19:11:47.363841 2025] [proxy_fcgi:error] [pid 22505:tid 22516] [client 195.24.236.45:53681] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Dec 13 19:47:54.109034 2025] [:error] [pid 20799:tid 20806] [client 175.6.217.4:41384] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aT1SaqPz3eVRUTzZpOJ51AAAAsU"]
[Sat Dec 13 22:20:24.153514 2025] [autoindex:error] [pid 43747:tid 43767] [client 209.38.245.230:54816] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:20:25.820277 2025] [autoindex:error] [pid 21342:tid 21365] [client 209.38.245.230:57448] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:45:22.757801 2025] [:error] [pid 8242:tid 8254] [client 187.55.187.36:59110] [client 187.55.187.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.55.187.36, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aT18AiNKA7vSGNUfnOFIkgAAAkY"]
[Sat Dec 13 22:45:22.768277 2025] [proxy_fcgi:error] [pid 8242:tid 8254] [client 187.55.187.36:59110] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 22:52:21.133690 2025] [:error] [pid 22505:tid 22527] [client 43.156.204.134:59236] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aT19pTvNI-35hW16TnUt1AAAA5Q"]
[Sat Dec 13 23:20:48.607191 2025] [autoindex:error] [pid 43836:tid 43861] [client 194.187.178.14:34880] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 00:19:03.110243 2025] [autoindex:error] [pid 3636:tid 3702] [client 172.71.246.225:13742] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 01:24:24.347150 2025] [autoindex:error] [pid 14654:tid 14675] [client 34.219.179.125:53200] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 01:52:55.249406 2025] [autoindex:error] [pid 3636:tid 3715] [client 35.205.53.89:52576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 02:21:47.781778 2025] [:error] [pid 14689:tid 14700] [client 180.110.203.108:43578] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT2uu0Ecifvaa9I7SnmNAAAAAUc"]
[Sun Dec 14 02:42:27.087749 2025] [proxy_fcgi:error] [pid 14654:tid 14674] [client 4.194.73.173:16570] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 02:42:27.106223 2025] [autoindex:error] [pid 3636:tid 3711] [client 4.194.73.173:14603] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 02:42:27.188194 2025] [proxy_fcgi:error] [pid 14654:tid 14667] [client 4.194.73.173:16570] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 02:42:31.218971 2025] [proxy_fcgi:error] [pid 3635:tid 3668] [client 4.194.73.173:14618] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 02:42:31.321478 2025] [proxy_fcgi:error] [pid 3635:tid 3679] [client 4.194.73.173:14618] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 04:02:57.354357 2025] [proxy_fcgi:error] [pid 57846:tid 57890] [client 4.194.73.173:14914] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 04:02:57.363742 2025] [autoindex:error] [pid 57937:tid 57943] [client 4.194.73.173:14928] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 04:02:57.458926 2025] [proxy_fcgi:error] [pid 57846:tid 57885] [client 4.194.73.173:14914] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 04:03:01.402012 2025] [proxy_fcgi:error] [pid 57846:tid 57887] [client 4.194.73.173:14930] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 04:03:01.549432 2025] [proxy_fcgi:error] [pid 57846:tid 57899] [client 4.194.73.173:14930] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 14 05:35:28.607473 2025] [:error] [pid 39523:tid 39539] [client 43.153.49.151:45042] [client 43.153.49.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aT3cIDQTQH1raAj2lkgmLgAAAAs"]
[Sun Dec 14 08:45:57.392351 2025] [autoindex:error] [pid 41600:tid 41620] [client 16.146.23.250:55684] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 09:36:19.498317 2025] [autoindex:error] [pid 39524:tid 39571] [client 139.59.45.220:45728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 09:36:20.863282 2025] [autoindex:error] [pid 39523:tid 39551] [client 139.59.45.220:60072] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 10:52:49.699372 2025] [:error] [pid 39614:tid 39638] [client 43.153.113.127:50504] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT4mgfxybG8-9MflbDfUhgAAANY"]
[Sun Dec 14 12:55:09.168164 2025] [:error] [pid 40595:tid 40607] [client 167.71.88.235:58678] [client 167.71.88.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.88.235, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aT5DLfjrht6y4RN-xKSE3AAAAYg"]
[Sun Dec 14 12:55:09.179612 2025] [proxy_fcgi:error] [pid 40595:tid 40607] [client 167.71.88.235:58678] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 14:38:25.658226 2025] [:error] [pid 40561:tid 40565] [client 125.94.144.102:42403] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT5bYYY6r869zoqRQkRRggAAAUA"]
[Sun Dec 14 15:25:54.009709 2025] [:error] [pid 40595:tid 40600] [client 104.28.159.108:24170] [client 104.28.159.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aT5mgvjrht6y4RN-xKSe0QAAAYE"]
[Sun Dec 14 15:48:42.349107 2025] [autoindex:error] [pid 39525:tid 39585] [client 66.249.64.226:60920] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 17:18:58.872668 2025] [autoindex:error] [pid 40561:tid 40582] [client 178.159.37.16:53743] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 17:19:04.757899 2025] [autoindex:error] [pid 39525:tid 39605] [client 178.159.37.16:57146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 17:34:43.761043 2025] [:error] [pid 39525:tid 39594] [client 43.130.154.56:45490] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT6Es01fX_pB_BrvE_4MYwAAAIs"]
[Sun Dec 14 18:08:15.198050 2025] [autoindex:error] [pid 39614:tid 39630] [client 205.210.31.15:60468] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:38:29.286942 2025] [autoindex:error] [pid 39523:tid 39538] [client 35.162.5.34:39234] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:40:41.634809 2025] [autoindex:error] [pid 39525:tid 39599] [client 172.71.144.113:10230] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 20:04:59.198797 2025] [autoindex:error] [pid 39614:tid 39621] [client 136.115.157.4:62848] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 21:09:40.675796 2025] [:error] [pid 39524:tid 39557] [client 203.2.64.59:48752] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aT63FGrVGpbDzFtDE9P9SgAAAEE"]
[Sun Dec 14 23:36:22.932990 2025] [:error] [pid 41600:tid 41627] [client 103.166.244.239:57558] [client 103.166.244.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.244.239, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aT7ZdtFLTBZjcwNd_VtnMwAAARg"]
[Sun Dec 14 23:36:22.945321 2025] [proxy_fcgi:error] [pid 41600:tid 41627] [client 103.166.244.239:57558] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 23:36:23.005703 2025] [:error] [pid 41600:tid 41609] [client 106.219.155.98:21849] [client 106.219.155.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.155.98, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aT7Zd9FLTBZjcwNd_VtnNAAAAQY"]
[Sun Dec 14 23:36:23.013657 2025] [proxy_fcgi:error] [pid 41600:tid 41609] [client 106.219.155.98:21849] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 23:59:28.371036 2025] [autoindex:error] [pid 39614:tid 39633] [client 34.105.42.189:59996] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 00:09:54.004513 2025] [autoindex:error] [pid 8340:tid 8380] [client 34.231.195.239:9383] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 00:17:42.239478 2025] [proxy_fcgi:error] [pid 8339:tid 8350] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:42.393197 2025] [proxy_fcgi:error] [pid 8339:tid 8345] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:42.548658 2025] [proxy_fcgi:error] [pid 8339:tid 8363] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:43.040946 2025] [proxy_fcgi:error] [pid 8339:tid 8355] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:43.194485 2025] [proxy_fcgi:error] [pid 8339:tid 8344] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:43.363756 2025] [proxy_fcgi:error] [pid 8339:tid 8351] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:43.515693 2025] [proxy_fcgi:error] [pid 8339:tid 8360] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:43.782326 2025] [proxy_fcgi:error] [pid 8339:tid 8364] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:43.935725 2025] [proxy_fcgi:error] [pid 8339:tid 8357] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:17:44.266775 2025] [:error] [pid 8339:tid 8353] [client 4.230.46.13:48927] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aT7jKLlqE6mJc-Y6giMfqQAAAAo"]
[Mon Dec 15 00:17:45.368919 2025] [:error] [pid 8340:tid 8384] [client 4.230.46.13:47941] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aT7jKYIT4nh2qy-Ry9pG8gAAAE0"]
[Mon Dec 15 00:17:46.301161 2025] [:error] [pid 9009:tid 9020] [client 4.230.46.13:48193] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aT7jKghxwdgwYWQ8h8V0fwAAAQk"]
[Mon Dec 15 00:17:48.367156 2025] [:error] [pid 9009:tid 9033] [client 4.230.46.13:47944] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aT7jLAhxwdgwYWQ8h8V0gwAAARY"]
[Mon Dec 15 00:17:50.256853 2025] [:error] [pid 8340:tid 8392] [client 4.230.46.13:9802] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7jLoIT4nh2qy-Ry9pG9wAAAFU"]
[Mon Dec 15 00:17:52.218943 2025] [:error] [pid 9009:tid 9012] [client 4.230.46.13:47123] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7jMAhxwdgwYWQ8h8V0iQAAAQE"]
[Mon Dec 15 00:17:52.909620 2025] [:error] [pid 8430:tid 8440] [client 4.230.46.13:47142] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7jMFk7yXaRc6dQclgRjwAAAMc"]
[Mon Dec 15 00:18:01.115022 2025] [:error] [pid 8341:tid 8406] [client 4.230.46.13:9813] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7jOROat6dLvzj8EhTJSwAAAIg"]
[Mon Dec 15 00:18:05.394734 2025] [:error] [pid 8430:tid 8452] [client 4.230.46.13:50624] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7jPVk7yXaRc6dQclgRpAAAANM"]
[Mon Dec 15 00:18:11.182962 2025] [:error] [pid 8339:tid 8350] [client 4.230.46.13:47141] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7jQ7lqE6mJc-Y6giMf0gAAAAc"]
[Mon Dec 15 00:18:12.193654 2025] [:error] [pid 8339:tid 8360] [client 4.230.46.13:50667] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7jRLlqE6mJc-Y6giMf1AAAABE"]
[Mon Dec 15 00:18:18.349864 2025] [:error] [pid 9009:tid 9016] [client 4.230.46.13:47969] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aT7jSghxwdgwYWQ8h8V01wAAAQU"]
[Mon Dec 15 00:18:20.102650 2025] [:error] [pid 8430:tid 8437] [client 4.230.46.13:47959] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aT7jTFk7yXaRc6dQclgRxAAAAMQ"]
[Mon Dec 15 00:18:21.745956 2025] [:error] [pid 9009:tid 9020] [client 4.230.46.13:48924] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aT7jTQhxwdgwYWQ8h8V03gAAAQk"]
[Mon Dec 15 00:18:23.611307 2025] [:error] [pid 8340:tid 8387] [client 4.230.46.13:48907] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aT7jT4IT4nh2qy-Ry9pHHQAAAFA"]
[Mon Dec 15 00:18:24.672651 2025] [:error] [pid 9009:tid 9028] [client 4.230.46.13:47960] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7jUAhxwdgwYWQ8h8V04wAAARE"]
[Mon Dec 15 00:18:27.437931 2025] [:error] [pid 9009:tid 9020] [client 4.230.46.13:9848] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7jUwhxwdgwYWQ8h8V06AAAAQk"]
[Mon Dec 15 00:18:30.751054 2025] [:error] [pid 8340:tid 8380] [client 4.230.46.13:48912] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7jVoIT4nh2qy-Ry9pHKwAAAEk"]
[Mon Dec 15 00:18:35.179350 2025] [:error] [pid 8430:tid 8442] [client 4.230.46.13:48942] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7jW1k7yXaRc6dQclgR4QAAAMk"]
[Mon Dec 15 00:18:36.832987 2025] [:error] [pid 8430:tid 8456] [client 4.230.46.13:48205] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aT7jXFk7yXaRc6dQclgR5QAAANc"]
[Mon Dec 15 00:18:43.138179 2025] [:error] [pid 8340:tid 8394] [client 4.230.46.13:50655] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aT7jY4IT4nh2qy-Ry9pHSAAAAFc"]
[Mon Dec 15 00:18:44.118374 2025] [proxy_fcgi:error] [pid 8341:tid 8411] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:44.639728 2025] [proxy_fcgi:error] [pid 8341:tid 8408] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:44.807600 2025] [proxy_fcgi:error] [pid 8341:tid 8422] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:44.961141 2025] [proxy_fcgi:error] [pid 8341:tid 8398] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:45.137998 2025] [proxy_fcgi:error] [pid 8341:tid 8414] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:45.506942 2025] [proxy_fcgi:error] [pid 8341:tid 8420] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:45.660290 2025] [proxy_fcgi:error] [pid 8341:tid 8421] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:45.813975 2025] [proxy_fcgi:error] [pid 8341:tid 8418] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:46.013437 2025] [proxy_fcgi:error] [pid 8341:tid 8409] [client 4.230.46.13:50666] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:47.865369 2025] [:error] [pid 8341:tid 8422] [client 4.230.46.13:50666] [client 4.230.46.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aT7jZxOat6dLvzj8EhTJqwAAAJg"]
[Mon Dec 15 00:18:48.906008 2025] [proxy_fcgi:error] [pid 9009:tid 9025] [client 4.230.46.13:9851] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:18:49.072928 2025] [:error] [pid 9009:tid 9023] [client 4.230.46.13:9851] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aT7jaQhxwdgwYWQ8h8V1DwAAAQw"]
[Mon Dec 15 00:18:53.019354 2025] [:error] [pid 8339:tid 8344] [client 4.230.46.13:47971] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aT7jbblqE6mJc-Y6giMgLQAAAAE"]
[Mon Dec 15 00:18:56.248924 2025] [:error] [pid 8341:tid 8400] [client 4.230.46.13:47979] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aT7jcBOat6dLvzj8EhTJuQAAAII"]
[Mon Dec 15 00:18:57.510638 2025] [:error] [pid 8339:tid 8350] [client 4.230.46.13:47998] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aT7jcblqE6mJc-Y6giMgMQAAAAc"]
[Mon Dec 15 00:18:58.625002 2025] [:error] [pid 9009:tid 9017] [client 4.230.46.13:9811] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aT7jcghxwdgwYWQ8h8V1IwAAAQY"]
[Mon Dec 15 00:18:59.653403 2025] [:error] [pid 8340:tid 8371] [client 4.230.46.13:47991] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aT7jc4IT4nh2qy-Ry9pHZQAAAEA"]
[Mon Dec 15 00:19:03.954889 2025] [:error] [pid 8341:tid 8422] [client 4.230.46.13:47150] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aT7jdxOat6dLvzj8EhTJxAAAAJg"]
[Mon Dec 15 00:19:07.706504 2025] [:error] [pid 8341:tid 8416] [client 4.230.46.13:48091] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aT7jexOat6dLvzj8EhTJ4QAAAJI"]
[Mon Dec 15 00:19:09.423478 2025] [:error] [pid 8430:tid 8443] [client 4.230.46.13:9804] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AxAo.php"] [unique_id "aT7jfVk7yXaRc6dQclgSWAAAAMo"]
[Mon Dec 15 00:19:09.861892 2025] [:error] [pid 8341:tid 8405] [client 4.230.46.13:9803] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AxAo.php"] [unique_id "aT7jfROat6dLvzj8EhTJ5wAAAIc"]
[Mon Dec 15 00:19:11.016791 2025] [:error] [pid 8340:tid 8381] [client 4.230.46.13:9854] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AxAo.php"] [unique_id "aT7jf4IT4nh2qy-Ry9pHgQAAAEo"]
[Mon Dec 15 00:19:13.630601 2025] [:error] [pid 8430:tid 8448] [client 4.230.46.13:47983] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AxAo.php"] [unique_id "aT7jgVk7yXaRc6dQclgSbQAAAM8"]
[Mon Dec 15 00:19:15.909679 2025] [:error] [pid 8341:tid 8411] [client 4.230.46.13:48264] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7jgxOat6dLvzj8EhTKCwAAAI0"]
[Mon Dec 15 00:19:18.255926 2025] [:error] [pid 8341:tid 8422] [client 4.230.46.13:48064] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7jhhOat6dLvzj8EhTKFQAAAJg"]
[Mon Dec 15 00:19:18.918011 2025] [:error] [pid 8340:tid 8379] [client 4.230.46.13:45596] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7jhoIT4nh2qy-Ry9pHlAAAAEg"]
[Mon Dec 15 00:19:20.189131 2025] [:error] [pid 8341:tid 8414] [client 4.230.46.13:48071] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7jiBOat6dLvzj8EhTKGwAAAJA"]
[Mon Dec 15 00:19:21.461883 2025] [:error] [pid 8340:tid 8382] [client 4.230.46.13:45627] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aT7jiYIT4nh2qy-Ry9pHmwAAAEs"]
[Mon Dec 15 00:19:26.466544 2025] [:error] [pid 9009:tid 9019] [client 4.230.46.13:45586] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aT7jjghxwdgwYWQ8h8V1egAAAQg"]
[Mon Dec 15 00:19:31.113619 2025] [:error] [pid 9009:tid 9011] [client 4.230.46.13:47887] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aT7jkwhxwdgwYWQ8h8V1jgAAAQA"]
[Mon Dec 15 00:19:32.639272 2025] [:error] [pid 8340:tid 8387] [client 4.230.46.13:48282] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aT7jlIIT4nh2qy-Ry9pH2gAAAFA"]
[Mon Dec 15 00:19:34.391606 2025] [:error] [pid 9009:tid 9013] [client 4.230.46.13:9449] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc.php"] [unique_id "aT7jlghxwdgwYWQ8h8V1tAAAAQI"]
[Mon Dec 15 00:19:37.163107 2025] [:error] [pid 8430:tid 8448] [client 4.230.46.13:48124] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc.php"] [unique_id "aT7jmVk7yXaRc6dQclgSzgAAAM8"]
[Mon Dec 15 00:19:54.142791 2025] [proxy_fcgi:error] [pid 9009:tid 9032] [client 4.230.46.13:10041] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:54.302584 2025] [proxy_fcgi:error] [pid 9009:tid 9022] [client 4.230.46.13:10041] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:54.452466 2025] [proxy_fcgi:error] [pid 9009:tid 9024] [client 4.230.46.13:10041] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:54.599483 2025] [:error] [pid 9009:tid 9011] [client 4.230.46.13:10041] [client 4.230.46.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT7jqghxwdgwYWQ8h8V2AgAAAQA"]
[Mon Dec 15 00:19:56.550490 2025] [proxy_fcgi:error] [pid 8341:tid 8405] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:57.119089 2025] [proxy_fcgi:error] [pid 8341:tid 8412] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:57.297248 2025] [proxy_fcgi:error] [pid 8341:tid 8399] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:57.976235 2025] [proxy_fcgi:error] [pid 8341:tid 8418] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:58.128872 2025] [proxy_fcgi:error] [pid 8341:tid 8415] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:58.790169 2025] [proxy_fcgi:error] [pid 8341:tid 8408] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:58.941479 2025] [proxy_fcgi:error] [pid 8341:tid 8421] [client 4.230.46.13:10217] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:19:59.089763 2025] [:error] [pid 8341:tid 8403] [client 4.230.46.13:10217] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wb.php"] [unique_id "aT7jrxOat6dLvzj8EhTKpQAAAIU"]
[Mon Dec 15 00:19:59.837347 2025] [:error] [pid 8339:tid 8360] [client 4.230.46.13:10226] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wb.php"] [unique_id "aT7jr7lqE6mJc-Y6giMguAAAABE"]
[Mon Dec 15 00:20:11.695345 2025] [:error] [pid 8430:tid 8454] [client 4.230.46.13:48539] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wb.php"] [unique_id "aT7ju1k7yXaRc6dQclgTCQAAANU"]
[Mon Dec 15 00:20:12.706127 2025] [:error] [pid 8340:tid 8374] [client 4.230.46.13:46852] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wb.php"] [unique_id "aT7jvIIT4nh2qy-Ry9pIPgAAAEM"]
[Mon Dec 15 00:20:13.377143 2025] [:error] [pid 9009:tid 9030] [client 4.230.46.13:9326] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aT7jvQhxwdgwYWQ8h8V2DwAAARM"]
[Mon Dec 15 00:20:15.277697 2025] [:error] [pid 8341:tid 8411] [client 4.230.46.13:9547] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aT7jvxOat6dLvzj8EhTKugAAAI0"]
[Mon Dec 15 00:20:16.861693 2025] [:error] [pid 8339:tid 8355] [client 4.230.46.13:9566] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aT7jwLlqE6mJc-Y6giMgzgAAAAw"]
[Mon Dec 15 00:20:19.532616 2025] [:error] [pid 9009:tid 9031] [client 4.230.46.13:9337] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aT7jwwhxwdgwYWQ8h8V2IgAAARQ"]
[Mon Dec 15 00:20:26.179419 2025] [:error] [pid 9009:tid 9013] [client 4.230.46.13:50826] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aT7jyghxwdgwYWQ8h8V2MgAAAQI"]
[Mon Dec 15 00:20:37.935267 2025] [:error] [pid 8341:tid 8415] [client 4.230.46.13:48874] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aT7j1ROat6dLvzj8EhTK0wAAAJE"]
[Mon Dec 15 00:20:39.210137 2025] [:error] [pid 8430:tid 8444] [client 4.230.46.13:45801] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aT7j11k7yXaRc6dQclgTIwAAAMs"]
[Mon Dec 15 00:20:41.442054 2025] [:error] [pid 8339:tid 8354] [client 4.230.46.13:48850] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aT7j2blqE6mJc-Y6giMg9wAAAAs"]
[Mon Dec 15 00:20:44.464243 2025] [:error] [pid 8340:tid 8378] [client 4.230.46.13:49029] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aT7j3IIT4nh2qy-Ry9pIeAAAAEc"]
[Mon Dec 15 00:20:50.947692 2025] [:error] [pid 9009:tid 9025] [client 4.230.46.13:50845] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aT7j4ghxwdgwYWQ8h8V2aAAAAQ4"]
[Mon Dec 15 00:20:57.389920 2025] [:error] [pid 9009:tid 9013] [client 4.230.46.13:51172] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aT7j6QhxwdgwYWQ8h8V2cAAAAQI"]
[Mon Dec 15 00:20:59.759603 2025] [proxy_fcgi:error] [pid 8340:tid 8391] [client 4.230.46.13:48927] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:01.740509 2025] [proxy_fcgi:error] [pid 9009:tid 9035] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:01.892201 2025] [proxy_fcgi:error] [pid 9009:tid 9032] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:02.070200 2025] [proxy_fcgi:error] [pid 9009:tid 9011] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:02.222712 2025] [proxy_fcgi:error] [pid 9009:tid 9030] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:02.396251 2025] [proxy_fcgi:error] [pid 9009:tid 9021] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:02.563412 2025] [proxy_fcgi:error] [pid 9009:tid 9015] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:02.715862 2025] [proxy_fcgi:error] [pid 9009:tid 9029] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:02.890900 2025] [proxy_fcgi:error] [pid 9009:tid 9026] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:03.044046 2025] [proxy_fcgi:error] [pid 9009:tid 9024] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:03.385503 2025] [proxy_fcgi:error] [pid 9009:tid 9014] [client 4.230.46.13:51233] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:21:03.536202 2025] [:error] [pid 9009:tid 9025] [client 4.230.46.13:51233] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT7j7whxwdgwYWQ8h8V2hwAAAQ4"]
[Mon Dec 15 00:21:04.892790 2025] [:error] [pid 9009:tid 9012] [client 4.230.46.13:49026] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT7j8AhxwdgwYWQ8h8V2igAAAQE"]
[Mon Dec 15 00:21:06.745269 2025] [:error] [pid 8430:tid 8443] [client 4.230.46.13:49055] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT7j8lk7yXaRc6dQclgTRAAAAMo"]
[Mon Dec 15 00:21:11.952407 2025] [:error] [pid 8341:tid 8419] [client 4.230.46.13:48527] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT7j9xOat6dLvzj8EhTLCwAAAJU"]
[Mon Dec 15 00:21:12.467759 2025] [:error] [pid 8430:tid 8450] [client 4.230.46.13:10040] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aT7j-Fk7yXaRc6dQclgTTAAAANE"]
[Mon Dec 15 00:21:13.291309 2025] [:error] [pid 8341:tid 8418] [client 4.230.46.13:9522] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aT7j-ROat6dLvzj8EhTLDwAAAJQ"]
[Mon Dec 15 00:21:15.148809 2025] [:error] [pid 8339:tid 8359] [client 4.230.46.13:9534] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aT7j-7lqE6mJc-Y6giMhCQAAABA"]
[Mon Dec 15 00:21:16.500238 2025] [:error] [pid 9009:tid 9014] [client 4.230.46.13:9479] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aT7j_AhxwdgwYWQ8h8V2kAAAAQM"]
[Mon Dec 15 00:21:17.704924 2025] [:error] [pid 9009:tid 9012] [client 4.230.46.13:10066] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aT7j_QhxwdgwYWQ8h8V2lAAAAQE"]
[Mon Dec 15 00:21:18.977207 2025] [:error] [pid 8339:tid 8358] [client 4.230.46.13:10072] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aT7j_rlqE6mJc-Y6giMhDQAAAA8"]
[Mon Dec 15 00:21:20.675044 2025] [:error] [pid 8430:tid 8443] [client 4.230.46.13:9510] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aT7kAFk7yXaRc6dQclgTWQAAAMo"]
[Mon Dec 15 00:21:21.344370 2025] [:error] [pid 8340:tid 8395] [client 4.230.46.13:49259] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aT7kAYIT4nh2qy-Ry9pImAAAAFg"]
[Mon Dec 15 00:21:22.184307 2025] [:error] [pid 8430:tid 8434] [client 4.230.46.13:9508] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aT7kAlk7yXaRc6dQclgTWgAAAME"]
[Mon Dec 15 00:21:25.587240 2025] [:error] [pid 8340:tid 8394] [client 4.230.46.13:49250] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aT7kBYIT4nh2qy-Ry9pImwAAAFc"]
[Mon Dec 15 00:21:30.964856 2025] [:error] [pid 8339:tid 8364] [client 4.230.46.13:49220] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aT7kCrlqE6mJc-Y6giMhGgAAABU"]
[Mon Dec 15 00:21:32.642069 2025] [:error] [pid 8430:tid 8447] [client 4.230.46.13:10005] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aT7kDFk7yXaRc6dQclgTaQAAAM4"]
[Mon Dec 15 00:21:34.979832 2025] [:error] [pid 8430:tid 8449] [client 4.230.46.13:49246] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aT7kDlk7yXaRc6dQclgTbgAAANA"]
[Mon Dec 15 00:21:39.388739 2025] [:error] [pid 8339:tid 8346] [client 4.230.46.13:47426] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aT7kE7lqE6mJc-Y6giMhIAAAAAM"]
[Mon Dec 15 00:21:40.305322 2025] [:error] [pid 8340:tid 8388] [client 4.230.46.13:10004] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aT7kFIIT4nh2qy-Ry9pIowAAAFE"]
[Mon Dec 15 00:21:43.041863 2025] [:error] [pid 8340:tid 8394] [client 4.230.46.13:10065] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aT7kF4IT4nh2qy-Ry9pIpQAAAFc"]
[Mon Dec 15 00:21:45.044784 2025] [:error] [pid 8430:tid 8433] [client 4.230.46.13:10011] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aT7kGVk7yXaRc6dQclgTfAAAAMA"]
[Mon Dec 15 00:21:48.715853 2025] [:error] [pid 8430:tid 8456] [client 4.230.46.13:49245] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aT7kHFk7yXaRc6dQclgTgAAAANc"]
[Mon Dec 15 00:21:49.387510 2025] [:error] [pid 8339:tid 8355] [client 4.230.46.13:10096] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aT7kHblqE6mJc-Y6giMhJgAAAAw"]
[Mon Dec 15 00:21:50.547451 2025] [:error] [pid 8340:tid 8378] [client 4.230.46.13:9751] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aT7kHoIT4nh2qy-Ry9pIqgAAAEc"]
[Mon Dec 15 00:21:52.222315 2025] [:error] [pid 8339:tid 8349] [client 4.230.46.13:9493] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aT7kILlqE6mJc-Y6giMhKQAAAAY"]
[Mon Dec 15 00:21:53.575692 2025] [:error] [pid 8340:tid 8375] [client 4.230.46.13:9773] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aT7kIYIT4nh2qy-Ry9pIsQAAAEQ"]
[Mon Dec 15 00:21:56.175614 2025] [:error] [pid 9009:tid 9033] [client 4.230.46.13:10076] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aT7kJAhxwdgwYWQ8h8V2ygAAARY"]
[Mon Dec 15 00:22:02.024646 2025] [:error] [pid 8430:tid 8443] [client 4.230.46.13:9780] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aT7kKlk7yXaRc6dQclgTswAAAMo"]
[Mon Dec 15 00:22:02.670635 2025] [:error] [pid 9009:tid 9015] [client 4.230.46.13:9487] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aT7kKghxwdgwYWQ8h8V2-gAAAQQ"]
[Mon Dec 15 00:22:04.121512 2025] [proxy_fcgi:error] [pid 9009:tid 9011] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:04.299634 2025] [proxy_fcgi:error] [pid 9009:tid 9022] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:04.453002 2025] [proxy_fcgi:error] [pid 9009:tid 9012] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:04.607993 2025] [proxy_fcgi:error] [pid 9009:tid 9020] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:04.758291 2025] [proxy_fcgi:error] [pid 9009:tid 9032] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:04.913212 2025] [proxy_fcgi:error] [pid 9009:tid 9035] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:05.343219 2025] [proxy_fcgi:error] [pid 9009:tid 9019] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:05.498706 2025] [proxy_fcgi:error] [pid 9009:tid 9021] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:05.667490 2025] [proxy_fcgi:error] [pid 9009:tid 9022] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:05.819853 2025] [proxy_fcgi:error] [pid 9009:tid 9014] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:05.990148 2025] [proxy_fcgi:error] [pid 9009:tid 9020] [client 4.230.46.13:49234] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:22:06.162802 2025] [:error] [pid 9009:tid 9017] [client 4.230.46.13:49234] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aT7kLghxwdgwYWQ8h8V3LQAAAQY"]
[Mon Dec 15 00:22:07.185800 2025] [:error] [pid 8340:tid 8377] [client 4.230.46.13:10082] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aT7kL4IT4nh2qy-Ry9pJFwAAAEY"]
[Mon Dec 15 00:22:09.042021 2025] [:error] [pid 9009:tid 9011] [client 4.230.46.13:10037] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aT7kMQhxwdgwYWQ8h8V3SAAAAQA"]
[Mon Dec 15 00:22:09.779921 2025] [:error] [pid 9009:tid 9013] [client 4.230.46.13:49242] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aT7kMQhxwdgwYWQ8h8V3TwAAAQI"]
[Mon Dec 15 00:22:11.898852 2025] [:error] [pid 8430:tid 8451] [client 4.230.46.13:10068] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aT7kM1k7yXaRc6dQclgTzgAAANI"]
[Mon Dec 15 00:22:13.046993 2025] [:error] [pid 8430:tid 8453] [client 4.230.46.13:9737] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aT7kNVk7yXaRc6dQclgT0AAAANQ"]
[Mon Dec 15 00:22:13.810090 2025] [:error] [pid 8430:tid 8450] [client 4.230.46.13:9997] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aT7kNVk7yXaRc6dQclgT0QAAANE"]
[Mon Dec 15 00:22:15.367732 2025] [:error] [pid 8339:tid 8363] [client 4.230.46.13:9730] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aT7kN7lqE6mJc-Y6giMhdgAAABQ"]
[Mon Dec 15 00:22:16.755991 2025] [:error] [pid 8430:tid 8457] [client 4.230.46.13:10045] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aT7kOFk7yXaRc6dQclgT2gAAANg"]
[Mon Dec 15 00:22:17.908105 2025] [:error] [pid 8430:tid 8449] [client 4.230.46.13:9759] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aT7kOVk7yXaRc6dQclgT2wAAANA"]
[Mon Dec 15 00:22:19.856547 2025] [:error] [pid 8340:tid 8384] [client 4.230.46.13:49277] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aT7kO4IT4nh2qy-Ry9pJIgAAAE0"]
[Mon Dec 15 00:22:21.496289 2025] [:error] [pid 8340:tid 8377] [client 4.230.46.13:9985] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aT7kPYIT4nh2qy-Ry9pJIwAAAEY"]
[Mon Dec 15 00:22:24.296498 2025] [:error] [pid 9009:tid 9018] [client 4.230.46.13:49251] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nij.php"] [unique_id "aT7kQAhxwdgwYWQ8h8V3dAAAAQc"]
[Mon Dec 15 00:22:28.944387 2025] [:error] [pid 8430:tid 8449] [client 4.230.46.13:9777] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nij.php"] [unique_id "aT7kRFk7yXaRc6dQclgUGAAAANA"]
[Mon Dec 15 00:22:31.305005 2025] [:error] [pid 9009:tid 9014] [client 4.230.46.13:10062] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nij.php"] [unique_id "aT7kRwhxwdgwYWQ8h8V3gQAAAQM"]
[Mon Dec 15 00:22:32.765750 2025] [:error] [pid 9009:tid 9025] [client 4.230.46.13:49221] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nij.php"] [unique_id "aT7kSAhxwdgwYWQ8h8V3iAAAAQ4"]
[Mon Dec 15 00:22:34.407434 2025] [:error] [pid 8430:tid 8452] [client 4.230.46.13:9989] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aT7kSlk7yXaRc6dQclgUKgAAANM"]
[Mon Dec 15 00:22:38.306634 2025] [:error] [pid 8341:tid 8398] [client 4.230.46.13:10027] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aT7kThOat6dLvzj8EhTLggAAAIA"]
[Mon Dec 15 00:22:41.942092 2025] [:error] [pid 8430:tid 8438] [client 4.230.46.13:48545] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aT7kUVk7yXaRc6dQclgUNAAAAMU"]
[Mon Dec 15 00:22:49.286815 2025] [:error] [pid 8341:tid 8415] [client 4.230.46.13:10054] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aT7kWROat6dLvzj8EhTLiQAAAJE"]
[Mon Dec 15 00:22:53.181636 2025] [:error] [pid 8430:tid 8452] [client 4.230.46.13:10055] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aT7kXVk7yXaRc6dQclgUQQAAANM"]
[Mon Dec 15 00:22:57.006838 2025] [:error] [pid 9009:tid 9028] [client 4.230.46.13:10081] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aT7kYQhxwdgwYWQ8h8V3vgAAARE"]
[Mon Dec 15 00:22:59.027505 2025] [:error] [pid 8430:tid 8457] [client 4.230.46.13:49269] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aT7kY1k7yXaRc6dQclgURgAAANg"]
[Mon Dec 15 00:23:00.956862 2025] [:error] [pid 8430:tid 8447] [client 4.230.46.13:10013] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aT7kZFk7yXaRc6dQclgUSgAAAM4"]
[Mon Dec 15 00:23:01.736465 2025] [:error] [pid 8339:tid 8344] [client 4.230.46.13:10075] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aT7kZblqE6mJc-Y6giMh8QAAAAE"]
[Mon Dec 15 00:23:04.631020 2025] [:error] [pid 9009:tid 9033] [client 4.230.46.13:9758] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aT7kaAhxwdgwYWQ8h8V3xAAAARY"]
[Mon Dec 15 00:23:06.566815 2025] [proxy_fcgi:error] [pid 8339:tid 8367] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:06.870602 2025] [proxy_fcgi:error] [pid 8339:tid 8350] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:07.038393 2025] [proxy_fcgi:error] [pid 8339:tid 8360] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:07.189197 2025] [proxy_fcgi:error] [pid 8339:tid 8346] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:07.339982 2025] [proxy_fcgi:error] [pid 8339:tid 8355] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:07.498117 2025] [proxy_fcgi:error] [pid 8339:tid 8364] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:07.682916 2025] [proxy_fcgi:error] [pid 8339:tid 8347] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:08.022841 2025] [proxy_fcgi:error] [pid 8339:tid 8352] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:08.219045 2025] [proxy_fcgi:error] [pid 8339:tid 8353] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:08.740327 2025] [proxy_fcgi:error] [pid 8339:tid 8362] [client 4.230.46.13:9475] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:23:08.897511 2025] [:error] [pid 8339:tid 8345] [client 4.230.46.13:9475] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtt.php"] [unique_id "aT7kbLlqE6mJc-Y6giMiAAAAAAI"]
[Mon Dec 15 00:23:09.518619 2025] [:error] [pid 8341:tid 8412] [client 4.230.46.13:9733] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtt.php"] [unique_id "aT7kbROat6dLvzj8EhTLsgAAAI4"]
[Mon Dec 15 00:23:11.039501 2025] [:error] [pid 8340:tid 8392] [client 4.230.46.13:9785] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtt.php"] [unique_id "aT7kb4IT4nh2qy-Ry9pJUwAAAFU"]
[Mon Dec 15 00:23:16.186879 2025] [:error] [pid 8340:tid 8395] [client 4.230.46.13:10044] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtt.php"] [unique_id "aT7kdIIT4nh2qy-Ry9pJVwAAAFg"]
[Mon Dec 15 00:23:21.281179 2025] [:error] [pid 9009:tid 9029] [client 4.230.46.13:9999] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aT7keQhxwdgwYWQ8h8V34wAAARI"]
[Mon Dec 15 00:23:22.391997 2025] [:error] [pid 8341:tid 8401] [client 4.230.46.13:9995] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aT7kehOat6dLvzj8EhTLvQAAAIM"]
[Mon Dec 15 00:23:37.053433 2025] [:error] [pid 8430:tid 8442] [client 4.230.46.13:9477] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/noe.php"] [unique_id "aT7kiVk7yXaRc6dQclgUagAAAMk"]
[Mon Dec 15 00:23:44.223300 2025] [:error] [pid 8430:tid 8434] [client 4.230.46.13:9992] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/noe.php"] [unique_id "aT7kkFk7yXaRc6dQclgUcwAAAME"]
[Mon Dec 15 00:23:52.205001 2025] [:error] [pid 9009:tid 9029] [client 4.230.46.13:49243] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aT7kmAhxwdgwYWQ8h8V4CQAAARI"]
[Mon Dec 15 00:23:53.878128 2025] [:error] [pid 8340:tid 8376] [client 4.230.46.13:50386] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aT7kmYIT4nh2qy-Ry9pJfgAAAEU"]
[Mon Dec 15 00:23:56.278320 2025] [:error] [pid 8340:tid 8381] [client 4.230.46.13:50422] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aT7knIIT4nh2qy-Ry9pJgwAAAEo"]
[Mon Dec 15 00:23:57.161194 2025] [:error] [pid 8341:tid 8413] [client 4.230.46.13:49224] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aT7knROat6dLvzj8EhTL9QAAAI8"]
[Mon Dec 15 00:23:59.217450 2025] [:error] [pid 9009:tid 9017] [client 4.230.46.13:10034] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shellalfa.php"] [unique_id "aT7knwhxwdgwYWQ8h8V4FgAAAQY"]
[Mon Dec 15 00:24:00.774172 2025] [:error] [pid 8339:tid 8343] [client 4.230.46.13:10048] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shellalfa.php"] [unique_id "aT7koLlqE6mJc-Y6giMiPAAAAAA"]
[Mon Dec 15 00:24:08.125516 2025] [proxy_fcgi:error] [pid 8341:tid 8401] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:08.308100 2025] [proxy_fcgi:error] [pid 8341:tid 8421] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:08.459751 2025] [proxy_fcgi:error] [pid 8341:tid 8411] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:08.631692 2025] [proxy_fcgi:error] [pid 8341:tid 8399] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:08.806324 2025] [proxy_fcgi:error] [pid 8341:tid 8416] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:08.959044 2025] [proxy_fcgi:error] [pid 8341:tid 8422] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:09.120721 2025] [proxy_fcgi:error] [pid 8341:tid 8408] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:09.280452 2025] [proxy_fcgi:error] [pid 8341:tid 8415] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:09.857627 2025] [proxy_fcgi:error] [pid 8341:tid 8420] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:10.011427 2025] [proxy_fcgi:error] [pid 8341:tid 8398] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:10.172013 2025] [proxy_fcgi:error] [pid 8341:tid 8409] [client 4.230.46.13:45176] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:24:10.394771 2025] [:error] [pid 8341:tid 8403] [client 4.230.46.13:45176] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gelap.php"] [unique_id "aT7kqhOat6dLvzj8EhTMCAAAAIU"]
[Mon Dec 15 00:24:14.586712 2025] [:error] [pid 9009:tid 9018] [client 4.230.46.13:47436] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gelap.php"] [unique_id "aT7krghxwdgwYWQ8h8V4NQAAAQc"]
[Mon Dec 15 00:24:15.566383 2025] [:error] [pid 8340:tid 8378] [client 4.230.46.13:10069] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gelap.php"] [unique_id "aT7kr4IT4nh2qy-Ry9pJkwAAAEc"]
[Mon Dec 15 00:24:21.112735 2025] [:error] [pid 8430:tid 8438] [client 4.230.46.13:50394] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gelap.php"] [unique_id "aT7ktVk7yXaRc6dQclgUtgAAAMU"]
[Mon Dec 15 00:24:24.732214 2025] [:error] [pid 9009:tid 9028] [client 4.230.46.13:47888] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aT7kuAhxwdgwYWQ8h8V4TwAAARE"]
[Mon Dec 15 00:24:37.485186 2025] [:error] [pid 8340:tid 8389] [client 4.230.46.13:48954] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aT7kxYIT4nh2qy-Ry9pJrQAAAFI"]
[Mon Dec 15 00:24:38.101675 2025] [:error] [pid 8430:tid 8454] [client 4.230.46.13:48934] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aT7kxlk7yXaRc6dQclgUzAAAANU"]
[Mon Dec 15 00:24:39.541482 2025] [:error] [pid 9009:tid 9033] [client 4.230.46.13:47391] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aT7kxwhxwdgwYWQ8h8V4YwAAARY"]
[Mon Dec 15 00:24:40.889105 2025] [:error] [pid 9009:tid 9022] [client 4.230.46.13:48898] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aT7kyAhxwdgwYWQ8h8V4awAAAQs"]
[Mon Dec 15 00:24:42.986375 2025] [:error] [pid 8341:tid 8412] [client 4.230.46.13:47111] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aT7kyhOat6dLvzj8EhTMWQAAAI4"]
[Mon Dec 15 00:24:44.095868 2025] [:error] [pid 8430:tid 8450] [client 4.230.46.13:9694] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aT7kzFk7yXaRc6dQclgU1QAAANE"]
[Mon Dec 15 00:24:47.444907 2025] [:error] [pid 8340:tid 8378] [client 4.230.46.13:10120] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aT7kz4IT4nh2qy-Ry9pJtwAAAEc"]
[Mon Dec 15 00:24:50.253948 2025] [:error] [pid 8340:tid 8384] [client 4.230.46.13:50781] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aT7k0oIT4nh2qy-Ry9pJuQAAAE0"]
[Mon Dec 15 00:24:51.097146 2025] [:error] [pid 8340:tid 8393] [client 4.230.46.13:48625] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aT7k04IT4nh2qy-Ry9pJuwAAAFY"]
[Mon Dec 15 00:24:52.344593 2025] [:error] [pid 8341:tid 8409] [client 4.230.46.13:48579] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aT7k1BOat6dLvzj8EhTMZwAAAIs"]
[Mon Dec 15 00:24:54.702067 2025] [:error] [pid 8430:tid 8452] [client 4.230.46.13:50803] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aT7k1lk7yXaRc6dQclgU7gAAANM"]
[Mon Dec 15 00:24:56.870598 2025] [:error] [pid 9009:tid 9018] [client 4.230.46.13:48451] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aT7k2AhxwdgwYWQ8h8V4iwAAAQc"]
[Mon Dec 15 00:24:57.833930 2025] [:error] [pid 8339:tid 8353] [client 4.230.46.13:9629] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aT7k2blqE6mJc-Y6giMimAAAAAo"]
[Mon Dec 15 00:24:59.276360 2025] [:error] [pid 8430:tid 8447] [client 4.230.46.13:51134] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aT7k21k7yXaRc6dQclgU9wAAAM4"]
[Mon Dec 15 00:25:00.244481 2025] [:error] [pid 8339:tid 8347] [client 4.230.46.13:50630] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aT7k3LlqE6mJc-Y6giMioQAAAAQ"]
[Mon Dec 15 00:25:01.335740 2025] [:error] [pid 8341:tid 8405] [client 4.230.46.13:50801] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aT7k3ROat6dLvzj8EhTMgQAAAIc"]
[Mon Dec 15 00:25:04.108023 2025] [:error] [pid 8339:tid 8359] [client 4.230.46.13:9620] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aT7k4LlqE6mJc-Y6giMiugAAABA"]
[Mon Dec 15 00:25:04.607422 2025] [:error] [pid 9009:tid 9026] [client 4.230.46.13:50705] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aT7k4AhxwdgwYWQ8h8V4mgAAAQ8"]
[Mon Dec 15 00:25:06.447179 2025] [:error] [pid 8339:tid 8352] [client 4.230.46.13:45882] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aT7k4rlqE6mJc-Y6giMiwAAAAAk"]
[Mon Dec 15 00:25:07.990214 2025] [:error] [pid 8430:tid 8439] [client 4.230.46.13:47528] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aT7k41k7yXaRc6dQclgU_wAAAMY"]
[Mon Dec 15 00:25:09.231688 2025] [:error] [pid 8430:tid 8448] [client 4.230.46.13:45867] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aT7k5Vk7yXaRc6dQclgVAwAAAM8"]
[Mon Dec 15 00:25:09.977648 2025] [:error] [pid 8341:tid 8400] [client 4.230.46.13:48468] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aT7k5ROat6dLvzj8EhTMiwAAAII"]
[Mon Dec 15 00:25:14.481152 2025] [proxy_fcgi:error] [pid 9009:tid 9013] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:14.633069 2025] [proxy_fcgi:error] [pid 9009:tid 9032] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:14.784042 2025] [proxy_fcgi:error] [pid 9009:tid 9030] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:14.935835 2025] [proxy_fcgi:error] [pid 9009:tid 9014] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:15.241324 2025] [proxy_fcgi:error] [pid 9009:tid 9022] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:15.392142 2025] [proxy_fcgi:error] [pid 9009:tid 9011] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:15.554992 2025] [proxy_fcgi:error] [pid 9009:tid 9021] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:15.745913 2025] [proxy_fcgi:error] [pid 9009:tid 9026] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:15.897668 2025] [proxy_fcgi:error] [pid 9009:tid 9015] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:16.051342 2025] [proxy_fcgi:error] [pid 9009:tid 9028] [client 4.230.46.13:48045] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:25:16.283213 2025] [:error] [pid 9009:tid 9020] [client 4.230.46.13:48045] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT7k7AhxwdgwYWQ8h8V4wwAAAQk"]
[Mon Dec 15 00:25:19.358256 2025] [:error] [pid 8340:tid 8394] [client 4.230.46.13:50691] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT7k74IT4nh2qy-Ry9pJ4gAAAFc"]
[Mon Dec 15 00:25:20.517378 2025] [:error] [pid 8340:tid 8386] [client 4.230.46.13:47571] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT7k8IIT4nh2qy-Ry9pJ5QAAAE8"]
[Mon Dec 15 00:25:23.262678 2025] [:error] [pid 8340:tid 8374] [client 4.230.46.13:47587] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT7k84IT4nh2qy-Ry9pJ6QAAAEM"]
[Mon Dec 15 00:25:25.638972 2025] [:error] [pid 8341:tid 8401] [client 4.230.46.13:47553] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f6.php"] [unique_id "aT7k9ROat6dLvzj8EhTMmwAAAIM"]
[Mon Dec 15 00:25:28.136156 2025] [:error] [pid 8341:tid 8418] [client 4.230.46.13:48019] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f6.php"] [unique_id "aT7k-BOat6dLvzj8EhTMnAAAAJQ"]
[Mon Dec 15 00:25:29.301724 2025] [:error] [pid 8339:tid 8345] [client 4.230.46.13:45836] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f6.php"] [unique_id "aT7k-blqE6mJc-Y6giMi7AAAAAI"]
[Mon Dec 15 00:25:30.525735 2025] [:error] [pid 8340:tid 8393] [client 4.230.46.13:50733] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f6.php"] [unique_id "aT7k-oIT4nh2qy-Ry9pJ7AAAAFY"]
[Mon Dec 15 00:25:35.055786 2025] [:error] [pid 8430:tid 8446] [client 4.230.46.13:48460] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aT7k_1k7yXaRc6dQclgVIAAAAM0"]
[Mon Dec 15 00:25:37.291538 2025] [:error] [pid 9009:tid 9027] [client 4.230.46.13:45856] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aT7lAQhxwdgwYWQ8h8V43AAAARA"]
[Mon Dec 15 00:25:39.546422 2025] [:error] [pid 9009:tid 9026] [client 4.230.46.13:47581] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aT7lAwhxwdgwYWQ8h8V44AAAAQ8"]
[Mon Dec 15 00:25:40.132068 2025] [:error] [pid 8339:tid 8348] [client 4.230.46.13:9621] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aT7lBLlqE6mJc-Y6giMi-gAAAAU"]
[Mon Dec 15 00:25:43.075122 2025] [:error] [pid 8341:tid 8401] [client 4.230.46.13:47543] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aT7lBxOat6dLvzj8EhTMqAAAAIM"]
[Mon Dec 15 00:25:45.715211 2025] [:error] [pid 8341:tid 8417] [client 4.230.46.13:48032] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aT7lCROat6dLvzj8EhTMrQAAAJM"]
[Mon Dec 15 00:25:52.192803 2025] [:error] [pid 8339:tid 8360] [client 4.230.46.13:47599] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aT7lELlqE6mJc-Y6giMjCQAAABE"]
[Mon Dec 15 00:25:53.245849 2025] [:error] [pid 9009:tid 9019] [client 4.230.46.13:48172] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aT7lEQhxwdgwYWQ8h8V44wAAAQg"]
[Mon Dec 15 00:25:58.486259 2025] [:error] [pid 8430:tid 8433] [client 4.230.46.13:48151] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lol.php"] [unique_id "aT7lFlk7yXaRc6dQclgVMgAAAMA"]
[Mon Dec 15 00:25:59.664892 2025] [:error] [pid 8340:tid 8382] [client 4.230.46.13:47495] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lol.php"] [unique_id "aT7lF4IT4nh2qy-Ry9pJ_gAAAEs"]
[Mon Dec 15 00:26:03.385741 2025] [:error] [pid 9009:tid 9012] [client 4.230.46.13:47552] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lol.php"] [unique_id "aT7lGwhxwdgwYWQ8h8V4_QAAAQE"]
[Mon Dec 15 00:26:04.910341 2025] [:error] [pid 8430:tid 8451] [client 4.230.46.13:48180] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lol.php"] [unique_id "aT7lHFk7yXaRc6dQclgVOAAAANI"]
[Mon Dec 15 00:26:07.953710 2025] [:error] [pid 8430:tid 8441] [client 4.230.46.13:47586] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fileas.php"] [unique_id "aT7lH1k7yXaRc6dQclgVPgAAAMg"]
[Mon Dec 15 00:26:08.765686 2025] [:error] [pid 8341:tid 8408] [client 4.230.46.13:47580] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fileas.php"] [unique_id "aT7lIBOat6dLvzj8EhTMugAAAIo"]
[Mon Dec 15 00:26:09.713014 2025] [:error] [pid 8340:tid 8379] [client 4.230.46.13:45884] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fileas.php"] [unique_id "aT7lIYIT4nh2qy-Ry9pKBQAAAEg"]
[Mon Dec 15 00:26:11.003974 2025] [:error] [pid 8341:tid 8411] [client 4.230.46.13:48001] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fileas.php"] [unique_id "aT7lIxOat6dLvzj8EhTMvgAAAI0"]
[Mon Dec 15 00:26:13.785032 2025] [:error] [pid 8340:tid 8375] [client 4.230.46.13:45830] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/n3.php"] [unique_id "aT7lJYIT4nh2qy-Ry9pKBwAAAEQ"]
[Mon Dec 15 00:26:15.093924 2025] [:error] [pid 9009:tid 9011] [client 4.230.46.13:47583] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/n3.php"] [unique_id "aT7lJwhxwdgwYWQ8h8V5CAAAAQA"]
[Mon Dec 15 00:26:16.696575 2025] [proxy_fcgi:error] [pid 8341:tid 8412] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:16.849151 2025] [proxy_fcgi:error] [pid 8341:tid 8421] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:17.000013 2025] [proxy_fcgi:error] [pid 8341:tid 8398] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:17.189280 2025] [proxy_fcgi:error] [pid 8341:tid 8401] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:17.780704 2025] [proxy_fcgi:error] [pid 8341:tid 8400] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:17.958484 2025] [proxy_fcgi:error] [pid 8341:tid 8422] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:18.110718 2025] [proxy_fcgi:error] [pid 8341:tid 8417] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:18.306394 2025] [proxy_fcgi:error] [pid 8341:tid 8406] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:18.457781 2025] [proxy_fcgi:error] [pid 8341:tid 8408] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:18.611098 2025] [proxy_fcgi:error] [pid 8341:tid 8414] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:18.778397 2025] [proxy_fcgi:error] [pid 8341:tid 8407] [client 4.230.46.13:50690] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:26:18.948485 2025] [:error] [pid 8341:tid 8416] [client 4.230.46.13:50690] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT7lKhOat6dLvzj8EhTMzAAAAJI"]
[Mon Dec 15 00:26:19.507599 2025] [:error] [pid 9009:tid 9013] [client 4.230.46.13:48511] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT7lKwhxwdgwYWQ8h8V5EQAAAQI"]
[Mon Dec 15 00:26:21.021039 2025] [:error] [pid 8430:tid 8435] [client 4.230.46.13:47550] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT7lLVk7yXaRc6dQclgVQwAAAMI"]
[Mon Dec 15 00:26:21.936441 2025] [:error] [pid 8430:tid 8451] [client 4.230.46.13:47603] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT7lLVk7yXaRc6dQclgVRAAAANI"]
[Mon Dec 15 00:26:23.552025 2025] [:error] [pid 8340:tid 8391] [client 4.230.46.13:48031] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd67.php"] [unique_id "aT7lL4IT4nh2qy-Ry9pKCAAAAFQ"]
[Mon Dec 15 00:26:24.133933 2025] [:error] [pid 9009:tid 9035] [client 4.230.46.13:45866] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd67.php"] [unique_id "aT7lMAhxwdgwYWQ8h8V5GgAAARg"]
[Mon Dec 15 00:26:26.179497 2025] [:error] [pid 9009:tid 9021] [client 4.230.46.13:47563] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd67.php"] [unique_id "aT7lMghxwdgwYWQ8h8V5IQAAAQo"]
[Mon Dec 15 00:26:27.594348 2025] [:error] [pid 9009:tid 9029] [client 4.230.46.13:47532] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd67.php"] [unique_id "aT7lMwhxwdgwYWQ8h8V5JQAAARI"]
[Mon Dec 15 00:26:29.259807 2025] [:error] [pid 8341:tid 8421] [client 4.230.46.13:47538] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aT7lNROat6dLvzj8EhTM1QAAAJc"]
[Mon Dec 15 00:26:30.969234 2025] [:error] [pid 8340:tid 8381] [client 4.230.46.13:47503] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aT7lNoIT4nh2qy-Ry9pKDgAAAEo"]
[Mon Dec 15 00:26:31.949491 2025] [:error] [pid 8340:tid 8378] [client 4.230.46.13:45849] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aT7lN4IT4nh2qy-Ry9pKEQAAAEc"]
[Mon Dec 15 00:26:32.822419 2025] [:error] [pid 8339:tid 8346] [client 4.230.46.13:47544] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aT7lOLlqE6mJc-Y6giMjRwAAAAM"]
[Mon Dec 15 00:26:33.948436 2025] [:error] [pid 8339:tid 8359] [client 4.230.46.13:48494] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aT7lOblqE6mJc-Y6giMjSAAAABA"]
[Mon Dec 15 00:26:35.573926 2025] [:error] [pid 8341:tid 8410] [client 4.230.46.13:50701] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aT7lOxOat6dLvzj8EhTM4AAAAIw"]
[Mon Dec 15 00:26:38.142162 2025] [:error] [pid 8340:tid 8383] [client 4.230.46.13:47567] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aT7lPoIT4nh2qy-Ry9pKFwAAAEw"]
[Mon Dec 15 00:26:42.251433 2025] [:error] [pid 8430:tid 8447] [client 4.230.46.13:48055] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aT7lQlk7yXaRc6dQclgVXgAAAM4"]
[Mon Dec 15 00:26:43.091671 2025] [:error] [pid 8430:tid 8438] [client 4.230.46.13:48130] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aT7lQ1k7yXaRc6dQclgVYAAAAMU"]
[Mon Dec 15 00:26:44.225045 2025] [:error] [pid 8430:tid 8448] [client 4.230.46.13:47498] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aT7lRFk7yXaRc6dQclgVYwAAAM8"]
[Mon Dec 15 00:26:44.885180 2025] [:error] [pid 8341:tid 8410] [client 4.230.46.13:45854] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aT7lRBOat6dLvzj8EhTM8AAAAIw"]
[Mon Dec 15 00:26:47.973254 2025] [:error] [pid 8341:tid 8417] [client 4.230.46.13:48136] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aT7lRxOat6dLvzj8EhTM-QAAAJM"]
[Mon Dec 15 00:26:49.509430 2025] [:error] [pid 8339:tid 8359] [client 4.230.46.13:47497] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/auth.php"] [unique_id "aT7lSblqE6mJc-Y6giMjUAAAABA"]
[Mon Dec 15 00:26:50.892417 2025] [:error] [pid 9009:tid 9027] [client 4.230.46.13:45842] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/auth.php"] [unique_id "aT7lSghxwdgwYWQ8h8V5VAAAARA"]
[Mon Dec 15 00:26:51.862772 2025] [:error] [pid 8339:tid 8366] [client 4.230.46.13:47594] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/auth.php"] [unique_id "aT7lS7lqE6mJc-Y6giMjUgAAABc"]
[Mon Dec 15 00:26:52.365691 2025] [:error] [pid 8430:tid 8447] [client 4.230.46.13:48177] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/auth.php"] [unique_id "aT7lTFk7yXaRc6dQclgVawAAAM4"]
[Mon Dec 15 00:26:54.320701 2025] [:error] [pid 8341:tid 8410] [client 4.230.46.13:47494] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT7lThOat6dLvzj8EhTNAgAAAIw"]
[Mon Dec 15 00:26:55.597023 2025] [:error] [pid 8339:tid 8365] [client 4.230.46.13:48039] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT7lT7lqE6mJc-Y6giMjYQAAABY"]
[Mon Dec 15 00:26:56.723566 2025] [:error] [pid 9009:tid 9029] [client 4.230.46.13:48000] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT7lUAhxwdgwYWQ8h8V5ZQAAARI"]
[Mon Dec 15 00:26:57.835133 2025] [:error] [pid 8340:tid 8376] [client 4.230.46.13:45826] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT7lUYIT4nh2qy-Ry9pKJgAAAEU"]
[Mon Dec 15 00:26:58.586518 2025] [:error] [pid 8430:tid 8434] [client 4.230.46.13:45875] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aT7lUlk7yXaRc6dQclgVcAAAAME"]
[Mon Dec 15 00:26:59.679993 2025] [:error] [pid 8339:tid 8358] [client 4.230.46.13:45838] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aT7lU7lqE6mJc-Y6giMjZgAAAA8"]
[Mon Dec 15 00:27:02.853818 2025] [:error] [pid 8339:tid 8361] [client 4.230.46.13:47560] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aT7lVrlqE6mJc-Y6giMjbgAAABI"]
[Mon Dec 15 00:27:06.460222 2025] [:error] [pid 8430:tid 8448] [client 4.230.46.13:45837] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aT7lWlk7yXaRc6dQclgVegAAAM8"]
[Mon Dec 15 00:27:09.506964 2025] [:error] [pid 9009:tid 9031] [client 4.230.46.13:48156] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abt.php"] [unique_id "aT7lXQhxwdgwYWQ8h8V5kQAAARQ"]
[Mon Dec 15 00:27:11.182197 2025] [:error] [pid 8430:tid 8449] [client 4.230.46.13:47596] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abt.php"] [unique_id "aT7lX1k7yXaRc6dQclgVgwAAANA"]
[Mon Dec 15 00:27:15.468632 2025] [:error] [pid 8341:tid 8415] [client 4.230.46.13:47511] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abt.php"] [unique_id "aT7lYxOat6dLvzj8EhTNEQAAAJE"]
[Mon Dec 15 00:27:17.417513 2025] [:error] [pid 8340:tid 8377] [client 4.230.46.13:51062] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abt.php"] [unique_id "aT7lZYIT4nh2qy-Ry9pKOQAAAEY"]
[Mon Dec 15 00:27:19.669142 2025] [proxy_fcgi:error] [pid 8340:tid 8392] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:22.046127 2025] [proxy_fcgi:error] [pid 8340:tid 8375] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:22.229807 2025] [proxy_fcgi:error] [pid 8340:tid 8385] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:22.386058 2025] [proxy_fcgi:error] [pid 8340:tid 8383] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:22.550294 2025] [proxy_fcgi:error] [pid 8340:tid 8395] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:22.702492 2025] [proxy_fcgi:error] [pid 8340:tid 8390] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:23.021617 2025] [proxy_fcgi:error] [pid 8340:tid 8380] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:23.339041 2025] [proxy_fcgi:error] [pid 8340:tid 8386] [client 4.230.46.13:51049] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:27:23.724022 2025] [:error] [pid 8340:tid 8389] [client 4.230.46.13:51049] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aT7la4IT4nh2qy-Ry9pKSgAAAFI"]
[Mon Dec 15 00:27:26.819205 2025] [:error] [pid 9009:tid 9032] [client 4.230.46.13:45189] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aT7lbghxwdgwYWQ8h8V5xQAAARU"]
[Mon Dec 15 00:27:28.985483 2025] [:error] [pid 8430:tid 8457] [client 4.230.46.13:48181] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aT7lcFk7yXaRc6dQclgVmAAAANg"]
[Mon Dec 15 00:27:30.163031 2025] [:error] [pid 9009:tid 9026] [client 4.230.46.13:50442] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aT7lcghxwdgwYWQ8h8V5zgAAAQ8"]
[Mon Dec 15 00:27:32.365075 2025] [:error] [pid 8430:tid 8438] [client 4.230.46.13:51177] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sko.php"] [unique_id "aT7ldFk7yXaRc6dQclgVowAAAMU"]
[Mon Dec 15 00:27:33.527006 2025] [:error] [pid 8341:tid 8416] [client 4.230.46.13:50817] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sko.php"] [unique_id "aT7ldROat6dLvzj8EhTNIwAAAJI"]
[Mon Dec 15 00:27:34.930208 2025] [:error] [pid 8340:tid 8375] [client 4.230.46.13:51155] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sko.php"] [unique_id "aT7ldoIT4nh2qy-Ry9pKUwAAAEQ"]
[Mon Dec 15 00:27:37.158682 2025] [:error] [pid 8430:tid 8452] [client 4.230.46.13:45244] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sko.php"] [unique_id "aT7leVk7yXaRc6dQclgVrAAAANM"]
[Mon Dec 15 00:27:38.099629 2025] [:error] [pid 8430:tid 8449] [client 4.230.46.13:46858] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aT7lelk7yXaRc6dQclgVrgAAANA"]
[Mon Dec 15 00:27:39.057390 2025] [:error] [pid 9009:tid 9033] [client 4.230.46.13:45199] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aT7lewhxwdgwYWQ8h8V54wAAARY"]
[Mon Dec 15 00:27:40.994137 2025] [:error] [pid 8430:tid 8438] [client 4.230.46.13:51194] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aT7lfFk7yXaRc6dQclgVsgAAAMU"]
[Mon Dec 15 00:27:41.665881 2025] [:error] [pid 8339:tid 8367] [client 4.230.46.13:51187] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aT7lfblqE6mJc-Y6giMjlgAAABg"]
[Mon Dec 15 00:27:43.153942 2025] [:error] [pid 8430:tid 8437] [client 4.230.46.13:51019] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aT7lf1k7yXaRc6dQclgVvAAAAMQ"]
[Mon Dec 15 00:27:44.444643 2025] [:error] [pid 8430:tid 8451] [client 4.230.46.13:9470] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aT7lgFk7yXaRc6dQclgVwAAAANI"]
[Mon Dec 15 00:27:46.550152 2025] [:error] [pid 8430:tid 8454] [client 4.230.46.13:50835] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aT7lglk7yXaRc6dQclgVxgAAANU"]
[Mon Dec 15 00:27:48.211059 2025] [:error] [pid 9009:tid 9015] [client 4.230.46.13:9875] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aT7lhAhxwdgwYWQ8h8V56gAAAQQ"]
[Mon Dec 15 00:27:49.174595 2025] [:error] [pid 9009:tid 9029] [client 4.230.46.13:50850] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/png.php"] [unique_id "aT7lhQhxwdgwYWQ8h8V58AAAARI"]
[Mon Dec 15 00:27:51.439221 2025] [:error] [pid 9009:tid 9025] [client 4.230.46.13:9295] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/png.php"] [unique_id "aT7lhwhxwdgwYWQ8h8V58wAAAQ4"]
[Mon Dec 15 00:27:52.291593 2025] [:error] [pid 8341:tid 8422] [client 4.230.46.13:9909] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/png.php"] [unique_id "aT7liBOat6dLvzj8EhTNOgAAAJg"]
[Mon Dec 15 00:27:54.860651 2025] [:error] [pid 9009:tid 9032] [client 4.230.46.13:51141] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/png.php"] [unique_id "aT7lighxwdgwYWQ8h8V5-gAAARU"]
[Mon Dec 15 00:27:56.220509 2025] [:error] [pid 8430:tid 8449] [client 4.230.46.13:51180] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aT7ljFk7yXaRc6dQclgV4AAAANA"]
[Mon Dec 15 00:27:57.668422 2025] [:error] [pid 8430:tid 8456] [client 4.230.46.13:51225] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aT7ljVk7yXaRc6dQclgV7QAAANc"]
[Mon Dec 15 00:27:58.188448 2025] [:error] [pid 8341:tid 8416] [client 4.230.46.13:50484] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aT7ljhOat6dLvzj8EhTNQAAAAJI"]
[Mon Dec 15 00:28:00.975163 2025] [:error] [pid 8430:tid 8457] [client 4.230.46.13:9911] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aT7lkFk7yXaRc6dQclgWDAAAANg"]
[Mon Dec 15 00:28:03.665762 2025] [:error] [pid 8430:tid 8436] [client 4.230.46.13:51158] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aT7lk1k7yXaRc6dQclgWIgAAAMM"]
[Mon Dec 15 00:28:05.308632 2025] [:error] [pid 8430:tid 8438] [client 4.230.46.13:9305] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aT7llVk7yXaRc6dQclgWLQAAAMU"]
[Mon Dec 15 00:28:07.012524 2025] [:error] [pid 8430:tid 8453] [client 4.230.46.13:9901] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aT7ll1k7yXaRc6dQclgWOAAAANQ"]
[Mon Dec 15 00:28:07.773118 2025] [:error] [pid 8430:tid 8448] [client 4.230.46.13:9867] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aT7ll1k7yXaRc6dQclgWPwAAAM8"]
[Mon Dec 15 00:28:09.734878 2025] [:error] [pid 8340:tid 8388] [client 4.230.46.13:46947] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aT7lmYIT4nh2qy-Ry9pKjgAAAFE"]
[Mon Dec 15 00:28:10.600859 2025] [:error] [pid 8430:tid 8434] [client 4.230.46.13:48293] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aT7lmlk7yXaRc6dQclgWWgAAAME"]
[Mon Dec 15 00:28:13.254278 2025] [:error] [pid 9009:tid 9011] [client 4.230.46.13:48279] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aT7lnQhxwdgwYWQ8h8V6IgAAAQA"]
[Mon Dec 15 00:28:15.341285 2025] [:error] [pid 8339:tid 8351] [client 4.230.46.13:48286] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aT7ln7lqE6mJc-Y6giMj5wAAAAg"]
[Mon Dec 15 00:28:16.207346 2025] [:error] [pid 8340:tid 8382] [client 4.230.46.13:49072] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aT7loIIT4nh2qy-Ry9pKpgAAAEs"]
[Mon Dec 15 00:28:17.874428 2025] [:error] [pid 8339:tid 8347] [client 4.230.46.13:47747] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aT7loblqE6mJc-Y6giMj7AAAAAQ"]
[Mon Dec 15 00:28:20.464167 2025] [:error] [pid 8341:tid 8409] [client 4.230.46.13:48546] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aT7lpBOat6dLvzj8EhTNoAAAAIs"]
[Mon Dec 15 00:28:21.624132 2025] [:error] [pid 8430:tid 8450] [client 4.230.46.13:10210] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aT7lpVk7yXaRc6dQclgWqgAAANE"]
[Mon Dec 15 00:28:22.845959 2025] [:error] [pid 8340:tid 8388] [client 4.230.46.13:48534] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r4f_1.php"] [unique_id "aT7lpoIT4nh2qy-Ry9pKxQAAAFE"]
[Mon Dec 15 00:28:24.472329 2025] [proxy_fcgi:error] [pid 8339:tid 8360] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:24.640141 2025] [proxy_fcgi:error] [pid 8339:tid 8352] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:24.910003 2025] [proxy_fcgi:error] [pid 8339:tid 8344] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:25.064310 2025] [proxy_fcgi:error] [pid 8339:tid 8353] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:25.219250 2025] [proxy_fcgi:error] [pid 8339:tid 8348] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:25.385894 2025] [proxy_fcgi:error] [pid 8339:tid 8364] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:25.722487 2025] [proxy_fcgi:error] [pid 8339:tid 8358] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:25.882482 2025] [proxy_fcgi:error] [pid 8339:tid 8361] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:26.034307 2025] [proxy_fcgi:error] [pid 8339:tid 8350] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:26.376322 2025] [proxy_fcgi:error] [pid 8339:tid 8367] [client 4.230.46.13:10223] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:28:27.014876 2025] [:error] [pid 8339:tid 8351] [client 4.230.46.13:10223] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aT7lq7lqE6mJc-Y6giMkCwAAAAg"]
[Mon Dec 15 00:28:28.315723 2025] [:error] [pid 8339:tid 8345] [client 4.230.46.13:45510] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aT7lrLlqE6mJc-Y6giMkDAAAAAI"]
[Mon Dec 15 00:28:31.917875 2025] [:error] [pid 9009:tid 9034] [client 4.230.46.13:44888] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aT7lrwhxwdgwYWQ8h8V6XwAAARc"]
[Mon Dec 15 00:28:34.075127 2025] [:error] [pid 8340:tid 8386] [client 4.230.46.13:9269] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aT7lsoIT4nh2qy-Ry9pKzAAAAE8"]
[Mon Dec 15 00:28:42.119877 2025] [:error] [pid 8341:tid 8400] [client 4.230.46.13:45539] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aT7luhOat6dLvzj8EhTNvgAAAII"]
[Mon Dec 15 00:28:43.404093 2025] [:error] [pid 8339:tid 8361] [client 4.230.46.13:47919] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aT7lu7lqE6mJc-Y6giMkIgAAABI"]
[Mon Dec 15 00:28:48.940521 2025] [:error] [pid 8341:tid 8403] [client 4.230.46.13:10103] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aT7lwBOat6dLvzj8EhTNxwAAAIU"]
[Mon Dec 15 00:28:51.004450 2025] [:error] [pid 8339:tid 8355] [client 4.230.46.13:48249] [client 4.230.46.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aT7lw7lqE6mJc-Y6giMkLwAAAAw"]
[Mon Dec 15 00:28:52.889149 2025] [:error] [pid 8341:tid 8399] [client 4.230.46.13:45616] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mans.php"] [unique_id "aT7lxBOat6dLvzj8EhTNzgAAAIE"]
[Mon Dec 15 00:28:56.601422 2025] [:error] [pid 9009:tid 9016] [client 4.230.46.13:50422] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mans.php"] [unique_id "aT7lyAhxwdgwYWQ8h8V6nwAAAQU"]
[Mon Dec 15 00:29:00.488327 2025] [:error] [pid 9009:tid 9025] [client 4.230.46.13:47840] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mans.php"] [unique_id "aT7lzAhxwdgwYWQ8h8V6wAAAAQ4"]
[Mon Dec 15 00:29:01.792655 2025] [:error] [pid 8339:tid 8348] [client 4.230.46.13:9731] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mans.php"] [unique_id "aT7lzblqE6mJc-Y6giMkVQAAAAU"]
[Mon Dec 15 00:29:03.449445 2025] [:error] [pid 8430:tid 8437] [client 4.230.46.13:47375] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aT7lz1k7yXaRc6dQclgW7gAAAMQ"]
[Mon Dec 15 00:29:06.615076 2025] [:error] [pid 9009:tid 9030] [client 4.230.46.13:48906] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aT7l0ghxwdgwYWQ8h8V64wAAARM"]
[Mon Dec 15 00:29:07.549413 2025] [:error] [pid 8339:tid 8348] [client 4.230.46.13:9768] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aT7l07lqE6mJc-Y6giMkZQAAAAU"]
[Mon Dec 15 00:29:08.179185 2025] [:error] [pid 8430:tid 8454] [client 4.230.46.13:47371] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/build.php"] [unique_id "aT7l1Fk7yXaRc6dQclgW9gAAANU"]
[Mon Dec 15 00:29:09.372762 2025] [:error] [pid 8340:tid 8391] [client 4.230.46.13:47386] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aT7l1YIT4nh2qy-Ry9pLMgAAAFQ"]
[Mon Dec 15 00:29:11.618804 2025] [:error] [pid 9009:tid 9021] [client 4.230.46.13:48970] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aT7l1whxwdgwYWQ8h8V65wAAAQo"]
[Mon Dec 15 00:29:16.243633 2025] [:error] [pid 9009:tid 9017] [client 4.230.46.13:45183] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aT7l3AhxwdgwYWQ8h8V67wAAAQY"]
[Mon Dec 15 00:29:17.112376 2025] [:error] [pid 8430:tid 8453] [client 4.230.46.13:48926] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aT7l3Vk7yXaRc6dQclgXAAAAANQ"]
[Mon Dec 15 00:29:18.414346 2025] [:error] [pid 8430:tid 8435] [client 4.230.46.13:9791] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aT7l3lk7yXaRc6dQclgXCAAAAMI"]
[Mon Dec 15 00:29:20.345455 2025] [:error] [pid 8430:tid 8440] [client 4.230.46.13:48949] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aT7l4Fk7yXaRc6dQclgXFgAAAMc"]
[Mon Dec 15 00:29:21.129714 2025] [:error] [pid 8430:tid 8451] [client 4.230.46.13:47360] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aT7l4Vk7yXaRc6dQclgXIgAAANI"]
[Mon Dec 15 00:29:24.466436 2025] [:error] [pid 9009:tid 9016] [client 4.230.46.13:48991] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aT7l5AhxwdgwYWQ8h8V6_QAAAQU"]
[Mon Dec 15 00:29:26.653941 2025] [proxy_fcgi:error] [pid 8341:tid 8399] [client 4.230.46.13:48971] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:26.820757 2025] [proxy_fcgi:error] [pid 8341:tid 8417] [client 4.230.46.13:48971] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:26.985715 2025] [proxy_fcgi:error] [pid 8341:tid 8403] [client 4.230.46.13:48971] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:27.134634 2025] [:error] [pid 8341:tid 8400] [client 4.230.46.13:48971] [client 4.230.46.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aT7l5xOat6dLvzj8EhTOWgAAAII"]
[Mon Dec 15 00:29:29.563185 2025] [proxy_fcgi:error] [pid 9009:tid 9013] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:29.906957 2025] [proxy_fcgi:error] [pid 9009:tid 9025] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:30.344108 2025] [proxy_fcgi:error] [pid 9009:tid 9012] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:30.974162 2025] [proxy_fcgi:error] [pid 9009:tid 9028] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:31.126245 2025] [proxy_fcgi:error] [pid 9009:tid 9034] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:31.284699 2025] [proxy_fcgi:error] [pid 9009:tid 9014] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:31.475764 2025] [proxy_fcgi:error] [pid 9009:tid 9033] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:31.626172 2025] [proxy_fcgi:error] [pid 9009:tid 9027] [client 4.230.46.13:48959] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 00:29:31.780096 2025] [:error] [pid 9009:tid 9025] [client 4.230.46.13:48959] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tgrs.php"] [unique_id "aT7l6whxwdgwYWQ8h8V7IQAAAQ4"]
[Mon Dec 15 00:29:34.848556 2025] [:error] [pid 8341:tid 8399] [client 4.230.46.13:49022] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tgrs.php"] [unique_id "aT7l7hOat6dLvzj8EhTOYAAAAIE"]
[Mon Dec 15 00:29:36.453262 2025] [:error] [pid 8340:tid 8378] [client 4.230.46.13:48932] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tgrs.php"] [unique_id "aT7l8IIT4nh2qy-Ry9pLVwAAAEc"]
[Mon Dec 15 00:29:37.567852 2025] [:error] [pid 8341:tid 8404] [client 4.230.46.13:45131] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tgrs.php"] [unique_id "aT7l8ROat6dLvzj8EhTOYQAAAIY"]
[Mon Dec 15 00:29:38.394100 2025] [:error] [pid 8339:tid 8358] [client 4.230.46.13:47408] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aT7l8rlqE6mJc-Y6giMkswAAAA8"]
[Mon Dec 15 00:29:42.097165 2025] [:error] [pid 8339:tid 8362] [client 4.230.46.13:45142] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aT7l9rlqE6mJc-Y6giMktQAAABM"]
[Mon Dec 15 00:29:42.730870 2025] [:error] [pid 8341:tid 8407] [client 4.230.46.13:49000] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aT7l9hOat6dLvzj8EhTOZAAAAIk"]
[Mon Dec 15 00:29:45.074429 2025] [:error] [pid 8339:tid 8353] [client 4.230.46.13:47145] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aT7l-blqE6mJc-Y6giMkugAAAAo"]
[Mon Dec 15 00:29:48.762384 2025] [:error] [pid 9009:tid 9032] [client 4.230.46.13:47160] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aT7l_AhxwdgwYWQ8h8V7WQAAARU"]
[Mon Dec 15 00:29:49.630006 2025] [:error] [pid 9009:tid 9021] [client 4.230.46.13:45140] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aT7l_QhxwdgwYWQ8h8V7WgAAAQo"]
[Mon Dec 15 00:29:51.797775 2025] [:error] [pid 9009:tid 9023] [client 4.230.46.13:48899] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aT7l_whxwdgwYWQ8h8V7XAAAAQw"]
[Mon Dec 15 00:29:56.191936 2025] [:error] [pid 8339:tid 8365] [client 4.230.46.13:45141] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aT7mBLlqE6mJc-Y6giMkvQAAABY"]
[Mon Dec 15 00:29:58.028301 2025] [:error] [pid 8339:tid 8355] [client 4.230.46.13:48931] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z.php"] [unique_id "aT7mBrlqE6mJc-Y6giMkvwAAAAw"]
[Mon Dec 15 00:30:00.092942 2025] [:error] [pid 9009:tid 9021] [client 4.230.46.13:10032] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z.php"] [unique_id "aT7mCAhxwdgwYWQ8h8V7ZAAAAQo"]
[Mon Dec 15 00:30:02.055529 2025] [:error] [pid 8430:tid 8446] [client 4.230.46.13:45165] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z.php"] [unique_id "aT7mClk7yXaRc6dQclgXdAAAAM0"]
[Mon Dec 15 00:30:04.903617 2025] [:error] [pid 8339:tid 8352] [client 4.230.46.13:47139] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z.php"] [unique_id "aT7mDLlqE6mJc-Y6giMkxAAAAAk"]
[Mon Dec 15 00:30:08.399322 2025] [:error] [pid 8341:tid 8405] [client 4.230.46.13:9994] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aT7mEBOat6dLvzj8EhTOdQAAAIc"]
[Mon Dec 15 00:30:08.956432 2025] [:error] [pid 8341:tid 8409] [client 4.230.46.13:45176] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aT7mEBOat6dLvzj8EhTOeAAAAIs"]
[Mon Dec 15 00:30:10.423939 2025] [:error] [pid 9009:tid 9015] [client 4.230.46.13:47390] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aT7mEghxwdgwYWQ8h8V7awAAAQQ"]
[Mon Dec 15 00:30:11.639604 2025] [:error] [pid 8340:tid 8381] [client 4.230.46.13:47372] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aT7mE4IT4nh2qy-Ry9pLbQAAAEo"]
[Mon Dec 15 00:30:13.621935 2025] [:error] [pid 8341:tid 8410] [client 4.230.46.13:49255] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxz.php"] [unique_id "aT7mFROat6dLvzj8EhTOewAAAIw"]
[Mon Dec 15 00:30:14.545148 2025] [:error] [pid 9009:tid 9022] [client 4.230.46.13:9744] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxz.php"] [unique_id "aT7mFghxwdgwYWQ8h8V7fQAAAQs"]
[Mon Dec 15 00:30:15.420587 2025] [:error] [pid 9009:tid 9015] [client 4.230.46.13:45125] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxz.php"] [unique_id "aT7mFwhxwdgwYWQ8h8V7fwAAAQQ"]
[Mon Dec 15 00:30:20.433885 2025] [:error] [pid 8339:tid 8348] [client 4.230.46.13:49266] [client 4.230.46.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxz.php"] [unique_id "aT7mHLlqE6mJc-Y6giMk5QAAAAU"]
[Mon Dec 15 01:57:35.240894 2025] [autoindex:error] [pid 8341:tid 8402] [client 113.23.86.139:46272] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com.sg
[Mon Dec 15 02:07:31.048166 2025] [autoindex:error] [pid 8340:tid 8371] [client 74.7.227.139:33136] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 02:54:44.414035 2025] [autoindex:error] [pid 8339:tid 8351] [client 74.7.243.249:57906] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 02:58:27.451654 2025] [autoindex:error] [pid 56645:tid 56653] [client 16.52.147.184:53712] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 03:54:05.088312 2025] [proxy_fcgi:error] [pid 56009:tid 56023] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 15 03:54:05.108853 2025] [proxy_fcgi:error] [pid 56009:tid 56014] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 15 03:54:05.129512 2025] [proxy_fcgi:error] [pid 56009:tid 56015] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 15 03:54:05.172754 2025] [proxy_fcgi:error] [pid 56009:tid 56021] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 15 03:54:05.193410 2025] [proxy_fcgi:error] [pid 56009:tid 56029] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 15 03:54:05.232703 2025] [proxy_fcgi:error] [pid 56009:tid 56027] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 15 03:54:07.214366 2025] [proxy_fcgi:error] [pid 56009:tid 56032] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 15 03:54:07.271606 2025] [proxy_fcgi:error] [pid 56009:tid 56028] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 15 03:54:07.294216 2025] [proxy_fcgi:error] [pid 56009:tid 56022] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 15 03:54:07.316916 2025] [proxy_fcgi:error] [pid 56009:tid 56031] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 15 03:54:07.423882 2025] [proxy_fcgi:error] [pid 56009:tid 56013] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 15 03:54:07.445966 2025] [proxy_fcgi:error] [pid 56009:tid 56019] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 15 03:54:07.468132 2025] [proxy_fcgi:error] [pid 56009:tid 56023] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 15 03:54:07.489369 2025] [proxy_fcgi:error] [pid 56009:tid 56011] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 15 03:54:07.509421 2025] [proxy_fcgi:error] [pid 56009:tid 56014] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 15 03:54:07.535007 2025] [proxy_fcgi:error] [pid 56009:tid 56015] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 15 03:54:07.558838 2025] [proxy_fcgi:error] [pid 56009:tid 56027] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 15 03:54:07.586408 2025] [proxy_fcgi:error] [pid 56009:tid 56028] [client 4.197.150.63:1345] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 15 03:54:07.715790 2025] [:error] [pid 56009:tid 56033] [client 4.197.150.63:1345] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT8V3zzFib9wWPXNl9dFUQAAANU"], referer: https://www.google.com/
[Mon Dec 15 03:54:07.770926 2025] [:error] [pid 55905:tid 55991] [client 4.197.150.63:29332] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aT8V38L5e7ZKWVJJdlYHewAAAI4"], referer: https://www.google.de/
[Mon Dec 15 03:54:07.828871 2025] [proxy_fcgi:error] [pid 55905:tid 55989] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 15 03:54:07.850795 2025] [proxy_fcgi:error] [pid 55905:tid 55978] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 15 03:54:07.872760 2025] [proxy_fcgi:error] [pid 55905:tid 55984] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 15 03:54:07.899963 2025] [proxy_fcgi:error] [pid 55905:tid 55990] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 15 03:54:07.960312 2025] [proxy_fcgi:error] [pid 55905:tid 55997] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 15 03:54:07.998259 2025] [proxy_fcgi:error] [pid 55905:tid 55986] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Mon Dec 15 03:54:08.021573 2025] [proxy_fcgi:error] [pid 55905:tid 55980] [client 4.197.150.63:34555] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 15 03:54:08.497726 2025] [:error] [pid 55905:tid 55990] [client 4.197.150.63:34555] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT8V4ML5e7ZKWVJJdlYHmAAAAI0"], referer: https://www.google.fr/
[Mon Dec 15 03:54:08.532025 2025] [:error] [pid 55905:tid 56000] [client 4.197.150.63:34498] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT8V4ML5e7ZKWVJJdlYHmgAAAJc"], referer: https://www.yahoo.com/
[Mon Dec 15 03:54:08.626974 2025] [:error] [pid 55903:tid 55918] [client 4.197.150.63:38656] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT8V4PdvpWbb83qz50rEWgAAAAY"], referer: https://www.google.de/
[Mon Dec 15 03:54:08.706142 2025] [:error] [pid 55903:tid 55915] [client 4.197.150.63:30631] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT8V4PdvpWbb83qz50rEXwAAAAM"], referer: https://www.yahoo.com/
[Mon Dec 15 03:54:08.744448 2025] [:error] [pid 55903:tid 55917] [client 4.197.150.63:38658] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT8V4PdvpWbb83qz50rEYAAAAAU"], referer: https://www.google.com/
[Mon Dec 15 03:54:08.778727 2025] [:error] [pid 55904:tid 55959] [client 4.197.150.63:29319] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT8V4Djnzi_KlarhcWEjkwAAAEk"], referer: https://www.google.fr/
[Mon Dec 15 03:54:08.812376 2025] [:error] [pid 55904:tid 55954] [client 4.197.150.63:38657] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT8V4Djnzi_KlarhcWEjlAAAAEQ"], referer: https://duckduckgo.com/
[Mon Dec 15 03:54:08.844505 2025] [:error] [pid 55904:tid 55966] [client 4.197.150.63:29351] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT8V4Djnzi_KlarhcWEjlQAAAFA"], referer: https://www.google.com/
[Mon Dec 15 03:54:08.940235 2025] [:error] [pid 55904:tid 55973] [client 4.197.150.63:30607] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT8V4Djnzi_KlarhcWEjmQAAAFc"], referer: https://www.google.fr/
[Mon Dec 15 05:56:47.633020 2025] [autoindex:error] [pid 9882:tid 9904] [client 34.231.195.239:54877] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 07:26:46.865190 2025] [autoindex:error] [pid 9882:tid 9907] [client 179.127.249.194:16727] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 08:29:36.565452 2025] [autoindex:error] [pid 35020:tid 35057] [client 66.249.64.226:43293] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 12:33:34.535471 2025] [autoindex:error] [pid 39914:tid 39940] [client 66.249.64.224:59735] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 12:33:34.644952 2025] [autoindex:error] [pid 39826:tid 39853] [client 66.249.64.225:62488] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 14:32:23.710165 2025] [autoindex:error] [pid 39914:tid 39922] [client 181.214.218.220:25722] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 15 14:32:24.382711 2025] [autoindex:error] [pid 39914:tid 39920] [client 181.214.218.220:25799] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 15 14:32:30.734487 2025] [autoindex:error] [pid 39828:tid 39877] [client 23.247.136.254:47612] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 15 14:32:37.810703 2025] [autoindex:error] [pid 17595:tid 17610] [client 198.49.68.79:52538] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 15 14:32:49.234251 2025] [autoindex:error] [pid 39829:tid 39904] [client 35.209.198.222:59838] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 15 14:32:55.310569 2025] [autoindex:error] [pid 17595:tid 17599] [client 101.132.222.120:41092] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 15 14:44:05.771953 2025] [autoindex:error] [pid 17595:tid 17610] [client 16.176.206.149:33414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 14:44:05.775476 2025] [autoindex:error] [pid 17595:tid 17598] [client 16.176.206.149:33412] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 14:44:05.828817 2025] [:error] [pid 17595:tid 17602] [client 16.176.206.149:33414] [client 16.176.206.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api/actions"] [unique_id "aT-uNSEZ31fZFzV3Us_KtQAAAQU"]
[Mon Dec 15 14:44:05.830901 2025] [:error] [pid 17595:tid 17601] [client 16.176.206.149:33412] [client 16.176.206.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api/actions"] [unique_id "aT-uNSEZ31fZFzV3Us_KtgAAAQQ"]
[Mon Dec 15 14:44:05.889611 2025] [:error] [pid 17595:tid 17619] [client 16.176.206.149:33432] [client 16.176.206.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/_next/data"] [unique_id "aT-uNSEZ31fZFzV3Us_KtwAAARY"]
[Mon Dec 15 14:44:05.891335 2025] [:error] [pid 44555:tid 44578] [client 16.176.206.149:33434] [client 16.176.206.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/_next/data"] [unique_id "aT-uNWDHW0g-e9AKPr4JgwAAAFU"]
[Mon Dec 15 14:44:05.950532 2025] [:error] [pid 44555:tid 44569] [client 16.176.206.149:33440] [client 16.176.206.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT-uNWDHW0g-e9AKPr4JhAAAAEw"]
[Mon Dec 15 14:44:05.950673 2025] [:error] [pid 17595:tid 17600] [client 16.176.206.149:33438] [client 16.176.206.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT-uNSEZ31fZFzV3Us_KuAAAAQM"]
[Mon Dec 15 15:51:47.170419 2025] [:error] [pid 39914:tid 39938] [client 182.44.12.37:47892] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT--E1247O4ulGRu1dODEAAAABU"]
[Mon Dec 15 17:48:24.938680 2025] [autoindex:error] [pid 31373:tid 31419] [client 45.239.164.176:33606] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 17:52:13.118745 2025] [autoindex:error] [pid 31372:tid 31376] [client 102.182.230.69:53826] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 19:53:09.970101 2025] [:error] [pid 52155:tid 52160] [client 43.135.134.127:45308] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aT_2pRaJK6javjid3xycgwAAAQI"]
[Mon Dec 15 20:26:59.972244 2025] [autoindex:error] [pid 31459:tid 31468] [client 66.249.64.226:62088] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 22:11:11.923046 2025] [:error] [pid 31372:tid 31393] [client 43.138.68.113:60514] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUAW_wN06qRtpJxyxHjIUgAAAJE"]
[Mon Dec 15 23:34:33.301112 2025] [proxy_fcgi:error] [pid 31372:tid 31376] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:33.426408 2025] [proxy_fcgi:error] [pid 31372:tid 31400] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:33.556392 2025] [proxy_fcgi:error] [pid 31372:tid 31377] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:33.681471 2025] [proxy_fcgi:error] [pid 31372:tid 31393] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:33.826899 2025] [proxy_fcgi:error] [pid 31372:tid 31398] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:33.959841 2025] [proxy_fcgi:error] [pid 31372:tid 31394] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:34.085275 2025] [proxy_fcgi:error] [pid 31372:tid 31379] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:34.233017 2025] [proxy_fcgi:error] [pid 31372:tid 31385] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:35.781510 2025] [proxy_fcgi:error] [pid 31372:tid 31396] [client 20.27.228.201:17519] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:34:35.906132 2025] [:error] [pid 31372:tid 31381] [client 20.27.228.201:17519] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/okxh.php"] [unique_id "aUAqiwN06qRtpJxyxHjtCAAAAIU"]
[Mon Dec 15 23:34:36.213082 2025] [:error] [pid 31374:tid 31436] [client 20.27.228.201:17433] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/okxh.php"] [unique_id "aUAqjJzSh8b7uk6RWiG2LAAAAEQ"]
[Mon Dec 15 23:34:36.723283 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:17507] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/okxh.php"] [unique_id "aUAqjDqerS0TDpViRzu_6QAAABc"]
[Mon Dec 15 23:34:37.017095 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:17518] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/okxh.php"] [unique_id "aUAqjZzSh8b7uk6RWiG2LQAAAEY"]
[Mon Dec 15 23:34:37.460460 2025] [:error] [pid 31459:tid 31470] [client 20.27.228.201:17521] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aUAqjTqerS0TDpViRzu_6wAAAAk"]
[Mon Dec 15 23:34:37.793487 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:17500] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aUAqjZzSh8b7uk6RWiG2MAAAAEA"]
[Mon Dec 15 23:34:38.048617 2025] [:error] [pid 31374:tid 31435] [client 20.27.228.201:17408] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aUAqjpzSh8b7uk6RWiG2MQAAAEM"]
[Mon Dec 15 23:34:38.327632 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:17425] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aUAqjhaJK6javjid3xwoHQAAARE"]
[Mon Dec 15 23:34:38.682881 2025] [:error] [pid 31459:tid 31462] [client 20.27.228.201:17524] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aUAqjjqerS0TDpViRzu_7gAAAAE"]
[Mon Dec 15 23:34:39.113853 2025] [:error] [pid 31372:tid 31380] [client 20.27.228.201:17481] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aUAqjwN06qRtpJxyxHjtEAAAAIQ"]
[Mon Dec 15 23:34:39.413654 2025] [:error] [pid 31459:tid 31465] [client 20.27.228.201:17511] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aUAqjzqerS0TDpViRzu_8AAAAAQ"]
[Mon Dec 15 23:34:39.781940 2025] [:error] [pid 31373:tid 31424] [client 20.27.228.201:17525] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aUAqj3FdnrU7ASwItVItdQAAANM"]
[Mon Dec 15 23:34:40.154402 2025] [:error] [pid 31373:tid 31410] [client 20.27.228.201:17475] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUAqkHFdnrU7ASwItVItdgAAAMU"]
[Mon Dec 15 23:34:40.511739 2025] [:error] [pid 31372:tid 31385] [client 20.27.228.201:17509] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUAqkAN06qRtpJxyxHjtEgAAAIk"]
[Mon Dec 15 23:34:40.837007 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:17437] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUAqkDqerS0TDpViRzu_9AAAABA"]
[Mon Dec 15 23:34:41.161506 2025] [:error] [pid 31459:tid 31472] [client 20.27.228.201:17454] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUAqkTqerS0TDpViRzu_9gAAAAs"]
[Mon Dec 15 23:34:41.414258 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:17415] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUAqkRaJK6javjid3xwoJgAAAQ0"]
[Mon Dec 15 23:34:41.746821 2025] [:error] [pid 52155:tid 52172] [client 20.27.228.201:5064] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUAqkRaJK6javjid3xwoJwAAAQ4"]
[Mon Dec 15 23:34:42.085488 2025] [:error] [pid 52155:tid 52170] [client 20.27.228.201:5062] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUAqkhaJK6javjid3xwoKAAAAQw"]
[Mon Dec 15 23:34:42.340885 2025] [:error] [pid 31459:tid 31469] [client 20.27.228.201:17532] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUAqkjqerS0TDpViRzu_9wAAAAg"]
[Mon Dec 15 23:34:42.630130 2025] [:error] [pid 31459:tid 31479] [client 20.27.228.201:17499] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aUAqkjqerS0TDpViRzu_-QAAABI"]
[Mon Dec 15 23:34:42.881695 2025] [:error] [pid 31372:tid 31391] [client 20.27.228.201:17530] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aUAqkgN06qRtpJxyxHjtEwAAAI8"]
[Mon Dec 15 23:34:43.261793 2025] [:error] [pid 31374:tid 31436] [client 20.27.228.201:17432] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aUAqk5zSh8b7uk6RWiG2OQAAAEQ"]
[Mon Dec 15 23:34:43.560255 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:17414] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aUAqk5zSh8b7uk6RWiG2OwAAAEY"]
[Mon Dec 15 23:34:43.875064 2025] [:error] [pid 31372:tid 31390] [client 20.27.228.201:17497] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aUAqkwN06qRtpJxyxHjtFQAAAI4"]
[Mon Dec 15 23:34:44.193682 2025] [:error] [pid 52155:tid 52179] [client 20.27.228.201:17526] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aUAqlBaJK6javjid3xwoLQAAARU"]
[Mon Dec 15 23:34:44.576175 2025] [:error] [pid 31374:tid 31440] [client 20.27.228.201:17523] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aUAqlJzSh8b7uk6RWiG2PgAAAEg"]
[Mon Dec 15 23:34:44.837712 2025] [:error] [pid 31459:tid 31472] [client 20.27.228.201:17534] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aUAqlDqerS0TDpViRzu__gAAAAs"]
[Mon Dec 15 23:34:45.161953 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:17492] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aUAqlRaJK6javjid3xwoMgAAAQo"]
[Mon Dec 15 23:34:45.484420 2025] [:error] [pid 31372:tid 31400] [client 20.27.228.201:17421] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aUAqlQN06qRtpJxyxHjtFwAAAJg"]
[Mon Dec 15 23:34:45.860516 2025] [:error] [pid 31372:tid 31380] [client 20.27.228.201:17419] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aUAqlQN06qRtpJxyxHjtGAAAAIQ"]
[Mon Dec 15 23:34:46.196331 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:17458] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aUAqlpzSh8b7uk6RWiG2QAAAAFU"]
[Mon Dec 15 23:34:46.577424 2025] [:error] [pid 31374:tid 31444] [client 20.27.228.201:17516] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aUAqlpzSh8b7uk6RWiG2QQAAAEw"]
[Mon Dec 15 23:34:47.235194 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:17480] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aUAqlzqerS0TDpViRzvAAwAAABA"]
[Mon Dec 15 23:34:47.659790 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:17426] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aUAqlzqerS0TDpViRzvABAAAAAU"]
[Mon Dec 15 23:34:48.063846 2025] [:error] [pid 31372:tid 31393] [client 20.27.228.201:17494] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aUAqmAN06qRtpJxyxHjtHgAAAJE"]
[Mon Dec 15 23:34:48.403859 2025] [:error] [pid 31373:tid 31419] [client 20.27.228.201:17427] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aUAqmHFdnrU7ASwItVItfgAAAM4"]
[Mon Dec 15 23:34:48.688033 2025] [:error] [pid 31372:tid 31385] [client 20.27.228.201:17450] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aUAqmAN06qRtpJxyxHjtHwAAAIk"]
[Mon Dec 15 23:34:49.019653 2025] [:error] [pid 52155:tid 52170] [client 20.27.228.201:17457] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aUAqmRaJK6javjid3xwoMwAAAQw"]
[Mon Dec 15 23:34:49.317603 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:17435] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atex1.php"] [unique_id "aUAqmZzSh8b7uk6RWiG2QwAAAEk"]
[Mon Dec 15 23:34:49.599756 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:17520] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aUAqmZzSh8b7uk6RWiG2RAAAAEY"]
[Mon Dec 15 23:34:49.969221 2025] [:error] [pid 31459:tid 31465] [client 20.27.228.201:17488] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aUAqmTqerS0TDpViRzvACgAAAAQ"]
[Mon Dec 15 23:34:50.228209 2025] [:error] [pid 52155:tid 52174] [client 20.27.228.201:17513] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aUAqmhaJK6javjid3xwoNQAAARA"]
[Mon Dec 15 23:34:50.533712 2025] [:error] [pid 52155:tid 52178] [client 20.27.228.201:17434] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aUAqmhaJK6javjid3xwoNwAAARQ"]
[Mon Dec 15 23:34:50.875161 2025] [:error] [pid 31459:tid 31483] [client 20.27.228.201:17465] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aUAqmjqerS0TDpViRzvACwAAABY"]
[Mon Dec 15 23:34:51.369824 2025] [:error] [pid 31374:tid 31440] [client 20.27.228.201:17517] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aUAqm5zSh8b7uk6RWiG2RgAAAEg"]
[Mon Dec 15 23:34:51.756121 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:17529] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aUAqmzqerS0TDpViRzvADQAAAAU"]
[Mon Dec 15 23:34:52.054732 2025] [:error] [pid 52155:tid 52158] [client 20.27.228.201:17493] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vanda.php"] [unique_id "aUAqnBaJK6javjid3xwoOQAAAQA"]
[Mon Dec 15 23:34:52.437355 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:17535] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUAqnBaJK6javjid3xwoPQAAAQk"]
[Mon Dec 15 23:34:53.100608 2025] [:error] [pid 31372:tid 31400] [client 20.27.228.201:17470] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUAqnQN06qRtpJxyxHjtIwAAAJg"]
[Mon Dec 15 23:34:53.811372 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:17439] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUAqnRaJK6javjid3xwoQQAAARE"]
[Mon Dec 15 23:34:54.513151 2025] [:error] [pid 52155:tid 52165] [client 20.27.228.201:17466] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUAqnhaJK6javjid3xwoRQAAAQc"]
[Mon Dec 15 23:34:55.030663 2025] [:error] [pid 31459:tid 31467] [client 20.27.228.201:17522] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aUAqnzqerS0TDpViRzvADwAAAAY"]
[Mon Dec 15 23:34:56.266168 2025] [:error] [pid 31459:tid 31482] [client 20.27.228.201:17472] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aUAqoDqerS0TDpViRzvAEAAAABU"]
[Mon Dec 15 23:34:56.716587 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:17411] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aUAqoBaJK6javjid3xwoTAAAAQk"]
[Mon Dec 15 23:34:57.056192 2025] [:error] [pid 31373:tid 31405] [client 20.27.228.201:5065] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid-file.php"] [unique_id "aUAqoXFdnrU7ASwItVIthQAAAMA"]
[Mon Dec 15 23:34:57.629878 2025] [:error] [pid 52155:tid 52169] [client 20.27.228.201:17503] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aUAqoRaJK6javjid3xwoTwAAAQs"]
[Mon Dec 15 23:34:58.167243 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:17431] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aUAqojqerS0TDpViRzvAFAAAAAU"]
[Mon Dec 15 23:34:58.733708 2025] [:error] [pid 31459:tid 31476] [client 20.27.228.201:17487] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aUAqojqerS0TDpViRzvAFQAAAA8"]
[Mon Dec 15 23:34:59.099808 2025] [:error] [pid 52155:tid 52161] [client 20.27.228.201:17440] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/l3gi0n.php"] [unique_id "aUAqoxaJK6javjid3xwoUwAAAQM"]
[Mon Dec 15 23:34:59.553949 2025] [:error] [pid 31373:tid 31408] [client 20.27.228.201:17504] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aUAqo3FdnrU7ASwItVIthgAAAMM"]
[Mon Dec 15 23:34:59.958954 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:17438] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aUAqo5zSh8b7uk6RWiG2SgAAAFM"]
[Mon Dec 15 23:35:00.415298 2025] [:error] [pid 31373:tid 31415] [client 20.27.228.201:17512] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aUAqpHFdnrU7ASwItVIthwAAAMo"]
[Mon Dec 15 23:35:00.700497 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:17413] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aUAqpAN06qRtpJxyxHjtJQAAAIA"]
[Mon Dec 15 23:35:01.011188 2025] [:error] [pid 31372:tid 31388] [client 20.27.228.201:17452] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aUAqpQN06qRtpJxyxHjtJgAAAIw"]
[Mon Dec 15 23:35:01.444199 2025] [:error] [pid 31372:tid 31387] [client 20.27.228.201:17473] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aUAqpQN06qRtpJxyxHjtKAAAAIs"]
[Mon Dec 15 23:35:01.736950 2025] [:error] [pid 31374:tid 31442] [client 20.27.228.201:17409] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aUAqpZzSh8b7uk6RWiG2TQAAAEo"]
[Mon Dec 15 23:35:02.022114 2025] [:error] [pid 31374:tid 31447] [client 20.27.228.201:17508] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bo.php"] [unique_id "aUAqppzSh8b7uk6RWiG2TwAAAE8"]
[Mon Dec 15 23:35:02.442350 2025] [:error] [pid 52155:tid 52177] [client 20.27.228.201:17430] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aUAqphaJK6javjid3xwoWQAAARM"]
[Mon Dec 15 23:35:02.782321 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:5061] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aUAqppzSh8b7uk6RWiG2UAAAAEk"]
[Mon Dec 15 23:35:03.145940 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:17476] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aUAqp5zSh8b7uk6RWiG2UQAAAEY"]
[Mon Dec 15 23:35:03.901275 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:17447] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d12.php"] [unique_id "aUAqp5zSh8b7uk6RWiG2VAAAAFA"]
[Mon Dec 15 23:35:04.367863 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:17533] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aUAqqDqerS0TDpViRzvAGgAAABA"]
[Mon Dec 15 23:35:04.634090 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:17510] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aUAqqJzSh8b7uk6RWiG2VQAAAE0"]
[Mon Dec 15 23:35:05.299093 2025] [:error] [pid 52155:tid 52172] [client 20.27.228.201:17528] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aUAqqRaJK6javjid3xwoYAAAAQ4"]
[Mon Dec 15 23:35:05.828855 2025] [:error] [pid 52155:tid 52181] [client 20.27.228.201:17515] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Contrller.php"] [unique_id "aUAqqRaJK6javjid3xwoYQAAARc"]
[Mon Dec 15 23:35:06.208527 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:17424] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aUAqqpzSh8b7uk6RWiG2WQAAAFM"]
[Mon Dec 15 23:35:06.531307 2025] [:error] [pid 31374:tid 31442] [client 20.27.228.201:17456] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aUAqqpzSh8b7uk6RWiG2WgAAAEo"]
[Mon Dec 15 23:35:07.140198 2025] [:error] [pid 31373:tid 31412] [client 20.27.228.201:17460] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aUAqq3FdnrU7ASwItVItjAAAAMc"]
[Mon Dec 15 23:35:07.452935 2025] [:error] [pid 31373:tid 31424] [client 20.27.228.201:17416] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aUAqq3FdnrU7ASwItVItjgAAANM"]
[Mon Dec 15 23:35:08.792318 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:4994] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aUAqrDqerS0TDpViRzvAHAAAAAU"]
[Mon Dec 15 23:35:09.425142 2025] [:error] [pid 31373:tid 31423] [client 20.27.228.201:5070] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aUAqrXFdnrU7ASwItVItlAAAANI"]
[Mon Dec 15 23:35:09.992673 2025] [:error] [pid 52155:tid 52180] [client 20.27.228.201:17477] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aUAqrRaJK6javjid3xwoaAAAARY"]
[Mon Dec 15 23:35:10.604423 2025] [:error] [pid 31373:tid 31425] [client 20.27.228.201:17444] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error_log.php"] [unique_id "aUAqrnFdnrU7ASwItVItmgAAANQ"]
[Mon Dec 15 23:35:11.090547 2025] [:error] [pid 31373:tid 31429] [client 20.27.228.201:17463] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aUAqr3FdnrU7ASwItVItnQAAANg"]
[Mon Dec 15 23:35:11.708467 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:17446] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aUAqrzqerS0TDpViRzvAHgAAAAA"]
[Mon Dec 15 23:35:12.152940 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:5060] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aUAqsDqerS0TDpViRzvAHwAAABc"]
[Mon Dec 15 23:35:12.686792 2025] [:error] [pid 52155:tid 52164] [client 20.27.228.201:17483] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inghl.php"] [unique_id "aUAqsBaJK6javjid3xwoaQAAAQY"]
[Mon Dec 15 23:35:13.243075 2025] [:error] [pid 52155:tid 52169] [client 20.27.228.201:17478] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUAqsRaJK6javjid3xwobAAAAQs"]
[Mon Dec 15 23:35:13.633436 2025] [:error] [pid 31372:tid 31392] [client 20.27.228.201:5069] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUAqsQN06qRtpJxyxHjtLgAAAJA"]
[Mon Dec 15 23:35:14.187376 2025] [:error] [pid 52155:tid 52161] [client 20.27.228.201:5095] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUAqshaJK6javjid3xwobgAAAQM"]
[Mon Dec 15 23:35:14.646993 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:17462] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUAqshaJK6javjid3xwobwAAAQg"]
[Mon Dec 15 23:35:15.119167 2025] [:error] [pid 52155:tid 52182] [client 20.27.228.201:17417] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUAqsxaJK6javjid3xwocAAAARg"]
[Mon Dec 15 23:35:15.659128 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:17505] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUAqs3FdnrU7ASwItVItowAAANc"]
[Mon Dec 15 23:35:16.119475 2025] [:error] [pid 31373:tid 31420] [client 20.27.228.201:17514] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUAqtHFdnrU7ASwItVItpAAAAM8"]
[Mon Dec 15 23:35:16.594976 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:5066] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUAqtBaJK6javjid3xwoegAAARE"]
[Mon Dec 15 23:35:17.086745 2025] [:error] [pid 52155:tid 52178] [client 20.27.228.201:5068] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aUAqtRaJK6javjid3xwofAAAARQ"]
[Mon Dec 15 23:35:17.434517 2025] [:error] [pid 31459:tid 31465] [client 20.27.228.201:5071] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aUAqtTqerS0TDpViRzvAKAAAAAQ"]
[Mon Dec 15 23:35:18.066629 2025] [:error] [pid 31374:tid 31447] [client 20.27.228.201:17506] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aUAqtpzSh8b7uk6RWiG2YgAAAE8"]
[Mon Dec 15 23:35:18.745866 2025] [:error] [pid 31372:tid 31398] [client 20.27.228.201:17418] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-ac.php"] [unique_id "aUAqtgN06qRtpJxyxHjtMgAAAJY"]
[Mon Dec 15 23:35:19.270241 2025] [:error] [pid 31459:tid 31462] [client 20.27.228.201:17485] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/krypton.php"] [unique_id "aUAqtzqerS0TDpViRzvALAAAAAE"]
[Mon Dec 15 23:35:19.732955 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:5059] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/krypton.php"] [unique_id "aUAqtzqerS0TDpViRzvALQAAABc"]
[Mon Dec 15 23:35:20.309695 2025] [:error] [pid 31459:tid 31467] [client 20.27.228.201:17531] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/krypton.php"] [unique_id "aUAquDqerS0TDpViRzvAMQAAAAY"]
[Mon Dec 15 23:35:20.769520 2025] [:error] [pid 52155:tid 52165] [client 20.27.228.201:5092] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/krypton.php"] [unique_id "aUAquBaJK6javjid3xwohAAAAQc"]
[Mon Dec 15 23:35:21.575101 2025] [:error] [pid 31372:tid 31388] [client 20.27.228.201:17420] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUAquQN06qRtpJxyxHjtMwAAAIw"]
[Mon Dec 15 23:35:22.230138 2025] [:error] [pid 52155:tid 52160] [client 20.27.228.201:17461] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUAquhaJK6javjid3xwoiwAAAQI"]
[Mon Dec 15 23:35:22.647189 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:17429] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUAquhaJK6javjid3xwojAAAAQU"]
[Mon Dec 15 23:35:22.970377 2025] [:error] [pid 52155:tid 52179] [client 20.27.228.201:17490] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUAquhaJK6javjid3xwojgAAARU"]
[Mon Dec 15 23:35:23.499757 2025] [:error] [pid 52155:tid 52177] [client 20.27.228.201:17484] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fc72f.php"] [unique_id "aUAquxaJK6javjid3xwojwAAARM"]
[Mon Dec 15 23:35:24.227588 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:5058] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fc72f.php"] [unique_id "aUAqvJzSh8b7uk6RWiG2bAAAAFA"]
[Mon Dec 15 23:35:24.640793 2025] [:error] [pid 31374:tid 31449] [client 20.27.228.201:5067] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fc72f.php"] [unique_id "aUAqvJzSh8b7uk6RWiG2bQAAAFE"]
[Mon Dec 15 23:35:25.010855 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:5116] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fc72f.php"] [unique_id "aUAqvZzSh8b7uk6RWiG2bgAAAFM"]
[Mon Dec 15 23:35:25.557241 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:17452] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUAqvRaJK6javjid3xwolQAAAQo"]
[Mon Dec 15 23:35:26.240110 2025] [:error] [pid 31374:tid 31439] [client 20.27.228.201:5111] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUAqvpzSh8b7uk6RWiG2cQAAAEc"]
[Mon Dec 15 23:35:27.106516 2025] [:error] [pid 31373:tid 31415] [client 20.27.228.201:5001] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUAqv3FdnrU7ASwItVItpwAAAMo"]
[Mon Dec 15 23:35:28.075271 2025] [:error] [pid 31374:tid 31450] [client 20.27.228.201:5109] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUAqwJzSh8b7uk6RWiG2dQAAAFI"]
[Mon Dec 15 23:35:28.989860 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:17442] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aUAqwHFdnrU7ASwItVItrQAAANc"]
[Mon Dec 15 23:35:29.631124 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:4937] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aUAqwRaJK6javjid3xwomwAAAQo"]
[Mon Dec 15 23:35:30.119524 2025] [:error] [pid 31373:tid 31422] [client 20.27.228.201:5071] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aUAqwnFdnrU7ASwItVItrgAAANE"]
[Mon Dec 15 23:35:30.482010 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:17412] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aUAqwpzSh8b7uk6RWiG2eAAAAFM"]
[Mon Dec 15 23:35:31.104103 2025] [:error] [pid 31374:tid 31434] [client 20.27.228.201:5056] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUAqw5zSh8b7uk6RWiG2egAAAEI"]
[Mon Dec 15 23:35:31.630473 2025] [:error] [pid 31374:tid 31454] [client 20.27.228.201:17448] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUAqw5zSh8b7uk6RWiG2fgAAAFY"]
[Mon Dec 15 23:35:32.096971 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:17459] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUAqxJzSh8b7uk6RWiG2fwAAAEY"]
[Mon Dec 15 23:35:32.523675 2025] [:error] [pid 31459:tid 31485] [client 20.27.228.201:17495] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUAqxDqerS0TDpViRzvAPQAAABg"]
[Mon Dec 15 23:35:32.829231 2025] [:error] [pid 31373:tid 31426] [client 20.27.228.201:5078] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-advaced.php"] [unique_id "aUAqxHFdnrU7ASwItVIttAAAANU"]
[Mon Dec 15 23:35:33.154781 2025] [:error] [pid 31459:tid 31480] [client 20.27.228.201:17471] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-advaced.php"] [unique_id "aUAqxTqerS0TDpViRzvAQAAAABM"]
[Mon Dec 15 23:35:33.506216 2025] [:error] [pid 31373:tid 31429] [client 20.27.228.201:5057] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-advaced.php"] [unique_id "aUAqxXFdnrU7ASwItVIttQAAANg"]
[Mon Dec 15 23:35:33.879440 2025] [:error] [pid 31373:tid 31408] [client 20.27.228.201:17451] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-advaced.php"] [unique_id "aUAqxXFdnrU7ASwItVIttwAAAMM"]
[Mon Dec 15 23:35:34.296375 2025] [:error] [pid 31374:tid 31452] [client 20.27.228.201:5107] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd.php"] [unique_id "aUAqxpzSh8b7uk6RWiG2gQAAAFQ"]
[Mon Dec 15 23:35:34.749211 2025] [:error] [pid 31459:tid 31483] [client 20.27.228.201:4941] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd.php"] [unique_id "aUAqxjqerS0TDpViRzvAQwAAABY"]
[Mon Dec 15 23:35:35.090182 2025] [proxy_fcgi:error] [pid 31374:tid 31443] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:35.216490 2025] [proxy_fcgi:error] [pid 31374:tid 31454] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:35.343087 2025] [proxy_fcgi:error] [pid 31374:tid 31439] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:35.487169 2025] [proxy_fcgi:error] [pid 31374:tid 31438] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:35.613445 2025] [proxy_fcgi:error] [pid 31374:tid 31449] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:35.737362 2025] [proxy_fcgi:error] [pid 31374:tid 31435] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:35.963351 2025] [proxy_fcgi:error] [pid 31374:tid 31445] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:36.108710 2025] [proxy_fcgi:error] [pid 31374:tid 31433] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:36.350782 2025] [proxy_fcgi:error] [pid 31374:tid 31432] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:36.543168 2025] [proxy_fcgi:error] [pid 31374:tid 31450] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:36.666850 2025] [proxy_fcgi:error] [pid 31374:tid 31437] [client 20.27.228.201:5108] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:35:36.786747 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:5108] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xopvne.php"] [unique_id "aUAqyJzSh8b7uk6RWiG2kAAAAFU"]
[Mon Dec 15 23:35:37.680513 2025] [:error] [pid 31459:tid 31480] [client 20.27.228.201:5087] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xopvne.php"] [unique_id "aUAqyTqerS0TDpViRzvASwAAABM"]
[Mon Dec 15 23:35:38.107849 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:5118] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xopvne.php"] [unique_id "aUAqyhaJK6javjid3xwooQAAAQ0"]
[Mon Dec 15 23:35:38.403470 2025] [:error] [pid 31459:tid 31479] [client 20.27.228.201:5063] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xopvne.php"] [unique_id "aUAqyjqerS0TDpViRzvATgAAABI"]
[Mon Dec 15 23:35:38.777153 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:17423] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm18.php"] [unique_id "aUAqyjqerS0TDpViRzvAUAAAABA"]
[Mon Dec 15 23:35:39.181239 2025] [:error] [pid 31373:tid 31405] [client 20.27.228.201:17445] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm18.php"] [unique_id "aUAqy3FdnrU7ASwItVItvAAAAMA"]
[Mon Dec 15 23:35:39.642394 2025] [:error] [pid 31372:tid 31399] [client 20.27.228.201:5018] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm18.php"] [unique_id "aUAqywN06qRtpJxyxHjtOAAAAJc"]
[Mon Dec 15 23:35:39.933041 2025] [:error] [pid 31373:tid 31425] [client 20.27.228.201:5075] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm18.php"] [unique_id "aUAqy3FdnrU7ASwItVItvQAAANQ"]
[Mon Dec 15 23:35:40.295822 2025] [:error] [pid 31374:tid 31443] [client 20.27.228.201:4998] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5b9ac.php"] [unique_id "aUAqzJzSh8b7uk6RWiG2kwAAAEs"]
[Mon Dec 15 23:35:40.707190 2025] [:error] [pid 31373:tid 31407] [client 20.27.228.201:5084] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5b9ac.php"] [unique_id "aUAqzHFdnrU7ASwItVItvwAAAMI"]
[Mon Dec 15 23:35:41.012196 2025] [:error] [pid 31373:tid 31411] [client 20.27.228.201:5077] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5b9ac.php"] [unique_id "aUAqzXFdnrU7ASwItVItwAAAAMY"]
[Mon Dec 15 23:35:41.309509 2025] [:error] [pid 31373:tid 31418] [client 20.27.228.201:5027] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5b9ac.php"] [unique_id "aUAqzXFdnrU7ASwItVItwQAAAM0"]
[Mon Dec 15 23:35:41.775733 2025] [:error] [pid 52155:tid 52162] [client 20.27.228.201:5080] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aUAqzRaJK6javjid3xwopgAAAQQ"]
[Mon Dec 15 23:35:42.852809 2025] [:error] [pid 31372:tid 31398] [client 20.27.228.201:17501] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aUAqzgN06qRtpJxyxHjtPQAAAJY"]
[Mon Dec 15 23:35:43.807063 2025] [:error] [pid 31372:tid 31387] [client 20.27.228.201:5117] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aUAqzwN06qRtpJxyxHjtQQAAAIs"]
[Mon Dec 15 23:35:44.347814 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:5073] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aUAq0JzSh8b7uk6RWiG2lwAAAFM"]
[Mon Dec 15 23:35:45.204031 2025] [:error] [pid 31372:tid 31381] [client 20.27.228.201:17491] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aUAq0QN06qRtpJxyxHjtRQAAAIU"]
[Mon Dec 15 23:35:45.813115 2025] [:error] [pid 31459:tid 31465] [client 20.27.228.201:5082] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aUAq0TqerS0TDpViRzvAVAAAAAQ"]
[Mon Dec 15 23:35:47.040775 2025] [:error] [pid 31459:tid 31463] [client 20.27.228.201:5029] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aUAq0zqerS0TDpViRzvAVQAAAAI"]
[Mon Dec 15 23:35:47.649686 2025] [:error] [pid 31459:tid 31469] [client 20.27.228.201:17482] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aUAq0zqerS0TDpViRzvAVwAAAAg"]
[Mon Dec 15 23:35:48.628052 2025] [:error] [pid 31459:tid 31476] [client 20.27.228.201:17464] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aUAq1DqerS0TDpViRzvAWAAAAA8"]
[Mon Dec 15 23:35:49.307065 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:5039] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aUAq1RaJK6javjid3xwoqgAAAQ0"]
[Mon Dec 15 23:35:50.161217 2025] [:error] [pid 31372:tid 31385] [client 20.27.228.201:17467] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aUAq1gN06qRtpJxyxHjtSQAAAIk"]
[Mon Dec 15 23:35:51.098766 2025] [:error] [pid 31374:tid 31435] [client 20.27.228.201:17443] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aUAq15zSh8b7uk6RWiG2oAAAAEM"]
[Mon Dec 15 23:35:52.606855 2025] [:error] [pid 31374:tid 31454] [client 20.27.228.201:17441] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aUAq2JzSh8b7uk6RWiG2owAAAFY"]
[Mon Dec 15 23:35:53.542967 2025] [:error] [pid 31374:tid 31449] [client 20.27.228.201:5025] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aUAq2ZzSh8b7uk6RWiG2qQAAAFE"]
[Mon Dec 15 23:35:53.988871 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:4992] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aUAq2ZzSh8b7uk6RWiG2qwAAAEA"]
[Mon Dec 15 23:35:54.489778 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:4999] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aUAq2pzSh8b7uk6RWiG2rAAAAFM"]
[Mon Dec 15 23:35:54.892449 2025] [:error] [pid 31372:tid 31378] [client 20.27.228.201:5008] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aUAq2gN06qRtpJxyxHjtSwAAAII"]
[Mon Dec 15 23:35:55.487994 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:17527] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aUAq2xaJK6javjid3xworQAAAQU"]
[Mon Dec 15 23:35:55.840377 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:4964] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aUAq2xaJK6javjid3xworgAAAQo"]
[Mon Dec 15 23:35:56.244417 2025] [:error] [pid 31373:tid 31417] [client 20.27.228.201:5094] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aUAq3HFdnrU7ASwItVItzQAAAMw"]
[Mon Dec 15 23:35:56.572171 2025] [:error] [pid 31374:tid 31444] [client 20.27.228.201:17489] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aUAq3JzSh8b7uk6RWiG2sgAAAEw"]
[Mon Dec 15 23:35:57.111532 2025] [:error] [pid 31374:tid 31436] [client 20.27.228.201:5020] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aUAq3ZzSh8b7uk6RWiG2swAAAEQ"]
[Mon Dec 15 23:35:57.457133 2025] [:error] [pid 31372:tid 31380] [client 20.27.228.201:5115] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aUAq3QN06qRtpJxyxHjtTAAAAIQ"]
[Mon Dec 15 23:35:57.800039 2025] [:error] [pid 31374:tid 31454] [client 20.27.228.201:17502] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aUAq3ZzSh8b7uk6RWiG2tQAAAFY"]
[Mon Dec 15 23:35:58.124534 2025] [:error] [pid 31459:tid 31479] [client 20.27.228.201:4997] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aUAq3jqerS0TDpViRzvAXgAAABI"]
[Mon Dec 15 23:35:58.556393 2025] [:error] [pid 31372:tid 31392] [client 20.27.228.201:5112] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aUAq3gN06qRtpJxyxHjtTwAAAJA"]
[Mon Dec 15 23:35:59.248191 2025] [:error] [pid 31459:tid 31470] [client 20.27.228.201:4996] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aUAq3zqerS0TDpViRzvAYQAAAAk"]
[Mon Dec 15 23:36:00.016909 2025] [:error] [pid 31374:tid 31456] [client 20.27.228.201:4876] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aUAq4JzSh8b7uk6RWiG2uAAAAFg"]
[Mon Dec 15 23:36:01.003591 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:17428] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aUAq4ZzSh8b7uk6RWiG2uwAAAFA"]
[Mon Dec 15 23:36:01.444831 2025] [:error] [pid 31373:tid 31412] [client 20.27.228.201:5012] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aUAq4XFdnrU7ASwItVIt0AAAAMc"]
[Mon Dec 15 23:36:01.776515 2025] [:error] [pid 31372:tid 31384] [client 20.27.228.201:17453] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aUAq4QN06qRtpJxyxHjtVAAAAIg"]
[Mon Dec 15 23:36:02.133443 2025] [:error] [pid 31372:tid 31377] [client 20.27.228.201:17469] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aUAq4gN06qRtpJxyxHjtVQAAAIE"]
[Mon Dec 15 23:36:02.553673 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:5032] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dox.php"] [unique_id "aUAq4jqerS0TDpViRzvAZQAAABc"]
[Mon Dec 15 23:36:02.874893 2025] [:error] [pid 31373:tid 31420] [client 20.27.228.201:5076] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dox.php"] [unique_id "aUAq4nFdnrU7ASwItVIt1AAAAM8"]
[Mon Dec 15 23:36:03.352453 2025] [:error] [pid 31373:tid 31421] [client 20.27.228.201:5011] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dox.php"] [unique_id "aUAq43FdnrU7ASwItVIt1QAAANA"]
[Mon Dec 15 23:36:03.708044 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:17422] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dox.php"] [unique_id "aUAq43FdnrU7ASwItVIt1gAAANc"]
[Mon Dec 15 23:36:04.082491 2025] [:error] [pid 31374:tid 31456] [client 20.27.228.201:17440] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aUAq5JzSh8b7uk6RWiG2wAAAAFg"]
[Mon Dec 15 23:36:04.600170 2025] [:error] [pid 52155:tid 52160] [client 20.27.228.201:5003] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aUAq5BaJK6javjid3xwotQAAAQI"]
[Mon Dec 15 23:36:05.080420 2025] [:error] [pid 52155:tid 52181] [client 20.27.228.201:5105] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aUAq5RaJK6javjid3xwotgAAARc"]
[Mon Dec 15 23:36:05.435502 2025] [:error] [pid 31372:tid 31399] [client 20.27.228.201:17479] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aUAq5QN06qRtpJxyxHjtVgAAAJc"]
[Mon Dec 15 23:36:05.799112 2025] [:error] [pid 31373:tid 31413] [client 20.27.228.201:5088] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a5e0a.php"] [unique_id "aUAq5XFdnrU7ASwItVIt2QAAAMg"]
[Mon Dec 15 23:36:06.151409 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:4995] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a5e0a.php"] [unique_id "aUAq5jqerS0TDpViRzvAbAAAAAA"]
[Mon Dec 15 23:36:06.450529 2025] [:error] [pid 31373:tid 31415] [client 20.27.228.201:5013] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a5e0a.php"] [unique_id "aUAq5nFdnrU7ASwItVIt2gAAAMo"]
[Mon Dec 15 23:36:06.796966 2025] [:error] [pid 31459:tid 31483] [client 20.27.228.201:5119] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a5e0a.php"] [unique_id "aUAq5jqerS0TDpViRzvAbgAAABY"]
[Mon Dec 15 23:36:07.160569 2025] [:error] [pid 31459:tid 31469] [client 20.27.228.201:17474] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qaez.php56"] [unique_id "aUAq5zqerS0TDpViRzvAbwAAAAg"]
[Mon Dec 15 23:36:07.680231 2025] [:error] [pid 31372:tid 31379] [client 20.27.228.201:5004] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qaez.php56"] [unique_id "aUAq5wN06qRtpJxyxHjtWQAAAIM"]
[Mon Dec 15 23:36:07.972005 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:4934] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qaez.php56"] [unique_id "aUAq5wN06qRtpJxyxHjtWgAAAIA"]
[Mon Dec 15 23:36:08.464886 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:17436] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qaez.php56"] [unique_id "aUAq6JzSh8b7uk6RWiG2xgAAAFM"]
[Mon Dec 15 23:36:09.262779 2025] [:error] [pid 31372:tid 31393] [client 20.27.228.201:5009] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aUAq6QN06qRtpJxyxHjtXQAAAJE"]
[Mon Dec 15 23:36:09.565502 2025] [:error] [pid 31372:tid 31384] [client 20.27.228.201:4947] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aUAq6QN06qRtpJxyxHjtXwAAAIg"]
[Mon Dec 15 23:36:10.064651 2025] [:error] [pid 31374:tid 31437] [client 20.27.228.201:5014] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aUAq6pzSh8b7uk6RWiG2xwAAAEU"]
[Mon Dec 15 23:36:10.554412 2025] [:error] [pid 31372:tid 31388] [client 20.27.228.201:5052] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aUAq6gN06qRtpJxyxHjtYAAAAIw"]
[Mon Dec 15 23:36:11.045767 2025] [:error] [pid 31374:tid 31452] [client 20.27.228.201:5096] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUAq65zSh8b7uk6RWiG2ygAAAFQ"]
[Mon Dec 15 23:36:11.350750 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:5089] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUAq65zSh8b7uk6RWiG2ywAAAE0"]
[Mon Dec 15 23:36:11.663296 2025] [:error] [pid 31374:tid 31455] [client 20.27.228.201:5072] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUAq65zSh8b7uk6RWiG2zAAAAFc"]
[Mon Dec 15 23:36:12.018718 2025] [:error] [pid 31372:tid 31378] [client 20.27.228.201:5015] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUAq7AN06qRtpJxyxHjtZAAAAII"]
[Mon Dec 15 23:36:12.316212 2025] [:error] [pid 31373:tid 31408] [client 20.27.228.201:17468] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s121ws2s.php"] [unique_id "aUAq7HFdnrU7ASwItVIt4QAAAMM"]
[Mon Dec 15 23:36:12.850581 2025] [:error] [pid 31374:tid 31454] [client 20.27.228.201:4939] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s121ws2s.php"] [unique_id "aUAq7JzSh8b7uk6RWiG22wAAAFY"]
[Mon Dec 15 23:36:13.229866 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:4944] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s121ws2s.php"] [unique_id "aUAq7ZzSh8b7uk6RWiG23gAAAEk"]
[Mon Dec 15 23:36:13.832824 2025] [:error] [pid 52155:tid 52172] [client 20.27.228.201:17496] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s121ws2s.php"] [unique_id "aUAq7RaJK6javjid3xwovAAAAQ4"]
[Mon Dec 15 23:36:14.574848 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:5099] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUAq7pzSh8b7uk6RWiG29AAAAEA"]
[Mon Dec 15 23:36:14.910534 2025] [:error] [pid 31459:tid 31475] [client 20.27.228.201:4884] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUAq7jqerS0TDpViRzvAgAAAAA4"]
[Mon Dec 15 23:36:15.415487 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:5081] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUAq7xaJK6javjid3xwowAAAAQU"]
[Mon Dec 15 23:36:15.818786 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:17504] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUAq7xaJK6javjid3xwowwAAAQo"]
[Mon Dec 15 23:36:16.173727 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:5010] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUAq8JzSh8b7uk6RWiG3BQAAAE0"]
[Mon Dec 15 23:36:16.548791 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:5037] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUAq8AN06qRtpJxyxHjtaAAAAIA"]
[Mon Dec 15 23:36:17.102443 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:5093] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUAq8ZzSh8b7uk6RWiG3BgAAAEk"]
[Mon Dec 15 23:36:17.699179 2025] [:error] [pid 52155:tid 52165] [client 20.27.228.201:4932] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUAq8RaJK6javjid3xwoygAAAQc"]
[Mon Dec 15 23:36:18.018713 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:5007] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aUAq8haJK6javjid3xwoywAAAQg"]
[Mon Dec 15 23:36:18.301593 2025] [:error] [pid 52155:tid 52177] [client 20.27.228.201:17449] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aUAq8haJK6javjid3xwozgAAARM"]
[Mon Dec 15 23:36:18.888633 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:5002] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aUAq8haJK6javjid3xwo0AAAARE"]
[Mon Dec 15 23:36:19.174767 2025] [:error] [pid 31373:tid 31423] [client 20.27.228.201:5109] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aUAq83FdnrU7ASwItVIt5QAAANI"]
[Mon Dec 15 23:36:19.432640 2025] [:error] [pid 31373:tid 31413] [client 20.27.228.201:5098] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/783de.php"] [unique_id "aUAq83FdnrU7ASwItVIt5gAAAMg"]
[Mon Dec 15 23:36:19.758445 2025] [:error] [pid 31373:tid 31414] [client 20.27.228.201:5017] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/783de.php"] [unique_id "aUAq83FdnrU7ASwItVIt6AAAAMk"]
[Mon Dec 15 23:36:20.119665 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:4899] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/783de.php"] [unique_id "aUAq9JzSh8b7uk6RWiG3DwAAAFA"]
[Mon Dec 15 23:36:20.399770 2025] [:error] [pid 52155:tid 52180] [client 20.27.228.201:5053] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/783de.php"] [unique_id "aUAq9BaJK6javjid3xwo2AAAARY"]
[Mon Dec 15 23:36:20.682333 2025] [:error] [pid 52155:tid 52179] [client 20.27.228.201:5097] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm15.php"] [unique_id "aUAq9BaJK6javjid3xwo2QAAARU"]
[Mon Dec 15 23:36:20.942250 2025] [:error] [pid 31373:tid 31415] [client 20.27.228.201:5045] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm15.php"] [unique_id "aUAq9HFdnrU7ASwItVIt6QAAAMo"]
[Mon Dec 15 23:36:21.422862 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:17410] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm15.php"] [unique_id "aUAq9TqerS0TDpViRzvAgwAAABA"]
[Mon Dec 15 23:36:21.790023 2025] [:error] [pid 31459:tid 31464] [client 20.27.228.201:5110] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lm15.php"] [unique_id "aUAq9TqerS0TDpViRzvAhAAAAAM"]
[Mon Dec 15 23:36:22.098407 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:5086] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aUAq9jqerS0TDpViRzvAhgAAABc"]
[Mon Dec 15 23:36:22.459603 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:5034] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aUAq9jqerS0TDpViRzvAiQAAAAU"]
[Mon Dec 15 23:36:22.802185 2025] [:error] [pid 31459:tid 31482] [client 20.27.228.201:4943] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aUAq9jqerS0TDpViRzvAiwAAABU"]
[Mon Dec 15 23:36:23.082417 2025] [:error] [pid 31459:tid 31476] [client 20.27.228.201:4874] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aUAq9zqerS0TDpViRzvAjAAAAA8"]
[Mon Dec 15 23:36:23.494608 2025] [:error] [pid 31459:tid 31475] [client 20.27.228.201:4951] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aUAq9zqerS0TDpViRzvAjwAAAA4"]
[Mon Dec 15 23:36:24.102258 2025] [:error] [pid 31459:tid 31471] [client 20.27.228.201:4933] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aUAq-DqerS0TDpViRzvAkQAAAAo"]
[Mon Dec 15 23:36:24.543075 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:5044] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aUAq-JzSh8b7uk6RWiG3EQAAAEY"]
[Mon Dec 15 23:36:24.815712 2025] [:error] [pid 31374:tid 31444] [client 20.27.228.201:5091] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aUAq-JzSh8b7uk6RWiG3EwAAAEw"]
[Mon Dec 15 23:36:25.527638 2025] [:error] [pid 31459:tid 31474] [client 20.27.228.201:5000] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUAq-TqerS0TDpViRzvAkwAAAA0"]
[Mon Dec 15 23:36:26.496298 2025] [:error] [pid 31374:tid 31446] [client 20.27.228.201:17486] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUAq-pzSh8b7uk6RWiG3FgAAAE4"]
[Mon Dec 15 23:36:26.817480 2025] [:error] [pid 31373:tid 31421] [client 20.27.228.201:4950] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUAq-nFdnrU7ASwItVIt7wAAANA"]
[Mon Dec 15 23:36:27.358999 2025] [:error] [pid 31374:tid 31455] [client 20.27.228.201:17455] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUAq-5zSh8b7uk6RWiG3GQAAAFc"]
[Mon Dec 15 23:36:27.782683 2025] [:error] [pid 31459:tid 31463] [client 20.27.228.201:4930] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aUAq-zqerS0TDpViRzvAmgAAAAI"]
[Mon Dec 15 23:36:28.432676 2025] [:error] [pid 31459:tid 31481] [client 20.27.228.201:4954] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aUAq_DqerS0TDpViRzvAmwAAABQ"]
[Mon Dec 15 23:36:28.959954 2025] [:error] [pid 52155:tid 52160] [client 20.27.228.201:5023] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aUAq_BaJK6javjid3xwo4wAAAQI"]
[Mon Dec 15 23:36:29.464802 2025] [:error] [pid 31374:tid 31436] [client 20.27.228.201:4952] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aUAq_ZzSh8b7uk6RWiG3HQAAAEQ"]
[Mon Dec 15 23:36:29.746364 2025] [:error] [pid 31459:tid 31464] [client 20.27.228.201:5050] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUAq_TqerS0TDpViRzvAnAAAAAM"]
[Mon Dec 15 23:36:30.179744 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:4877] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUAq_haJK6javjid3xwo6gAAARE"]
[Mon Dec 15 23:36:30.470586 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:4908] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUAq_haJK6javjid3xwo6wAAAQU"]
[Mon Dec 15 23:36:31.155176 2025] [:error] [pid 31374:tid 31446] [client 20.27.228.201:5016] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUAq_5zSh8b7uk6RWiG3HwAAAE4"]
[Mon Dec 15 23:36:31.587695 2025] [:error] [pid 52155:tid 52164] [client 20.27.228.201:5038] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUAq_xaJK6javjid3xwo7AAAAQY"]
[Mon Dec 15 23:36:32.514364 2025] [:error] [pid 31372:tid 31394] [client 20.27.228.201:5079] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUArAAN06qRtpJxyxHjtfwAAAJI"]
[Mon Dec 15 23:36:33.197606 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:4928] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUArARaJK6javjid3xwo8AAAAQ0"]
[Mon Dec 15 23:36:33.740636 2025] [:error] [pid 31459:tid 31473] [client 20.27.228.201:4993] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUArATqerS0TDpViRzvApAAAAAw"]
[Mon Dec 15 23:36:34.334119 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:5035] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUArAhaJK6javjid3xwo9wAAAQU"]
[Mon Dec 15 23:36:34.785271 2025] [:error] [pid 31374:tid 31444] [client 20.27.228.201:4946] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUArApzSh8b7uk6RWiG3KQAAAEw"]
[Mon Dec 15 23:36:35.078679 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:4940] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUArA5zSh8b7uk6RWiG3KgAAAEk"]
[Mon Dec 15 23:36:35.425682 2025] [:error] [pid 31459:tid 31464] [client 20.27.228.201:4871] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUArAzqerS0TDpViRzvArAAAAAM"]
[Mon Dec 15 23:36:36.033405 2025] [proxy_fcgi:error] [pid 31373:tid 31411] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.178634 2025] [proxy_fcgi:error] [pid 31373:tid 31408] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.363279 2025] [proxy_fcgi:error] [pid 31373:tid 31419] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.485793 2025] [proxy_fcgi:error] [pid 31373:tid 31416] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.611166 2025] [proxy_fcgi:error] [pid 31373:tid 31428] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.735977 2025] [proxy_fcgi:error] [pid 31373:tid 31409] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.872706 2025] [proxy_fcgi:error] [pid 31373:tid 31423] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:36.995988 2025] [proxy_fcgi:error] [pid 31373:tid 31417] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:37.120036 2025] [proxy_fcgi:error] [pid 31373:tid 31429] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:37.243261 2025] [proxy_fcgi:error] [pid 31373:tid 31407] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:37.387613 2025] [proxy_fcgi:error] [pid 31373:tid 31411] [client 20.27.228.201:4897] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 23:36:37.509037 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:4897] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUArBXFdnrU7ASwItVIuMQAAANc"]
[Mon Dec 15 23:36:38.368280 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:4970] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUArBhaJK6javjid3xwpFQAAAQ0"]
[Mon Dec 15 23:36:38.680185 2025] [:error] [pid 31372:tid 31400] [client 20.27.228.201:5006] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUArBgN06qRtpJxyxHjtswAAAJg"]
[Mon Dec 15 23:36:39.702054 2025] [:error] [pid 52155:tid 52164] [client 20.27.228.201:5113] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUArBxaJK6javjid3xwpHgAAAQY"]
[Mon Dec 15 23:36:40.514330 2025] [:error] [pid 31372:tid 31381] [client 20.27.228.201:4960] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUArCAN06qRtpJxyxHjtwgAAAIU"]
[Mon Dec 15 23:36:41.780297 2025] [:error] [pid 31372:tid 31390] [client 20.27.228.201:4870] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUArCQN06qRtpJxyxHjtzgAAAI4"]
[Mon Dec 15 23:36:42.742226 2025] [:error] [pid 52155:tid 52161] [client 20.27.228.201:4901] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUArChaJK6javjid3xwpUAAAAQM"]
[Mon Dec 15 23:36:43.558038 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:5005] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUArCxaJK6javjid3xwpUwAAAQg"]
[Mon Dec 15 23:36:44.373751 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:5033] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oc460l3x.php"] [unique_id "aUArDBaJK6javjid3xwpWgAAAQo"]
[Mon Dec 15 23:36:45.685760 2025] [:error] [pid 31374:tid 31435] [client 20.27.228.201:5048] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oc460l3x.php"] [unique_id "aUArDZzSh8b7uk6RWiG3PQAAAEM"]
[Mon Dec 15 23:36:46.349147 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:4948] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oc460l3x.php"] [unique_id "aUArDpzSh8b7uk6RWiG3QwAAAEA"]
[Mon Dec 15 23:36:47.271271 2025] [:error] [pid 31372:tid 31394] [client 20.27.228.201:5101] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oc460l3x.php"] [unique_id "aUArDwN06qRtpJxyxHjt9gAAAJI"]
[Mon Dec 15 23:36:47.913715 2025] [:error] [pid 31459:tid 31478] [client 20.27.228.201:4898] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUArDzqerS0TDpViRzvA7gAAABE"]
[Mon Dec 15 23:36:48.300322 2025] [:error] [pid 31373:tid 31417] [client 20.27.228.201:4931] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUArEHFdnrU7ASwItVIufQAAAMw"]
[Mon Dec 15 23:36:48.898777 2025] [:error] [pid 31459:tid 31473] [client 20.27.228.201:4957] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUArEDqerS0TDpViRzvA-QAAAAw"]
[Mon Dec 15 23:36:49.350043 2025] [:error] [pid 31373:tid 31429] [client 20.27.228.201:5051] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUArEXFdnrU7ASwItVIuhwAAANg"]
[Mon Dec 15 23:36:50.094321 2025] [:error] [pid 31459:tid 31485] [client 20.27.228.201:4936] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUArEjqerS0TDpViRzvBAwAAABg"]
[Mon Dec 15 23:36:50.502642 2025] [:error] [pid 31373:tid 31406] [client 20.27.228.201:5102] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUArEnFdnrU7ASwItVIulQAAAME"]
[Mon Dec 15 23:36:50.845303 2025] [:error] [pid 31459:tid 31471] [client 20.27.228.201:4882] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUArEjqerS0TDpViRzvBCQAAAAo"]
[Mon Dec 15 23:36:51.464001 2025] [:error] [pid 31374:tid 31434] [client 20.27.228.201:4988] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUArE5zSh8b7uk6RWiG3agAAAEI"]
[Mon Dec 15 23:36:51.803817 2025] [:error] [pid 31373:tid 31422] [client 20.27.228.201:4942] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aUArE3FdnrU7ASwItVIuqQAAANE"]
[Mon Dec 15 23:36:52.153221 2025] [:error] [pid 52155:tid 52162] [client 20.27.228.201:4975] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aUArFBaJK6javjid3xwpfgAAAQQ"]
[Mon Dec 15 23:36:52.535704 2025] [:error] [pid 31459:tid 31470] [client 20.27.228.201:4866] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aUArFDqerS0TDpViRzvBFgAAAAk"]
[Mon Dec 15 23:36:52.874002 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:4824] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aUArFDqerS0TDpViRzvBHAAAABc"]
[Mon Dec 15 23:36:53.281407 2025] [:error] [pid 52155:tid 52159] [client 20.27.228.201:4885] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUArFRaJK6javjid3xwpjAAAAQE"]
[Mon Dec 15 23:36:53.562892 2025] [:error] [pid 31373:tid 31411] [client 20.27.228.201:5103] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUArFXFdnrU7ASwItVIuswAAAMY"]
[Mon Dec 15 23:36:54.049449 2025] [:error] [pid 52155:tid 52169] [client 20.27.228.201:5019] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUArFhaJK6javjid3xwpmAAAAQs"]
[Mon Dec 15 23:36:54.393353 2025] [:error] [pid 31374:tid 31454] [client 20.27.228.201:5074] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUArFpzSh8b7uk6RWiG3fgAAAFY"]
[Mon Dec 15 23:36:54.782139 2025] [:error] [pid 31373:tid 31406] [client 20.27.228.201:5030] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUArFnFdnrU7ASwItVIutwAAAME"]
[Mon Dec 15 23:36:55.073992 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:4981] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUArF5zSh8b7uk6RWiG3gQAAAE0"]
[Mon Dec 15 23:36:55.520191 2025] [:error] [pid 31374:tid 31447] [client 20.27.228.201:4918] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUArF5zSh8b7uk6RWiG3iAAAAE8"]
[Mon Dec 15 23:36:55.878213 2025] [:error] [pid 31374:tid 31455] [client 20.27.228.201:4974] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUArF5zSh8b7uk6RWiG3iwAAAFc"]
[Mon Dec 15 23:36:56.384223 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:5036] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUArGJzSh8b7uk6RWiG3kgAAAEY"]
[Mon Dec 15 23:36:56.732931 2025] [:error] [pid 31459:tid 31474] [client 20.27.228.201:4984] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUArGDqerS0TDpViRzvBPgAAAA0"]
[Mon Dec 15 23:36:57.070457 2025] [:error] [pid 31374:tid 31434] [client 20.27.228.201:5028] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUArGZzSh8b7uk6RWiG3nAAAAEI"]
[Mon Dec 15 23:36:57.511456 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:5031] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUArGTqerS0TDpViRzvBRwAAABc"]
[Mon Dec 15 23:36:57.801754 2025] [:error] [pid 52155:tid 52158] [client 20.27.228.201:4811] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUArGRaJK6javjid3xwpuAAAAQA"]
[Mon Dec 15 23:36:58.114363 2025] [:error] [pid 31459:tid 31478] [client 20.27.228.201:4972] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUArGjqerS0TDpViRzvBTQAAABE"]
[Mon Dec 15 23:36:58.465304 2025] [:error] [pid 52155:tid 52170] [client 20.27.228.201:4953] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUArGhaJK6javjid3xwpwQAAAQw"]
[Mon Dec 15 23:36:59.034437 2025] [:error] [pid 31373:tid 31405] [client 20.27.228.201:5041] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUArG3FdnrU7ASwItVIuvgAAAMA"]
[Mon Dec 15 23:36:59.484617 2025] [:error] [pid 31373:tid 31427] [client 20.27.228.201:4962] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUArG3FdnrU7ASwItVIuwgAAANY"]
[Mon Dec 15 23:36:59.783155 2025] [:error] [pid 31374:tid 31436] [client 20.27.228.201:5049] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUArG5zSh8b7uk6RWiG3rAAAAEQ"]
[Mon Dec 15 23:37:00.126528 2025] [:error] [pid 31373:tid 31422] [client 20.27.228.201:5100] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUArHHFdnrU7ASwItVIuyAAAANE"]
[Mon Dec 15 23:37:00.472197 2025] [:error] [pid 31459:tid 31481] [client 20.27.228.201:4905] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUArHDqerS0TDpViRzvBcQAAABQ"]
[Mon Dec 15 23:37:00.750687 2025] [:error] [pid 31459:tid 31480] [client 20.27.228.201:5104] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUArHDqerS0TDpViRzvBeAAAABM"]
[Mon Dec 15 23:37:01.163937 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:5086] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUArHTqerS0TDpViRzvBgAAAAAU"]
[Mon Dec 15 23:37:01.623489 2025] [:error] [pid 31373:tid 31405] [client 20.27.228.201:5022] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUArHXFdnrU7ASwItVIu1QAAAMA"]
[Mon Dec 15 23:37:02.060346 2025] [:error] [pid 31374:tid 31433] [client 20.27.228.201:5021] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUArHpzSh8b7uk6RWiG3vwAAAEE"]
[Mon Dec 15 23:37:02.333008 2025] [:error] [pid 31373:tid 31411] [client 20.27.228.201:5054] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin-header.php"] [unique_id "aUArHnFdnrU7ASwItVIu2AAAAMY"]
[Mon Dec 15 23:37:02.769604 2025] [:error] [pid 31372:tid 31398] [client 20.27.228.201:5024] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin-header.php"] [unique_id "aUArHgN06qRtpJxyxHjuFwAAAJY"]
[Mon Dec 15 23:37:03.041134 2025] [:error] [pid 31459:tid 31475] [client 20.27.228.201:4955] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin-header.php"] [unique_id "aUArHzqerS0TDpViRzvBhAAAAA4"]
[Mon Dec 15 23:37:03.499401 2025] [:error] [pid 31374:tid 31455] [client 20.27.228.201:4983] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin-header.php"] [unique_id "aUArH5zSh8b7uk6RWiG30QAAAFc"]
[Mon Dec 15 23:37:03.962331 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:4980] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUArHzqerS0TDpViRzvBigAAAAA"]
[Mon Dec 15 23:37:04.322010 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:5083] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUArIJzSh8b7uk6RWiG31wAAAFU"]
[Mon Dec 15 23:37:04.640782 2025] [:error] [pid 52155:tid 52180] [client 20.27.228.201:4912] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUArIBaJK6javjid3xwp2QAAARY"]
[Mon Dec 15 23:37:04.937580 2025] [:error] [pid 31374:tid 31436] [client 20.27.228.201:5042] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUArIJzSh8b7uk6RWiG32gAAAEQ"]
[Mon Dec 15 23:37:05.349286 2025] [:error] [pid 31374:tid 31449] [client 20.27.228.201:4959] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUArIZzSh8b7uk6RWiG33QAAAFE"]
[Mon Dec 15 23:37:05.650194 2025] [:error] [pid 31372:tid 31393] [client 20.27.228.201:4812] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUArIQN06qRtpJxyxHjuIgAAAJE"]
[Mon Dec 15 23:37:06.010456 2025] [:error] [pid 31373:tid 31418] [client 20.27.228.201:4850] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUArInFdnrU7ASwItVIu6QAAAM0"]
[Mon Dec 15 23:37:06.374378 2025] [:error] [pid 52155:tid 52179] [client 20.27.228.201:4921] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUArIhaJK6javjid3xwp5wAAARU"]
[Mon Dec 15 23:37:06.645484 2025] [:error] [pid 31373:tid 31429] [client 20.27.228.201:4890] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUArInFdnrU7ASwItVIu6wAAANg"]
[Mon Dec 15 23:37:06.958965 2025] [:error] [pid 52155:tid 52173] [client 20.27.228.201:4879] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUArIhaJK6javjid3xwp6QAAAQ8"]
[Mon Dec 15 23:37:07.268755 2025] [:error] [pid 31374:tid 31438] [client 20.27.228.201:4865] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUArI5zSh8b7uk6RWiG34gAAAEY"]
[Mon Dec 15 23:37:07.588300 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:4839] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUArI5zSh8b7uk6RWiG35gAAAEA"]
[Mon Dec 15 23:37:07.890689 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:4872] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUArI5zSh8b7uk6RWiG36AAAAFA"]
[Mon Dec 15 23:37:08.152129 2025] [:error] [pid 31372:tid 31395] [client 20.27.228.201:4989] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUArJAN06qRtpJxyxHjuMQAAAJM"]
[Mon Dec 15 23:37:08.473375 2025] [:error] [pid 52155:tid 52181] [client 20.27.228.201:4903] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUArJBaJK6javjid3xwp9gAAARc"]
[Mon Dec 15 23:37:08.926308 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:4965] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUArJBaJK6javjid3xwp_AAAARE"]
[Mon Dec 15 23:37:09.322705 2025] [:error] [pid 31372:tid 31393] [client 20.27.228.201:5046] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUArJQN06qRtpJxyxHjuNgAAAJE"]
[Mon Dec 15 23:37:09.625118 2025] [:error] [pid 31374:tid 31437] [client 20.27.228.201:4889] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUArJZzSh8b7uk6RWiG39AAAAEU"]
[Mon Dec 15 23:37:09.895077 2025] [:error] [pid 52155:tid 52182] [client 20.27.228.201:5040] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUArJRaJK6javjid3xwqBQAAARg"]
[Mon Dec 15 23:37:10.342226 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:4982] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUArJhaJK6javjid3xwqBwAAAQk"]
[Mon Dec 15 23:37:10.809766 2025] [:error] [pid 52155:tid 52159] [client 20.27.228.201:4920] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUArJhaJK6javjid3xwqCwAAAQE"]
[Mon Dec 15 23:37:11.110086 2025] [:error] [pid 31373:tid 31416] [client 20.27.228.201:4987] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUArJ3FdnrU7ASwItVIu-gAAAMs"]
[Mon Dec 15 23:37:11.397379 2025] [:error] [pid 31373:tid 31418] [client 20.27.228.201:5026] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUArJ3FdnrU7ASwItVIu_QAAAM0"]
[Mon Dec 15 23:37:11.768745 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:5043] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUArJzqerS0TDpViRzvBpwAAABA"]
[Mon Dec 15 23:37:12.083077 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:4873] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUArKJzSh8b7uk6RWiG4LAAAAEA"]
[Mon Dec 15 23:37:12.449077 2025] [:error] [pid 31373:tid 31419] [client 20.27.228.201:4894] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUArKHFdnrU7ASwItVIvAAAAAM4"]
[Mon Dec 15 23:37:12.756889 2025] [:error] [pid 52155:tid 52179] [client 20.27.228.201:4893] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUArKBaJK6javjid3xwqGgAAARU"]
[Mon Dec 15 23:37:13.129761 2025] [:error] [pid 31373:tid 31412] [client 20.27.228.201:4868] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUArKXFdnrU7ASwItVIvBQAAAMc"]
[Mon Dec 15 23:37:13.408276 2025] [:error] [pid 31374:tid 31446] [client 20.27.228.201:4911] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aUArKZzSh8b7uk6RWiG4MQAAAE4"]
[Mon Dec 15 23:37:13.673846 2025] [:error] [pid 31374:tid 31443] [client 20.27.228.201:4907] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aUArKZzSh8b7uk6RWiG4NQAAAEs"]
[Mon Dec 15 23:37:13.934456 2025] [:error] [pid 31459:tid 31468] [client 20.27.228.201:4818] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aUArKTqerS0TDpViRzvBrwAAAAc"]
[Mon Dec 15 23:37:14.275176 2025] [:error] [pid 52155:tid 52158] [client 20.27.228.201:4883] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hello.php"] [unique_id "aUArKhaJK6javjid3xwqIQAAAQA"]
[Mon Dec 15 23:37:14.618830 2025] [:error] [pid 31459:tid 31478] [client 20.27.228.201:4963] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUArKjqerS0TDpViRzvBtwAAABE"]
[Mon Dec 15 23:37:15.000228 2025] [:error] [pid 31459:tid 31482] [client 20.27.228.201:4847] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUArKjqerS0TDpViRzvBugAAABU"]
[Mon Dec 15 23:37:15.323196 2025] [:error] [pid 52155:tid 52180] [client 20.27.228.201:4971] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUArKxaJK6javjid3xwqKQAAARY"]
[Mon Dec 15 23:37:15.706752 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:4880] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUArKwN06qRtpJxyxHjuUAAAAIA"]
[Mon Dec 15 23:37:16.041713 2025] [:error] [pid 31459:tid 31468] [client 20.27.228.201:4906] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUArLDqerS0TDpViRzvBxgAAAAc"]
[Mon Dec 15 23:37:16.467664 2025] [:error] [pid 31373:tid 31421] [client 20.27.228.201:4825] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUArLHFdnrU7ASwItVIvDAAAANA"]
[Mon Dec 15 23:37:16.829326 2025] [:error] [pid 52155:tid 52172] [client 20.27.228.201:4895] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUArLBaJK6javjid3xwqMQAAAQ4"]
[Mon Dec 15 23:37:17.190941 2025] [:error] [pid 31374:tid 31447] [client 20.27.228.201:4914] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUArLZzSh8b7uk6RWiG4OgAAAE8"]
[Mon Dec 15 23:37:17.486383 2025] [:error] [pid 31373:tid 31408] [client 20.27.228.201:4977] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUArLXFdnrU7ASwItVIvDQAAAMM"]
[Mon Dec 15 23:37:18.023104 2025] [:error] [pid 31459:tid 31482] [client 20.27.228.201:5047] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUArLjqerS0TDpViRzvByQAAABU"]
[Mon Dec 15 23:37:18.332094 2025] [:error] [pid 52155:tid 52159] [client 20.27.228.201:4913] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUArLhaJK6javjid3xwqNgAAAQE"]
[Mon Dec 15 23:37:18.739960 2025] [:error] [pid 31372:tid 31386] [client 20.27.228.201:4938] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUArLgN06qRtpJxyxHjuWAAAAIo"]
[Mon Dec 15 23:37:19.095965 2025] [:error] [pid 31373:tid 31427] [client 20.27.228.201:4765] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aUArL3FdnrU7ASwItVIvEgAAANY"]
[Mon Dec 15 23:37:19.460420 2025] [:error] [pid 31372:tid 31382] [client 20.27.228.201:4823] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aUArLwN06qRtpJxyxHjuXAAAAIY"]
[Mon Dec 15 23:37:19.790143 2025] [:error] [pid 52155:tid 52164] [client 20.27.228.201:4985] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aUArLxaJK6javjid3xwqRgAAAQY"]
[Mon Dec 15 23:37:20.151476 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:4896] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aUArMJzSh8b7uk6RWiG4QAAAAFM"]
[Mon Dec 15 23:37:20.550683 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:4804] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aUArMJzSh8b7uk6RWiG4SAAAAFA"]
[Mon Dec 15 23:37:21.010849 2025] [:error] [pid 31374:tid 31455] [client 20.27.228.201:4924] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aUArMZzSh8b7uk6RWiG4SgAAAFc"]
[Mon Dec 15 23:37:21.368727 2025] [:error] [pid 31372:tid 31398] [client 20.27.228.201:4917] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aUArMQN06qRtpJxyxHjuagAAAJY"]
[Mon Dec 15 23:37:21.668254 2025] [:error] [pid 31373:tid 31408] [client 20.27.228.201:4929] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aUArMXFdnrU7ASwItVIvIAAAAMM"]
[Mon Dec 15 23:37:22.000786 2025] [:error] [pid 31459:tid 31470] [client 20.27.228.201:4869] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dejavu.php"] [unique_id "aUArMTqerS0TDpViRzvB2wAAAAk"]
[Mon Dec 15 23:37:22.306135 2025] [:error] [pid 31373:tid 31415] [client 20.27.228.201:4973] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dejavu.php"] [unique_id "aUArMnFdnrU7ASwItVIvJAAAAMo"]
[Mon Dec 15 23:37:22.772881 2025] [:error] [pid 52155:tid 52176] [client 20.27.228.201:4966] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dejavu.php"] [unique_id "aUArMhaJK6javjid3xwqYQAAARI"]
[Mon Dec 15 23:37:23.144986 2025] [:error] [pid 31372:tid 31396] [client 20.27.228.201:4801] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dejavu.php"] [unique_id "aUArMwN06qRtpJxyxHjudAAAAJQ"]
[Mon Dec 15 23:37:23.436011 2025] [:error] [pid 31372:tid 31389] [client 20.27.228.201:4867] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUArMwN06qRtpJxyxHjudQAAAI0"]
[Mon Dec 15 23:37:23.729660 2025] [:error] [pid 31373:tid 31412] [client 20.27.228.201:4838] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUArM3FdnrU7ASwItVIvKAAAAMc"]
[Mon Dec 15 23:37:24.254859 2025] [:error] [pid 31374:tid 31440] [client 20.27.228.201:4991] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUArNJzSh8b7uk6RWiG4XQAAAEg"]
[Mon Dec 15 23:37:24.609912 2025] [:error] [pid 31372:tid 31385] [client 20.27.228.201:4831] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUArNAN06qRtpJxyxHjuewAAAIk"]
[Mon Dec 15 23:37:24.920114 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:4844] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aUArNJzSh8b7uk6RWiG4YwAAAE0"]
[Mon Dec 15 23:37:25.279591 2025] [:error] [pid 31373:tid 31424] [client 20.27.228.201:4814] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aUArNXFdnrU7ASwItVIvMgAAANM"]
[Mon Dec 15 23:37:25.706965 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:4961] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aUArNZzSh8b7uk6RWiG4aAAAAEk"]
[Mon Dec 15 23:37:26.010984 2025] [:error] [pid 31372:tid 31396] [client 20.27.228.201:17498] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aUArNgN06qRtpJxyxHjuhwAAAJQ"]
[Mon Dec 15 23:37:26.439293 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:4846] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUArNjqerS0TDpViRzvB9AAAAAU"]
[Mon Dec 15 23:37:26.756811 2025] [:error] [pid 31373:tid 31410] [client 20.27.228.201:4888] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUArNnFdnrU7ASwItVIvOAAAAMU"]
[Mon Dec 15 23:37:27.184891 2025] [:error] [pid 31374:tid 31435] [client 20.27.228.201:4817] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUArN5zSh8b7uk6RWiG4bgAAAEM"]
[Mon Dec 15 23:37:27.488832 2025] [:error] [pid 31373:tid 31411] [client 20.27.228.201:4887] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUArN3FdnrU7ASwItVIvOgAAAMY"]
[Tue Dec 16 00:49:02.031929 2025] [autoindex:error] [pid 34411:tid 34483] [client 45.135.3.157:15467] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 02:21:03.940374 2025] [autoindex:error] [pid 34409:tid 34421] [client 35.153.44.134:57434] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:45.895636 2025] [proxy_fcgi:error] [pid 33916:tid 33947] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:46.349732 2025] [proxy_fcgi:error] [pid 33916:tid 33953] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:46.797622 2025] [proxy_fcgi:error] [pid 33916:tid 33947] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:47.616846 2025] [proxy_fcgi:error] [pid 33916:tid 33951] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:48.099667 2025] [proxy_fcgi:error] [pid 33916:tid 33966] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:48.543653 2025] [proxy_fcgi:error] [pid 33916:tid 33962] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:48.926621 2025] [proxy_fcgi:error] [pid 33916:tid 33961] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:49.704661 2025] [proxy_fcgi:error] [pid 33916:tid 33954] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:50.567630 2025] [proxy_fcgi:error] [pid 33916:tid 33953] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:51.403626 2025] [proxy_fcgi:error] [pid 33916:tid 33946] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:51.829603 2025] [proxy_fcgi:error] [pid 33916:tid 33951] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:52.306070 2025] [proxy_fcgi:error] [pid 33916:tid 33952] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:53.083627 2025] [proxy_fcgi:error] [pid 33916:tid 33960] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:53.530639 2025] [proxy_fcgi:error] [pid 33916:tid 33966] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:53.919631 2025] [proxy_fcgi:error] [pid 33916:tid 33960] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:54.645241 2025] [proxy_fcgi:error] [pid 33916:tid 33955] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:55.083139 2025] [proxy_fcgi:error] [pid 33916:tid 33964] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:09:55.606784 2025] [proxy_fcgi:error] [pid 33916:tid 33961] [client 45.154.138.39:63307] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:10:03.492745 2025] [:error] [pid 33916:tid 33964] [client 45.154.138.39:63307] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUBrGyZs6NytTdwKTkT7gQAAAFI"]
[Tue Dec 16 04:21:25.317187 2025] [:error] [pid 39159:tid 39165] [client 180.110.203.108:38832] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUBtxVkjVlBeje9Ge61cyAAAAME"]
[Tue Dec 16 04:25:12.604633 2025] [proxy_fcgi:error] [pid 39049:tid 39068] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:12.749614 2025] [proxy_fcgi:error] [pid 39049:tid 39076] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:12.932913 2025] [proxy_fcgi:error] [pid 39049:tid 39088] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:13.074470 2025] [proxy_fcgi:error] [pid 39049:tid 39084] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:13.217965 2025] [proxy_fcgi:error] [pid 39049:tid 39071] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:13.360619 2025] [proxy_fcgi:error] [pid 39049:tid 39086] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:13.501231 2025] [proxy_fcgi:error] [pid 39049:tid 39070] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:14.748284 2025] [proxy_fcgi:error] [pid 39049:tid 39073] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:14.894834 2025] [proxy_fcgi:error] [pid 39049:tid 39074] [client 20.192.27.143:17697] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:25:15.031608 2025] [:error] [pid 39049:tid 39087] [client 20.192.27.143:17697] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUBuq4ij2QSiFs0L_3f8zAAAABM"]
[Tue Dec 16 04:25:17.789697 2025] [:error] [pid 39159:tid 39178] [client 20.192.27.143:19443] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUBurVkjVlBeje9Ge61eWQAAAM4"]
[Tue Dec 16 04:25:19.875901 2025] [:error] [pid 39050:tid 39105] [client 20.192.27.143:14610] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUBur0qg4cFnOYpJrg35OgAAAEk"]
[Tue Dec 16 04:25:21.810209 2025] [:error] [pid 39050:tid 39100] [client 20.192.27.143:11717] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUBusUqg4cFnOYpJrg35PQAAAEQ"]
[Tue Dec 16 04:25:23.183752 2025] [:error] [pid 39050:tid 39097] [client 20.192.27.143:1729] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUBus0qg4cFnOYpJrg35PwAAAEE"]
[Tue Dec 16 04:25:24.497692 2025] [:error] [pid 39049:tid 39089] [client 20.192.27.143:11959] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUButIij2QSiFs0L_3f82AAAABU"]
[Tue Dec 16 04:25:26.353514 2025] [:error] [pid 39159:tid 39173] [client 20.192.27.143:16754] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUButlkjVlBeje9Ge61eZQAAAMk"]
[Tue Dec 16 04:25:27.108700 2025] [:error] [pid 39049:tid 39088] [client 20.192.27.143:13824] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUBut4ij2QSiFs0L_3f83AAAABQ"]
[Tue Dec 16 04:25:28.462767 2025] [:error] [pid 39050:tid 39104] [client 20.192.27.143:19022] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUBuuEqg4cFnOYpJrg35RAAAAEg"]
[Tue Dec 16 04:25:28.859753 2025] [:error] [pid 39051:tid 39132] [client 20.192.27.143:17668] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUBuuJwLAYh6KdpRjKT_2wAAAIk"]
[Tue Dec 16 04:25:29.511452 2025] [:error] [pid 39049:tid 39070] [client 20.192.27.143:12024] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUBuuYij2QSiFs0L_3f84AAAAAI"]
[Tue Dec 16 04:25:30.791564 2025] [:error] [pid 39159:tid 39172] [client 20.192.27.143:13877] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUBuulkjVlBeje9Ge61eagAAAMg"]
[Tue Dec 16 04:25:32.703623 2025] [:error] [pid 39159:tid 39180] [client 20.192.27.143:13876] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUBuvFkjVlBeje9Ge61ebAAAANA"]
[Tue Dec 16 04:25:34.934606 2025] [:error] [pid 39051:tid 39130] [client 20.192.27.143:13864] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUBuvpwLAYh6KdpRjKT_6AAAAIc"]
[Tue Dec 16 04:25:36.452491 2025] [:error] [pid 39050:tid 39119] [client 20.192.27.143:11917] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUBuwEqg4cFnOYpJrg35TgAAAFc"]
[Tue Dec 16 04:25:37.994429 2025] [:error] [pid 39051:tid 39124] [client 20.192.27.143:10836] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUBuwZwLAYh6KdpRjKT_6gAAAIE"]
[Tue Dec 16 04:25:39.632818 2025] [:error] [pid 39159:tid 39172] [client 20.192.27.143:15992] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUBuw1kjVlBeje9Ge61edAAAAMg"]
[Tue Dec 16 04:25:40.799468 2025] [:error] [pid 39049:tid 39078] [client 20.192.27.143:12168] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUBuxIij2QSiFs0L_3f8-AAAAAo"]
[Tue Dec 16 04:25:41.830689 2025] [:error] [pid 39051:tid 39144] [client 20.192.27.143:10829] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUBuxZwLAYh6KdpRjKT_8AAAAJU"]
[Tue Dec 16 04:25:42.320904 2025] [:error] [pid 39050:tid 39115] [client 20.192.27.143:14640] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUBuxkqg4cFnOYpJrg35VQAAAFM"]
[Tue Dec 16 04:25:43.849125 2025] [:error] [pid 39159:tid 39177] [client 20.192.27.143:11980] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUBux1kjVlBeje9Ge61efAAAAM0"]
[Tue Dec 16 04:25:45.112807 2025] [:error] [pid 39049:tid 39082] [client 20.192.27.143:20624] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUBuyYij2QSiFs0L_3f8_AAAAA4"]
[Tue Dec 16 04:25:46.836113 2025] [:error] [pid 39051:tid 39127] [client 20.192.27.143:13293] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUBuypwLAYh6KdpRjKT_9gAAAIQ"]
[Tue Dec 16 04:25:47.323677 2025] [:error] [pid 39050:tid 39107] [client 20.192.27.143:20614] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUBuy0qg4cFnOYpJrg35VgAAAEs"]
[Tue Dec 16 04:25:48.950324 2025] [:error] [pid 39050:tid 39119] [client 20.192.27.143:20618] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUBuzEqg4cFnOYpJrg35VwAAAFc"]
[Tue Dec 16 04:25:52.246892 2025] [:error] [pid 39051:tid 39139] [client 20.192.27.143:10822] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUBu0JwLAYh6KdpRjKT_-AAAAJA"]
[Tue Dec 16 04:25:54.867885 2025] [:error] [pid 39050:tid 39112] [client 20.192.27.143:11264] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUBu0kqg4cFnOYpJrg35WQAAAFA"]
[Tue Dec 16 04:25:56.735530 2025] [:error] [pid 39050:tid 39108] [client 20.192.27.143:15951] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUBu1Eqg4cFnOYpJrg35WgAAAEw"]
[Tue Dec 16 04:25:57.657972 2025] [:error] [pid 39159:tid 39184] [client 20.192.27.143:11310] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUBu1VkjVlBeje9Ge61ehgAAANQ"]
[Tue Dec 16 04:26:00.243833 2025] [:error] [pid 39159:tid 39178] [client 20.192.27.143:12604] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUBu2FkjVlBeje9Ge61eiwAAAM4"]
[Tue Dec 16 04:26:03.614033 2025] [:error] [pid 39049:tid 39085] [client 20.192.27.143:16970] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUBu24ij2QSiFs0L_3f9BwAAABE"]
[Tue Dec 16 04:26:04.219024 2025] [:error] [pid 39159:tid 39185] [client 20.192.27.143:19584] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUBu3FkjVlBeje9Ge61ekQAAANU"]
[Tue Dec 16 04:26:04.975259 2025] [:error] [pid 39159:tid 39169] [client 20.192.27.143:12356] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aUBu3FkjVlBeje9Ge61ekwAAAMU"]
[Tue Dec 16 04:26:06.828422 2025] [:error] [pid 39159:tid 39179] [client 20.192.27.143:13249] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aUBu3lkjVlBeje9Ge61emwAAAM8"]
[Tue Dec 16 04:26:08.994412 2025] [:error] [pid 39049:tid 39068] [client 20.192.27.143:10562] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aUBu4Iij2QSiFs0L_3f9CwAAAAA"]
[Tue Dec 16 04:26:10.269790 2025] [:error] [pid 39159:tid 39169] [client 20.192.27.143:18789] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aUBu4lkjVlBeje9Ge61eowAAAMU"]
[Tue Dec 16 04:26:12.080966 2025] [:error] [pid 39159:tid 39173] [client 20.192.27.143:10599] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aUBu5FkjVlBeje9Ge61eqwAAAMk"]
[Tue Dec 16 04:26:14.393909 2025] [proxy_fcgi:error] [pid 39159:tid 39166] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:15.490899 2025] [proxy_fcgi:error] [pid 39159:tid 39184] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.044134 2025] [proxy_fcgi:error] [pid 39159:tid 39178] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.184756 2025] [proxy_fcgi:error] [pid 39159:tid 39177] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.326292 2025] [proxy_fcgi:error] [pid 39159:tid 39174] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.471242 2025] [proxy_fcgi:error] [pid 39159:tid 39183] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.616477 2025] [proxy_fcgi:error] [pid 39159:tid 39168] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.757832 2025] [proxy_fcgi:error] [pid 39159:tid 39188] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:16.899180 2025] [proxy_fcgi:error] [pid 39159:tid 39182] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:17.041314 2025] [proxy_fcgi:error] [pid 39159:tid 39186] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:17.195899 2025] [proxy_fcgi:error] [pid 39159:tid 39169] [client 20.192.27.143:13191] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:26:17.332948 2025] [:error] [pid 39159:tid 39166] [client 20.192.27.143:13191] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUBu6VkjVlBeje9Ge61exwAAAMI"]
[Tue Dec 16 04:26:19.367649 2025] [:error] [pid 39159:tid 39184] [client 20.192.27.143:10406] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUBu61kjVlBeje9Ge61ezQAAANQ"]
[Tue Dec 16 04:26:22.016231 2025] [:error] [pid 39159:tid 39176] [client 20.192.27.143:10414] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUBu7lkjVlBeje9Ge61e2AAAAMw"]
[Tue Dec 16 04:26:23.414831 2025] [:error] [pid 39050:tid 39117] [client 20.192.27.143:45563] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUBu70qg4cFnOYpJrg35XgAAAFU"]
[Tue Dec 16 04:26:24.898558 2025] [:error] [pid 39050:tid 39114] [client 20.192.27.143:1912] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBu8Eqg4cFnOYpJrg35YAAAAFI"]
[Tue Dec 16 04:26:27.193554 2025] [:error] [pid 39159:tid 39165] [client 20.192.27.143:12472] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBu81kjVlBeje9Ge61e4QAAAME"]
[Tue Dec 16 04:26:30.011119 2025] [:error] [pid 39159:tid 39172] [client 20.192.27.143:1910] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBu9lkjVlBeje9Ge61e6gAAAMg"]
[Tue Dec 16 04:26:31.344297 2025] [:error] [pid 39049:tid 39079] [client 20.192.27.143:1868] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBu94ij2QSiFs0L_3f9EAAAAAs"]
[Tue Dec 16 04:26:32.202418 2025] [:error] [pid 39159:tid 39178] [client 20.192.27.143:2011] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUBu-FkjVlBeje9Ge61e7gAAAM4"]
[Tue Dec 16 04:26:33.083752 2025] [:error] [pid 39051:tid 39136] [client 20.192.27.143:2019] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUBu-ZwLAYh6KdpRjKQABwAAAI0"]
[Tue Dec 16 04:26:33.677773 2025] [:error] [pid 39049:tid 39082] [client 20.192.27.143:10387] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUBu-Yij2QSiFs0L_3f9EwAAAA4"]
[Tue Dec 16 04:26:34.423476 2025] [:error] [pid 39050:tid 39113] [client 20.192.27.143:11611] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUBu-kqg4cFnOYpJrg35aQAAAFE"]
[Tue Dec 16 04:26:35.228940 2025] [:error] [pid 39049:tid 39072] [client 20.192.27.143:11316] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUBu-4ij2QSiFs0L_3f9FAAAAAQ"]
[Tue Dec 16 04:26:35.859810 2025] [:error] [pid 39050:tid 39110] [client 20.192.27.143:18805] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUBu-0qg4cFnOYpJrg35bQAAAE4"]
[Tue Dec 16 04:26:37.002364 2025] [:error] [pid 39050:tid 39120] [client 20.192.27.143:13213] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUBu_Uqg4cFnOYpJrg35cAAAAFg"]
[Tue Dec 16 04:26:38.715249 2025] [:error] [pid 39050:tid 39099] [client 20.192.27.143:10973] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUBu_kqg4cFnOYpJrg35dQAAAEM"]
[Tue Dec 16 04:26:40.946633 2025] [:error] [pid 39051:tid 39147] [client 20.192.27.143:45528] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aUBvAJwLAYh6KdpRjKQADgAAAJg"]
[Tue Dec 16 04:26:42.890041 2025] [:error] [pid 39051:tid 39139] [client 20.192.27.143:13949] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aUBvApwLAYh6KdpRjKQAEAAAAJA"]
[Tue Dec 16 04:26:44.449277 2025] [:error] [pid 39049:tid 39084] [client 20.192.27.143:18770] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aUBvBIij2QSiFs0L_3f9KwAAABA"]
[Tue Dec 16 04:26:45.897802 2025] [:error] [pid 39051:tid 39131] [client 20.192.27.143:45630] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aUBvBZwLAYh6KdpRjKQAEQAAAIg"]
[Tue Dec 16 04:26:50.756701 2025] [:error] [pid 39049:tid 39089] [client 20.192.27.143:1856] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvCoij2QSiFs0L_3f9OgAAABU"]
[Tue Dec 16 04:26:53.107066 2025] [:error] [pid 39049:tid 39070] [client 20.192.27.143:46029] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvDYij2QSiFs0L_3f9RwAAAAI"]
[Tue Dec 16 04:26:55.589263 2025] [:error] [pid 39050:tid 39101] [client 20.192.27.143:1252] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvD0qg4cFnOYpJrg35fgAAAEU"]
[Tue Dec 16 04:27:01.336903 2025] [:error] [pid 39050:tid 39114] [client 20.192.27.143:45602] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvFUqg4cFnOYpJrg35gwAAAFI"]
[Tue Dec 16 04:27:05.048334 2025] [:error] [pid 39051:tid 39123] [client 20.192.27.143:17921] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUBvGZwLAYh6KdpRjKQASwAAAIA"]
[Tue Dec 16 04:27:08.412123 2025] [:error] [pid 39159:tid 39174] [client 20.192.27.143:1229] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUBvHFkjVlBeje9Ge61fSgAAAMo"]
[Tue Dec 16 04:27:13.467150 2025] [:error] [pid 39050:tid 39102] [client 20.192.27.143:18011] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUBvIUqg4cFnOYpJrg35jAAAAEY"]
[Tue Dec 16 04:27:15.112878 2025] [:error] [pid 39051:tid 39123] [client 20.192.27.143:17957] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUBvI5wLAYh6KdpRjKQAUQAAAIA"]
[Tue Dec 16 04:27:20.420317 2025] [proxy_fcgi:error] [pid 39051:tid 39124] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:23.184141 2025] [proxy_fcgi:error] [pid 39051:tid 39128] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:23.388428 2025] [proxy_fcgi:error] [pid 39051:tid 39144] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:23.557851 2025] [proxy_fcgi:error] [pid 39051:tid 39131] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:23.697862 2025] [proxy_fcgi:error] [pid 39051:tid 39129] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:23.845877 2025] [proxy_fcgi:error] [pid 39051:tid 39143] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:23.988263 2025] [proxy_fcgi:error] [pid 39051:tid 39127] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:24.133050 2025] [proxy_fcgi:error] [pid 39051:tid 39136] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:24.291154 2025] [proxy_fcgi:error] [pid 39051:tid 39124] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:24.431796 2025] [proxy_fcgi:error] [pid 39051:tid 39137] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:24.575636 2025] [proxy_fcgi:error] [pid 39051:tid 39141] [client 20.192.27.143:17174] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:27:24.712085 2025] [:error] [pid 39051:tid 39134] [client 20.192.27.143:17174] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUBvLJwLAYh6KdpRjKQAagAAAIs"]
[Tue Dec 16 04:27:27.705324 2025] [:error] [pid 39159:tid 39171] [client 20.192.27.143:13418] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUBvL1kjVlBeje9Ge61fYQAAAMc"]
[Tue Dec 16 04:27:30.685973 2025] [:error] [pid 39049:tid 39074] [client 20.192.27.143:13439] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUBvMoij2QSiFs0L_3f9hgAAAAY"]
[Tue Dec 16 04:27:32.337824 2025] [:error] [pid 39051:tid 39129] [client 20.192.27.143:13392] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUBvNJwLAYh6KdpRjKQAeQAAAIY"]
[Tue Dec 16 04:27:34.348298 2025] [:error] [pid 39051:tid 39123] [client 20.192.27.143:17506] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUBvNpwLAYh6KdpRjKQAgAAAAIA"]
[Tue Dec 16 04:27:36.816367 2025] [:error] [pid 39051:tid 39128] [client 20.192.27.143:18255] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUBvOJwLAYh6KdpRjKQAgQAAAIU"]
[Tue Dec 16 04:27:38.997780 2025] [:error] [pid 39049:tid 39068] [client 20.192.27.143:12152] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUBvOoij2QSiFs0L_3f9jgAAAAA"]
[Tue Dec 16 04:27:40.970264 2025] [:error] [pid 39049:tid 39069] [client 20.192.27.143:1154] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUBvPIij2QSiFs0L_3f9jwAAAAE"]
[Tue Dec 16 04:27:42.594121 2025] [:error] [pid 39051:tid 39126] [client 20.192.27.143:17504] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUBvPpwLAYh6KdpRjKQAhwAAAIM"]
[Tue Dec 16 04:27:43.592750 2025] [:error] [pid 39049:tid 39088] [client 20.192.27.143:12122] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUBvP4ij2QSiFs0L_3f9kAAAABQ"]
[Tue Dec 16 04:27:44.413192 2025] [:error] [pid 39050:tid 39111] [client 20.192.27.143:12106] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUBvQEqg4cFnOYpJrg35pwAAAE8"]
[Tue Dec 16 04:27:46.066975 2025] [:error] [pid 39159:tid 39173] [client 20.192.27.143:1849] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUBvQlkjVlBeje9Ge61ffwAAAMk"]
[Tue Dec 16 04:27:47.937857 2025] [:error] [pid 39049:tid 39090] [client 20.192.27.143:1823] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUBvQ4ij2QSiFs0L_3f9mQAAABY"]
[Tue Dec 16 04:27:49.507694 2025] [:error] [pid 39159:tid 39171] [client 20.192.27.143:1845] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUBvRVkjVlBeje9Ge61fggAAAMc"]
[Tue Dec 16 04:27:50.418543 2025] [:error] [pid 39050:tid 39120] [client 20.192.27.143:10925] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUBvRkqg4cFnOYpJrg35sQAAAFg"]
[Tue Dec 16 04:27:51.161259 2025] [:error] [pid 39049:tid 39080] [client 20.192.27.143:1646] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUBvR4ij2QSiFs0L_3f9nAAAAAw"]
[Tue Dec 16 04:27:52.898408 2025] [:error] [pid 39159:tid 39176] [client 20.192.27.143:15928] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUBvSFkjVlBeje9Ge61fhAAAAMw"]
[Tue Dec 16 04:27:53.669922 2025] [:error] [pid 39049:tid 39073] [client 20.192.27.143:12145] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUBvSYij2QSiFs0L_3f9nQAAAAU"]
[Tue Dec 16 04:27:55.612688 2025] [:error] [pid 39050:tid 39108] [client 20.192.27.143:1639] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUBvS0qg4cFnOYpJrg35tQAAAEw"]
[Tue Dec 16 04:27:57.136486 2025] [:error] [pid 39050:tid 39109] [client 20.192.27.143:12052] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUBvTUqg4cFnOYpJrg35uAAAAE0"]
[Tue Dec 16 04:27:58.600809 2025] [:error] [pid 39051:tid 39124] [client 20.192.27.143:12094] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUBvTpwLAYh6KdpRjKQAnAAAAIE"]
[Tue Dec 16 04:27:59.530265 2025] [:error] [pid 39050:tid 39112] [client 20.192.27.143:14905] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUBvT0qg4cFnOYpJrg35uQAAAFA"]
[Tue Dec 16 04:28:00.286945 2025] [:error] [pid 39049:tid 39083] [client 20.192.27.143:1641] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUBvUIij2QSiFs0L_3f9pAAAAA8"]
[Tue Dec 16 04:28:01.841868 2025] [:error] [pid 39051:tid 39123] [client 20.192.27.143:19922] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUBvUZwLAYh6KdpRjKQAoQAAAIA"]
[Tue Dec 16 04:28:05.646585 2025] [:error] [pid 39051:tid 39127] [client 20.192.27.143:14087] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUBvVZwLAYh6KdpRjKQArgAAAIQ"]
[Tue Dec 16 04:28:07.207372 2025] [:error] [pid 39051:tid 39139] [client 20.192.27.143:13441] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUBvV5wLAYh6KdpRjKQAtgAAAJA"]
[Tue Dec 16 04:28:08.304481 2025] [:error] [pid 39050:tid 39110] [client 20.192.27.143:11515] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUBvWEqg4cFnOYpJrg358gAAAE4"]
[Tue Dec 16 04:28:09.194342 2025] [:error] [pid 39049:tid 39070] [client 20.192.27.143:14107] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUBvWYij2QSiFs0L_3f9ugAAAAI"]
[Tue Dec 16 04:28:11.064988 2025] [:error] [pid 39159:tid 39175] [client 20.192.27.143:1660] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aUBvW1kjVlBeje9Ge61fswAAAMs"]
[Tue Dec 16 04:28:12.164975 2025] [:error] [pid 39051:tid 39124] [client 20.192.27.143:18442] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aUBvXJwLAYh6KdpRjKQAvwAAAIE"]
[Tue Dec 16 04:28:13.623040 2025] [:error] [pid 39049:tid 39078] [client 20.192.27.143:11496] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aUBvXYij2QSiFs0L_3f9vAAAAAo"]
[Tue Dec 16 04:28:14.652350 2025] [:error] [pid 39159:tid 39182] [client 20.192.27.143:13578] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aUBvXlkjVlBeje9Ge61fvQAAANI"]
[Tue Dec 16 04:28:15.965800 2025] [:error] [pid 39051:tid 39141] [client 20.192.27.143:14392] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aUBvX5wLAYh6KdpRjKQAwQAAAJI"]
[Tue Dec 16 04:28:17.270800 2025] [:error] [pid 39159:tid 39182] [client 20.192.27.143:15138] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aUBvYVkjVlBeje9Ge61fxQAAANI"]
[Tue Dec 16 04:28:18.039755 2025] [:error] [pid 39049:tid 39078] [client 20.192.27.143:14429] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aUBvYoij2QSiFs0L_3f9wwAAAAo"]
[Tue Dec 16 04:28:19.032360 2025] [:error] [pid 39049:tid 39083] [client 20.192.27.143:15177] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aUBvY4ij2QSiFs0L_3f9xQAAAA8"]
[Tue Dec 16 04:28:20.099268 2025] [:error] [pid 39051:tid 39127] [client 20.192.27.143:12777] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aUBvZJwLAYh6KdpRjKQAxAAAAIQ"]
[Tue Dec 16 04:28:21.439623 2025] [:error] [pid 39050:tid 39114] [client 20.192.27.143:20730] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aUBvZUqg4cFnOYpJrg35-QAAAFI"]
[Tue Dec 16 04:28:23.790103 2025] [:error] [pid 39049:tid 39080] [client 20.192.27.143:14352] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aUBvZ4ij2QSiFs0L_3f9zwAAAAw"]
[Tue Dec 16 04:28:25.465915 2025] [proxy_fcgi:error] [pid 39050:tid 39100] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:25.640637 2025] [proxy_fcgi:error] [pid 39050:tid 39109] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:25.782094 2025] [proxy_fcgi:error] [pid 39050:tid 39108] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:25.921679 2025] [proxy_fcgi:error] [pid 39050:tid 39103] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.062215 2025] [proxy_fcgi:error] [pid 39050:tid 39104] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.202466 2025] [proxy_fcgi:error] [pid 39050:tid 39112] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.342977 2025] [proxy_fcgi:error] [pid 39050:tid 39113] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.529392 2025] [proxy_fcgi:error] [pid 39050:tid 39114] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.671461 2025] [proxy_fcgi:error] [pid 39050:tid 39119] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.821978 2025] [proxy_fcgi:error] [pid 39050:tid 39096] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:26.965488 2025] [proxy_fcgi:error] [pid 39050:tid 39116] [client 20.192.27.143:14415] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:28:27.110896 2025] [:error] [pid 39050:tid 39110] [client 20.192.27.143:14415] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUBva0qg4cFnOYpJrg36CwAAAE4"]
[Tue Dec 16 04:28:28.306082 2025] [:error] [pid 39051:tid 39136] [client 20.192.27.143:17463] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUBvbJwLAYh6KdpRjKQA0gAAAI0"]
[Tue Dec 16 04:28:29.385207 2025] [:error] [pid 39159:tid 39184] [client 20.192.27.143:10633] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUBvbVkjVlBeje9Ge61f1AAAANQ"]
[Tue Dec 16 04:28:30.508421 2025] [:error] [pid 39050:tid 39105] [client 20.192.27.143:17456] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUBvbkqg4cFnOYpJrg36EQAAAEk"]
[Tue Dec 16 04:28:32.319799 2025] [:error] [pid 39050:tid 39112] [client 20.192.27.143:44548] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUBvcEqg4cFnOYpJrg36FAAAAFA"]
[Tue Dec 16 04:28:33.027691 2025] [:error] [pid 39051:tid 39144] [client 20.192.27.143:19177] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUBvcZwLAYh6KdpRjKQA2wAAAJU"]
[Tue Dec 16 04:28:35.778901 2025] [:error] [pid 39050:tid 39106] [client 20.192.27.143:20698] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUBvc0qg4cFnOYpJrg36GAAAAEo"]
[Tue Dec 16 04:28:36.648646 2025] [:error] [pid 39051:tid 39128] [client 20.192.27.143:44569] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUBvdJwLAYh6KdpRjKQA4QAAAIU"]
[Tue Dec 16 04:28:37.382945 2025] [:error] [pid 39159:tid 39168] [client 20.192.27.143:13504] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUBvdVkjVlBeje9Ge61f5QAAAMQ"]
[Tue Dec 16 04:28:38.651195 2025] [:error] [pid 39050:tid 39104] [client 20.192.27.143:15230] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUBvdkqg4cFnOYpJrg36HgAAAEg"]
[Tue Dec 16 04:28:39.285092 2025] [:error] [pid 39159:tid 39182] [client 20.192.27.143:15188] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUBvd1kjVlBeje9Ge61f6QAAANI"]
[Tue Dec 16 04:28:40.524685 2025] [:error] [pid 39050:tid 39113] [client 20.192.27.143:13553] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUBveEqg4cFnOYpJrg36IAAAAFE"]
[Tue Dec 16 04:28:50.386718 2025] [:error] [pid 18322:tid 18327] [client 20.192.27.143:15189] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUBvgpsCeWBjrw28Xtzw9gAAAAE"]
[Tue Dec 16 04:28:52.584000 2025] [:error] [pid 18323:tid 18356] [client 20.192.27.143:17419] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUBvhDJB6UFxIutsA8YnlQAAAEM"]
[Tue Dec 16 04:28:53.991072 2025] [:error] [pid 18324:tid 18383] [client 20.192.27.143:20685] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUBvhaG4um2mD1VpJHJ1SwAAAIM"]
[Tue Dec 16 04:28:56.023423 2025] [:error] [pid 18323:tid 18364] [client 20.192.27.143:11833] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUBviDJB6UFxIutsA8YnnAAAAEs"]
[Tue Dec 16 04:28:57.766654 2025] [:error] [pid 18323:tid 18372] [client 20.192.27.143:19193] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUBviTJB6UFxIutsA8YnoAAAAFM"]
[Tue Dec 16 04:28:58.764724 2025] [:error] [pid 18324:tid 18390] [client 20.192.27.143:19186] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUBviqG4um2mD1VpJHJ1UgAAAIo"]
[Tue Dec 16 04:28:59.906092 2025] [:error] [pid 18408:tid 18410] [client 20.192.27.143:18714] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUBvizi2Gr8pDzjrVBDYvwAAAMA"]
[Tue Dec 16 04:29:01.191726 2025] [:error] [pid 18408:tid 18411] [client 20.192.27.143:18724] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUBvjTi2Gr8pDzjrVBDYwAAAAME"]
[Tue Dec 16 04:29:02.753069 2025] [:error] [pid 18408:tid 18414] [client 20.192.27.143:13555] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvjji2Gr8pDzjrVBDYwgAAAMQ"]
[Tue Dec 16 04:29:04.145899 2025] [:error] [pid 18324:tid 18384] [client 20.192.27.143:18970] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvkKG4um2mD1VpJHJ1WgAAAIQ"]
[Tue Dec 16 04:29:04.623249 2025] [:error] [pid 18324:tid 18386] [client 20.192.27.143:15448] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvkKG4um2mD1VpJHJ1XAAAAIY"]
[Tue Dec 16 04:29:05.236027 2025] [:error] [pid 18322:tid 18346] [client 20.192.27.143:12851] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUBvkZsCeWBjrw28XtzxEQAAABQ"]
[Tue Dec 16 04:29:05.699943 2025] [:error] [pid 18322:tid 18329] [client 20.192.27.143:11781] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aUBvkZsCeWBjrw28XtzxEgAAAAM"]
[Tue Dec 16 04:29:06.917301 2025] [:error] [pid 18322:tid 18344] [client 20.192.27.143:16193] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aUBvkpsCeWBjrw28XtzxGQAAABI"]
[Tue Dec 16 04:29:08.460568 2025] [:error] [pid 18408:tid 18422] [client 20.192.27.143:18688] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aUBvlDi2Gr8pDzjrVBDYxgAAAMw"]
[Tue Dec 16 04:29:09.050472 2025] [:error] [pid 18408:tid 18424] [client 20.192.27.143:19002] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aUBvlTi2Gr8pDzjrVBDYyAAAAM4"]
[Tue Dec 16 04:29:10.072033 2025] [:error] [pid 18322:tid 18337] [client 20.192.27.143:15450] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBvlpsCeWBjrw28XtzxIwAAAAs"]
[Tue Dec 16 04:29:10.624714 2025] [:error] [pid 18408:tid 18428] [client 20.192.27.143:14920] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBvlji2Gr8pDzjrVBDYzAAAANI"]
[Tue Dec 16 04:29:12.643181 2025] [:error] [pid 18408:tid 18411] [client 20.192.27.143:18690] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBvmDi2Gr8pDzjrVBDYzwAAAME"]
[Tue Dec 16 04:29:15.248547 2025] [:error] [pid 18322:tid 18338] [client 20.192.27.143:11662] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUBvm5sCeWBjrw28XtzxNQAAAAw"]
[Tue Dec 16 04:29:16.058705 2025] [:error] [pid 18322:tid 18343] [client 20.192.27.143:12503] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aUBvnJsCeWBjrw28XtzxOgAAABE"]
[Tue Dec 16 04:29:19.005641 2025] [:error] [pid 18324:tid 18386] [client 20.192.27.143:18539] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aUBvn6G4um2mD1VpJHJ1dQAAAIY"]
[Tue Dec 16 04:29:20.275499 2025] [:error] [pid 18323:tid 18357] [client 20.192.27.143:12488] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aUBvoDJB6UFxIutsA8YntwAAAEQ"]
[Tue Dec 16 04:29:21.459334 2025] [:error] [pid 18324:tid 18387] [client 20.192.27.143:1961] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aUBvoaG4um2mD1VpJHJ1fAAAAIc"]
[Tue Dec 16 04:29:22.470762 2025] [:error] [pid 18324:tid 18395] [client 20.192.27.143:15479] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aUBvoqG4um2mD1VpJHJ1ggAAAI8"]
[Tue Dec 16 04:29:23.831652 2025] [:error] [pid 18408:tid 18429] [client 20.192.27.143:15463] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aUBvozi2Gr8pDzjrVBDY6AAAANM"]
[Tue Dec 16 04:29:24.313822 2025] [:error] [pid 18408:tid 18430] [client 20.192.27.143:1955] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aUBvpDi2Gr8pDzjrVBDY6QAAANQ"]
[Tue Dec 16 04:29:25.822413 2025] [:error] [pid 18324:tid 18389] [client 20.192.27.143:12522] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aUBvpaG4um2mD1VpJHJ1hwAAAIk"]
[Tue Dec 16 04:29:27.315983 2025] [proxy_fcgi:error] [pid 18322:tid 18346] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:27.464868 2025] [proxy_fcgi:error] [pid 18322:tid 18333] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:27.605829 2025] [proxy_fcgi:error] [pid 18322:tid 18349] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:27.749523 2025] [proxy_fcgi:error] [pid 18322:tid 18332] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:27.897684 2025] [proxy_fcgi:error] [pid 18322:tid 18336] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.042290 2025] [proxy_fcgi:error] [pid 18322:tid 18339] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.187462 2025] [proxy_fcgi:error] [pid 18322:tid 18331] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.365627 2025] [proxy_fcgi:error] [pid 18322:tid 18350] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.533694 2025] [proxy_fcgi:error] [pid 18322:tid 18343] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.675210 2025] [proxy_fcgi:error] [pid 18322:tid 18334] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.816327 2025] [proxy_fcgi:error] [pid 18322:tid 18328] [client 20.192.27.143:19413] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:29:28.967032 2025] [:error] [pid 18322:tid 18326] [client 20.192.27.143:19413] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUBvqJsCeWBjrw28XtzxTAAAAAA"]
[Tue Dec 16 04:29:30.029104 2025] [:error] [pid 18408:tid 18427] [client 20.192.27.143:11682] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUBvqji2Gr8pDzjrVBDY9gAAANE"]
[Tue Dec 16 04:29:31.263547 2025] [:error] [pid 18324:tid 18386] [client 20.192.27.143:1301] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUBvq6G4um2mD1VpJHJ1jwAAAIY"]
[Tue Dec 16 04:29:32.609789 2025] [:error] [pid 18408:tid 18414] [client 20.192.27.143:11158] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUBvrDi2Gr8pDzjrVBDY-gAAAMQ"]
[Tue Dec 16 04:29:33.683013 2025] [:error] [pid 18323:tid 18354] [client 20.192.27.143:17721] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUBvrTJB6UFxIutsA8YnyAAAAEE"]
[Tue Dec 16 04:29:35.426006 2025] [:error] [pid 18322:tid 18346] [client 20.192.27.143:11708] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUBvr5sCeWBjrw28XtzxTwAAABQ"]
[Tue Dec 16 04:29:37.070939 2025] [:error] [pid 18408:tid 18412] [client 20.192.27.143:12873] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUBvsTi2Gr8pDzjrVBDY_gAAAMI"]
[Tue Dec 16 04:29:39.734277 2025] [:error] [pid 18324:tid 18398] [client 20.192.27.143:1285] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUBvs6G4um2mD1VpJHJ1kwAAAJI"]
[Tue Dec 16 04:29:40.175496 2025] [:error] [pid 18323:tid 18370] [client 20.192.27.143:11747] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUBvtDJB6UFxIutsA8Yn0wAAAFE"]
[Tue Dec 16 04:29:40.611208 2025] [:error] [pid 18323:tid 18369] [client 20.192.27.143:11650] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUBvtDJB6UFxIutsA8Yn1QAAAFA"]
[Tue Dec 16 04:29:41.551347 2025] [:error] [pid 18323:tid 18354] [client 20.192.27.143:18554] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUBvtTJB6UFxIutsA8Yn1wAAAEE"]
[Tue Dec 16 04:29:43.660041 2025] [:error] [pid 18322:tid 18329] [client 20.192.27.143:11190] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUBvt5sCeWBjrw28XtzxVwAAAAM"]
[Tue Dec 16 04:29:45.354358 2025] [:error] [pid 18324:tid 18386] [client 20.192.27.143:16455] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUBvuaG4um2mD1VpJHJ1mgAAAIY"]
[Tue Dec 16 04:29:47.288652 2025] [:error] [pid 18408:tid 18419] [client 20.192.27.143:17708] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUBvuzi2Gr8pDzjrVBDZGQAAAMk"]
[Tue Dec 16 04:29:48.769733 2025] [:error] [pid 18322:tid 18339] [client 20.192.27.143:45630] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUBvvJsCeWBjrw28XtzxWwAAAA0"]
[Tue Dec 16 04:29:49.715174 2025] [:error] [pid 18324:tid 18393] [client 20.192.27.143:11152] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUBvvaG4um2mD1VpJHJ1pwAAAI0"]
[Tue Dec 16 04:29:50.714993 2025] [:error] [pid 18324:tid 18383] [client 20.192.27.143:11714] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUBvvqG4um2mD1VpJHJ1qgAAAIM"]
[Tue Dec 16 04:29:52.285893 2025] [:error] [pid 18323:tid 18365] [client 20.192.27.143:19393] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUBvwDJB6UFxIutsA8Yn6wAAAEw"]
[Tue Dec 16 04:29:54.302489 2025] [:error] [pid 18408:tid 18425] [client 20.192.27.143:44108] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUBvwji2Gr8pDzjrVBDZJAAAAM8"]
[Tue Dec 16 04:29:54.986824 2025] [:error] [pid 18408:tid 18432] [client 20.192.27.143:17684] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUBvwji2Gr8pDzjrVBDZJwAAANY"]
[Tue Dec 16 04:29:56.486672 2025] [:error] [pid 18323:tid 18375] [client 20.192.27.143:16728] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUBvxDJB6UFxIutsA8Yn9wAAAFY"]
[Tue Dec 16 04:29:57.987749 2025] [:error] [pid 18322:tid 18346] [client 20.192.27.143:17691] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUBvxZsCeWBjrw28XtzxYwAAABQ"]
[Tue Dec 16 04:29:58.809117 2025] [:error] [pid 18323:tid 18363] [client 20.192.27.143:11156] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUBvxjJB6UFxIutsA8Yn-QAAAEo"]
[Tue Dec 16 04:29:59.577266 2025] [:error] [pid 18322:tid 18339] [client 20.192.27.143:1765] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUBvx5sCeWBjrw28XtzxZQAAAA0"]
[Tue Dec 16 04:30:00.598738 2025] [:error] [pid 18408:tid 18417] [client 20.192.27.143:11140] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aUBvyDi2Gr8pDzjrVBDZOQAAAMc"]
[Tue Dec 16 04:30:02.172808 2025] [:error] [pid 18408:tid 18423] [client 20.192.27.143:20663] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aUBvyji2Gr8pDzjrVBDZPgAAAM0"]
[Tue Dec 16 04:30:02.967194 2025] [:error] [pid 18322:tid 18347] [client 20.192.27.143:44106] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aUBvypsCeWBjrw28XtzxaQAAABU"]
[Tue Dec 16 04:30:04.057514 2025] [:error] [pid 18324:tid 18401] [client 20.192.27.143:13044] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aUBvzKG4um2mD1VpJHJ1vQAAAJU"]
[Tue Dec 16 04:30:04.515607 2025] [:error] [pid 18408:tid 18416] [client 20.192.27.143:10861] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUBvzDi2Gr8pDzjrVBDZRgAAAMY"]
[Tue Dec 16 04:30:05.816409 2025] [:error] [pid 18408:tid 18424] [client 20.192.27.143:17706] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUBvzTi2Gr8pDzjrVBDZTAAAAM4"]
[Tue Dec 16 04:30:07.050486 2025] [:error] [pid 18323:tid 18363] [client 20.192.27.143:12564] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUBvzzJB6UFxIutsA8Yn_gAAAEo"]
[Tue Dec 16 04:30:08.532990 2025] [:error] [pid 18408:tid 18434] [client 20.192.27.143:10823] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUBv0Di2Gr8pDzjrVBDZVgAAANg"]
[Tue Dec 16 04:30:11.276134 2025] [:error] [pid 18323:tid 18360] [client 20.192.27.143:13842] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aUBv0zJB6UFxIutsA8Yn_wAAAEc"]
[Tue Dec 16 04:30:11.664618 2025] [:error] [pid 18324:tid 18402] [client 20.192.27.143:17677] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aUBv06G4um2mD1VpJHJ1ygAAAJY"]
[Tue Dec 16 04:30:12.358263 2025] [:error] [pid 18408:tid 18433] [client 20.192.27.143:44102] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aUBv1Di2Gr8pDzjrVBDZYwAAANc"]
[Tue Dec 16 04:30:13.157534 2025] [:error] [pid 18324:tid 18389] [client 20.192.27.143:20654] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/js.php"] [unique_id "aUBv1aG4um2mD1VpJHJ1zQAAAIk"]
[Tue Dec 16 04:30:13.942445 2025] [:error] [pid 18322:tid 18343] [client 20.192.27.143:12572] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aUBv1ZsCeWBjrw28XtzxbgAAABE"]
[Tue Dec 16 04:30:15.446680 2025] [:error] [pid 18322:tid 18330] [client 20.192.27.143:20250] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aUBv15sCeWBjrw28XtzxcAAAAAQ"]
[Tue Dec 16 04:30:16.598492 2025] [:error] [pid 18323:tid 18358] [client 20.192.27.143:13323] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aUBv2DJB6UFxIutsA8YoBwAAAEU"]
[Tue Dec 16 04:30:17.921057 2025] [:error] [pid 18323:tid 18355] [client 20.192.27.143:20266] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aUBv2TJB6UFxIutsA8YoCAAAAEI"]
[Tue Dec 16 04:30:19.796806 2025] [:error] [pid 18408:tid 18434] [client 20.192.27.143:13858] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aUBv2zi2Gr8pDzjrVBDZeQAAANg"]
[Tue Dec 16 04:30:20.749171 2025] [:error] [pid 18323:tid 18373] [client 20.192.27.143:20730] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aUBv3DJB6UFxIutsA8YoDgAAAFQ"]
[Tue Dec 16 04:30:21.503515 2025] [:error] [pid 18408:tid 18416] [client 20.192.27.143:12573] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aUBv3Ti2Gr8pDzjrVBDZfAAAAMY"]
[Tue Dec 16 04:30:22.885479 2025] [:error] [pid 18322:tid 18326] [client 20.192.27.143:12379] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aUBv3psCeWBjrw28XtzxfgAAAAA"]
[Tue Dec 16 04:30:23.978781 2025] [:error] [pid 18408:tid 18420] [client 20.192.27.143:17694] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aUBv3zi2Gr8pDzjrVBDZhQAAAMo"]
[Tue Dec 16 04:30:25.229188 2025] [:error] [pid 18408:tid 18429] [client 20.192.27.143:20634] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aUBv4Ti2Gr8pDzjrVBDZigAAANM"]
[Tue Dec 16 04:30:25.810468 2025] [:error] [pid 18323:tid 18366] [client 20.192.27.143:10817] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aUBv4TJB6UFxIutsA8YoEgAAAE0"]
[Tue Dec 16 04:30:27.185204 2025] [:error] [pid 18322:tid 18336] [client 20.192.27.143:13348] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aUBv45sCeWBjrw28XtzxfwAAAAo"]
[Tue Dec 16 04:30:27.764701 2025] [:error] [pid 18408:tid 18420] [client 20.192.27.143:12390] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aUBv4zi2Gr8pDzjrVBDZlAAAAMo"]
[Tue Dec 16 04:30:28.297830 2025] [proxy_fcgi:error] [pid 18323:tid 18364] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:28.442499 2025] [proxy_fcgi:error] [pid 18323:tid 18375] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:29.000896 2025] [proxy_fcgi:error] [pid 18323:tid 18374] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:29.145729 2025] [proxy_fcgi:error] [pid 18323:tid 18355] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:29.287226 2025] [proxy_fcgi:error] [pid 18323:tid 18359] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:29.845366 2025] [proxy_fcgi:error] [pid 18323:tid 18367] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:29.985745 2025] [proxy_fcgi:error] [pid 18323:tid 18360] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:30.127151 2025] [proxy_fcgi:error] [pid 18323:tid 18361] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:30.267126 2025] [proxy_fcgi:error] [pid 18323:tid 18371] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:30.406434 2025] [proxy_fcgi:error] [pid 18323:tid 18366] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:30.550846 2025] [proxy_fcgi:error] [pid 18323:tid 18363] [client 20.192.27.143:12488] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:30:30.687917 2025] [:error] [pid 18323:tid 18356] [client 20.192.27.143:12488] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUBv5jJB6UFxIutsA8YoIQAAAEM"]
[Tue Dec 16 04:30:31.761532 2025] [:error] [pid 18408:tid 18414] [client 20.192.27.143:20235] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUBv5zi2Gr8pDzjrVBDZsAAAAMQ"]
[Tue Dec 16 04:30:32.998843 2025] [:error] [pid 18408:tid 18413] [client 20.192.27.143:12364] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUBv6Di2Gr8pDzjrVBDZtgAAAMM"]
[Tue Dec 16 04:30:34.419736 2025] [:error] [pid 18408:tid 18429] [client 20.192.27.143:12387] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUBv6ji2Gr8pDzjrVBDZvAAAANM"]
[Tue Dec 16 04:30:36.010287 2025] [:error] [pid 18322:tid 18326] [client 20.192.27.143:12563] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUBv7JsCeWBjrw28XtzxjQAAAAA"]
[Tue Dec 16 04:30:36.984215 2025] [:error] [pid 18322:tid 18350] [client 20.192.27.143:12581] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUBv7JsCeWBjrw28XtzxjgAAABg"]
[Tue Dec 16 04:30:37.807582 2025] [:error] [pid 18323:tid 18362] [client 20.192.27.143:16976] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUBv7TJB6UFxIutsA8YoJQAAAEk"]
[Tue Dec 16 04:30:38.484459 2025] [:error] [pid 18324:tid 18399] [client 20.192.27.143:20280] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUBv7qG4um2mD1VpJHJ14gAAAJM"]
[Tue Dec 16 04:30:38.936819 2025] [:error] [pid 18324:tid 18390] [client 20.192.27.143:10816] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUBv7qG4um2mD1VpJHJ14wAAAIo"]
[Tue Dec 16 04:30:41.420321 2025] [:error] [pid 18408:tid 18421] [client 20.192.27.143:12594] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUBv8Ti2Gr8pDzjrVBDZygAAAMs"]
[Tue Dec 16 04:30:43.547434 2025] [:error] [pid 18324:tid 18388] [client 20.192.27.143:13366] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUBv86G4um2mD1VpJHJ15QAAAIg"]
[Tue Dec 16 04:30:45.280945 2025] [:error] [pid 18324:tid 18389] [client 20.192.27.143:12428] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUBv9aG4um2mD1VpJHJ16QAAAIk"]
[Tue Dec 16 04:30:46.843116 2025] [:error] [pid 18324:tid 18385] [client 20.192.27.143:1080] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUBv9qG4um2mD1VpJHJ16wAAAIU"]
[Tue Dec 16 04:30:48.893189 2025] [:error] [pid 18323:tid 18353] [client 20.192.27.143:1075] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUBv-DJB6UFxIutsA8YoLwAAAEA"]
[Tue Dec 16 04:30:50.838488 2025] [:error] [pid 18408:tid 18414] [client 20.192.27.143:17006] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUBv-ji2Gr8pDzjrVBDZ5AAAAMQ"]
[Tue Dec 16 04:30:51.448631 2025] [:error] [pid 18408:tid 18434] [client 20.192.27.143:13356] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUBv-zi2Gr8pDzjrVBDZ5wAAANg"]
[Tue Dec 16 04:30:52.256241 2025] [:error] [pid 18323:tid 18363] [client 20.192.27.143:13373] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aUBv_DJB6UFxIutsA8YoNAAAAEo"]
[Tue Dec 16 04:30:53.866085 2025] [:error] [pid 18322:tid 18328] [client 20.192.27.143:16978] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aUBv_ZsCeWBjrw28XtzxnAAAAAI"]
[Tue Dec 16 04:30:54.821927 2025] [:error] [pid 18322:tid 18350] [client 20.192.27.143:12546] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aUBv_psCeWBjrw28XtzxnwAAABg"]
[Tue Dec 16 04:30:55.943644 2025] [:error] [pid 18324:tid 18389] [client 20.192.27.143:12586] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aUBv_6G4um2mD1VpJHJ1_QAAAIk"]
[Tue Dec 16 04:30:57.014471 2025] [:error] [pid 18323:tid 18374] [client 20.192.27.143:12433] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aUBwATJB6UFxIutsA8YoPAAAAFU"]
[Tue Dec 16 04:30:58.258198 2025] [:error] [pid 18408:tid 18431] [client 20.192.27.143:20262] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aUBwAji2Gr8pDzjrVBDZ9gAAANU"]
[Tue Dec 16 04:30:58.935568 2025] [:error] [pid 18322:tid 18342] [client 20.192.27.143:11587] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aUBwApsCeWBjrw28XtzxowAAABA"]
[Tue Dec 16 04:31:00.053798 2025] [:error] [pid 18408:tid 18421] [client 20.192.27.143:13317] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aUBwBDi2Gr8pDzjrVBDZ_gAAAMs"]
[Tue Dec 16 04:31:00.631144 2025] [:error] [pid 18324:tid 18380] [client 20.192.27.143:11602] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aUBwBKG4um2mD1VpJHJ2AwAAAIA"]
[Tue Dec 16 04:31:01.631454 2025] [:error] [pid 18408:tid 18425] [client 20.192.27.143:12393] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aUBwBTi2Gr8pDzjrVBDaCAAAAM8"]
[Tue Dec 16 04:31:02.989357 2025] [:error] [pid 18323:tid 18357] [client 20.192.27.143:13359] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aUBwBjJB6UFxIutsA8YoQgAAAEQ"]
[Tue Dec 16 04:31:04.634382 2025] [:error] [pid 18324:tid 18393] [client 20.192.27.143:11590] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aUBwCKG4um2mD1VpJHJ2IwAAAI0"]
[Tue Dec 16 04:31:06.193444 2025] [:error] [pid 18323:tid 18362] [client 20.192.27.143:12465] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aUBwCjJB6UFxIutsA8YoTwAAAEk"]
[Tue Dec 16 04:31:07.220690 2025] [:error] [pid 18408:tid 18410] [client 20.192.27.143:14185] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aUBwCzi2Gr8pDzjrVBDaJAAAAMA"]
[Tue Dec 16 04:31:08.745395 2025] [:error] [pid 18324:tid 18388] [client 20.192.27.143:11609] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aUBwDKG4um2mD1VpJHJ2MgAAAIg"]
[Tue Dec 16 04:31:09.995801 2025] [:error] [pid 18408:tid 18421] [client 20.192.27.143:13326] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aUBwDTi2Gr8pDzjrVBDaMgAAAMs"]
[Tue Dec 16 04:31:10.347587 2025] [:error] [pid 18323:tid 18372] [client 20.192.27.143:12999] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aUBwDjJB6UFxIutsA8YoWgAAAFM"]
[Tue Dec 16 04:31:11.791147 2025] [:error] [pid 18324:tid 18390] [client 20.192.27.143:20257] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aUBwD6G4um2mD1VpJHJ2OAAAAIo"]
[Tue Dec 16 04:31:12.662478 2025] [:error] [pid 18408:tid 18413] [client 20.192.27.143:1033] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aUBwEDi2Gr8pDzjrVBDaPAAAAMM"]
[Tue Dec 16 04:31:13.240847 2025] [:error] [pid 18408:tid 18428] [client 20.192.27.143:13011] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aUBwETi2Gr8pDzjrVBDaPwAAANI"]
[Tue Dec 16 04:31:14.412134 2025] [:error] [pid 18324:tid 18392] [client 20.192.27.143:12603] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUBwEqG4um2mD1VpJHJ2PQAAAIw"]
[Tue Dec 16 04:31:15.979707 2025] [:error] [pid 18408:tid 18420] [client 20.192.27.143:12550] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUBwEzi2Gr8pDzjrVBDaSAAAAMo"]
[Tue Dec 16 04:31:17.188757 2025] [:error] [pid 18408:tid 18421] [client 20.192.27.143:16967] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUBwFTi2Gr8pDzjrVBDaTQAAAMs"]
[Tue Dec 16 04:31:18.487905 2025] [:error] [pid 18322:tid 18347] [client 20.192.27.143:1034] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aUBwFpsCeWBjrw28XtzxyAAAABU"]
[Tue Dec 16 04:31:19.474501 2025] [:error] [pid 18324:tid 18396] [client 20.192.27.143:11645] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aUBwF6G4um2mD1VpJHJ2RAAAAJA"]
[Tue Dec 16 04:31:20.561926 2025] [:error] [pid 18322:tid 18344] [client 20.192.27.143:14166] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aUBwGJsCeWBjrw28XtzxyQAAABI"]
[Tue Dec 16 04:31:22.299810 2025] [:error] [pid 18322:tid 18333] [client 20.192.27.143:14149] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aUBwGpsCeWBjrw28XtzxzAAAAAc"]
[Tue Dec 16 04:31:23.017164 2025] [:error] [pid 18408:tid 18426] [client 20.192.27.143:13341] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aUBwGzi2Gr8pDzjrVBDaXwAAANA"]
[Tue Dec 16 04:31:23.912916 2025] [:error] [pid 18408:tid 18428] [client 20.192.27.143:13025] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aUBwGzi2Gr8pDzjrVBDaYQAAANI"]
[Tue Dec 16 04:31:24.919751 2025] [:error] [pid 18323:tid 18355] [client 20.192.27.143:16995] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aUBwHDJB6UFxIutsA8YoawAAAEI"]
[Tue Dec 16 04:31:25.763095 2025] [:error] [pid 18408:tid 18411] [client 20.192.27.143:13324] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aUBwHTi2Gr8pDzjrVBDaZgAAAME"]
[Tue Dec 16 04:31:27.065179 2025] [:error] [pid 18324:tid 18399] [client 20.192.27.143:20227] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aUBwH6G4um2mD1VpJHJ2UAAAAJM"]
[Tue Dec 16 04:31:28.712589 2025] [:error] [pid 18323:tid 18368] [client 20.192.27.143:12419] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aUBwIDJB6UFxIutsA8YocwAAAE8"]
[Tue Dec 16 04:31:29.794988 2025] [:error] [pid 18408:tid 18413] [client 20.192.27.143:17007] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aUBwITi2Gr8pDzjrVBDaeAAAAMM"]
[Tue Dec 16 04:31:30.978083 2025] [proxy_fcgi:error] [pid 18408:tid 18429] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:31.129285 2025] [proxy_fcgi:error] [pid 18408:tid 18421] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:31.269850 2025] [proxy_fcgi:error] [pid 18408:tid 18410] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:31.413994 2025] [proxy_fcgi:error] [pid 18408:tid 18423] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:31.555096 2025] [proxy_fcgi:error] [pid 18408:tid 18419] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:31.697634 2025] [proxy_fcgi:error] [pid 18408:tid 18418] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:31.839638 2025] [proxy_fcgi:error] [pid 18408:tid 18434] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:32.009274 2025] [proxy_fcgi:error] [pid 18408:tid 18424] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:32.152982 2025] [proxy_fcgi:error] [pid 18408:tid 18415] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:32.293343 2025] [proxy_fcgi:error] [pid 18408:tid 18411] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:32.445292 2025] [proxy_fcgi:error] [pid 18408:tid 18414] [client 20.192.27.143:13340] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 04:31:32.894342 2025] [:error] [pid 18408:tid 18428] [client 20.192.27.143:13340] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUBwJDi2Gr8pDzjrVBDaiAAAANI"]
[Tue Dec 16 04:31:33.745196 2025] [:error] [pid 18408:tid 18417] [client 20.192.27.143:12427] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUBwJTi2Gr8pDzjrVBDalQAAAMc"]
[Tue Dec 16 04:31:34.508275 2025] [:error] [pid 18408:tid 18424] [client 20.192.27.143:11599] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUBwJji2Gr8pDzjrVBDanwAAAM4"]
[Tue Dec 16 04:31:35.753192 2025] [:error] [pid 18323:tid 18364] [client 20.192.27.143:13004] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUBwJzJB6UFxIutsA8YoiwAAAEs"]
[Tue Dec 16 04:31:36.409850 2025] [:error] [pid 18324:tid 18397] [client 20.192.27.143:13357] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aUBwKKG4um2mD1VpJHJ2iAAAAJE"]
[Tue Dec 16 04:31:36.892279 2025] [:error] [pid 18324:tid 18396] [client 20.192.27.143:12592] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aUBwKKG4um2mD1VpJHJ2igAAAJA"]
[Tue Dec 16 04:31:38.132890 2025] [:error] [pid 18408:tid 18414] [client 20.192.27.143:11618] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aUBwKji2Gr8pDzjrVBDaqAAAAMQ"]
[Tue Dec 16 04:31:39.341946 2025] [:error] [pid 18324:tid 18400] [client 20.192.27.143:11637] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aUBwK6G4um2mD1VpJHJ2lwAAAJQ"]
[Tue Dec 16 04:31:40.654908 2025] [:error] [pid 18408:tid 18422] [client 20.192.27.143:16996] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aUBwLDi2Gr8pDzjrVBDargAAAMw"]
[Tue Dec 16 04:31:41.462109 2025] [:error] [pid 18408:tid 18421] [client 20.192.27.143:12424] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aUBwLTi2Gr8pDzjrVBDasQAAAMs"]
[Tue Dec 16 04:31:42.045749 2025] [:error] [pid 18322:tid 18334] [client 20.192.27.143:13344] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aUBwLpsCeWBjrw28Xtzx2wAAAAg"]
[Tue Dec 16 04:31:43.554149 2025] [:error] [pid 18323:tid 18355] [client 20.192.27.143:1041] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aUBwLzJB6UFxIutsA8YomQAAAEI"]
[Tue Dec 16 04:31:44.042202 2025] [:error] [pid 18408:tid 18432] [client 20.192.27.143:20242] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aUBwMDi2Gr8pDzjrVBDawgAAANY"]
[Tue Dec 16 04:31:44.875419 2025] [:error] [pid 18323:tid 18360] [client 20.192.27.143:1728] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aUBwMDJB6UFxIutsA8YomgAAAEc"]
[Tue Dec 16 04:31:45.316941 2025] [:error] [pid 18324:tid 18385] [client 20.192.27.143:13021] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aUBwMaG4um2mD1VpJHJ2qQAAAIU"]
[Tue Dec 16 04:31:45.789208 2025] [:error] [pid 18322:tid 18347] [client 20.192.27.143:20279] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aUBwMZsCeWBjrw28Xtzx3wAAABU"]
[Tue Dec 16 04:31:46.548933 2025] [:error] [pid 18322:tid 18344] [client 20.192.27.143:17012] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aUBwMpsCeWBjrw28Xtzx4AAAABI"]
[Tue Dec 16 04:31:47.581513 2025] [:error] [pid 18324:tid 18381] [client 20.192.27.143:11639] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aUBwM6G4um2mD1VpJHJ2sgAAAIE"]
[Tue Dec 16 04:31:49.342629 2025] [:error] [pid 18408:tid 18417] [client 20.192.27.143:1036] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aUBwNTi2Gr8pDzjrVBDa3QAAAMc"]
[Tue Dec 16 04:31:51.382898 2025] [:error] [pid 18323:tid 18353] [client 20.192.27.143:13318] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aUBwNzJB6UFxIutsA8YonwAAAEA"]
[Tue Dec 16 04:31:52.632571 2025] [:error] [pid 18323:tid 18357] [client 20.192.27.143:17672] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aUBwODJB6UFxIutsA8YooAAAAEQ"]
[Tue Dec 16 04:31:54.451889 2025] [:error] [pid 18408:tid 18423] [client 20.192.27.143:12600] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aUBwOji2Gr8pDzjrVBDa7wAAAM0"]
[Tue Dec 16 04:31:56.437006 2025] [:error] [pid 18408:tid 18428] [client 20.192.27.143:1067] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aUBwPDi2Gr8pDzjrVBDa9QAAANI"]
[Tue Dec 16 04:31:57.812980 2025] [:error] [pid 18408:tid 18413] [client 20.192.27.143:1028] [client 20.192.27.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aUBwPTi2Gr8pDzjrVBDa-AAAAMM"]
[Tue Dec 16 05:04:10.158485 2025] [autoindex:error] [pid 18324:tid 18392] [client 35.209.68.128:34464] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Dec 16 06:00:16.844495 2025] [autoindex:error] [pid 18322:tid 18343] [client 35.153.44.134:14782] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 08:40:46.968226 2025] [autoindex:error] [pid 51991:tid 52013] [client 164.92.181.171:43396] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 08:40:48.995981 2025] [autoindex:error] [pid 18323:tid 18365] [client 164.92.181.171:34316] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 09:19:23.316279 2025] [:error] [pid 18322:tid 18328] [client 43.159.145.153:58026] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUCzm5sCeWBjrw28XtxSjAAAAAI"]
[Tue Dec 16 10:23:08.983442 2025] [:error] [pid 18322:tid 18328] [client 117.33.163.216:49926] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUDCjJsCeWBjrw28XtxuDgAAAAI"]
[Tue Dec 16 11:03:46.748199 2025] [:error] [pid 12330:tid 12343] [client 43.156.202.34:56416] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUDMEl6iIQEVCIh8V1ncVQAAAYk"]
[Tue Dec 16 13:02:11.995509 2025] [autoindex:error] [pid 18408:tid 18419] [client 142.44.161.179:56362] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 13:12:16.241643 2025] [autoindex:error] [pid 18324:tid 18398] [client 93.158.90.136:47467] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 16:48:32.593897 2025] [autoindex:error] [pid 12330:tid 12345] [client 100.31.191.223:56678] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 18:03:51.041396 2025] [autoindex:error] [pid 53940:tid 53960] [client 54.144.44.212:42306] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 18:03:51.451955 2025] [autoindex:error] [pid 51991:tid 52008] [client 54.144.44.212:39346] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 19:55:18.435056 2025] [proxy_fcgi:error] [pid 35998:tid 36022] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:18.688803 2025] [proxy_fcgi:error] [pid 35998:tid 36018] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:18.941489 2025] [proxy_fcgi:error] [pid 35998:tid 36019] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:19.194532 2025] [proxy_fcgi:error] [pid 35998:tid 36014] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:19.456227 2025] [proxy_fcgi:error] [pid 35998:tid 36024] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:19.708674 2025] [proxy_fcgi:error] [pid 35998:tid 36005] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:19.962005 2025] [proxy_fcgi:error] [pid 35998:tid 36012] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:20.217405 2025] [proxy_fcgi:error] [pid 35998:tid 36016] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:20.470672 2025] [proxy_fcgi:error] [pid 35998:tid 36004] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:20.723330 2025] [proxy_fcgi:error] [pid 35998:tid 36007] [client 13.74.149.244:14158] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 19:55:20.972624 2025] [:error] [pid 35998:tid 36009] [client 13.74.149.244:14158] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mans.php"] [unique_id "aUFIqBKnhGuuhGxBSLOzWQAAAUg"]
[Tue Dec 16 19:55:21.469738 2025] [:error] [pid 18408:tid 18429] [client 13.74.149.244:11842] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aUFIqTi2Gr8pDzjrVBAeQwAAANM"]
[Tue Dec 16 19:55:21.968857 2025] [:error] [pid 18323:tid 18368] [client 13.74.149.244:14167] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aUFIqTJB6UFxIutsA8YwCQAAAE8"]
[Tue Dec 16 19:55:22.469461 2025] [:error] [pid 18322:tid 18347] [client 13.74.149.244:13841] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aUFIqpsCeWBjrw28XtwMGAAAABU"]
[Tue Dec 16 19:55:22.977684 2025] [:error] [pid 51991:tid 52005] [client 13.74.149.244:14203] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aUFIqq7zKCVJSuwV1xaw1gAAAQw"]
[Tue Dec 16 19:55:23.474782 2025] [:error] [pid 18408:tid 18419] [client 13.74.149.244:12388] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yas.php"] [unique_id "aUFIqzi2Gr8pDzjrVBAeRgAAAMk"]
[Tue Dec 16 19:55:23.978670 2025] [:error] [pid 18324:tid 18381] [client 13.74.149.244:11082] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yas.php"] [unique_id "aUFIq6G4um2mD1VpJHKgDwAAAIE"]
[Tue Dec 16 19:55:24.475255 2025] [:error] [pid 12330:tid 12356] [client 13.74.149.244:11251] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yas.php"] [unique_id "aUFIrF6iIQEVCIh8V1mB6AAAAZY"]
[Tue Dec 16 19:55:24.974052 2025] [:error] [pid 18324:tid 18389] [client 13.74.149.244:12364] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yas.php"] [unique_id "aUFIrKG4um2mD1VpJHKgEAAAAIk"]
[Tue Dec 16 19:55:25.472193 2025] [:error] [pid 18324:tid 18394] [client 13.74.149.244:10470] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aUFIraG4um2mD1VpJHKgEQAAAI4"]
[Tue Dec 16 19:55:25.986051 2025] [:error] [pid 12330:tid 12338] [client 13.74.149.244:8358] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aUFIrV6iIQEVCIh8V1mB6wAAAYQ"]
[Tue Dec 16 19:55:26.482411 2025] [:error] [pid 18408:tid 18425] [client 13.74.149.244:8349] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aUFIrji2Gr8pDzjrVBAeSgAAAM8"]
[Tue Dec 16 19:55:26.981127 2025] [:error] [pid 18408:tid 18413] [client 13.74.149.244:10857] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aUFIrji2Gr8pDzjrVBAeTAAAAMM"]
[Tue Dec 16 19:55:27.479029 2025] [:error] [pid 18408:tid 18414] [client 13.74.149.244:13314] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUFIrzi2Gr8pDzjrVBAeTQAAAMQ"]
[Tue Dec 16 19:55:27.975320 2025] [:error] [pid 18324:tid 18384] [client 13.74.149.244:10848] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUFIr6G4um2mD1VpJHKgEgAAAIQ"]
[Tue Dec 16 19:55:28.471285 2025] [:error] [pid 18408:tid 18423] [client 13.74.149.244:14147] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUFIsDi2Gr8pDzjrVBAeUQAAAM0"]
[Tue Dec 16 19:55:28.967804 2025] [:error] [pid 18322:tid 18336] [client 13.74.149.244:10878] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUFIsJsCeWBjrw28XtwMHAAAAAo"]
[Tue Dec 16 19:55:29.466708 2025] [:error] [pid 18322:tid 18342] [client 13.74.149.244:9548] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aUFIsZsCeWBjrw28XtwMHQAAABA"]
[Tue Dec 16 19:55:29.965420 2025] [:error] [pid 18324:tid 18383] [client 13.74.149.244:11107] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aUFIsaG4um2mD1VpJHKgFAAAAIM"]
[Tue Dec 16 19:55:30.464123 2025] [:error] [pid 18324:tid 18398] [client 13.74.149.244:11878] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aUFIsqG4um2mD1VpJHKgFQAAAJI"]
[Tue Dec 16 19:55:30.962735 2025] [:error] [pid 35998:tid 36008] [client 13.74.149.244:9502] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aUFIshKnhGuuhGxBSLOzXQAAAUc"]
[Tue Dec 16 19:55:31.465396 2025] [:error] [pid 35998:tid 36012] [client 13.74.149.244:9510] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blox.php"] [unique_id "aUFIsxKnhGuuhGxBSLOzXgAAAUs"]
[Tue Dec 16 19:55:31.962164 2025] [:error] [pid 12330:tid 12342] [client 13.74.149.244:7575] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blox.php"] [unique_id "aUFIs16iIQEVCIh8V1mB7wAAAYg"]
[Tue Dec 16 19:55:32.466243 2025] [:error] [pid 12330:tid 12339] [client 13.74.149.244:11646] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blox.php"] [unique_id "aUFItF6iIQEVCIh8V1mB8QAAAYU"]
[Tue Dec 16 19:55:32.964611 2025] [:error] [pid 18323:tid 18365] [client 13.74.149.244:10432] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blox.php"] [unique_id "aUFItDJB6UFxIutsA8YwCwAAAEw"]
[Tue Dec 16 19:55:33.461592 2025] [:error] [pid 35998:tid 36004] [client 13.74.149.244:11086] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scx.php7"] [unique_id "aUFItRKnhGuuhGxBSLOzYAAAAUM"]
[Tue Dec 16 19:55:33.958510 2025] [:error] [pid 51991:tid 52009] [client 13.74.149.244:9523] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scx.php7"] [unique_id "aUFIta7zKCVJSuwV1xaw2wAAARA"]
[Tue Dec 16 19:55:34.454752 2025] [:error] [pid 51991:tid 52008] [client 13.74.149.244:13347] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scx.php7"] [unique_id "aUFItq7zKCVJSuwV1xaw3QAAAQ8"]
[Tue Dec 16 19:55:34.950495 2025] [:error] [pid 12330:tid 12353] [client 13.74.149.244:13715] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scx.php7"] [unique_id "aUFItl6iIQEVCIh8V1mB9QAAAZM"]
[Tue Dec 16 19:55:35.447166 2025] [:error] [pid 35998:tid 36007] [client 13.74.149.244:14207] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aUFItxKnhGuuhGxBSLOzYQAAAUY"]
[Tue Dec 16 19:55:35.944785 2025] [:error] [pid 35998:tid 36013] [client 13.74.149.244:8366] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aUFItxKnhGuuhGxBSLOzYgAAAUw"]
[Tue Dec 16 19:55:36.440616 2025] [:error] [pid 51991:tid 52011] [client 13.74.149.244:9567] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aUFIuK7zKCVJSuwV1xaw3wAAARI"]
[Tue Dec 16 19:55:36.937029 2025] [:error] [pid 35998:tid 36011] [client 13.74.149.244:10875] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/siln.php"] [unique_id "aUFIuBKnhGuuhGxBSLOzYwAAAUo"]
[Tue Dec 16 19:55:37.433157 2025] [:error] [pid 18324:tid 18389] [client 13.74.149.244:8370] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mtvcrew.php"] [unique_id "aUFIuaG4um2mD1VpJHKgIQAAAIk"]
[Tue Dec 16 19:55:37.933628 2025] [:error] [pid 51991:tid 51995] [client 13.74.149.244:13738] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mtvcrew.php"] [unique_id "aUFIua7zKCVJSuwV1xaw4AAAAQI"]
[Tue Dec 16 19:55:38.430364 2025] [:error] [pid 12330:tid 12334] [client 13.74.149.244:10471] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mtvcrew.php"] [unique_id "aUFIul6iIQEVCIh8V1mB_gAAAYA"]
[Tue Dec 16 19:55:38.926734 2025] [:error] [pid 18324:tid 18383] [client 13.74.149.244:13367] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mtvcrew.php"] [unique_id "aUFIuqG4um2mD1VpJHKgJAAAAIM"]
[Tue Dec 16 19:55:39.438827 2025] [:error] [pid 35998:tid 36018] [client 13.74.149.244:10444] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/great.php"] [unique_id "aUFIuxKnhGuuhGxBSLOzZQAAAVE"]
[Tue Dec 16 19:55:39.934902 2025] [:error] [pid 12330:tid 12345] [client 13.74.149.244:11893] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/great.php"] [unique_id "aUFIu16iIQEVCIh8V1mCBAAAAYs"]
[Tue Dec 16 19:55:40.431842 2025] [:error] [pid 51991:tid 51996] [client 13.74.149.244:5023] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/great.php"] [unique_id "aUFIvK7zKCVJSuwV1xaw4QAAAQM"]
[Tue Dec 16 19:55:40.930354 2025] [:error] [pid 53940:tid 53958] [client 13.74.149.244:11269] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/great.php"] [unique_id "aUFIvF91PNbcXLVkpR7x2QAAAc8"]
[Tue Dec 16 19:55:41.428980 2025] [:error] [pid 53940:tid 53951] [client 13.74.149.244:11110] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUFIvV91PNbcXLVkpR7x2wAAAcg"]
[Tue Dec 16 19:55:41.926426 2025] [:error] [pid 53940:tid 53962] [client 13.74.149.244:5002] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUFIvV91PNbcXLVkpR7x3AAAAdM"]
[Tue Dec 16 19:55:42.427883 2025] [:error] [pid 51991:tid 52016] [client 13.74.149.244:4904] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUFIvq7zKCVJSuwV1xaw5wAAARc"]
[Tue Dec 16 19:55:42.925362 2025] [:error] [pid 51991:tid 52001] [client 13.74.149.244:11073] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUFIvq7zKCVJSuwV1xaw6QAAAQg"]
[Tue Dec 16 19:55:43.422932 2025] [:error] [pid 53940:tid 53945] [client 13.74.149.244:11300] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aUFIv191PNbcXLVkpR7x3gAAAcI"]
[Tue Dec 16 19:55:43.918500 2025] [:error] [pid 53940:tid 53947] [client 13.74.149.244:7582] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aUFIv191PNbcXLVkpR7x4AAAAcQ"]
[Tue Dec 16 19:55:44.418777 2025] [:error] [pid 18323:tid 18375] [client 13.74.149.244:11589] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aUFIwDJB6UFxIutsA8YwDgAAAFY"]
[Tue Dec 16 19:55:44.919181 2025] [:error] [pid 18324:tid 18399] [client 13.74.149.244:11302] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aUFIwKG4um2mD1VpJHKgJgAAAJM"]
[Tue Dec 16 19:55:45.415471 2025] [:error] [pid 51991:tid 52003] [client 13.74.149.244:14174] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUFIwa7zKCVJSuwV1xaw8QAAAQo"]
[Tue Dec 16 19:55:45.911913 2025] [:error] [pid 18323:tid 18368] [client 13.74.149.244:7577] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUFIwTJB6UFxIutsA8YwEAAAAE8"]
[Tue Dec 16 19:55:46.408397 2025] [:error] [pid 12330:tid 12355] [client 13.74.149.244:11092] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUFIwl6iIQEVCIh8V1mCDgAAAZU"]
[Tue Dec 16 19:55:46.905151 2025] [:error] [pid 12330:tid 12339] [client 13.74.149.244:10861] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUFIwl6iIQEVCIh8V1mCEgAAAYU"]
[Tue Dec 16 19:55:47.403034 2025] [:error] [pid 12330:tid 12340] [client 13.74.149.244:4870] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoha.php"] [unique_id "aUFIw16iIQEVCIh8V1mCEwAAAYY"]
[Tue Dec 16 19:55:47.899537 2025] [:error] [pid 18324:tid 18386] [client 13.74.149.244:13740] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoha.php"] [unique_id "aUFIw6G4um2mD1VpJHKgJwAAAIY"]
[Tue Dec 16 19:55:48.396401 2025] [:error] [pid 18408:tid 18419] [client 13.74.149.244:13830] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoha.php"] [unique_id "aUFIxDi2Gr8pDzjrVBAeWAAAAMk"]
[Tue Dec 16 19:55:48.893266 2025] [:error] [pid 18322:tid 18336] [client 13.74.149.244:10334] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoha.php"] [unique_id "aUFIxJsCeWBjrw28XtwMLgAAAAo"]
[Tue Dec 16 19:55:49.390831 2025] [:error] [pid 12330:tid 12347] [client 13.74.149.244:11609] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUFIxV6iIQEVCIh8V1mCFgAAAY0"]
[Tue Dec 16 19:55:49.887398 2025] [:error] [pid 18408:tid 18432] [client 13.74.149.244:12386] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUFIxTi2Gr8pDzjrVBAeXgAAANY"]
[Tue Dec 16 19:55:50.408169 2025] [:error] [pid 18324:tid 18403] [client 13.74.149.244:9508] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUFIxqG4um2mD1VpJHKgKwAAAJc"]
[Tue Dec 16 19:55:50.904818 2025] [:error] [pid 51991:tid 52005] [client 13.74.149.244:13842] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUFIxq7zKCVJSuwV1xaw-QAAAQw"]
[Tue Dec 16 19:55:51.402852 2025] [:error] [pid 53940:tid 53956] [client 13.74.149.244:10826] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sallu.php"] [unique_id "aUFIx191PNbcXLVkpR7x4wAAAc0"]
[Tue Dec 16 19:55:51.899959 2025] [:error] [pid 18324:tid 18391] [client 13.74.149.244:13825] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sallu.php"] [unique_id "aUFIx6G4um2mD1VpJHKgLQAAAIs"]
[Tue Dec 16 19:55:52.396629 2025] [:error] [pid 51991:tid 51994] [client 13.74.149.244:10346] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sallu.php"] [unique_id "aUFIyK7zKCVJSuwV1xaw_gAAAQE"]
[Tue Dec 16 19:55:52.896273 2025] [:error] [pid 53940:tid 53966] [client 13.74.149.244:11355] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aUFIyF91PNbcXLVkpR7x5AAAAdc"]
[Tue Dec 16 19:55:53.394170 2025] [:error] [pid 53940:tid 53958] [client 13.74.149.244:11214] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aUFIyV91PNbcXLVkpR7x5gAAAc8"]
[Tue Dec 16 19:55:53.891919 2025] [:error] [pid 18323:tid 18376] [client 13.74.149.244:8335] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aUFIyTJB6UFxIutsA8YwHQAAAFc"]
[Tue Dec 16 19:55:54.396484 2025] [:error] [pid 18322:tid 18335] [client 13.74.149.244:14154] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aUFIypsCeWBjrw28XtwMNQAAAAk"]
[Tue Dec 16 19:55:54.893396 2025] [:error] [pid 51991:tid 52006] [client 13.74.149.244:12355] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUFIyq7zKCVJSuwV1xaxAQAAAQ0"]
[Tue Dec 16 19:55:55.389771 2025] [:error] [pid 18408:tid 18429] [client 13.74.149.244:11280] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUFIyzi2Gr8pDzjrVBAeYgAAANM"]
[Tue Dec 16 19:55:55.886524 2025] [:error] [pid 12330:tid 12334] [client 13.74.149.244:13316] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUFIy16iIQEVCIh8V1mCGgAAAYA"]
[Tue Dec 16 19:55:56.383668 2025] [:error] [pid 12330:tid 12350] [client 13.74.149.244:14355] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aUFIzF6iIQEVCIh8V1mCHAAAAZA"]
[Tue Dec 16 19:55:56.880502 2025] [:error] [pid 18322:tid 18349] [client 13.74.149.244:10856] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aUFIzJsCeWBjrw28XtwMOQAAABc"]
[Tue Dec 16 19:55:57.377845 2025] [:error] [pid 51991:tid 52009] [client 13.74.149.244:11098] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aUFIza7zKCVJSuwV1xaxBQAAARA"]
[Tue Dec 16 19:55:57.874219 2025] [:error] [pid 18323:tid 18354] [client 13.74.149.244:10306] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aUFIzTJB6UFxIutsA8YwJgAAAEE"]
[Tue Dec 16 19:55:58.372587 2025] [:error] [pid 53940:tid 53961] [client 13.74.149.244:9476] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aUFIzl91PNbcXLVkpR7x6QAAAdI"]
[Tue Dec 16 19:55:58.872704 2025] [:error] [pid 53940:tid 53959] [client 13.74.149.244:9472] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxin.php"] [unique_id "aUFIzl91PNbcXLVkpR7x6wAAAdA"]
[Tue Dec 16 19:55:59.371667 2025] [:error] [pid 53940:tid 53963] [client 13.74.149.244:13870] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxin.php"] [unique_id "aUFIz191PNbcXLVkpR7x7AAAAdQ"]
[Tue Dec 16 19:55:59.870566 2025] [:error] [pid 53940:tid 53944] [client 13.74.149.244:7591] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxin.php"] [unique_id "aUFIz191PNbcXLVkpR7x7wAAAcE"]
[Tue Dec 16 19:56:00.370443 2025] [:error] [pid 35998:tid 36011] [client 13.74.149.244:12354] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxin.php"] [unique_id "aUFI0BKnhGuuhGxBSLOzbAAAAUo"]
[Tue Dec 16 19:56:00.868019 2025] [:error] [pid 18322:tid 18333] [client 13.74.149.244:13827] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aUFI0JsCeWBjrw28XtwMPwAAAAc"]
[Tue Dec 16 19:56:01.366008 2025] [:error] [pid 53940:tid 53956] [client 13.74.149.244:1548] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aUFI0V91PNbcXLVkpR7x8QAAAc0"]
[Tue Dec 16 19:56:01.864771 2025] [:error] [pid 53940:tid 53948] [client 13.74.149.244:4869] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aUFI0V91PNbcXLVkpR7x8wAAAcU"]
[Tue Dec 16 19:56:02.366338 2025] [:error] [pid 18322:tid 18349] [client 13.74.149.244:10955] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aUFI0psCeWBjrw28XtwMQgAAABc"]
[Tue Dec 16 21:24:12.666889 2025] [:error] [pid 51991:tid 52010] [client 106.221.142.238:10629] [client 106.221.142.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.221.142.238, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUFdfK7zKCVJSuwV1xbSVgAAARE"]
[Tue Dec 16 21:24:12.688521 2025] [proxy_fcgi:error] [pid 51991:tid 52010] [client 106.221.142.238:10629] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 21:33:10.872350 2025] [:error] [pid 18408:tid 18418] [client 123.253.49.169:54476] [client 123.253.49.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.253.49.169, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUFflji2Gr8pDzjrVBA5bAAAAMg"]
[Tue Dec 16 21:33:10.884096 2025] [proxy_fcgi:error] [pid 18408:tid 18418] [client 123.253.49.169:54476] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 22:16:33.404797 2025] [autoindex:error] [pid 18324:tid 18391] [client 35.232.250.106:57289] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 22:50:41.221945 2025] [:error] [pid 53940:tid 53950] [client 119.28.89.249:43930] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUFxwV91PNbcXLVkpR4YXQAAAcc"]
[Wed Dec 17 00:20:03.154119 2025] [autoindex:error] [pid 64922:tid 64930] [client 34.90.199.112:32768] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 00:21:21.942446 2025] [autoindex:error] [pid 64837:tid 64912] [client 35.204.109.104:40960] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 00:40:38.134653 2025] [:error] [pid 64922:tid 64942] [client 43.130.102.7:46250] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUGLhg70DhirJ6vYR3EDdQAAANI"]
[Wed Dec 17 02:34:40.577881 2025] [autoindex:error] [pid 64836:tid 64869] [client 20.250.45.203:10959] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 02:34:40.691703 2025] [proxy_fcgi:error] [pid 64836:tid 64886] [client 20.250.45.203:10962] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Dec 17 02:34:40.959266 2025] [proxy_fcgi:error] [pid 64836:tid 64882] [client 20.250.45.203:10962] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Dec 17 02:34:49.243892 2025] [proxy_fcgi:error] [pid 64922:tid 64926] [client 20.250.45.203:39526] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Dec 17 02:34:49.572008 2025] [proxy_fcgi:error] [pid 64922:tid 64930] [client 20.250.45.203:39526] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Dec 17 05:50:05.794991 2025] [autoindex:error] [pid 13215:tid 13236] [client 195.164.49.145:37640] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 11:00:18.802517 2025] [autoindex:error] [pid 45532:tid 45590] [client 121.127.34.106:64345] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:10:18.605354 2025] [autoindex:error] [pid 45532:tid 45596] [client 34.232.240.204:38412] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:10:22.752294 2025] [autoindex:error] [pid 45531:tid 45571] [client 98.85.80.174:48626] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:10:27.169259 2025] [autoindex:error] [pid 11733:tid 11736] [client 100.48.253.211:56540] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:10:37.830063 2025] [autoindex:error] [pid 45531:tid 45566] [client 3.219.78.151:43362] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:10:58.427865 2025] [autoindex:error] [pid 45531:tid 45581] [client 212.103.49.26:64811] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:11:00.616173 2025] [autoindex:error] [pid 45530:tid 45535] [client 38.205.128.204:54464] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:11:10.658341 2025] [autoindex:error] [pid 45621:tid 45632] [client 38.200.7.13:56571] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:11:19.979335 2025] [autoindex:error] [pid 45621:tid 45650] [client 176.113.73.37:62265] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 12:42:28.913357 2025] [autoindex:error] [pid 45531:tid 45569] [client 142.44.225.147:26530] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 16:53:02.921108 2025] [autoindex:error] [pid 45621:tid 45631] [client 165.22.31.165:57804] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 17:29:26.890881 2025] [autoindex:error] [pid 45530:tid 45548] [client 74.7.243.245:54580] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 17:51:35.148787 2025] [autoindex:error] [pid 45530:tid 45553] [client 74.7.227.15:58076] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 19:40:10.589964 2025] [autoindex:error] [pid 45532:tid 45593] [client 45.131.155.102:36298] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 21:04:44.555629 2025] [:error] [pid 16666:tid 16676] [client 43.153.113.127:57744] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUKqbFAThvYvBwbndYL4bAAAAYc"]
[Wed Dec 17 21:22:20.270143 2025] [autoindex:error] [pid 16788:tid 16796] [client 100.29.150.157:38368] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 21:23:09.437075 2025] [autoindex:error] [pid 16666:tid 16693] [client 38.206.2.168:62505] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 21:24:32.925220 2025] [:error] [pid 45621:tid 45645] [client 106.200.9.137:8088] [client 106.200.9.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.9.137, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUKvEOVNGQfJ1rR90pSTlAAAANM"]
[Wed Dec 17 21:24:32.936048 2025] [proxy_fcgi:error] [pid 45621:tid 45645] [client 106.200.9.137:8088] AH01071: Got error 'Primary script unknown'
[Wed Dec 17 22:07:09.061392 2025] [:error] [pid 16788:tid 16810] [client 45.130.203.132:46109] [client 45.130.203.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aUK5DSEJyT-03u9UZWPOIAAAAlQ"]
[Wed Dec 17 22:07:09.836370 2025] [:error] [pid 11733:tid 11738] [client 45.130.203.165:46815] [client 45.130.203.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aUK5DTzmtBRXExJb1PE1QQAAAQM"]
[Wed Dec 17 22:36:36.153674 2025] [autoindex:error] [pid 16577:tid 16591] [client 151.80.144.77:56870] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 17 23:59:24.977098 2025] [autoindex:error] [pid 45530:tid 45545] [client 66.249.64.225:41078] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 00:59:30.370915 2025] [:error] [pid 26117:tid 26160] [client 193.36.224.67:60847] [client 193.36.224.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aULhcjGiVc9lQS6PcL3QSgAAAUo"]
[Thu Dec 18 00:59:30.847027 2025] [:error] [pid 43493:tid 43519] [client 193.36.224.28:60461] [client 193.36.224.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/txets.php"] [unique_id "aULhcqJPcefhPyLljLxymgAAABM"]
[Thu Dec 18 00:59:31.326480 2025] [:error] [pid 43580:tid 43600] [client 193.36.224.20:62417] [client 193.36.224.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aULhc9w5Ex8-DN38kP3ldgAAAJI"]
[Thu Dec 18 03:35:16.867007 2025] [autoindex:error] [pid 3098:tid 3112] [client 120.149.60.109:37334] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:06.966097 2025] [:error] [pid 23645:tid 23671] [client 193.19.109.169:37279] [client 193.19.109.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aUMz2jf_Rx0Y0ao_QJiLlAAAAJg"]
[Thu Dec 18 06:51:07.691655 2025] [proxy_fcgi:error] [pid 25357:tid 25366] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:08.162627 2025] [proxy_fcgi:error] [pid 25357:tid 25367] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:08.579612 2025] [proxy_fcgi:error] [pid 25357:tid 25383] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:09.018295 2025] [proxy_fcgi:error] [pid 25357:tid 25367] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:09.447620 2025] [proxy_fcgi:error] [pid 25357:tid 25377] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:09.809780 2025] [proxy_fcgi:error] [pid 25357:tid 25377] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:10.245627 2025] [proxy_fcgi:error] [pid 25357:tid 25365] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:10.651672 2025] [proxy_fcgi:error] [pid 25357:tid 25361] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:11.443198 2025] [proxy_fcgi:error] [pid 25357:tid 25361] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:12.315686 2025] [proxy_fcgi:error] [pid 25357:tid 25383] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:12.718649 2025] [proxy_fcgi:error] [pid 25357:tid 25377] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:13.125006 2025] [proxy_fcgi:error] [pid 25357:tid 25359] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:13.526630 2025] [proxy_fcgi:error] [pid 25357:tid 25361] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:13.947803 2025] [proxy_fcgi:error] [pid 25357:tid 25380] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:14.424659 2025] [proxy_fcgi:error] [pid 25357:tid 25380] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:14.812516 2025] [proxy_fcgi:error] [pid 25357:tid 25361] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:15.219253 2025] [proxy_fcgi:error] [pid 25357:tid 25363] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:15.587762 2025] [proxy_fcgi:error] [pid 25357:tid 25374] [client 193.19.109.202:20521] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:21.046135 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.202:20521] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUMz6YaT7bsEXnJVfJdLWAAAAcg"]
[Thu Dec 18 06:51:23.016888 2025] [:error] [pid 23556:tid 23574] [client 193.19.109.162:60765] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUMz6xnmLlk3u5yt9kEJbgAAAA4"]
[Thu Dec 18 06:51:25.791400 2025] [proxy_fcgi:error] [pid 24958:tid 24981] [client 193.19.109.181:63475] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:26.968016 2025] [:error] [pid 24958:tid 24961] [client 193.19.109.181:63475] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUMz7skDOrUkd0wNm2ENJQAAAYA"]
[Thu Dec 18 06:51:28.587671 2025] [proxy_fcgi:error] [pid 23556:tid 23568] [client 193.19.109.162:24391] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:28.974414 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.162:24391] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUMz8BnmLlk3u5yt9kEJrAAAAA8"]
[Thu Dec 18 06:51:30.215656 2025] [proxy_fcgi:error] [pid 23556:tid 23564] [client 193.19.109.169:25173] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:30.977740 2025] [:error] [pid 23556:tid 23572] [client 193.19.109.169:25173] [client 193.19.109.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aUMz8hnmLlk3u5yt9kEJ0QAAAAw"]
[Thu Dec 18 06:51:32.898916 2025] [:error] [pid 23557:tid 23599] [client 193.19.109.162:41121] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUMz9BYcs6rFVxbdP_k2dQAAAEs"]
[Thu Dec 18 06:51:34.180275 2025] [:error] [pid 24433:tid 24453] [client 193.19.109.195:46279] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUMz9p4pN9ycmipm8TgigQAAARE"]
[Thu Dec 18 06:51:34.920320 2025] [:error] [pid 24958:tid 24963] [client 193.19.109.208:55257] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUMz9skDOrUkd0wNm2ENjgAAAYI"]
[Thu Dec 18 06:51:35.681084 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.166:51839] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUMz9-Ham9NbgPQa9uY4xwAAANc"]
[Thu Dec 18 06:51:36.398381 2025] [:error] [pid 24433:tid 24452] [client 193.19.109.187:29669] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUMz-J4pN9ycmipm8TgilwAAARA"]
[Thu Dec 18 06:51:37.153472 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.187:40705] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUMz-Tf_Rx0Y0ao_QJiNAQAAAII"]
[Thu Dec 18 06:51:38.322176 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.184:54885] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUMz-ktQz4H2oS3NrDYW8gAAAUI"]
[Thu Dec 18 06:51:39.098654 2025] [proxy_fcgi:error] [pid 23558:tid 23633] [client 193.19.109.190:39999] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:39.864666 2025] [:error] [pid 23558:tid 23621] [client 193.19.109.190:39999] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aUMz--Ham9NbgPQa9uY5EQAAAMY"]
[Thu Dec 18 06:51:41.412620 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.168:48025] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUMz_Tf_Rx0Y0ao_QJiNMwAAAJc"]
[Thu Dec 18 06:51:42.570774 2025] [:error] [pid 23556:tid 23567] [client 193.19.109.200:56621] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUMz_hnmLlk3u5yt9kEKlQAAAAc"]
[Thu Dec 18 06:51:43.373646 2025] [proxy_fcgi:error] [pid 25357:tid 25383] [client 193.19.109.210:25995] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:43.789978 2025] [:error] [pid 25357:tid 25376] [client 193.19.109.210:25995] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUMz_4aT7bsEXnJVfJdNIwAAAdE"]
[Thu Dec 18 06:51:44.563803 2025] [proxy_fcgi:error] [pid 25357:tid 25363] [client 193.19.109.197:56063] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:45.792760 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.197:56063] [client 193.19.109.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-blog.php"] [unique_id "aUM0AYaT7bsEXnJVfJdNPAAAAcc"]
[Thu Dec 18 06:51:46.583661 2025] [proxy_fcgi:error] [pid 25357:tid 25363] [client 193.19.109.174:63009] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:47.733194 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.174:63009] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUM0A4aT7bsEXnJVfJdNYgAAAdQ"]
[Thu Dec 18 06:51:48.516709 2025] [proxy_fcgi:error] [pid 23558:tid 23639] [client 193.19.109.163:62891] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:48.889131 2025] [:error] [pid 23558:tid 23635] [client 193.19.109.163:62891] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUM0BOHam9NbgPQa9uY5hQAAANQ"]
[Thu Dec 18 06:51:49.683630 2025] [proxy_fcgi:error] [pid 25357:tid 25379] [client 193.19.109.204:39853] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:50.621912 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.204:39853] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUM0BoaT7bsEXnJVfJdNrgAAAcc"]
[Thu Dec 18 06:51:51.826964 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.210:31687] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUM0BxYcs6rFVxbdP_k3NwAAAEg"]
[Thu Dec 18 06:51:53.050649 2025] [proxy_fcgi:error] [pid 24433:tid 24449] [client 193.19.109.182:42971] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:53.436714 2025] [proxy_fcgi:error] [pid 24433:tid 24453] [client 193.19.109.182:42971] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:54.199816 2025] [:error] [pid 24433:tid 24456] [client 193.19.109.182:42971] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUM0Cp4pN9ycmipm8TgjcAAAARQ"]
[Thu Dec 18 06:51:55.318543 2025] [:error] [pid 25357:tid 25373] [client 193.19.109.179:63081] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUM0C4aT7bsEXnJVfJdOEgAAAc4"]
[Thu Dec 18 06:51:56.528438 2025] [:error] [pid 24433:tid 24442] [client 193.37.33.229:24801] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUM0DJ4pN9ycmipm8TgjhAAAAQY"]
[Thu Dec 18 06:51:57.268831 2025] [:error] [pid 24542:tid 24545] [client 193.19.109.185:25445] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUM0DUtQz4H2oS3NrDYX7gAAAUE"]
[Thu Dec 18 06:51:58.053431 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.167:46411] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUM0DuHam9NbgPQa9uY55gAAAMc"]
[Thu Dec 18 06:51:59.659652 2025] [proxy_fcgi:error] [pid 23558:tid 23631] [client 193.19.109.197:28567] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:51:59.999289 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.197:28567] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUM0D-Ham9NbgPQa9uY59AAAANI"]
[Thu Dec 18 06:52:00.775221 2025] [:error] [pid 23557:tid 23600] [client 193.37.33.229:61641] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUM0EBYcs6rFVxbdP_k3owAAAEw"]
[Thu Dec 18 06:52:01.469423 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.199:32415] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUM0ERnmLlk3u5yt9kELrAAAAA8"]
[Thu Dec 18 06:52:03.043652 2025] [proxy_fcgi:error] [pid 23556:tid 23561] [client 193.19.109.184:23117] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:03.892659 2025] [proxy_fcgi:error] [pid 23556:tid 23564] [client 193.19.109.184:23117] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:05.498773 2025] [:error] [pid 23556:tid 23576] [client 193.19.109.184:23117] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUM0FRnmLlk3u5yt9kEL1wAAABA"]
[Thu Dec 18 06:52:07.512994 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.179:20163] [client 193.19.109.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.179, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUM0F0tQz4H2oS3NrDYYSQAAAUU"]
[Thu Dec 18 06:52:08.019619 2025] [proxy_fcgi:error] [pid 24542:tid 24557] [client 193.19.109.179:20163] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:10.135647 2025] [proxy_fcgi:error] [pid 24542:tid 24551] [client 193.19.109.179:20163] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:10.509646 2025] [proxy_fcgi:error] [pid 24542:tid 24553] [client 193.19.109.179:20163] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:12.469521 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.179:20163] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUM0HEtQz4H2oS3NrDYYegAAAUA"]
[Thu Dec 18 06:52:13.544630 2025] [proxy_fcgi:error] [pid 23557:tid 23593] [client 193.19.109.205:57943] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:13.916484 2025] [:error] [pid 23557:tid 23601] [client 193.19.109.205:57943] [client 193.19.109.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.205, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUM0HRYcs6rFVxbdP_k4ZgAAAE0"]
[Thu Dec 18 06:52:14.774472 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.205:57943] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUM0HhYcs6rFVxbdP_k4bwAAAE4"]
[Thu Dec 18 06:52:16.672055 2025] [:error] [pid 23556:tid 23565] [client 193.19.109.178:39961] [client 193.19.109.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/admin.php"] [unique_id "aUM0IBnmLlk3u5yt9kEMNQAAAAU"]
[Thu Dec 18 06:52:17.915605 2025] [proxy_fcgi:error] [pid 23558:tid 23619] [client 193.19.109.196:39573] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:18.755628 2025] [proxy_fcgi:error] [pid 23558:tid 23626] [client 193.19.109.196:39573] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:19.572689 2025] [:error] [pid 23558:tid 23628] [client 193.19.109.196:39573] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUM0I-Ham9NbgPQa9uY6xwAAAM0"]
[Thu Dec 18 06:52:20.279635 2025] [proxy_fcgi:error] [pid 25357:tid 25368] [client 193.19.109.205:56411] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:21.402705 2025] [proxy_fcgi:error] [pid 25357:tid 25369] [client 193.19.109.205:56411] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:22.620350 2025] [proxy_fcgi:error] [pid 25357:tid 25363] [client 193.19.109.205:56411] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:23.346668 2025] [proxy_fcgi:error] [pid 25357:tid 25362] [client 193.19.109.205:56411] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:23.690323 2025] [:error] [pid 25357:tid 25368] [client 193.19.109.205:56411] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUM0J4aT7bsEXnJVfJdQDAAAAck"]
[Thu Dec 18 06:52:24.493654 2025] [proxy_fcgi:error] [pid 23645:tid 23668] [client 193.19.109.179:62969] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:24.880611 2025] [proxy_fcgi:error] [pid 23645:tid 23657] [client 193.19.109.179:62969] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:25.266705 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.179:62969] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUM0KTf_Rx0Y0ao_QJiPcwAAAJI"]
[Thu Dec 18 06:52:26.383361 2025] [proxy_fcgi:error] [pid 24433:tid 24438] [client 193.19.109.182:44571] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:27.181075 2025] [:error] [pid 24433:tid 24449] [client 193.19.109.182:44571] [client 193.19.109.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.182, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUM0K54pN9ycmipm8TglTAAAAQ0"]
[Thu Dec 18 06:52:27.570477 2025] [:error] [pid 24433:tid 24445] [client 193.19.109.182:44571] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUM0K54pN9ycmipm8TglTwAAAQk"]
[Thu Dec 18 06:52:32.225609 2025] [proxy_fcgi:error] [pid 24542:tid 24568] [client 193.19.109.171:58415] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:34.608118 2025] [proxy_fcgi:error] [pid 24542:tid 24564] [client 193.19.109.171:58415] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:34.972569 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.171:58415] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUM0MktQz4H2oS3NrDYZgAAAAU0"]
[Thu Dec 18 06:52:35.702642 2025] [proxy_fcgi:error] [pid 24542:tid 24544] [client 193.19.109.177:63225] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:36.821046 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.177:63225] [client 193.19.109.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.177, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUM0NEtQz4H2oS3NrDYZlgAAAUA"]
[Thu Dec 18 06:52:37.211609 2025] [proxy_fcgi:error] [pid 24542:tid 24564] [client 193.19.109.177:63225] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:37.584656 2025] [proxy_fcgi:error] [pid 24542:tid 24568] [client 193.19.109.177:63225] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:37.946872 2025] [proxy_fcgi:error] [pid 24542:tid 24566] [client 193.19.109.177:63225] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:38.327942 2025] [:error] [pid 24542:tid 24562] [client 193.19.109.177:63225] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUM0NktQz4H2oS3NrDYZqQAAAVI"]
[Thu Dec 18 06:52:39.079620 2025] [proxy_fcgi:error] [pid 25357:tid 25364] [client 193.19.109.196:53553] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:39.476200 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.196:53553] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUM0N4aT7bsEXnJVfJdQ0AAAAdQ"]
[Thu Dec 18 06:52:40.664624 2025] [proxy_fcgi:error] [pid 23558:tid 23627] [client 193.37.33.229:28441] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:41.192532 2025] [:error] [pid 23558:tid 23632] [client 193.37.33.229:28441] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUM0OeHam9NbgPQa9uY70gAAANE"]
[Thu Dec 18 06:52:43.823625 2025] [proxy_fcgi:error] [pid 25357:tid 25382] [client 193.19.109.205:40431] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:44.201157 2025] [:error] [pid 25357:tid 25368] [client 193.19.109.205:40431] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUM0PIaT7bsEXnJVfJdRCQAAAck"]
[Thu Dec 18 06:52:44.951850 2025] [:error] [pid 24542:tid 24552] [client 193.19.109.190:40693] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUM0PEtQz4H2oS3NrDYZ0wAAAUg"]
[Thu Dec 18 06:52:45.844133 2025] [proxy_fcgi:error] [pid 24958:tid 24967] [client 193.19.109.195:57051] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:46.213620 2025] [proxy_fcgi:error] [pid 24958:tid 24978] [client 193.19.109.195:57051] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:47.737096 2025] [:error] [pid 24958:tid 24969] [client 193.19.109.195:57051] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUM0P8kDOrUkd0wNm2ERcQAAAYg"]
[Thu Dec 18 06:52:48.891545 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.205:43707] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUM0QBYcs6rFVxbdP_k5_gAAAEY"]
[Thu Dec 18 06:52:50.810408 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.209:58017] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUM0Qp4pN9ycmipm8TgmagAAAQg"]
[Thu Dec 18 06:52:51.576747 2025] [proxy_fcgi:error] [pid 23557:tid 23605] [client 193.19.109.180:59453] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:52.295453 2025] [proxy_fcgi:error] [pid 23557:tid 23597] [client 193.19.109.180:59453] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:52.665423 2025] [:error] [pid 23557:tid 23610] [client 193.19.109.180:59453] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUM0RBYcs6rFVxbdP_k6JgAAAFY"]
[Thu Dec 18 06:52:53.398642 2025] [proxy_fcgi:error] [pid 23556:tid 23579] [client 193.19.109.190:26527] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:54.184309 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.190:26527] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUM0RhnmLlk3u5yt9kENdQAAAAY"]
[Thu Dec 18 06:52:56.536023 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.185:57031] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUM0SOHam9NbgPQa9uY8egAAAMI"]
[Thu Dec 18 06:52:57.689689 2025] [proxy_fcgi:error] [pid 23556:tid 23574] [client 193.19.109.182:48947] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:58.884053 2025] [proxy_fcgi:error] [pid 23556:tid 23583] [client 193.19.109.182:48947] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:59.646996 2025] [proxy_fcgi:error] [pid 23556:tid 23562] [client 193.19.109.182:48947] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:52:59.989394 2025] [:error] [pid 23556:tid 23582] [client 193.19.109.182:48947] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUM0SxnmLlk3u5yt9kENuQAAABY"]
[Thu Dec 18 06:53:00.763602 2025] [:error] [pid 23556:tid 23580] [client 193.19.109.204:41769] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUM0TBnmLlk3u5yt9kENwwAAABQ"]
[Thu Dec 18 06:53:01.505023 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.170:44697] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUM0TRYcs6rFVxbdP_k6egAAAEg"]
[Thu Dec 18 06:53:02.258769 2025] [:error] [pid 25357:tid 25364] [client 193.19.109.191:63071] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUM0ToaT7bsEXnJVfJdRuwAAAcU"]
[Thu Dec 18 06:53:03.020630 2025] [proxy_fcgi:error] [pid 24433:tid 24459] [client 193.19.109.189:42379] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:03.419581 2025] [:error] [pid 24433:tid 24436] [client 193.19.109.189:42379] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUM0T54pN9ycmipm8Tgm-QAAAQA"]
[Thu Dec 18 06:53:04.207213 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.176:57889] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUM0UOHam9NbgPQa9uY8vAAAAMM"]
[Thu Dec 18 06:53:04.994643 2025] [proxy_fcgi:error] [pid 24958:tid 24974] [client 193.19.109.198:64817] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:05.791144 2025] [:error] [pid 24958:tid 24975] [client 193.19.109.198:64817] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUM0UckDOrUkd0wNm2ESRQAAAY4"]
[Thu Dec 18 06:53:06.569523 2025] [:error] [pid 23556:tid 23564] [client 193.19.109.170:27075] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUM0UhnmLlk3u5yt9kEN_wAAAAQ"]
[Thu Dec 18 06:53:07.275660 2025] [:error] [pid 25357:tid 25361] [client 193.19.109.164:23657] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUM0U4aT7bsEXnJVfJdR2QAAAcI"]
[Thu Dec 18 06:53:08.006180 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.171:60163] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUM0VDf_Rx0Y0ao_QJiRwgAAAII"]
[Thu Dec 18 06:53:09.180038 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.161:24651] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUM0VRnmLlk3u5yt9kEOFAAAAA8"]
[Thu Dec 18 06:53:10.712421 2025] [:error] [pid 24433:tid 24451] [client 193.19.109.198:52983] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUM0Vp4pN9ycmipm8TgnYQAAAQ8"]
[Thu Dec 18 06:53:11.468027 2025] [proxy_fcgi:error] [pid 23556:tid 23578] [client 193.19.109.210:60889] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:12.732312 2025] [proxy_fcgi:error] [pid 23556:tid 23577] [client 193.19.109.210:60889] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:13.095814 2025] [:error] [pid 23556:tid 23578] [client 193.19.109.210:60889] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUM0WRnmLlk3u5yt9kEOQAAAABI"]
[Thu Dec 18 06:53:15.238656 2025] [proxy_fcgi:error] [pid 23558:tid 23615] [client 193.19.109.187:48277] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:15.596739 2025] [proxy_fcgi:error] [pid 23558:tid 23622] [client 193.19.109.187:48277] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:17.579400 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.187:48277] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUM0XeHam9NbgPQa9uY9TwAAAMI"]
[Thu Dec 18 06:53:19.537814 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.184:52199] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUM0X4aT7bsEXnJVfJdSTgAAAdI"]
[Thu Dec 18 06:53:20.301512 2025] [:error] [pid 23556:tid 23571] [client 193.19.109.189:34383] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUM0YBnmLlk3u5yt9kEObQAAAAs"]
[Thu Dec 18 06:53:22.574833 2025] [:error] [pid 24958:tid 24963] [client 193.19.109.188:64985] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUM0YskDOrUkd0wNm2ES9gAAAYI"]
[Thu Dec 18 06:53:24.138610 2025] [proxy_fcgi:error] [pid 23557:tid 23595] [client 193.19.109.173:63213] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:24.505677 2025] [proxy_fcgi:error] [pid 23557:tid 23610] [client 193.19.109.173:63213] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:24.885696 2025] [proxy_fcgi:error] [pid 23557:tid 23603] [client 193.19.109.173:63213] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:25.288654 2025] [proxy_fcgi:error] [pid 23557:tid 23599] [client 193.19.109.173:63213] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:27.489213 2025] [:error] [pid 23557:tid 23603] [client 193.19.109.173:63213] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUM0ZxYcs6rFVxbdP_k7QwAAAE8"]
[Thu Dec 18 06:53:28.291783 2025] [:error] [pid 23557:tid 23598] [client 193.19.109.185:56255] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUM0aBYcs6rFVxbdP_k7SQAAAEo"]
[Thu Dec 18 06:53:29.062493 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.184:35291] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUM0aRnmLlk3u5yt9kEOqwAAAAY"]
[Thu Dec 18 06:53:29.853773 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.164:35423] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUM0aUtQz4H2oS3NrDYbQgAAAUQ"]
[Thu Dec 18 06:53:30.667881 2025] [:error] [pid 24542:tid 24562] [client 193.19.109.165:54465] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUM0aktQz4H2oS3NrDYbSQAAAVI"]
[Thu Dec 18 06:53:31.408953 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.169:62571] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUM0a0tQz4H2oS3NrDYbUQAAAUQ"]
[Thu Dec 18 06:53:32.596759 2025] [:error] [pid 23558:tid 23616] [client 193.19.109.164:22885] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUM0bOHam9NbgPQa9uY9ygAAAME"]
[Thu Dec 18 06:53:34.509774 2025] [:error] [pid 24433:tid 24447] [client 193.19.109.201:49679] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUM0bp4pN9ycmipm8TgoEAAAAQs"]
[Thu Dec 18 06:53:35.303465 2025] [:error] [pid 24958:tid 24965] [client 193.19.109.165:59025] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUM0b8kDOrUkd0wNm2EThQAAAYQ"]
[Thu Dec 18 06:53:36.068675 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.164:26425] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUM0cEtQz4H2oS3NrDYbcgAAAUk"]
[Thu Dec 18 06:53:37.507969 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.163:61501] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUM0cZ4pN9ycmipm8TgoMAAAAQg"]
[Thu Dec 18 06:53:38.682953 2025] [:error] [pid 23558:tid 23631] [client 193.37.33.229:52439] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUM0cuHam9NbgPQa9uY-BQAAANA"]
[Thu Dec 18 06:53:39.462583 2025] [proxy_fcgi:error] [pid 25357:tid 25381] [client 193.19.109.204:52147] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:40.181679 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.204:52147] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUM0dIaT7bsEXnJVfJdTKgAAAdI"]
[Thu Dec 18 06:53:41.626566 2025] [:error] [pid 23645:tid 23659] [client 193.19.109.194:44757] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUM0dTf_Rx0Y0ao_QJiTBAAAAIw"]
[Thu Dec 18 06:53:43.233615 2025] [proxy_fcgi:error] [pid 23645:tid 23666] [client 193.19.109.191:56853] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:43.590509 2025] [:error] [pid 23645:tid 23668] [client 193.19.109.191:56853] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUM0dzf_Rx0Y0ao_QJiTIQAAAJU"]
[Thu Dec 18 06:53:44.708016 2025] [proxy_fcgi:error] [pid 24542:tid 24550] [client 193.19.109.172:46135] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:45.081874 2025] [proxy_fcgi:error] [pid 24542:tid 24551] [client 193.19.109.172:46135] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:45.571612 2025] [proxy_fcgi:error] [pid 24542:tid 24568] [client 193.19.109.172:46135] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:45.921957 2025] [:error] [pid 24542:tid 24562] [client 193.19.109.172:46135] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUM0eUtQz4H2oS3NrDYcFAAAAVI"]
[Thu Dec 18 06:53:46.777635 2025] [proxy_fcgi:error] [pid 23558:tid 23619] [client 193.19.109.209:63509] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:47.121123 2025] [:error] [pid 23558:tid 23636] [client 193.19.109.209:63509] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUM0e-Ham9NbgPQa9uY-bgAAANU"]
[Thu Dec 18 06:53:48.799640 2025] [proxy_fcgi:error] [pid 23556:tid 23584] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:49.193805 2025] [proxy_fcgi:error] [pid 23556:tid 23571] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:49.614610 2025] [proxy_fcgi:error] [pid 23556:tid 23568] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:51.686627 2025] [proxy_fcgi:error] [pid 23556:tid 23579] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:52.080678 2025] [proxy_fcgi:error] [pid 23556:tid 23578] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:56.915623 2025] [proxy_fcgi:error] [pid 23556:tid 23577] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:58.287645 2025] [proxy_fcgi:error] [pid 23556:tid 23567] [client 193.19.109.189:46067] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:53:58.680430 2025] [:error] [pid 23556:tid 23580] [client 193.19.109.189:46067] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUM0hhnmLlk3u5yt9kEPXAAAABQ"]
[Thu Dec 18 06:53:59.388775 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.177:44887] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUM0h0tQz4H2oS3NrDYcfQAAAU0"]
[Thu Dec 18 06:54:00.085669 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.195:61175] [client 193.19.109.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.195, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUM0iDf_Rx0Y0ao_QJiTaQAAAI0"]
[Thu Dec 18 06:54:00.095632 2025] [proxy_fcgi:error] [pid 23645:tid 23660] [client 193.19.109.195:61175] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:00.492650 2025] [proxy_fcgi:error] [pid 23645:tid 23655] [client 193.19.109.195:61175] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:00.871021 2025] [:error] [pid 23645:tid 23671] [client 193.19.109.195:61175] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUM0iDf_Rx0Y0ao_QJiTbgAAAJg"]
[Thu Dec 18 06:54:03.130632 2025] [proxy_fcgi:error] [pid 24958:tid 24975] [client 193.19.109.180:49959] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:03.519463 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.180:49959] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUM0i8kDOrUkd0wNm2EUvgAAAZA"]
[Thu Dec 18 06:54:04.277286 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.187:24641] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUM0jBYcs6rFVxbdP_k8IAAAAFQ"]
[Thu Dec 18 06:54:06.480766 2025] [:error] [pid 24958:tid 24961] [client 193.19.109.164:21033] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUM0jskDOrUkd0wNm2EU5AAAAYA"]
[Thu Dec 18 06:54:07.253786 2025] [:error] [pid 24542:tid 24568] [client 193.19.109.181:57045] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aUM0j0tQz4H2oS3NrDYcxgAAAVg"]
[Thu Dec 18 06:54:09.171612 2025] [proxy_fcgi:error] [pid 23558:tid 23631] [client 193.19.109.199:40721] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:09.917302 2025] [:error] [pid 23558:tid 23632] [client 193.19.109.199:40721] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUM0keHam9NbgPQa9uY-3QAAANE"]
[Thu Dec 18 06:54:11.606660 2025] [proxy_fcgi:error] [pid 24958:tid 24969] [client 193.19.109.192:51571] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:12.374542 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.192:51571] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/function.php"] [unique_id "aUM0lMkDOrUkd0wNm2EVKgAAAYc"]
[Thu Dec 18 06:54:13.070955 2025] [:error] [pid 23556:tid 23577] [client 193.19.109.202:37509] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aUM0lRnmLlk3u5yt9kEPrgAAABE"]
[Thu Dec 18 06:54:14.126618 2025] [proxy_fcgi:error] [pid 23645:tid 23661] [client 193.19.109.178:39535] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:14.507327 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.178:39535] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUM0ljf_Rx0Y0ao_QJiTrQAAAJc"]
[Thu Dec 18 06:54:15.290090 2025] [:error] [pid 25357:tid 25383] [client 193.19.109.207:65437] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUM0l4aT7bsEXnJVfJdUWAAAAdg"]
[Thu Dec 18 06:54:18.421638 2025] [proxy_fcgi:error] [pid 24542:tid 24566] [client 193.19.109.189:24955] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:18.884642 2025] [proxy_fcgi:error] [pid 24542:tid 24544] [client 193.19.109.189:24955] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:19.636757 2025] [proxy_fcgi:error] [pid 24542:tid 24549] [client 193.19.109.189:24955] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:20.366795 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.189:24955] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aUM0nEtQz4H2oS3NrDYdOAAAAUI"]
[Thu Dec 18 06:54:21.088392 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.210:36477] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUM0neHam9NbgPQa9uY_LAAAAMc"]
[Thu Dec 18 06:54:23.001882 2025] [proxy_fcgi:error] [pid 23645:tid 23657] [client 193.19.109.168:59749] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:23.402522 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.168:59749] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUM0nzf_Rx0Y0ao_QJiT8QAAAJc"]
[Thu Dec 18 06:54:24.154714 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.178:52723] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUM0oDf_Rx0Y0ao_QJiT9QAAAIg"]
[Thu Dec 18 06:54:24.946979 2025] [:error] [pid 24958:tid 24963] [client 193.19.109.171:20631] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUM0oMkDOrUkd0wNm2EVrgAAAYI"]
[Thu Dec 18 06:54:27.153625 2025] [proxy_fcgi:error] [pid 23558:tid 23635] [client 193.19.109.171:31215] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:27.502690 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.171:31215] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUM0o-Ham9NbgPQa9uY_eQAAANI"]
[Thu Dec 18 06:54:28.672110 2025] [:error] [pid 24542:tid 24547] [client 193.19.109.201:60185] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUM0pEtQz4H2oS3NrDYdeAAAAUM"]
[Thu Dec 18 06:54:29.375609 2025] [proxy_fcgi:error] [pid 23558:tid 23635] [client 193.19.109.200:38455] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:29.923604 2025] [proxy_fcgi:error] [pid 23558:tid 23620] [client 193.19.109.200:38455] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:31.496618 2025] [proxy_fcgi:error] [pid 23558:tid 23628] [client 193.19.109.200:38455] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:33.211561 2025] [:error] [pid 23558:tid 23616] [client 193.19.109.200:38455] [client 193.19.109.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.200, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/js/wp-login.php"] [unique_id "aUM0qeHam9NbgPQa9uY_owAAAME"]
[Thu Dec 18 06:54:33.982965 2025] [:error] [pid 23558:tid 23631] [client 193.19.109.200:38455] File does not exist: /home/cientificacom/public_html/worm.PhP
[Thu Dec 18 06:54:34.330640 2025] [proxy_fcgi:error] [pid 23558:tid 23615] [client 193.19.109.200:38455] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:34.772827 2025] [proxy_fcgi:error] [pid 23558:tid 23639] [client 193.19.109.200:38455] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:35.526357 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.200:38455] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUM0q-Ham9NbgPQa9uY_wQAAAMM"]
[Thu Dec 18 06:54:36.285518 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.195:20269] [client 193.19.109.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.195, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUM0rIaT7bsEXnJVfJdVIAAAAcM"]
[Thu Dec 18 06:54:37.391611 2025] [proxy_fcgi:error] [pid 25357:tid 25371] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:37.788361 2025] [proxy_fcgi:error] [pid 25357:tid 25379] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:38.534628 2025] [proxy_fcgi:error] [pid 25357:tid 25362] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:39.290611 2025] [proxy_fcgi:error] [pid 25357:tid 25364] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:43.519752 2025] [proxy_fcgi:error] [pid 25357:tid 25364] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:50.098655 2025] [proxy_fcgi:error] [pid 25357:tid 25370] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:50.527631 2025] [proxy_fcgi:error] [pid 25357:tid 25363] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:52.508633 2025] [proxy_fcgi:error] [pid 25357:tid 25383] [client 193.19.109.195:20269] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:53.398443 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.195:20269] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUM0vYaT7bsEXnJVfJdWCwAAAcY"]
[Thu Dec 18 06:54:55.027634 2025] [proxy_fcgi:error] [pid 24433:tid 24449] [client 193.19.109.208:32235] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:55.380976 2025] [:error] [pid 24433:tid 24451] [client 193.19.109.208:32235] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUM0v54pN9ycmipm8TgqWQAAAQ8"]
[Thu Dec 18 06:54:56.475707 2025] [proxy_fcgi:error] [pid 24958:tid 24968] [client 193.19.109.207:51299] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:56.815437 2025] [:error] [pid 24958:tid 24972] [client 193.19.109.207:51299] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUM0wMkDOrUkd0wNm2EWVgAAAYs"]
[Thu Dec 18 06:54:58.385730 2025] [proxy_fcgi:error] [pid 24433:tid 24459] [client 193.19.109.190:31657] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:59.177718 2025] [proxy_fcgi:error] [pid 24433:tid 24451] [client 193.19.109.190:31657] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:54:59.907603 2025] [proxy_fcgi:error] [pid 24433:tid 24452] [client 193.19.109.190:31657] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:00.297079 2025] [proxy_fcgi:error] [pid 24433:tid 24454] [client 193.19.109.190:31657] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:01.518496 2025] [:error] [pid 24433:tid 24449] [client 193.19.109.190:31657] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUM0xZ4pN9ycmipm8TgqlAAAAQ0"]
[Thu Dec 18 06:55:02.222020 2025] [proxy_fcgi:error] [pid 24958:tid 24970] [client 193.19.109.208:30785] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:02.616660 2025] [proxy_fcgi:error] [pid 24958:tid 24983] [client 193.19.109.208:30785] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:02.976653 2025] [:error] [pid 24958:tid 24965] [client 193.19.109.208:30785] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUM0xskDOrUkd0wNm2EWggAAAYQ"]
[Thu Dec 18 06:55:04.108376 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.202:49875] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUM0yIaT7bsEXnJVfJdWZQAAAcY"]
[Thu Dec 18 06:55:05.406017 2025] [proxy_fcgi:error] [pid 23557:tid 23607] [client 193.19.109.172:60579] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:06.988615 2025] [proxy_fcgi:error] [pid 23557:tid 23609] [client 193.19.109.172:60579] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:07.372629 2025] [proxy_fcgi:error] [pid 23557:tid 23607] [client 193.19.109.172:60579] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:07.789730 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.172:60579] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUM0yxYcs6rFVxbdP_k93gAAAEY"]
[Thu Dec 18 06:55:08.564247 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.199:24955] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUM0zJ4pN9ycmipm8TgqtwAAAQQ"]
[Thu Dec 18 06:55:12.298715 2025] [proxy_fcgi:error] [pid 23645:tid 23650] [client 193.19.109.204:57959] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:13.089826 2025] [:error] [pid 23645:tid 23651] [client 193.19.109.204:57959] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUM00Tf_Rx0Y0ao_QJiVDAAAAIQ"]
[Thu Dec 18 06:55:14.213298 2025] [:error] [pid 24433:tid 24451] [client 193.19.109.173:55399] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tiny.php"] [unique_id "aUM00p4pN9ycmipm8Tgq5wAAAQ8"]
[Thu Dec 18 06:55:15.310623 2025] [proxy_fcgi:error] [pid 25357:tid 25369] [client 193.19.109.196:39531] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:15.786498 2025] [proxy_fcgi:error] [pid 25357:tid 25382] [client 193.19.109.196:39531] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:16.203791 2025] [:error] [pid 25357:tid 25364] [client 193.19.109.196:39531] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUM01IaT7bsEXnJVfJdWuQAAAcU"]
[Thu Dec 18 06:55:17.492653 2025] [proxy_fcgi:error] [pid 23645:tid 23668] [client 193.19.109.186:38077] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:17.907628 2025] [proxy_fcgi:error] [pid 23645:tid 23670] [client 193.19.109.186:38077] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:18.665000 2025] [proxy_fcgi:error] [pid 23645:tid 23658] [client 193.19.109.186:38077] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:19.783290 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.186:38077] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUM01zf_Rx0Y0ao_QJiVNAAAAJc"]
[Thu Dec 18 06:55:20.612370 2025] [proxy_fcgi:error] [pid 24433:tid 24454] [client 193.19.109.163:63735] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:21.716301 2025] [:error] [pid 24433:tid 24436] [client 193.19.109.163:63735] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUM02Z4pN9ycmipm8TgrUgAAAQA"]
[Thu Dec 18 06:55:22.839738 2025] [proxy_fcgi:error] [pid 25357:tid 25372] [client 193.19.109.161:24765] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:23.984371 2025] [proxy_fcgi:error] [pid 25357:tid 25361] [client 193.19.109.161:24765] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:24.393618 2025] [proxy_fcgi:error] [pid 25357:tid 25368] [client 193.19.109.161:24765] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:25.189842 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.161:24765] [client 193.19.109.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.161, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUM03YaT7bsEXnJVfJdXGgAAAcA"]
[Thu Dec 18 06:55:27.109838 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.161:24765] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUM034aT7bsEXnJVfJdXNAAAAcM"]
[Thu Dec 18 06:55:27.887473 2025] [proxy_fcgi:error] [pid 23645:tid 23668] [client 193.19.109.183:49919] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:28.267416 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.183:49919] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUM04Df_Rx0Y0ao_QJiVZwAAAII"]
[Thu Dec 18 06:55:29.078636 2025] [proxy_fcgi:error] [pid 24958:tid 24963] [client 193.19.109.163:50065] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:29.826636 2025] [proxy_fcgi:error] [pid 24958:tid 24982] [client 193.19.109.163:50065] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:30.611438 2025] [:error] [pid 24958:tid 24979] [client 193.19.109.163:50065] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUM04skDOrUkd0wNm2EXdQAAAZI"]
[Thu Dec 18 06:55:31.800728 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.193:48297] [client 193.19.109.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-files.php"] [unique_id "aUM04zf_Rx0Y0ao_QJiVgAAAAI0"]
[Thu Dec 18 06:55:32.573615 2025] [proxy_fcgi:error] [pid 24542:tid 24566] [client 193.19.109.206:41027] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:32.983646 2025] [proxy_fcgi:error] [pid 24542:tid 24551] [client 193.19.109.206:41027] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:33.762348 2025] [:error] [pid 24542:tid 24566] [client 193.19.109.206:41027] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUM05UtQz4H2oS3NrDYe6QAAAVY"]
[Thu Dec 18 06:55:37.196430 2025] [:error] [pid 23558:tid 23639] [client 193.19.109.179:48079] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUM06eHam9NbgPQa9uZBUgAAANg"]
[Thu Dec 18 06:55:38.015955 2025] [proxy_fcgi:error] [pid 24958:tid 24981] [client 193.19.109.182:62273] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:38.657631 2025] [proxy_fcgi:error] [pid 24958:tid 24966] [client 193.19.109.182:62273] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:39.472333 2025] [:error] [pid 24958:tid 24963] [client 193.19.109.182:62273] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUM068kDOrUkd0wNm2EXoQAAAYI"]
[Thu Dec 18 06:55:40.173626 2025] [proxy_fcgi:error] [pid 23557:tid 23599] [client 193.19.109.188:57647] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:40.916627 2025] [proxy_fcgi:error] [pid 23557:tid 23588] [client 193.19.109.188:57647] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:41.280901 2025] [:error] [pid 23557:tid 23591] [client 193.19.109.188:57647] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUM07RYcs6rFVxbdP_k-mQAAAEM"]
[Thu Dec 18 06:55:42.413462 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.191:30901] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/db.php"] [unique_id "aUM07uHam9NbgPQa9uZBegAAANc"]
[Thu Dec 18 06:55:44.276753 2025] [:error] [pid 25357:tid 25381] [client 193.19.109.187:64381] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUM08IaT7bsEXnJVfJdX1QAAAdY"]
[Thu Dec 18 06:55:46.169258 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.177:62295] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUM08uHam9NbgPQa9uZBhgAAAMo"]
[Thu Dec 18 06:55:46.986501 2025] [:error] [pid 24542:tid 24564] [client 193.19.109.197:59839] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUM08ktQz4H2oS3NrDYfZAAAAVQ"]
[Thu Dec 18 06:55:47.707468 2025] [:error] [pid 24958:tid 24978] [client 193.19.109.171:61385] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUM088kDOrUkd0wNm2EXwwAAAZE"]
[Thu Dec 18 06:55:48.464307 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.193:56385] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUM09BYcs6rFVxbdP_k-yQAAAFU"]
[Thu Dec 18 06:55:50.001507 2025] [:error] [pid 23557:tid 23605] [client 193.19.109.188:43489] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUM09hYcs6rFVxbdP_k-0gAAAFE"]
[Thu Dec 18 06:55:50.743988 2025] [:error] [pid 23645:tid 23661] [client 193.19.109.189:64969] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUM09jf_Rx0Y0ao_QJiV7QAAAI4"]
[Thu Dec 18 06:55:51.475211 2025] [:error] [pid 24542:tid 24551] [client 193.19.109.176:45519] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUM090tQz4H2oS3NrDYfhQAAAUc"]
[Thu Dec 18 06:55:52.612842 2025] [:error] [pid 24542:tid 24567] [client 193.19.109.181:61577] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUM0-EtQz4H2oS3NrDYfjAAAAVc"]
[Thu Dec 18 06:55:54.284617 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.167:52391] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aUM0-jf_Rx0Y0ao_QJiWFgAAAIg"]
[Thu Dec 18 06:55:55.078632 2025] [proxy_fcgi:error] [pid 24433:tid 24459] [client 193.19.109.177:58619] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:55:58.973333 2025] [:error] [pid 24433:tid 24438] [client 193.19.109.177:58619] [client 193.19.109.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.177, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUM0_p4pN9ycmipm8TgsOwAAAQI"]
[Thu Dec 18 06:56:01.315475 2025] [:error] [pid 24433:tid 24445] [client 193.19.109.177:58619] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUM1AZ4pN9ycmipm8TgsUwAAAQk"]
[Thu Dec 18 06:56:02.064883 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.183:39509] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUM1Ajf_Rx0Y0ao_QJiWUgAAAII"]
[Thu Dec 18 06:56:03.896613 2025] [proxy_fcgi:error] [pid 24958:tid 24978] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:04.274632 2025] [proxy_fcgi:error] [pid 24958:tid 24974] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:05.777530 2025] [proxy_fcgi:error] [pid 24958:tid 24971] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:06.584631 2025] [proxy_fcgi:error] [pid 24958:tid 24977] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:08.090614 2025] [proxy_fcgi:error] [pid 24958:tid 24971] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:08.472606 2025] [proxy_fcgi:error] [pid 24958:tid 24973] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:08.821854 2025] [proxy_fcgi:error] [pid 24958:tid 24967] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:09.219641 2025] [proxy_fcgi:error] [pid 24958:tid 24974] [client 193.19.109.210:30477] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:09.604642 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.210:30477] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUM1CckDOrUkd0wNm2EYRAAAAZU"]
[Thu Dec 18 06:56:10.310734 2025] [:error] [pid 24542:tid 24547] [client 193.19.109.168:56213] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUM1CktQz4H2oS3NrDYf6gAAAUM"]
[Thu Dec 18 06:56:11.060369 2025] [:error] [pid 24433:tid 24457] [client 193.19.109.176:59623] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUM1C54pN9ycmipm8TgstQAAARU"]
[Thu Dec 18 06:56:12.219616 2025] [proxy_fcgi:error] [pid 23556:tid 23574] [client 193.19.109.174:61329] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:12.602678 2025] [proxy_fcgi:error] [pid 23556:tid 23564] [client 193.19.109.174:61329] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:13.384742 2025] [proxy_fcgi:error] [pid 23556:tid 23563] [client 193.19.109.174:61329] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:14.190517 2025] [:error] [pid 23556:tid 23560] [client 193.19.109.174:61329] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUM1DhnmLlk3u5yt9kESygAAAAA"]
[Thu Dec 18 06:56:14.955632 2025] [:error] [pid 23556:tid 23573] [client 193.19.109.208:64417] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUM1DhnmLlk3u5yt9kES0AAAAA0"]
[Thu Dec 18 06:56:15.712752 2025] [:error] [pid 23558:tid 23615] [client 193.19.109.188:28971] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUM1D-Ham9NbgPQa9uZCWQAAAMA"]
[Thu Dec 18 06:56:17.982681 2025] [:error] [pid 24958:tid 24964] [client 193.19.109.196:64491] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUM1EckDOrUkd0wNm2EYggAAAYM"]
[Thu Dec 18 06:56:19.921708 2025] [:error] [pid 23645:tid 23650] [client 193.19.109.173:45843] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUM1Ezf_Rx0Y0ao_QJiWzAAAAIM"]
[Thu Dec 18 06:56:21.407455 2025] [:error] [pid 23557:tid 23611] [client 193.19.109.187:63611] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUM1FRYcs6rFVxbdP_k_pwAAAFc"]
[Thu Dec 18 06:56:29.392187 2025] [:error] [pid 24958:tid 24985] [client 193.19.109.195:35885] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUM1HckDOrUkd0wNm2EY4QAAAZg"]
[Thu Dec 18 06:56:30.169630 2025] [proxy_fcgi:error] [pid 24958:tid 24968] [client 193.19.109.181:40261] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:30.886734 2025] [:error] [pid 24958:tid 24981] [client 193.19.109.181:40261] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUM1HskDOrUkd0wNm2EY8wAAAZQ"]
[Thu Dec 18 06:56:32.498402 2025] [proxy_fcgi:error] [pid 24542:tid 24545] [client 193.19.109.165:39105] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:33.708650 2025] [proxy_fcgi:error] [pid 24542:tid 24565] [client 193.19.109.165:39105] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:34.082269 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.165:39105] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUM1IktQz4H2oS3NrDYglwAAAU0"]
[Thu Dec 18 06:56:35.589354 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.192:26709] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUM1I-Ham9NbgPQa9uZC5wAAAMg"]
[Thu Dec 18 06:56:37.878748 2025] [:error] [pid 25357:tid 25361] [client 193.19.109.169:55173] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUM1JYaT7bsEXnJVfJdZgQAAAcI"]
[Thu Dec 18 06:56:40.489700 2025] [:error] [pid 23556:tid 23577] [client 193.19.109.187:34773] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUM1KBnmLlk3u5yt9kETdAAAABE"]
[Thu Dec 18 06:56:41.582859 2025] [proxy_fcgi:error] [pid 24958:tid 24982] [client 193.19.109.205:60991] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:41.978142 2025] [:error] [pid 24958:tid 24971] [client 193.19.109.205:60991] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUM1KckDOrUkd0wNm2EZiAAAAYo"]
[Thu Dec 18 06:56:42.756718 2025] [:error] [pid 24542:tid 24559] [client 193.19.109.191:61155] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUM1KktQz4H2oS3NrDYg3wAAAU8"]
[Thu Dec 18 06:56:45.406240 2025] [:error] [pid 23645:tid 23657] [client 193.19.109.189:58843] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUM1LTf_Rx0Y0ao_QJiXaAAAAIo"]
[Thu Dec 18 06:56:46.308679 2025] [proxy_fcgi:error] [pid 23556:tid 23582] [client 193.19.109.173:24103] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:47.976636 2025] [proxy_fcgi:error] [pid 23556:tid 23563] [client 193.19.109.173:24103] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:48.318672 2025] [:error] [pid 23556:tid 23579] [client 193.19.109.173:24103] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUM1MBnmLlk3u5yt9kETvgAAABM"]
[Thu Dec 18 06:56:49.831657 2025] [proxy_fcgi:error] [pid 24958:tid 24972] [client 193.19.109.192:53475] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:50.573023 2025] [:error] [pid 24958:tid 24965] [client 193.19.109.192:53475] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUM1MskDOrUkd0wNm2EZ8wAAAYQ"]
[Thu Dec 18 06:56:51.272820 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.191:59305] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUM1M-Ham9NbgPQa9uZDKAAAAMU"]
[Thu Dec 18 06:56:52.874569 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.180:21651] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUM1NOHam9NbgPQa9uZDMwAAANc"]
[Thu Dec 18 06:56:54.771643 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.162:35339] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aUM1NuHam9NbgPQa9uZDRAAAAMM"]
[Thu Dec 18 06:56:55.489222 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.166:34125] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aUM1NxYcs6rFVxbdP_lAjgAAAEY"]
[Thu Dec 18 06:56:56.667619 2025] [proxy_fcgi:error] [pid 25357:tid 25376] [client 193.19.109.163:28867] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:56:59.075198 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.163:28867] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aUM1O4aT7bsEXnJVfJdaNQAAAc0"]
[Thu Dec 18 06:57:00.572663 2025] [:error] [pid 25357:tid 25376] [client 193.19.109.208:20917] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aUM1PIaT7bsEXnJVfJdaQAAAAdE"]
[Thu Dec 18 06:57:01.308358 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.170:35057] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aUM1PeHam9NbgPQa9uZDZwAAANI"]
[Thu Dec 18 06:57:02.623066 2025] [proxy_fcgi:error] [pid 24433:tid 24442] [client 193.19.109.207:57757] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:03.088348 2025] [:error] [pid 24433:tid 24458] [client 193.19.109.207:57757] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aUM1P54pN9ycmipm8TguHAAAARY"]
[Thu Dec 18 06:57:04.316797 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.178:55181] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aUM1QIaT7bsEXnJVfJdaTwAAAcE"]
[Thu Dec 18 06:57:07.088594 2025] [:error] [pid 23557:tid 23603] [client 193.19.109.176:28233] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aUM1QxYcs6rFVxbdP_lA1gAAAE8"]
[Thu Dec 18 06:57:08.233637 2025] [proxy_fcgi:error] [pid 24958:tid 24983] [client 193.19.109.207:41685] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:08.586279 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.207:41685] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aUM1RMkDOrUkd0wNm2EbAAAAAYc"]
[Thu Dec 18 06:57:10.067773 2025] [:error] [pid 24542:tid 24556] [client 193.19.109.199:31385] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aUM1RktQz4H2oS3NrDYhaAAAAUw"]
[Thu Dec 18 06:57:11.120399 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.191:44885] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/as.php"] [unique_id "aUM1R54pN9ycmipm8TguPAAAARI"]
[Thu Dec 18 06:57:12.400427 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.180:44591] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aUM1SMkDOrUkd0wNm2EbOwAAAYc"]
[Thu Dec 18 06:57:13.252469 2025] [:error] [pid 24542:tid 24556] [client 193.19.109.180:48249] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/install.php"] [unique_id "aUM1SUtQz4H2oS3NrDYhfgAAAUw"]
[Thu Dec 18 06:57:14.068619 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.200:64471] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aUM1ShYcs6rFVxbdP_lBBgAAAEY"]
[Thu Dec 18 06:57:17.301605 2025] [:error] [pid 23558:tid 23634] [client 193.19.109.188:41861] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUM1TeHam9NbgPQa9uZD1AAAANM"]
[Thu Dec 18 06:57:19.205752 2025] [:error] [pid 23645:tid 23648] [client 193.19.109.204:42359] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aUM1Tzf_Rx0Y0ao_QJiYLAAAAIE"]
[Thu Dec 18 06:57:20.804635 2025] [proxy_fcgi:error] [pid 24542:tid 24550] [client 193.19.109.161:47047] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:21.211420 2025] [:error] [pid 24542:tid 24560] [client 193.19.109.161:47047] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aUM1UUtQz4H2oS3NrDYh4AAAAVA"]
[Thu Dec 18 06:57:24.278934 2025] [:error] [pid 23556:tid 23563] [client 193.19.109.171:39409] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aUM1VBnmLlk3u5yt9kEVAAAAAAM"]
[Thu Dec 18 06:57:25.064337 2025] [proxy_fcgi:error] [pid 24433:tid 24442] [client 193.19.109.205:51675] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:27.370505 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.205:51675] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aUM1V54pN9ycmipm8TgueAAAAQQ"]
[Thu Dec 18 06:57:28.500470 2025] [:error] [pid 23558:tid 23634] [client 193.19.109.191:55711] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aUM1WOHam9NbgPQa9uZD_QAAANM"]
[Thu Dec 18 06:57:29.610879 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.201:59885] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aUM1WckDOrUkd0wNm2Eb2QAAAZU"]
[Thu Dec 18 06:57:31.204628 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.208:20249] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUM1WxnmLlk3u5yt9kEVLAAAAAY"]
[Thu Dec 18 06:57:35.107033 2025] [:error] [pid 23645:tid 23661] [client 193.19.109.173:29483] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aUM1Xzf_Rx0Y0ao_QJiYigAAAI4"]
[Thu Dec 18 06:57:35.874597 2025] [:error] [pid 24542:tid 24550] [client 193.19.109.165:59623] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aUM1X0tQz4H2oS3NrDYiUQAAAUY"]
[Thu Dec 18 06:57:37.811761 2025] [:error] [pid 24433:tid 24458] [client 193.19.109.181:61709] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aUM1YZ4pN9ycmipm8TguuQAAARY"]
[Thu Dec 18 06:57:39.581085 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.191:54569] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUM1Y4aT7bsEXnJVfJdbMQAAAdA"]
[Thu Dec 18 06:57:41.115300 2025] [:error] [pid 25357:tid 25378] [client 193.19.109.172:33483] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aUM1ZYaT7bsEXnJVfJdbQQAAAdM"]
[Thu Dec 18 06:57:41.857267 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.198:37733] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aUM1ZYaT7bsEXnJVfJdbSQAAAdQ"]
[Thu Dec 18 06:57:42.568715 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.188:38135] [client 193.19.109.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.188, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUM1ZuHam9NbgPQa9uZEgwAAAMI"]
[Thu Dec 18 06:57:42.577425 2025] [proxy_fcgi:error] [pid 23558:tid 23617] [client 193.19.109.188:38135] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:42.961674 2025] [:error] [pid 23558:tid 23634] [client 193.19.109.188:38135] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aUM1ZuHam9NbgPQa9uZEhQAAANM"]
[Thu Dec 18 06:57:44.524629 2025] [proxy_fcgi:error] [pid 23557:tid 23596] [client 193.19.109.192:39897] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:44.900624 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.192:39897] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUM1aBYcs6rFVxbdP_lCCAAAAE4"]
[Thu Dec 18 06:57:45.792857 2025] [:error] [pid 23556:tid 23578] [client 193.19.109.174:39799] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/network.php"] [unique_id "aUM1aRnmLlk3u5yt9kEV0QAAABI"]
[Thu Dec 18 06:57:46.577435 2025] [proxy_fcgi:error] [pid 24433:tid 24437] [client 193.19.109.186:53893] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:49.363960 2025] [:error] [pid 24433:tid 24447] [client 193.19.109.186:53893] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aUM1bZ4pN9ycmipm8TgvGgAAAQs"]
[Thu Dec 18 06:57:50.156791 2025] [:error] [pid 23556:tid 23579] [client 193.19.109.209:38269] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aUM1bhnmLlk3u5yt9kEV9wAAABM"]
[Thu Dec 18 06:57:52.810635 2025] [:error] [pid 23557:tid 23590] [client 193.19.109.188:39755] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aUM1cBYcs6rFVxbdP_lCWgAAAEI"]
[Thu Dec 18 06:57:53.570822 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.162:29645] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aUM1cZ4pN9ycmipm8TgvSwAAAQg"]
[Thu Dec 18 06:57:54.476632 2025] [proxy_fcgi:error] [pid 23556:tid 23580] [client 193.19.109.182:50433] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:54.866840 2025] [:error] [pid 23556:tid 23572] [client 193.19.109.182:50433] [client 193.19.109.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.182, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUM1chnmLlk3u5yt9kEWDgAAAAw"]
[Thu Dec 18 06:57:55.609806 2025] [:error] [pid 23556:tid 23561] [client 193.19.109.182:50433] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aUM1cxnmLlk3u5yt9kEWGQAAAAE"]
[Thu Dec 18 06:57:57.978183 2025] [:error] [pid 23557:tid 23598] [client 193.19.109.162:57721] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aUM1dRYcs6rFVxbdP_lChgAAAEo"]
[Thu Dec 18 06:57:58.669006 2025] [proxy_fcgi:error] [pid 23558:tid 23629] [client 193.19.109.197:35927] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:57:59.094168 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.197:35927] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aUM1d-Ham9NbgPQa9uZE4wAAAMc"]
[Thu Dec 18 06:58:00.015089 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.208:44503] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aUM1d0tQz4H2oS3NrDYjZQAAAU0"]
[Thu Dec 18 06:58:00.804259 2025] [proxy_fcgi:error] [pid 23557:tid 23589] [client 193.19.109.171:29339] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:02.481484 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.171:29339] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aUM1ehYcs6rFVxbdP_lCmQAAAE4"]
[Thu Dec 18 06:58:04.109449 2025] [:error] [pid 25357:tid 25376] [client 193.19.109.184:54365] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUM1fIaT7bsEXnJVfJdbrwAAAdE"]
[Thu Dec 18 06:58:04.881635 2025] [proxy_fcgi:error] [pid 23558:tid 23629] [client 193.19.109.205:54093] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:05.685633 2025] [proxy_fcgi:error] [pid 23558:tid 23637] [client 193.19.109.205:54093] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:06.466804 2025] [:error] [pid 23558:tid 23627] [client 193.19.109.205:54093] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aUM1fuHam9NbgPQa9uZFMgAAAMw"]
[Thu Dec 18 06:58:07.170836 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.181:42801] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aUM1f54pN9ycmipm8TgvugAAARI"]
[Thu Dec 18 06:58:08.320778 2025] [:error] [pid 23645:tid 23664] [client 193.19.109.171:37297] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/count.php"] [unique_id "aUM1gDf_Rx0Y0ao_QJiZJgAAAJE"]
[Thu Dec 18 06:58:09.080636 2025] [proxy_fcgi:error] [pid 23645:tid 23669] [client 193.19.109.166:65353] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:11.499787 2025] [:error] [pid 23645:tid 23656] [client 193.19.109.166:65353] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUM1gzf_Rx0Y0ao_QJiZPAAAAIk"]
[Thu Dec 18 06:58:14.017217 2025] [:error] [pid 23558:tid 23636] [client 193.19.109.185:26155] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "cientifica.com.au"] [uri "/images/stories/themes.php"] [unique_id "aUM1huHam9NbgPQa9uZFbgAAANU"]
[Thu Dec 18 06:58:14.463743 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.185:26155] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aUM1huHam9NbgPQa9uZFcAAAAMc"]
[Thu Dec 18 06:58:16.017763 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.175:45871] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aUM1iMkDOrUkd0wNm2EdNwAAAYY"]
[Thu Dec 18 06:58:16.771117 2025] [:error] [pid 25357:tid 25374] [client 193.37.33.229:52223] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aUM1iIaT7bsEXnJVfJdb3QAAAc8"]
[Thu Dec 18 06:58:18.239642 2025] [proxy_fcgi:error] [pid 23557:tid 23604] [client 193.19.109.164:63853] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:19.815439 2025] [:error] [pid 23557:tid 23611] [client 193.19.109.164:63853] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aUM1ixYcs6rFVxbdP_lDIQAAAFc"]
[Thu Dec 18 06:58:21.322679 2025] [:error] [pid 23557:tid 23597] [client 193.19.109.179:56071] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aUM1jRYcs6rFVxbdP_lDLQAAAEk"]
[Thu Dec 18 06:58:22.473752 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.175:22699] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aUM1joaT7bsEXnJVfJdb_QAAAcc"]
[Thu Dec 18 06:58:23.179609 2025] [proxy_fcgi:error] [pid 25357:tid 25381] [client 193.19.109.197:59055] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:25.091176 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.197:59055] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aUM1kYaT7bsEXnJVfJdcBgAAAcg"]
[Thu Dec 18 06:58:26.182169 2025] [:error] [pid 24542:tid 24566] [client 193.19.109.183:44901] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aUM1kktQz4H2oS3NrDYkRAAAAVY"]
[Thu Dec 18 06:58:26.892244 2025] [proxy_fcgi:error] [pid 25357:tid 25359] [client 193.19.109.186:21745] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:27.297923 2025] [:error] [pid 25357:tid 25368] [client 193.19.109.186:21745] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aUM1k4aT7bsEXnJVfJdcDwAAAck"]
[Thu Dec 18 06:58:28.143303 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.179:25081] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aUM1lMkDOrUkd0wNm2EdegAAAYY"]
[Thu Dec 18 06:58:30.010457 2025] [:error] [pid 23645:tid 23658] [client 193.19.109.182:43601] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aUM1ljf_Rx0Y0ao_QJiZpgAAAIs"]
[Thu Dec 18 06:58:31.891658 2025] [proxy_fcgi:error] [pid 25357:tid 25380] [client 193.19.109.189:63149] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:32.281850 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.189:63149] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aUM1mIaT7bsEXnJVfJdcJAAAAc0"]
[Thu Dec 18 06:58:33.163411 2025] [:error] [pid 23557:tid 23610] [client 193.19.109.195:25395] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aUM1mRYcs6rFVxbdP_lDbgAAAFY"]
[Thu Dec 18 06:58:36.074146 2025] [:error] [pid 23556:tid 23568] [client 193.19.109.176:40807] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aUM1nBnmLlk3u5yt9kEW0gAAAAg"]
[Thu Dec 18 06:58:37.979745 2025] [:error] [pid 24958:tid 24965] [client 193.19.109.170:52585] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aUM1nckDOrUkd0wNm2EdrgAAAYQ"]
[Thu Dec 18 06:58:38.698954 2025] [proxy_fcgi:error] [pid 23645:tid 23647] [client 193.19.109.179:58041] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:39.805460 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.179:58041] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aUM1nzf_Rx0Y0ao_QJiZ2wAAAJI"]
[Thu Dec 18 06:58:40.561689 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.166:39771] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aUM1oDf_Rx0Y0ao_QJiZ6AAAAJI"]
[Thu Dec 18 06:58:43.829621 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.194:44089] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aUM1oxYcs6rFVxbdP_lDnAAAAFI"]
[Thu Dec 18 06:58:44.656939 2025] [proxy_fcgi:error] [pid 23645:tid 23657] [client 193.37.33.229:37321] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:45.377815 2025] [:error] [pid 23645:tid 23649] [client 193.37.33.229:37321] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aUM1pTf_Rx0Y0ao_QJiaAQAAAII"]
[Thu Dec 18 06:58:46.117684 2025] [proxy_fcgi:error] [pid 24542:tid 24561] [client 193.19.109.204:27489] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:58:46.867209 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.204:27489] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aUM1pktQz4H2oS3NrDYkwgAAAUk"]
[Thu Dec 18 06:58:47.667799 2025] [:error] [pid 24433:tid 24457] [client 193.19.109.208:52317] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aUM1p54pN9ycmipm8TgwuwAAARU"]
[Thu Dec 18 06:58:48.764246 2025] [:error] [pid 23558:tid 23631] [client 193.19.109.162:31599] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUM1qOHam9NbgPQa9uZF8AAAANA"]
[Thu Dec 18 06:58:49.547639 2025] [:error] [pid 24433:tid 24443] [client 193.37.33.230:61241] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aUM1qZ4pN9ycmipm8TgwxgAAAQc"]
[Thu Dec 18 06:58:51.023602 2025] [:error] [pid 24958:tid 24963] [client 193.19.109.184:21533] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aUM1q8kDOrUkd0wNm2Ed7wAAAYI"]
[Thu Dec 18 06:58:52.179850 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.161:60133] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aUM1rJ4pN9ycmipm8TgwzQAAARI"]
[Thu Dec 18 06:58:52.874465 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.198:52963] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aUM1rIaT7bsEXnJVfJdc8QAAAcE"]
[Thu Dec 18 06:58:53.662744 2025] [:error] [pid 24433:tid 24456] [client 193.19.109.177:39991] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aUM1rZ4pN9ycmipm8TgwzwAAARQ"]
[Thu Dec 18 06:58:55.430690 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.175:46015] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aUM1r8kDOrUkd0wNm2EeFwAAAZA"]
[Thu Dec 18 06:58:56.901679 2025] [:error] [pid 25357:tid 25378] [client 193.19.109.163:64087] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aUM1sIaT7bsEXnJVfJddCQAAAdM"]
[Thu Dec 18 06:58:58.010983 2025] [:error] [pid 23645:tid 23656] [client 193.19.109.193:28395] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aUM1sjf_Rx0Y0ao_QJiaRAAAAIk"]
[Thu Dec 18 06:58:59.168468 2025] [:error] [pid 23556:tid 23573] [client 193.19.109.189:60597] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUM1sxnmLlk3u5yt9kEXGAAAAA0"]
[Thu Dec 18 06:59:00.846975 2025] [proxy_fcgi:error] [pid 24958:tid 24970] [client 193.19.109.171:54751] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:02.465941 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.171:54751] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aUM1tskDOrUkd0wNm2EeOwAAAYY"]
[Thu Dec 18 06:59:04.169109 2025] [:error] [pid 24433:tid 24446] [client 193.19.109.172:32091] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aUM1uJ4pN9ycmipm8Tgw8gAAAQo"]
[Thu Dec 18 06:59:05.222806 2025] [proxy_fcgi:error] [pid 24958:tid 24973] [client 193.19.109.187:46599] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:06.658644 2025] [:error] [pid 24958:tid 24969] [client 193.19.109.187:46599] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aUM1uskDOrUkd0wNm2EeUAAAAYg"]
[Thu Dec 18 06:59:09.696614 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.206:57705] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aUM1vYaT7bsEXnJVfJddbQAAAcA"]
[Thu Dec 18 06:59:10.898874 2025] [proxy_fcgi:error] [pid 23558:tid 23618] [client 193.19.109.199:45227] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:11.283744 2025] [:error] [pid 23558:tid 23632] [client 193.19.109.199:45227] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aUM1v-Ham9NbgPQa9uZGNwAAANE"]
[Thu Dec 18 06:59:12.784685 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.179:35925] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aUM1wOHam9NbgPQa9uZGPwAAANc"]
[Thu Dec 18 06:59:13.519662 2025] [proxy_fcgi:error] [pid 24958:tid 24966] [client 193.19.109.178:24499] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:13.884741 2025] [:error] [pid 24958:tid 24981] [client 193.19.109.178:24499] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aUM1wckDOrUkd0wNm2EegwAAAZQ"]
[Thu Dec 18 06:59:15.010736 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.191:26225] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aUM1wxYcs6rFVxbdP_lERAAAAFI"]
[Thu Dec 18 06:59:16.932657 2025] [proxy_fcgi:error] [pid 25357:tid 25363] [client 193.19.109.201:59263] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:17.301850 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.201:59263] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUM1xYaT7bsEXnJVfJddnAAAAco"]
[Thu Dec 18 06:59:19.196032 2025] [:error] [pid 23557:tid 23598] [client 193.19.109.192:63839] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aUM1xxYcs6rFVxbdP_lEXAAAAEo"]
[Thu Dec 18 06:59:19.953627 2025] [proxy_fcgi:error] [pid 24542:tid 24552] [client 193.19.109.182:36839] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:20.371425 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.182:36839] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aUM1yEtQz4H2oS3NrDYlqQAAAUk"]
[Thu Dec 18 06:59:21.366487 2025] [:error] [pid 25357:tid 25361] [client 193.19.109.207:54263] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aUM1yYaT7bsEXnJVfJddsgAAAcI"]
[Thu Dec 18 06:59:22.291051 2025] [proxy_fcgi:error] [pid 24958:tid 24974] [client 193.19.109.193:57791] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:23.075183 2025] [:error] [pid 24958:tid 24981] [client 193.19.109.193:57791] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aUM1y8kDOrUkd0wNm2EexAAAAZQ"]
[Thu Dec 18 06:59:23.799581 2025] [:error] [pid 23645:tid 23653] [client 193.19.109.202:41893] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aUM1yzf_Rx0Y0ao_QJia0gAAAIY"]
[Thu Dec 18 06:59:26.976923 2025] [:error] [pid 24433:tid 24456] [client 193.19.109.210:30297] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aUM1zp4pN9ycmipm8TgxSwAAARQ"]
[Thu Dec 18 06:59:27.758366 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.186:23217] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aUM1z0tQz4H2oS3NrDYl4QAAAUQ"]
[Thu Dec 18 06:59:28.869829 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.194:29453] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/log.php"] [unique_id "aUM10IaT7bsEXnJVfJdd3AAAAcc"]
[Thu Dec 18 06:59:29.559680 2025] [:error] [pid 24433:tid 24452] [client 193.19.109.168:35639] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aUM10Z4pN9ycmipm8TgxWAAAARA"]
[Thu Dec 18 06:59:30.354138 2025] [:error] [pid 24542:tid 24564] [client 193.19.109.207:49947] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aUM10ktQz4H2oS3NrDYl_wAAAVQ"]
[Thu Dec 18 06:59:31.110017 2025] [:error] [pid 23645:tid 23656] [client 193.19.109.203:50193] [client 193.19.109.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aUM10zf_Rx0Y0ao_QJibAQAAAIk"]
[Thu Dec 18 06:59:34.663849 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.186:54919] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aUM11oaT7bsEXnJVfJdeCwAAAdQ"]
[Thu Dec 18 06:59:35.404627 2025] [:error] [pid 23557:tid 23605] [client 193.19.109.172:28113] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aUM11xYcs6rFVxbdP_lEoQAAAFE"]
[Thu Dec 18 06:59:36.670053 2025] [proxy_fcgi:error] [pid 24958:tid 24979] [client 193.19.109.184:41255] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:37.012654 2025] [:error] [pid 24958:tid 24972] [client 193.19.109.184:41255] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aUM12ckDOrUkd0wNm2EfDQAAAYs"]
[Thu Dec 18 06:59:39.079897 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.203:20373] [client 193.19.109.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aUM128kDOrUkd0wNm2EfDwAAAYU"]
[Thu Dec 18 06:59:40.678760 2025] [:error] [pid 24542:tid 24551] [client 193.19.109.200:50903] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aUM13EtQz4H2oS3NrDYmogAAAUc"]
[Thu Dec 18 06:59:41.472181 2025] [:error] [pid 23557:tid 23595] [client 193.19.109.193:60781] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aUM13RYcs6rFVxbdP_lEwgAAAEc"]
[Thu Dec 18 06:59:44.885740 2025] [:error] [pid 24958:tid 24985] [client 193.37.33.229:34037] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aUM14MkDOrUkd0wNm2EfJgAAAZg"]
[Thu Dec 18 06:59:45.645467 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.180:21205] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aUM14UtQz4H2oS3NrDYmzwAAAUk"]
[Thu Dec 18 06:59:47.283067 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.194:29661] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/file.php"] [unique_id "aUM14xnmLlk3u5yt9kEYHwAAAAo"]
[Thu Dec 18 06:59:48.409044 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.205:22999] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUM15IaT7bsEXnJVfJdenAAAAcg"]
[Thu Dec 18 06:59:49.607805 2025] [:error] [pid 24542:tid 24552] [client 193.19.109.175:25683] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/load.php"] [unique_id "aUM15UtQz4H2oS3NrDYm5AAAAUg"]
[Thu Dec 18 06:59:50.378850 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.175:52309] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aUM15uHam9NbgPQa9uZGvwAAAMU"]
[Thu Dec 18 06:59:51.073223 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.169:34879] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aUM150tQz4H2oS3NrDYm7QAAAUQ"]
[Thu Dec 18 06:59:52.916340 2025] [:error] [pid 23556:tid 23583] [client 193.19.109.187:65469] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aUM16BnmLlk3u5yt9kEYcAAAABc"]
[Thu Dec 18 06:59:54.671303 2025] [proxy_fcgi:error] [pid 25357:tid 25382] [client 193.19.109.168:41895] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:55.064891 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.168:41895] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aUM164aT7bsEXnJVfJde0wAAAcg"]
[Thu Dec 18 06:59:56.517629 2025] [proxy_fcgi:error] [pid 23557:tid 23599] [client 193.19.109.187:61545] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:59:56.896040 2025] [:error] [pid 23557:tid 23592] [client 193.19.109.187:61545] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aUM17BYcs6rFVxbdP_lFIwAAAEQ"]
[Thu Dec 18 06:59:57.656371 2025] [:error] [pid 23558:tid 23619] [client 193.19.109.171:45393] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aUM17eHam9NbgPQa9uZG2AAAAMQ"]
[Thu Dec 18 06:59:58.779224 2025] [:error] [pid 24433:tid 24437] [client 193.19.109.205:39449] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aUM17p4pN9ycmipm8Tgx6wAAAQE"]
[Thu Dec 18 07:00:01.385684 2025] [proxy_fcgi:error] [pid 24958:tid 24978] [client 193.19.109.166:46965] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 07:00:03.068919 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.166:46965] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aUM188kDOrUkd0wNm2EfhQAAAYU"]
[Thu Dec 18 07:00:04.208810 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.197:44817] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aUM19BYcs6rFVxbdP_lFQwAAAE4"]
[Thu Dec 18 07:00:05.707843 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.203:51735] [client 193.19.109.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aUM19ckDOrUkd0wNm2EflQAAAYU"]
[Thu Dec 18 07:00:06.451949 2025] [:error] [pid 24433:tid 24447] [client 193.19.109.168:47657] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aUM19p4pN9ycmipm8TgyEgAAAQs"]
[Thu Dec 18 07:00:07.175746 2025] [:error] [pid 24542:tid 24560] [client 193.19.109.191:31047] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aUM190tQz4H2oS3NrDYnKgAAAVA"]
[Thu Dec 18 08:58:45.148408 2025] [:error] [pid 24433:tid 24458] [client 43.131.253.14:44694] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUNRxZ4pN9ycmipm8ThNtgAAARY"]
[Thu Dec 18 10:21:25.548762 2025] [autoindex:error] [pid 24542:tid 24547] [client 194.26.192.97:53211] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 10:27:22.248477 2025] [autoindex:error] [pid 12239:tid 12264] [client 138.197.114.244:34786] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 10:27:23.940445 2025] [autoindex:error] [pid 25357:tid 25371] [client 138.197.114.244:43820] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 11:35:59.808232 2025] [autoindex:error] [pid 24542:tid 24563] [client 37.27.59.176:50814] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 12:08:34.594050 2025] [autoindex:error] [pid 24958:tid 24966] [client 159.203.43.122:57702] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 12:08:35.949505 2025] [autoindex:error] [pid 23556:tid 23562] [client 159.203.43.122:43154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 12:29:14.334837 2025] [:error] [pid 25357:tid 25383] [client 182.40.104.255:60736] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUODGoaT7bsEXnJVfJfYRgAAAdg"]
[Thu Dec 18 12:50:39.472583 2025] [autoindex:error] [pid 23556:tid 23581] [client 93.158.90.15:53699] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 16:36:54.768502 2025] [:error] [pid 12035:tid 12060] [client 43.157.46.118:46256] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUO9JrcVHrNSHjCo-0pm_QAAAhE"]
[Thu Dec 18 17:58:34.291978 2025] [autoindex:error] [pid 12239:tid 12245] [client 192.71.23.211:38639] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 19:50:58.588508 2025] [:error] [pid 24542:tid 24559] [client 45.222.213.2:50602] [client 45.222.213.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.222.213.2, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUPqoktQz4H2oS3NrDb-AwAAAU8"]
[Thu Dec 18 19:50:58.599884 2025] [proxy_fcgi:error] [pid 24542:tid 24559] [client 45.222.213.2:50602] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 20:15:59.852663 2025] [autoindex:error] [pid 24542:tid 24553] [client 18.198.24.176:48212] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 22:21:42.185392 2025] [autoindex:error] [pid 23558:tid 23630] [client 100.24.208.151:51672] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 22:21:42.627704 2025] [autoindex:error] [pid 25357:tid 25374] [client 100.24.208.151:46252] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 23:47:40.193752 2025] [autoindex:error] [pid 24433:tid 24441] [client 89.149.193.149:42372] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 00:41:59.452392 2025] [:error] [pid 45825:tid 45838] [client 43.155.27.244:59458] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUQu19ES1ifyzuzFwz8K3QAAAEs"]
[Fri Dec 19 00:46:45.233068 2025] [:error] [pid 45825:tid 45840] [client 216.24.210.230:21653] [client 216.24.210.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.230, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUQv9dES1ifyzuzFwz8M3AAAAE0"]
[Fri Dec 19 00:46:45.246274 2025] [proxy_fcgi:error] [pid 45825:tid 45840] [client 216.24.210.230:21653] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 02:34:09.881188 2025] [:error] [pid 65011:tid 65060] [client 43.135.172.89:46388] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aURJIdqlBhOfWMNHM-7WqQAAAU8"]
[Fri Dec 19 02:58:41.788713 2025] [autoindex:error] [pid 37418:tid 37433] [client 3.120.32.73:48522] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 03:00:19.771978 2025] [autoindex:error] [pid 45825:tid 45839] [client 93.158.91.19:34339] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:14:02.216289 2025] [proxy_fcgi:error] [pid 61922:tid 61965] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:02.442999 2025] [proxy_fcgi:error] [pid 61922:tid 61979] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:02.534338 2025] [proxy_fcgi:error] [pid 61922:tid 61960] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:02.763368 2025] [proxy_fcgi:error] [pid 61922:tid 61963] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:02.886491 2025] [proxy_fcgi:error] [pid 61922:tid 61967] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:03.121834 2025] [proxy_fcgi:error] [pid 61922:tid 61958] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:03.213315 2025] [proxy_fcgi:error] [pid 61922:tid 61964] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:03.308364 2025] [proxy_fcgi:error] [pid 61922:tid 61953] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:03.401595 2025] [proxy_fcgi:error] [pid 61922:tid 61955] [client 4.194.35.48:43575] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:14:03.598759 2025] [:error] [pid 61922:tid 61954] [client 4.194.35.48:43575] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon.php"] [unique_id "aURgixsDXYvsvN0FFlAdJAAAAEI"]
[Fri Dec 19 04:14:06.920049 2025] [:error] [pid 62008:tid 62027] [client 4.194.35.48:48856] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon.php"] [unique_id "aURgjpJCOG7NAlbm_ORCDAAAANA"]
[Fri Dec 19 04:14:13.803768 2025] [:error] [pid 61921:tid 61936] [client 4.194.35.48:50303] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon.php"] [unique_id "aURglSI5bruBgrPWiCCr9wAAAAs"]
[Fri Dec 19 04:14:15.120320 2025] [:error] [pid 61922:tid 61958] [client 4.194.35.48:11623] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon.php"] [unique_id "aURglxsDXYvsvN0FFlAdJgAAAEY"]
[Fri Dec 19 04:14:18.821593 2025] [:error] [pid 62008:tid 62030] [client 4.194.35.48:50272] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aURgmpJCOG7NAlbm_ORCLAAAANM"]
[Fri Dec 19 04:14:20.222972 2025] [:error] [pid 61921:tid 61949] [client 4.194.35.48:51571] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aURgnCI5bruBgrPWiCCr-QAAABg"]
[Fri Dec 19 04:14:23.258200 2025] [:error] [pid 62008:tid 62034] [client 4.194.35.48:42657] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aURgn5JCOG7NAlbm_ORCLwAAANc"]
[Fri Dec 19 04:14:24.852727 2025] [:error] [pid 64979:tid 65005] [client 4.194.35.48:50282] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aURgoMTf9GnU9RkPzitu-AAAARg"]
[Fri Dec 19 04:14:25.690347 2025] [:error] [pid 64979:tid 65003] [client 4.194.35.48:50253] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aURgocTf9GnU9RkPzitu_AAAARY"]
[Fri Dec 19 04:14:26.637491 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:50865] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aURgosTf9GnU9RkPzitvAAAAAQg"]
[Fri Dec 19 04:14:28.143064 2025] [:error] [pid 62008:tid 62024] [client 4.194.35.48:51570] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aURgpJJCOG7NAlbm_ORCNQAAAM0"]
[Fri Dec 19 04:14:30.038036 2025] [:error] [pid 62008:tid 62017] [client 4.194.35.48:49244] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aURgppJCOG7NAlbm_ORCOgAAAMY"]
[Fri Dec 19 04:14:34.790011 2025] [:error] [pid 61923:tid 61977] [client 4.194.35.48:49258] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aURgquIJyAkgoURyh1i_tAAAAIE"]
[Fri Dec 19 04:14:48.140880 2025] [:error] [pid 61923:tid 61984] [client 4.194.35.48:49614] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aURguOIJyAkgoURyh1i_zgAAAIU"]
[Fri Dec 19 04:14:51.835058 2025] [:error] [pid 64979:tid 64988] [client 4.194.35.48:49661] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aURgu8Tf9GnU9RkPzitvIgAAAQc"]
[Fri Dec 19 04:14:52.853047 2025] [:error] [pid 62008:tid 62017] [client 4.194.35.48:12037] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aURgvJJCOG7NAlbm_ORCVwAAAMY"]
[Fri Dec 19 04:14:54.960530 2025] [:error] [pid 61923:tid 61976] [client 4.194.35.48:42628] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aURgvuIJyAkgoURyh1i_0gAAAIA"]
[Fri Dec 19 04:14:56.139407 2025] [:error] [pid 64979:tid 64981] [client 4.194.35.48:12074] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aURgwMTf9GnU9RkPzitvJQAAAQA"]
[Fri Dec 19 04:14:57.094966 2025] [:error] [pid 61923:tid 61995] [client 4.194.35.48:46544] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aURgweIJyAkgoURyh1i_1AAAAJA"]
[Fri Dec 19 04:15:00.563473 2025] [:error] [pid 62008:tid 62025] [client 4.194.35.48:49663] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aURgxJJCOG7NAlbm_ORCWQAAAM4"]
[Fri Dec 19 04:15:03.893801 2025] [proxy_fcgi:error] [pid 64979:tid 64997] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:03.985852 2025] [proxy_fcgi:error] [pid 64979:tid 65000] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:04.133696 2025] [proxy_fcgi:error] [pid 64979:tid 64983] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:04.230769 2025] [proxy_fcgi:error] [pid 64979:tid 64989] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:04.360935 2025] [proxy_fcgi:error] [pid 64979:tid 64996] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:04.598085 2025] [proxy_fcgi:error] [pid 64979:tid 64988] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:04.703676 2025] [proxy_fcgi:error] [pid 64979:tid 64985] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:05.253679 2025] [proxy_fcgi:error] [pid 64979:tid 64990] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:05.346868 2025] [proxy_fcgi:error] [pid 64979:tid 64987] [client 4.194.35.48:49530] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:05.460003 2025] [:error] [pid 64979:tid 64991] [client 4.194.35.48:49530] [client 4.194.35.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aURgycTf9GnU9RkPzitvNAAAAQo"]
[Fri Dec 19 04:15:08.664710 2025] [proxy_fcgi:error] [pid 64979:tid 64997] [client 4.194.35.48:12091] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:15:09.544116 2025] [:error] [pid 64979:tid 64985] [client 4.194.35.48:12091] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ton.php"] [unique_id "aURgzcTf9GnU9RkPzitvPgAAAQQ"]
[Fri Dec 19 04:15:11.582240 2025] [:error] [pid 62008:tid 62019] [client 4.194.35.48:12068] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ton.php"] [unique_id "aURgz5JCOG7NAlbm_ORCZQAAAMg"]
[Fri Dec 19 04:15:16.463843 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:12092] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ton.php"] [unique_id "aURg1MTf9GnU9RkPzitvQwAAAQU"]
[Fri Dec 19 04:15:19.128245 2025] [:error] [pid 62008:tid 62032] [client 4.194.35.48:53027] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ton.php"] [unique_id "aURg15JCOG7NAlbm_ORCbwAAANU"]
[Fri Dec 19 04:15:21.318003 2025] [:error] [pid 61921:tid 61947] [client 4.194.35.48:52867] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/555.php"] [unique_id "aURg2SI5bruBgrPWiCCsIQAAABY"]
[Fri Dec 19 04:15:23.778138 2025] [:error] [pid 61923:tid 61986] [client 4.194.35.48:12015] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/555.php"] [unique_id "aURg2-IJyAkgoURyh1i_6AAAAIc"]
[Fri Dec 19 04:15:25.601667 2025] [:error] [pid 64979:tid 64988] [client 4.194.35.48:12013] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/555.php"] [unique_id "aURg3cTf9GnU9RkPzitvUwAAAQc"]
[Fri Dec 19 04:15:28.319782 2025] [:error] [pid 61921:tid 61946] [client 4.194.35.48:46930] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/555.php"] [unique_id "aURg4CI5bruBgrPWiCCsLQAAABU"]
[Fri Dec 19 04:15:39.387832 2025] [:error] [pid 62008:tid 62024] [client 4.194.35.48:52864] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/AxAo.php"] [unique_id "aURg65JCOG7NAlbm_ORCfwAAAM0"]
[Fri Dec 19 04:15:47.136488 2025] [:error] [pid 61921:tid 61943] [client 4.194.35.48:11990] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aURg8yI5bruBgrPWiCCsOwAAABI"]
[Fri Dec 19 04:15:48.101695 2025] [:error] [pid 61923:tid 62001] [client 4.194.35.48:52836] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aURg9OIJyAkgoURyh1i_9gAAAJY"]
[Fri Dec 19 04:15:50.534231 2025] [:error] [pid 61921:tid 61932] [client 4.194.35.48:52821] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aURg9iI5bruBgrPWiCCsQwAAAAc"]
[Fri Dec 19 04:15:52.152388 2025] [:error] [pid 61923:tid 61991] [client 4.194.35.48:48251] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aURg-OIJyAkgoURyh1i_-wAAAIw"]
[Fri Dec 19 04:15:53.211889 2025] [:error] [pid 64979:tid 64996] [client 4.194.35.48:46870] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/db.php"] [unique_id "aURg-cTf9GnU9RkPzitvYAAAAQ8"]
[Fri Dec 19 04:15:54.670937 2025] [:error] [pid 64979:tid 64999] [client 4.194.35.48:47419] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/db.php"] [unique_id "aURg-sTf9GnU9RkPzitvYwAAARI"]
[Fri Dec 19 04:15:55.549339 2025] [:error] [pid 61921:tid 61925] [client 4.194.35.48:52812] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/db.php"] [unique_id "aURg-yI5bruBgrPWiCCsSAAAAAA"]
[Fri Dec 19 04:15:58.396657 2025] [:error] [pid 61921:tid 61937] [client 4.194.35.48:48199] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/db.php"] [unique_id "aURg_iI5bruBgrPWiCCsSgAAAAw"]
[Fri Dec 19 04:15:59.465527 2025] [:error] [pid 61921:tid 61944] [client 4.194.35.48:51081] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nc.php"] [unique_id "aURg_yI5bruBgrPWiCCsSwAAABM"]
[Fri Dec 19 04:16:03.724440 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:12181] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nc.php"] [unique_id "aURhA8Tf9GnU9RkPzitvaQAAAQg"]
[Fri Dec 19 04:16:11.376564 2025] [proxy_fcgi:error] [pid 61921:tid 61932] [client 4.194.35.48:51089] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:11.521263 2025] [proxy_fcgi:error] [pid 61921:tid 61946] [client 4.194.35.48:51089] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:11.662259 2025] [proxy_fcgi:error] [pid 61921:tid 61949] [client 4.194.35.48:51089] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:11.794072 2025] [proxy_fcgi:error] [pid 61921:tid 61934] [client 4.194.35.48:51089] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:11.912966 2025] [:error] [pid 61921:tid 61940] [client 4.194.35.48:51089] [client 4.194.35.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aURhCyI5bruBgrPWiCCsUwAAAA8"]
[Fri Dec 19 04:16:14.368465 2025] [proxy_fcgi:error] [pid 64979:tid 64992] [client 4.194.35.48:12219] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:14.480012 2025] [proxy_fcgi:error] [pid 64979:tid 65001] [client 4.194.35.48:12219] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:14.590817 2025] [proxy_fcgi:error] [pid 64979:tid 64983] [client 4.194.35.48:12219] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:14.823158 2025] [proxy_fcgi:error] [pid 64979:tid 64988] [client 4.194.35.48:12219] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:14.937624 2025] [proxy_fcgi:error] [pid 64979:tid 64985] [client 4.194.35.48:12219] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:15.204432 2025] [proxy_fcgi:error] [pid 64979:tid 64984] [client 4.194.35.48:12219] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:16:15.333284 2025] [:error] [pid 64979:tid 64990] [client 4.194.35.48:12219] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/666.php"] [unique_id "aURhD8Tf9GnU9RkPzitvewAAAQk"]
[Fri Dec 19 04:16:19.148814 2025] [:error] [pid 64979:tid 64988] [client 4.194.35.48:51074] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/666.php"] [unique_id "aURhE8Tf9GnU9RkPzitvhgAAAQc"]
[Fri Dec 19 04:16:22.346654 2025] [:error] [pid 64979:tid 64992] [client 4.194.35.48:47715] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/666.php"] [unique_id "aURhFsTf9GnU9RkPzitvjQAAAQs"]
[Fri Dec 19 04:16:23.022470 2025] [:error] [pid 64979:tid 64999] [client 4.194.35.48:49831] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/666.php"] [unique_id "aURhF8Tf9GnU9RkPzitvjwAAARI"]
[Fri Dec 19 04:16:26.589372 2025] [:error] [pid 61923:tid 61992] [client 4.194.35.48:46879] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wb.php"] [unique_id "aURhGuIJyAkgoURyh1jACQAAAI0"]
[Fri Dec 19 04:16:27.574710 2025] [:error] [pid 61923:tid 61995] [client 4.194.35.48:49848] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wb.php"] [unique_id "aURhG-IJyAkgoURyh1jADAAAAJA"]
[Fri Dec 19 04:16:29.596266 2025] [:error] [pid 61922:tid 61974] [client 4.194.35.48:47374] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wb.php"] [unique_id "aURhHRsDXYvsvN0FFlAddQAAAFU"]
[Fri Dec 19 04:16:35.057727 2025] [:error] [pid 61923:tid 61993] [client 4.194.35.48:46904] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wb.php"] [unique_id "aURhI-IJyAkgoURyh1jADwAAAI4"]
[Fri Dec 19 04:16:38.309633 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:44049] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/chosen.php"] [unique_id "aURhJsTf9GnU9RkPzitvpwAAAQU"]
[Fri Dec 19 04:16:39.525336 2025] [:error] [pid 62008:tid 62035] [client 4.194.35.48:48242] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/chosen.php"] [unique_id "aURhJ5JCOG7NAlbm_ORCsQAAANg"]
[Fri Dec 19 04:16:40.597392 2025] [:error] [pid 64979:tid 65005] [client 4.194.35.48:51105] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/chosen.php"] [unique_id "aURhKMTf9GnU9RkPzitvrQAAARg"]
[Fri Dec 19 04:16:44.274738 2025] [:error] [pid 64979:tid 64995] [client 4.194.35.48:52969] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/chosen.php"] [unique_id "aURhLMTf9GnU9RkPzitvsgAAAQ4"]
[Fri Dec 19 04:16:53.838416 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:47365] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fs.php"] [unique_id "aURhNcTf9GnU9RkPzitvtwAAARA"]
[Fri Dec 19 04:16:57.610347 2025] [:error] [pid 64979:tid 64984] [client 4.194.35.48:48286] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fs.php"] [unique_id "aURhOcTf9GnU9RkPzitvvAAAAQM"]
[Fri Dec 19 04:17:01.257970 2025] [:error] [pid 62008:tid 62017] [client 4.194.35.48:43069] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aURhPZJCOG7NAlbm_ORCwgAAAMY"]
[Fri Dec 19 04:17:03.712894 2025] [:error] [pid 61921:tid 61946] [client 4.194.35.48:43009] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aURhPyI5bruBgrPWiCCsiwAAABU"]
[Fri Dec 19 04:17:08.806896 2025] [:error] [pid 61923:tid 62002] [client 4.194.35.48:11944] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aURhROIJyAkgoURyh1jANAAAAJc"]
[Fri Dec 19 04:17:11.402386 2025] [:error] [pid 61921:tid 61936] [client 4.194.35.48:51780] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aURhRyI5bruBgrPWiCCsmAAAAAs"]
[Fri Dec 19 04:17:13.704700 2025] [:error] [pid 61922:tid 61961] [client 4.194.35.48:51837] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless11.php"] [unique_id "aURhSRsDXYvsvN0FFlAdmgAAAEk"]
[Fri Dec 19 04:17:15.317159 2025] [proxy_fcgi:error] [pid 62008:tid 62017] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:15.416673 2025] [proxy_fcgi:error] [pid 62008:tid 62022] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:15.541052 2025] [proxy_fcgi:error] [pid 62008:tid 62015] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:15.765882 2025] [proxy_fcgi:error] [pid 62008:tid 62028] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:15.856777 2025] [proxy_fcgi:error] [pid 62008:tid 62019] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:15.970999 2025] [proxy_fcgi:error] [pid 62008:tid 62029] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:16.062437 2025] [proxy_fcgi:error] [pid 62008:tid 62021] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:16.178768 2025] [proxy_fcgi:error] [pid 62008:tid 62030] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:16.276152 2025] [proxy_fcgi:error] [pid 62008:tid 62035] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:16.366141 2025] [proxy_fcgi:error] [pid 62008:tid 62033] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:16.457078 2025] [proxy_fcgi:error] [pid 62008:tid 62016] [client 4.194.35.48:48330] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:17:16.669245 2025] [:error] [pid 62008:tid 62024] [client 4.194.35.48:48330] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aURhTJJCOG7NAlbm_ORC5gAAAM0"]
[Fri Dec 19 04:17:19.901398 2025] [:error] [pid 61922:tid 61971] [client 4.194.35.48:46124] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aURhTxsDXYvsvN0FFlAdqAAAAFM"]
[Fri Dec 19 04:17:25.950949 2025] [:error] [pid 61923:tid 61976] [client 4.194.35.48:51782] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aURhVeIJyAkgoURyh1jAPgAAAIA"]
[Fri Dec 19 04:17:27.528620 2025] [:error] [pid 61923:tid 61999] [client 4.194.35.48:47139] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aURhV-IJyAkgoURyh1jAQwAAAJQ"]
[Fri Dec 19 04:17:29.365308 2025] [:error] [pid 64979:tid 65004] [client 4.194.35.48:46109] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class19.php"] [unique_id "aURhWcTf9GnU9RkPzitv4gAAARc"]
[Fri Dec 19 04:17:31.275329 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:46128] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class19.php"] [unique_id "aURhW8Tf9GnU9RkPzitv5gAAARA"]
[Fri Dec 19 04:17:33.198662 2025] [:error] [pid 61921:tid 61931] [client 4.194.35.48:51807] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class19.php"] [unique_id "aURhXSI5bruBgrPWiCCspAAAAAY"]
[Fri Dec 19 04:17:33.821405 2025] [:error] [pid 61922:tid 61972] [client 4.194.35.48:11745] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class19.php"] [unique_id "aURhXRsDXYvsvN0FFlAdrQAAAFQ"]
[Fri Dec 19 04:17:37.491510 2025] [:error] [pid 64979:tid 65004] [client 4.194.35.48:51814] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aURhYcTf9GnU9RkPzitv7QAAARc"]
[Fri Dec 19 04:17:40.598040 2025] [:error] [pid 61923:tid 61991] [client 4.194.35.48:51822] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aURhZOIJyAkgoURyh1jASgAAAIw"]
[Fri Dec 19 04:17:43.734955 2025] [:error] [pid 62008:tid 62031] [client 4.194.35.48:47110] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aURhZ5JCOG7NAlbm_ORC6wAAANQ"]
[Fri Dec 19 04:17:44.353619 2025] [:error] [pid 62008:tid 62014] [client 4.194.35.48:50022] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-the1me.php"] [unique_id "aURhaJJCOG7NAlbm_ORC7QAAAMM"]
[Fri Dec 19 04:17:45.461842 2025] [:error] [pid 61921:tid 61926] [client 4.194.35.48:49988] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lala.php"] [unique_id "aURhaSI5bruBgrPWiCCsrgAAAAE"]
[Fri Dec 19 04:17:47.044232 2025] [:error] [pid 64979:tid 64999] [client 4.194.35.48:49675] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lala.php"] [unique_id "aURha8Tf9GnU9RkPzitv-QAAARI"]
[Fri Dec 19 04:17:48.286630 2025] [:error] [pid 61921:tid 61935] [client 4.194.35.48:46696] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lala.php"] [unique_id "aURhbCI5bruBgrPWiCCsswAAAAo"]
[Fri Dec 19 04:17:49.710769 2025] [:error] [pid 61921:tid 61939] [client 4.194.35.48:51804] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lala.php"] [unique_id "aURhbSI5bruBgrPWiCCstQAAAA4"]
[Fri Dec 19 04:17:50.854395 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:49674] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/k.php"] [unique_id "aURhbsTf9GnU9RkPzitv_gAAARA"]
[Fri Dec 19 04:17:51.749010 2025] [:error] [pid 64979:tid 64984] [client 4.194.35.48:11759] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/k.php"] [unique_id "aURhb8Tf9GnU9RkPzitwAAAAAQM"]
[Fri Dec 19 04:17:52.613933 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:49700] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/k.php"] [unique_id "aURhcMTf9GnU9RkPzitwAwAAAQU"]
[Fri Dec 19 04:17:54.074994 2025] [:error] [pid 64979:tid 64987] [client 4.194.35.48:49987] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/k.php"] [unique_id "aURhcsTf9GnU9RkPzitwBwAAAQY"]
[Fri Dec 19 04:17:57.368373 2025] [:error] [pid 62008:tid 62031] [client 4.194.35.48:11856] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aURhdZJCOG7NAlbm_ORC-wAAANQ"]
[Fri Dec 19 04:17:58.125314 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:11732] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aURhdsTf9GnU9RkPzitwEQAAAQU"]
[Fri Dec 19 04:17:59.862848 2025] [:error] [pid 64979:tid 64994] [client 4.194.35.48:49716] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aURhd8Tf9GnU9RkPzitwHAAAAQ0"]
[Fri Dec 19 04:18:00.514103 2025] [:error] [pid 64979:tid 65003] [client 4.194.35.48:51635] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aURheMTf9GnU9RkPzitwIQAAARY"]
[Fri Dec 19 04:18:02.197071 2025] [:error] [pid 61922:tid 61969] [client 4.194.35.48:46710] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aURhehsDXYvsvN0FFlAdtQAAAFE"]
[Fri Dec 19 04:18:04.814703 2025] [:error] [pid 61921:tid 61936] [client 4.194.35.48:49727] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aURhfCI5bruBgrPWiCCsygAAAAs"]
[Fri Dec 19 04:18:05.872976 2025] [:error] [pid 61923:tid 61987] [client 4.194.35.48:11897] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aURhfeIJyAkgoURyh1jAUwAAAIg"]
[Fri Dec 19 04:18:09.640945 2025] [:error] [pid 64979:tid 64981] [client 4.194.35.48:11866] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aURhgcTf9GnU9RkPzitwJAAAAQA"]
[Fri Dec 19 04:18:10.555919 2025] [:error] [pid 64979:tid 64991] [client 4.194.35.48:47112] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1.php"] [unique_id "aURhgsTf9GnU9RkPzitwJQAAAQo"]
[Fri Dec 19 04:18:16.263627 2025] [proxy_fcgi:error] [pid 61921:tid 61939] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.368626 2025] [proxy_fcgi:error] [pid 61921:tid 61936] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.470317 2025] [proxy_fcgi:error] [pid 61921:tid 61940] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.560827 2025] [proxy_fcgi:error] [pid 61921:tid 61931] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.653792 2025] [proxy_fcgi:error] [pid 61921:tid 61929] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.754087 2025] [proxy_fcgi:error] [pid 61921:tid 61934] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.863065 2025] [proxy_fcgi:error] [pid 61921:tid 61930] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:16.978634 2025] [proxy_fcgi:error] [pid 61921:tid 61949] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:17.235286 2025] [proxy_fcgi:error] [pid 61921:tid 61937] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:17.327203 2025] [proxy_fcgi:error] [pid 61921:tid 61941] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:17.421269 2025] [proxy_fcgi:error] [pid 61921:tid 61943] [client 4.194.35.48:49703] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:18:17.510480 2025] [:error] [pid 61921:tid 61947] [client 4.194.35.48:49703] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/444.php"] [unique_id "aURhiSI5bruBgrPWiCCs7gAAABY"]
[Fri Dec 19 04:18:19.764439 2025] [:error] [pid 64979:tid 65003] [client 4.194.35.48:44873] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/444.php"] [unique_id "aURhi8Tf9GnU9RkPzitwKwAAARY"]
[Fri Dec 19 04:18:21.300153 2025] [:error] [pid 61923:tid 61990] [client 4.194.35.48:52020] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/444.php"] [unique_id "aURhjeIJyAkgoURyh1jAVQAAAIs"]
[Fri Dec 19 04:18:22.543892 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:51987] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/444.php"] [unique_id "aURhjsTf9GnU9RkPzitwLgAAAQU"]
[Fri Dec 19 04:18:23.563620 2025] [:error] [pid 62008:tid 62022] [client 4.194.35.48:51333] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aURhj5JCOG7NAlbm_ORDHgAAAMs"]
[Fri Dec 19 04:18:24.937072 2025] [:error] [pid 64979:tid 64987] [client 4.194.35.48:11747] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aURhkMTf9GnU9RkPzitwMQAAAQY"]
[Fri Dec 19 04:18:27.350667 2025] [:error] [pid 64979:tid 64983] [client 4.194.35.48:11860] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aURhk8Tf9GnU9RkPzitwMwAAAQI"]
[Fri Dec 19 04:18:29.734367 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:49676] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/zc-903.php"] [unique_id "aURhlcTf9GnU9RkPzitwNQAAAQg"]
[Fri Dec 19 04:18:32.969875 2025] [:error] [pid 61923:tid 61976] [client 4.194.35.48:51570] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cc.php"] [unique_id "aURhmOIJyAkgoURyh1jAWAAAAIA"]
[Fri Dec 19 04:18:33.339755 2025] [:error] [pid 62008:tid 62029] [client 4.194.35.48:50029] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cc.php"] [unique_id "aURhmZJCOG7NAlbm_ORDJgAAANI"]
[Fri Dec 19 04:18:33.992085 2025] [:error] [pid 62008:tid 62014] [client 4.194.35.48:51891] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cc.php"] [unique_id "aURhmZJCOG7NAlbm_ORDKQAAAMM"]
[Fri Dec 19 04:18:35.076279 2025] [:error] [pid 64979:tid 65001] [client 4.194.35.48:49991] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cc.php"] [unique_id "aURhm8Tf9GnU9RkPzitwOQAAARQ"]
[Fri Dec 19 04:18:38.073127 2025] [:error] [pid 62008:tid 62029] [client 4.194.35.48:11884] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nij.php"] [unique_id "aURhnpJCOG7NAlbm_ORDMAAAANI"]
[Fri Dec 19 04:18:39.693030 2025] [:error] [pid 62008:tid 62026] [client 4.194.35.48:51783] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nij.php"] [unique_id "aURhn5JCOG7NAlbm_ORDMQAAAM8"]
[Fri Dec 19 04:18:41.980078 2025] [:error] [pid 61923:tid 61999] [client 4.194.35.48:44825] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nij.php"] [unique_id "aURhoeIJyAkgoURyh1jAWwAAAJQ"]
[Fri Dec 19 04:18:43.719446 2025] [:error] [pid 61921:tid 61925] [client 4.194.35.48:48340] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nij.php"] [unique_id "aURhoyI5bruBgrPWiCCtHgAAAAA"]
[Fri Dec 19 04:18:46.521018 2025] [:error] [pid 61922:tid 61974] [client 4.194.35.48:44862] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aURhphsDXYvsvN0FFlAdygAAAFU"]
[Fri Dec 19 04:18:47.892590 2025] [:error] [pid 64979:tid 64988] [client 4.194.35.48:48929] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aURhp8Tf9GnU9RkPzitwVQAAAQc"]
[Fri Dec 19 04:18:49.382080 2025] [:error] [pid 61922:tid 61967] [client 4.194.35.48:49405] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aURhqRsDXYvsvN0FFlAdzAAAAE8"]
[Fri Dec 19 04:18:50.996161 2025] [:error] [pid 64979:tid 64987] [client 4.194.35.48:11906] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aURhqsTf9GnU9RkPzitwWgAAAQY"]
[Fri Dec 19 04:18:52.622614 2025] [:error] [pid 61922:tid 61954] [client 4.194.35.48:47372] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aURhrBsDXYvsvN0FFlAdzgAAAEI"]
[Fri Dec 19 04:18:56.153920 2025] [:error] [pid 62008:tid 62012] [client 4.194.35.48:51914] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aURhsJJCOG7NAlbm_ORDcAAAAME"]
[Fri Dec 19 04:18:58.345532 2025] [:error] [pid 61923:tid 61989] [client 4.194.35.48:43095] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aURhsuIJyAkgoURyh1jAaQAAAIo"]
[Fri Dec 19 04:18:59.028979 2025] [:error] [pid 61922:tid 61975] [client 4.194.35.48:11484] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aURhsxsDXYvsvN0FFlAdzwAAAFY"]
[Fri Dec 19 04:19:00.358386 2025] [:error] [pid 64979:tid 65005] [client 4.194.35.48:45572] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aURhtMTf9GnU9RkPzitwYAAAARg"]
[Fri Dec 19 04:19:02.332150 2025] [:error] [pid 64979:tid 64985] [client 4.194.35.48:45604] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aURhtsTf9GnU9RkPzitwZgAAAQQ"]
[Fri Dec 19 04:19:03.921180 2025] [:error] [pid 61922:tid 61972] [client 4.194.35.48:11299] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aURhtxsDXYvsvN0FFlAd2AAAAFQ"]
[Fri Dec 19 04:19:04.281855 2025] [:error] [pid 64979:tid 65005] [client 4.194.35.48:11488] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aURhuMTf9GnU9RkPzitwdQAAARg"]
[Fri Dec 19 04:19:07.369986 2025] [:error] [pid 61922:tid 61968] [client 4.194.35.48:52411] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aURhuxsDXYvsvN0FFlAd6AAAAFA"]
[Fri Dec 19 04:19:10.454831 2025] [:error] [pid 61922:tid 61956] [client 4.194.35.48:49741] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aURhvhsDXYvsvN0FFlAd9AAAAEQ"]
[Fri Dec 19 04:19:12.269923 2025] [:error] [pid 62008:tid 62011] [client 4.194.35.48:49341] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aURhwJJCOG7NAlbm_ORDtQAAAMA"]
[Fri Dec 19 04:19:15.644728 2025] [:error] [pid 61923:tid 61987] [client 4.194.35.48:43888] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aURhw-IJyAkgoURyh1jAgwAAAIg"]
[Fri Dec 19 04:19:17.185768 2025] [proxy_fcgi:error] [pid 64979:tid 64994] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:17.507927 2025] [proxy_fcgi:error] [pid 64979:tid 64988] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:17.615357 2025] [proxy_fcgi:error] [pid 64979:tid 64996] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:17.707166 2025] [proxy_fcgi:error] [pid 64979:tid 64985] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:17.838195 2025] [proxy_fcgi:error] [pid 64979:tid 64984] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:17.950963 2025] [proxy_fcgi:error] [pid 64979:tid 64982] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:18.347678 2025] [proxy_fcgi:error] [pid 64979:tid 64981] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:18.446763 2025] [proxy_fcgi:error] [pid 64979:tid 64992] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:18.786599 2025] [proxy_fcgi:error] [pid 64979:tid 65004] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:18.945843 2025] [proxy_fcgi:error] [pid 64979:tid 64987] [client 4.194.35.48:11415] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:19:19.140690 2025] [:error] [pid 64979:tid 64991] [client 4.194.35.48:11415] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/noe.php"] [unique_id "aURhx8Tf9GnU9RkPzitw3AAAAQo"]
[Fri Dec 19 04:19:24.316340 2025] [:error] [pid 61922:tid 61964] [client 4.194.35.48:47648] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/noe.php"] [unique_id "aURhzBsDXYvsvN0FFlAeBAAAAEw"]
[Fri Dec 19 04:19:27.653902 2025] [:error] [pid 61921:tid 61941] [client 4.194.35.48:43357] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/noe.php"] [unique_id "aURhzyI5bruBgrPWiCCtLwAAABA"]
[Fri Dec 19 04:19:29.123671 2025] [:error] [pid 62008:tid 62033] [client 4.194.35.48:44126] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/noe.php"] [unique_id "aURh0ZJCOG7NAlbm_ORDuAAAANY"]
[Fri Dec 19 04:19:30.092436 2025] [:error] [pid 64979:tid 64982] [client 4.194.35.48:50800] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class20.php"] [unique_id "aURh0sTf9GnU9RkPzitw3wAAAQE"]
[Fri Dec 19 04:19:36.913827 2025] [:error] [pid 61923:tid 62001] [client 4.194.35.48:12155] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class20.php"] [unique_id "aURh2OIJyAkgoURyh1jAigAAAJY"]
[Fri Dec 19 04:19:37.682435 2025] [:error] [pid 61922:tid 61953] [client 4.194.35.48:43327] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class20.php"] [unique_id "aURh2RsDXYvsvN0FFlAeCQAAAEE"]
[Fri Dec 19 04:19:39.230315 2025] [:error] [pid 61923:tid 61999] [client 4.194.35.48:43315] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class20.php"] [unique_id "aURh2-IJyAkgoURyh1jAjgAAAJQ"]
[Fri Dec 19 04:19:39.866336 2025] [:error] [pid 61922:tid 61952] [client 4.194.35.48:43890] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shellalfa.php"] [unique_id "aURh2xsDXYvsvN0FFlAeCgAAAEA"]
[Fri Dec 19 04:19:40.536582 2025] [:error] [pid 62008:tid 62016] [client 4.194.35.48:50781] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shellalfa.php"] [unique_id "aURh3JJCOG7NAlbm_ORDvwAAAMU"]
[Fri Dec 19 04:19:41.338005 2025] [:error] [pid 61923:tid 61981] [client 4.194.35.48:44141] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shellalfa.php"] [unique_id "aURh3eIJyAkgoURyh1jAlQAAAIM"]
[Fri Dec 19 04:19:41.819335 2025] [:error] [pid 61922:tid 61978] [client 4.194.35.48:42702] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shellalfa.php"] [unique_id "aURh3RsDXYvsvN0FFlAeHQAAAFc"]
[Fri Dec 19 04:19:43.120266 2025] [:error] [pid 61921:tid 61946] [client 4.194.35.48:12120] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/te.php"] [unique_id "aURh3yI5bruBgrPWiCCtTAAAABU"]
[Fri Dec 19 04:19:43.789247 2025] [:error] [pid 61922:tid 61960] [client 4.194.35.48:44508] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/te.php"] [unique_id "aURh3xsDXYvsvN0FFlAeJwAAAEg"]
[Fri Dec 19 04:19:47.655783 2025] [:error] [pid 61922:tid 61978] [client 4.194.35.48:43361] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/te.php"] [unique_id "aURh4xsDXYvsvN0FFlAeLAAAAFc"]
[Fri Dec 19 04:19:48.724848 2025] [:error] [pid 61922:tid 61953] [client 4.194.35.48:12106] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/te.php"] [unique_id "aURh5BsDXYvsvN0FFlAeLQAAAEE"]
[Fri Dec 19 04:19:49.060333 2025] [autoindex:error] [pid 64979:tid 64996] [client 47.128.26.13:59194] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:49.070621 2025] [autoindex:error] [pid 64979:tid 64985] [client 47.128.24.73:46950] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:49.575133 2025] [autoindex:error] [pid 61922:tid 61967] [client 115.244.79.243:50642] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:49.759159 2025] [:error] [pid 61922:tid 61957] [client 4.194.35.48:46929] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a2.php"] [unique_id "aURh5RsDXYvsvN0FFlAeMgAAAEU"]
[Fri Dec 19 04:19:49.813314 2025] [autoindex:error] [pid 61921:tid 61949] [client 45.77.252.175:37502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:50.547726 2025] [autoindex:error] [pid 61923:tid 61993] [client 189.28.65.150:49557] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:51.484516 2025] [autoindex:error] [pid 61922:tid 61970] [client 152.39.152.131:37895] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:51.634741 2025] [autoindex:error] [pid 62008:tid 62018] [client 177.62.34.30:50431] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 04:19:52.859783 2025] [:error] [pid 62008:tid 62024] [client 4.194.35.48:47629] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a2.php"] [unique_id "aURh6JJCOG7NAlbm_ORD6wAAAM0"]
[Fri Dec 19 04:19:54.467147 2025] [:error] [pid 62008:tid 62031] [client 4.194.35.48:47438] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a2.php"] [unique_id "aURh6pJCOG7NAlbm_ORD7QAAANQ"]
[Fri Dec 19 04:19:56.130829 2025] [:error] [pid 61922:tid 61960] [client 4.194.35.48:47677] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a2.php"] [unique_id "aURh7BsDXYvsvN0FFlAePwAAAEg"]
[Fri Dec 19 04:19:58.512485 2025] [:error] [pid 64979:tid 64994] [client 4.194.35.48:43331] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jp.php"] [unique_id "aURh7sTf9GnU9RkPzitw-AAAAQ0"]
[Fri Dec 19 04:19:59.426719 2025] [:error] [pid 61921:tid 61925] [client 4.194.35.48:43352] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jp.php"] [unique_id "aURh7yI5bruBgrPWiCCtZQAAAAA"]
[Fri Dec 19 04:20:00.532320 2025] [:error] [pid 61923:tid 61999] [client 4.194.35.48:48667] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jp.php"] [unique_id "aURh8OIJyAkgoURyh1jAvwAAAJQ"]
[Fri Dec 19 04:20:01.574380 2025] [:error] [pid 61922:tid 61959] [client 4.194.35.48:47908] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jp.php"] [unique_id "aURh8RsDXYvsvN0FFlAeQgAAAEc"]
[Fri Dec 19 04:20:02.289133 2025] [:error] [pid 61923:tid 62003] [client 4.194.35.48:49088] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cccc.php"] [unique_id "aURh8uIJyAkgoURyh1jAwQAAAJg"]
[Fri Dec 19 04:20:03.077478 2025] [:error] [pid 61922:tid 61971] [client 4.194.35.48:50598] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cccc.php"] [unique_id "aURh8xsDXYvsvN0FFlAeQwAAAFM"]
[Fri Dec 19 04:20:07.646752 2025] [:error] [pid 64979:tid 64993] [client 4.194.35.48:50597] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cccc.php"] [unique_id "aURh98Tf9GnU9RkPzitxCAAAAQw"]
[Fri Dec 19 04:20:09.878054 2025] [:error] [pid 61923:tid 61991] [client 4.194.35.48:44492] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cccc.php"] [unique_id "aURh-eIJyAkgoURyh1jAxgAAAIw"]
[Fri Dec 19 04:20:17.339742 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:48677] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fe5.php"] [unique_id "aURiAcTf9GnU9RkPzitxEQAAARA"]
[Fri Dec 19 04:20:18.340348 2025] [:error] [pid 62008:tid 62032] [client 4.194.35.48:44493] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fe5.php"] [unique_id "aURiApJCOG7NAlbm_OREBAAAANU"]
[Fri Dec 19 04:20:19.474592 2025] [proxy_fcgi:error] [pid 62008:tid 62020] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:19.634735 2025] [proxy_fcgi:error] [pid 62008:tid 62016] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:19.732319 2025] [proxy_fcgi:error] [pid 62008:tid 62021] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:19.840371 2025] [proxy_fcgi:error] [pid 62008:tid 62015] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:19.957534 2025] [proxy_fcgi:error] [pid 62008:tid 62012] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:20.057927 2025] [proxy_fcgi:error] [pid 62008:tid 62027] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:20.394076 2025] [proxy_fcgi:error] [pid 62008:tid 62031] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:20.491939 2025] [proxy_fcgi:error] [pid 62008:tid 62029] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:20.607512 2025] [proxy_fcgi:error] [pid 62008:tid 62035] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:20.728421 2025] [proxy_fcgi:error] [pid 62008:tid 62026] [client 4.194.35.48:52800] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:20:21.181921 2025] [:error] [pid 62008:tid 62025] [client 4.194.35.48:52800] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file18.php"] [unique_id "aURiBZJCOG7NAlbm_OREEgAAAM4"]
[Fri Dec 19 04:20:22.952496 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:12150] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file18.php"] [unique_id "aURiBsTf9GnU9RkPzitxGQAAAQU"]
[Fri Dec 19 04:20:23.863489 2025] [:error] [pid 62008:tid 62023] [client 4.194.35.48:47469] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file18.php"] [unique_id "aURiB5JCOG7NAlbm_OREFgAAAMw"]
[Fri Dec 19 04:20:27.666922 2025] [:error] [pid 62008:tid 62015] [client 4.194.35.48:42688] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file18.php"] [unique_id "aURiC5JCOG7NAlbm_OREGAAAAMQ"]
[Fri Dec 19 04:20:33.234354 2025] [:error] [pid 61921:tid 61940] [client 4.194.35.48:50298] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v.php"] [unique_id "aURiESI5bruBgrPWiCCtcwAAAA8"]
[Fri Dec 19 04:20:36.548470 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:48693] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v.php"] [unique_id "aURiFMTf9GnU9RkPzitxIQAAAQg"]
[Fri Dec 19 04:20:36.939738 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:43338] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v.php"] [unique_id "aURiFMTf9GnU9RkPzitxIwAAAQU"]
[Fri Dec 19 04:20:37.436798 2025] [:error] [pid 61922:tid 61966] [client 4.194.35.48:11373] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v.php"] [unique_id "aURiFRsDXYvsvN0FFlAeSgAAAE4"]
[Fri Dec 19 04:20:38.909998 2025] [:error] [pid 62008:tid 62034] [client 4.194.35.48:12144] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aURiFpJCOG7NAlbm_OREHgAAANc"]
[Fri Dec 19 04:20:39.677993 2025] [:error] [pid 62008:tid 62013] [client 4.194.35.48:49106] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aURiF5JCOG7NAlbm_OREHwAAAMI"]
[Fri Dec 19 04:20:43.126671 2025] [:error] [pid 61921:tid 61941] [client 4.194.35.48:49466] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aURiGyI5bruBgrPWiCCtiwAAABA"]
[Fri Dec 19 04:20:44.043430 2025] [:error] [pid 61923:tid 61981] [client 4.194.35.48:12098] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aURiHOIJyAkgoURyh1jA2gAAAIM"]
[Fri Dec 19 04:20:47.003781 2025] [:error] [pid 61923:tid 62003] [client 4.194.35.48:48433] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aURiH-IJyAkgoURyh1jA3AAAAJg"]
[Fri Dec 19 04:20:47.884620 2025] [:error] [pid 64979:tid 64990] [client 4.194.35.48:42708] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aURiH8Tf9GnU9RkPzitxKwAAAQk"]
[Fri Dec 19 04:20:49.946114 2025] [:error] [pid 64979:tid 64990] [client 4.194.35.48:51559] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aURiIcTf9GnU9RkPzitxjwAAAQk"]
[Fri Dec 19 04:20:52.383165 2025] [:error] [pid 61923:tid 62003] [client 4.194.35.48:12146] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aURiJOIJyAkgoURyh1jBOAAAAJg"]
[Fri Dec 19 04:20:53.603382 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:50091] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/acp.php"] [unique_id "aURiJcTf9GnU9RkPzitxnAAAARA"]
[Fri Dec 19 04:20:56.210977 2025] [:error] [pid 61921:tid 61925] [client 4.194.35.48:50610] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/acp.php"] [unique_id "aURiKCI5bruBgrPWiCCtkgAAAAA"]
[Fri Dec 19 04:20:56.768871 2025] [:error] [pid 61923:tid 61986] [client 4.194.35.48:50094] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/acp.php"] [unique_id "aURiKOIJyAkgoURyh1jBPgAAAIc"]
[Fri Dec 19 04:20:57.526502 2025] [:error] [pid 64979:tid 64998] [client 4.194.35.48:44139] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/acp.php"] [unique_id "aURiKcTf9GnU9RkPzitxnwAAARE"]
[Fri Dec 19 04:20:58.600782 2025] [:error] [pid 61923:tid 61980] [client 4.194.35.48:49420] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/g.php"] [unique_id "aURiKuIJyAkgoURyh1jBPwAAAII"]
[Fri Dec 19 04:20:59.787144 2025] [:error] [pid 61923:tid 62000] [client 4.194.35.48:12143] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/g.php"] [unique_id "aURiK-IJyAkgoURyh1jBQAAAAJU"]
[Fri Dec 19 04:21:01.083977 2025] [:error] [pid 61922:tid 61956] [client 4.194.35.48:47464] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/g.php"] [unique_id "aURiLRsDXYvsvN0FFlAeUwAAAEQ"]
[Fri Dec 19 04:21:02.454167 2025] [:error] [pid 61923:tid 61996] [client 4.194.35.48:51306] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/g.php"] [unique_id "aURiLuIJyAkgoURyh1jBQgAAAJE"]
[Fri Dec 19 04:21:03.048412 2025] [:error] [pid 61922:tid 61974] [client 4.194.35.48:47442] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/static/as.php"] [unique_id "aURiLxsDXYvsvN0FFlAeVQAAAFU"]
[Fri Dec 19 04:21:05.695255 2025] [:error] [pid 61922:tid 61975] [client 4.194.35.48:50604] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/static/as.php"] [unique_id "aURiMRsDXYvsvN0FFlAeWAAAAFY"]
[Fri Dec 19 04:21:06.615210 2025] [:error] [pid 61922:tid 61967] [client 4.194.35.48:44516] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/static/as.php"] [unique_id "aURiMhsDXYvsvN0FFlAeWQAAAE8"]
[Fri Dec 19 04:21:08.400840 2025] [:error] [pid 62008:tid 62032] [client 4.194.35.48:49596] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/static/as.php"] [unique_id "aURiNJJCOG7NAlbm_OREPQAAANU"]
[Fri Dec 19 04:21:10.120567 2025] [:error] [pid 61921:tid 61941] [client 4.194.35.48:47930] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aURiNiI5bruBgrPWiCCtlwAAABA"]
[Fri Dec 19 04:21:12.511926 2025] [:error] [pid 62008:tid 62016] [client 4.194.35.48:44098] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aURiOJJCOG7NAlbm_OREPgAAAMU"]
[Fri Dec 19 04:21:15.691783 2025] [:error] [pid 64979:tid 64981] [client 4.194.35.48:11670] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aURiO8Tf9GnU9RkPzitxqgAAAQA"]
[Fri Dec 19 04:21:18.084897 2025] [:error] [pid 61922:tid 61964] [client 4.194.35.48:44458] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aURiPhsDXYvsvN0FFlAeYwAAAEw"]
[Fri Dec 19 04:21:22.540143 2025] [proxy_fcgi:error] [pid 62008:tid 62011] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:22.680401 2025] [proxy_fcgi:error] [pid 62008:tid 62025] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:22.809654 2025] [proxy_fcgi:error] [pid 62008:tid 62021] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:22.954669 2025] [proxy_fcgi:error] [pid 62008:tid 62027] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:23.088676 2025] [proxy_fcgi:error] [pid 62008:tid 62031] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:23.637856 2025] [proxy_fcgi:error] [pid 62008:tid 62015] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:23.779083 2025] [proxy_fcgi:error] [pid 62008:tid 62035] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:23.962438 2025] [proxy_fcgi:error] [pid 62008:tid 62026] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:24.831726 2025] [proxy_fcgi:error] [pid 62008:tid 62019] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:24.970603 2025] [proxy_fcgi:error] [pid 62008:tid 62034] [client 4.194.35.48:49108] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:21:25.126467 2025] [:error] [pid 62008:tid 62014] [client 4.194.35.48:49108] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/n3.php"] [unique_id "aURiRZJCOG7NAlbm_ORESwAAAMM"]
[Fri Dec 19 04:21:27.343400 2025] [:error] [pid 61923:tid 61994] [client 4.194.35.48:50076] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/n3.php"] [unique_id "aURiR-IJyAkgoURyh1jBVAAAAI8"]
[Fri Dec 19 04:21:28.364015 2025] [:error] [pid 64979:tid 65005] [client 4.194.35.48:50527] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/n3.php"] [unique_id "aURiSMTf9GnU9RkPzitxuAAAARg"]
[Fri Dec 19 04:21:29.422490 2025] [:error] [pid 64979:tid 64983] [client 4.194.35.48:44507] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/n3.php"] [unique_id "aURiScTf9GnU9RkPzitxvAAAAQI"]
[Fri Dec 19 04:21:30.346714 2025] [:error] [pid 61922:tid 61958] [client 4.194.35.48:47927] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/an.php"] [unique_id "aURiShsDXYvsvN0FFlAeaQAAAEY"]
[Fri Dec 19 04:21:31.407447 2025] [:error] [pid 61923:tid 61984] [client 4.194.35.48:51301] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/an.php"] [unique_id "aURiS-IJyAkgoURyh1jBWAAAAIU"]
[Fri Dec 19 04:21:33.416981 2025] [:error] [pid 64979:tid 64981] [client 4.194.35.48:44486] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/an.php"] [unique_id "aURiTcTf9GnU9RkPzitxvwAAAQA"]
[Fri Dec 19 04:21:35.168043 2025] [:error] [pid 61922:tid 61978] [client 4.194.35.48:49131] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/an.php"] [unique_id "aURiTxsDXYvsvN0FFlAeagAAAFc"]
[Fri Dec 19 04:21:44.993482 2025] [:error] [pid 64979:tid 64995] [client 4.194.35.48:53097] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/error.php"] [unique_id "aURiWMTf9GnU9RkPzitxzAAAAQ4"]
[Fri Dec 19 04:21:47.050979 2025] [:error] [pid 62008:tid 62015] [client 4.194.35.48:50059] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/error.php"] [unique_id "aURiW5JCOG7NAlbm_OREUwAAAMQ"]
[Fri Dec 19 04:21:48.522158 2025] [:error] [pid 61923:tid 61995] [client 4.194.35.48:11382] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/error.php"] [unique_id "aURiXOIJyAkgoURyh1jBXAAAAJA"]
[Fri Dec 19 04:21:53.073486 2025] [:error] [pid 61922:tid 61960] [client 4.194.35.48:44488] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aURiYRsDXYvsvN0FFlAebgAAAEg"]
[Fri Dec 19 04:21:54.892083 2025] [:error] [pid 62008:tid 62029] [client 4.194.35.48:50109] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aURiYpJCOG7NAlbm_OREYQAAANI"]
[Fri Dec 19 04:21:55.641002 2025] [:error] [pid 62008:tid 62014] [client 4.194.35.48:44489] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aURiY5JCOG7NAlbm_OREYgAAAMM"]
[Fri Dec 19 04:21:56.754483 2025] [:error] [pid 61921:tid 61931] [client 4.194.35.48:49518] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aURiZCI5bruBgrPWiCCtmgAAAAY"]
[Fri Dec 19 04:21:58.131299 2025] [:error] [pid 61923:tid 61980] [client 4.194.35.48:44481] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aURiZuIJyAkgoURyh1jBYQAAAII"]
[Fri Dec 19 04:22:00.425026 2025] [:error] [pid 61922:tid 61952] [client 4.194.35.48:50529] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aURiaBsDXYvsvN0FFlAecAAAAEA"]
[Fri Dec 19 04:22:03.287835 2025] [:error] [pid 61922:tid 61979] [client 4.194.35.48:51265] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aURiaxsDXYvsvN0FFlAecQAAAFg"]
[Fri Dec 19 04:22:04.592605 2025] [:error] [pid 62008:tid 62030] [client 4.194.35.48:50544] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-is.php"] [unique_id "aURibJJCOG7NAlbm_OREZwAAANM"]
[Fri Dec 19 04:22:05.648332 2025] [:error] [pid 62008:tid 62018] [client 4.194.35.48:49224] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ava.php"] [unique_id "aURibZJCOG7NAlbm_OREaAAAAMc"]
[Fri Dec 19 04:22:07.838444 2025] [:error] [pid 61923:tid 61985] [client 4.194.35.48:49221] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ava.php"] [unique_id "aURib-IJyAkgoURyh1jBZwAAAIY"]
[Fri Dec 19 04:22:08.978029 2025] [:error] [pid 61923:tid 61995] [client 4.194.35.48:51610] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ava.php"] [unique_id "aURicOIJyAkgoURyh1jBagAAAJA"]
[Fri Dec 19 04:22:10.312242 2025] [:error] [pid 62008:tid 62025] [client 4.194.35.48:48664] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ava.php"] [unique_id "aURicpJCOG7NAlbm_OREbQAAAM4"]
[Fri Dec 19 04:22:12.727659 2025] [:error] [pid 61923:tid 62002] [client 4.194.35.48:44510] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aURidOIJyAkgoURyh1jBbAAAAJc"]
[Fri Dec 19 04:22:13.410763 2025] [:error] [pid 61923:tid 61992] [client 4.194.35.48:49142] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aURideIJyAkgoURyh1jBbQAAAI0"]
[Fri Dec 19 04:22:14.094439 2025] [:error] [pid 61923:tid 61993] [client 4.194.35.48:12255] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aURiduIJyAkgoURyh1jBbgAAAI4"]
[Fri Dec 19 04:22:15.402645 2025] [:error] [pid 61922:tid 61954] [client 4.194.35.48:12283] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aURidxsDXYvsvN0FFlAefAAAAEI"]
[Fri Dec 19 04:22:18.002769 2025] [:error] [pid 62008:tid 62034] [client 4.194.35.48:11349] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shell1.php"] [unique_id "aURiepJCOG7NAlbm_OREfAAAANc"]
[Fri Dec 19 04:22:18.757788 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:11544] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shell1.php"] [unique_id "aURiesTf9GnU9RkPzityCAAAARA"]
[Fri Dec 19 04:22:20.162965 2025] [:error] [pid 61922:tid 61955] [client 4.194.35.48:50584] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shell1.php"] [unique_id "aURifBsDXYvsvN0FFlAeggAAAEM"]
[Fri Dec 19 04:22:21.340716 2025] [:error] [pid 62008:tid 62013] [client 4.194.35.48:50879] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/shell1.php"] [unique_id "aURifZJCOG7NAlbm_OREfwAAAMI"]
[Fri Dec 19 04:22:22.217265 2025] [:error] [pid 61922:tid 61968] [client 4.194.35.48:50848] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gdn.php"] [unique_id "aURifhsDXYvsvN0FFlAehgAAAFA"]
[Fri Dec 19 04:22:23.713063 2025] [:error] [pid 61922:tid 61954] [client 4.194.35.48:47456] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gdn.php"] [unique_id "aURifxsDXYvsvN0FFlAeiQAAAEI"]
[Fri Dec 19 04:22:26.899307 2025] [proxy_fcgi:error] [pid 61921:tid 61927] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:26.995427 2025] [proxy_fcgi:error] [pid 61921:tid 61941] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.087514 2025] [proxy_fcgi:error] [pid 61921:tid 61944] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.205720 2025] [proxy_fcgi:error] [pid 61921:tid 61937] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.314170 2025] [proxy_fcgi:error] [pid 61921:tid 61929] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.533568 2025] [proxy_fcgi:error] [pid 61921:tid 61936] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.626007 2025] [proxy_fcgi:error] [pid 61921:tid 61939] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.868487 2025] [proxy_fcgi:error] [pid 61921:tid 61942] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:27.959094 2025] [proxy_fcgi:error] [pid 61921:tid 61930] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:28.411745 2025] [proxy_fcgi:error] [pid 61921:tid 61938] [client 4.194.35.48:42706] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:22:28.514529 2025] [:error] [pid 61921:tid 61947] [client 4.194.35.48:42706] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/abt.php"] [unique_id "aURihCI5bruBgrPWiCCtzQAAABY"]
[Fri Dec 19 04:22:29.684524 2025] [:error] [pid 64979:tid 65001] [client 4.194.35.48:49441] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/abt.php"] [unique_id "aURihcTf9GnU9RkPzitycgAAARQ"]
[Fri Dec 19 04:22:31.294052 2025] [:error] [pid 62008:tid 62015] [client 4.194.35.48:50828] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/abt.php"] [unique_id "aURih5JCOG7NAlbm_OREugAAAMQ"]
[Fri Dec 19 04:22:32.735089 2025] [:error] [pid 61921:tid 61941] [client 4.194.35.48:46610] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/abt.php"] [unique_id "aURiiCI5bruBgrPWiCCt0QAAABA"]
[Fri Dec 19 04:22:33.914890 2025] [:error] [pid 61923:tid 61981] [client 4.194.35.48:44525] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aURiieIJyAkgoURyh1jBiQAAAIM"]
[Fri Dec 19 04:22:35.965630 2025] [:error] [pid 61923:tid 61993] [client 4.194.35.48:44441] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aURii-IJyAkgoURyh1jBigAAAI4"]
[Fri Dec 19 04:22:36.689289 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:47433] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aURijMTf9GnU9RkPzitydAAAAQg"]
[Fri Dec 19 04:22:37.715514 2025] [:error] [pid 61921:tid 61938] [client 4.194.35.48:44498] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aURijSI5bruBgrPWiCCt2AAAAA0"]
[Fri Dec 19 04:22:40.940793 2025] [:error] [pid 61921:tid 61929] [client 4.194.35.48:50071] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/layout.php"] [unique_id "aURikCI5bruBgrPWiCCt3wAAAAQ"]
[Fri Dec 19 04:22:41.458876 2025] [:error] [pid 61921:tid 61942] [client 4.194.35.48:47481] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/layout.php"] [unique_id "aURikSI5bruBgrPWiCCt4AAAABE"]
[Fri Dec 19 04:22:42.584392 2025] [:error] [pid 61921:tid 61949] [client 4.194.35.48:42705] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/layout.php"] [unique_id "aURikiI5bruBgrPWiCCt4wAAABg"]
[Fri Dec 19 04:22:44.328441 2025] [:error] [pid 64979:tid 64998] [client 4.194.35.48:51998] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/layout.php"] [unique_id "aURilMTf9GnU9RkPzitydwAAARE"]
[Fri Dec 19 04:22:46.129635 2025] [:error] [pid 61923:tid 61984] [client 4.194.35.48:44421] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/up.php"] [unique_id "aURiluIJyAkgoURyh1jBjwAAAIU"]
[Fri Dec 19 04:22:46.974031 2025] [:error] [pid 61922:tid 61969] [client 4.194.35.48:49547] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/up.php"] [unique_id "aURilhsDXYvsvN0FFlAerQAAAFE"]
[Fri Dec 19 04:22:47.949839 2025] [:error] [pid 64979:tid 64988] [client 4.194.35.48:49455] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/up.php"] [unique_id "aURil8Tf9GnU9RkPzityfQAAAQc"]
[Fri Dec 19 04:22:50.363243 2025] [:error] [pid 64979:tid 64981] [client 4.194.35.48:49433] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/up.php"] [unique_id "aURimsTf9GnU9RkPzitygAAAAQA"]
[Fri Dec 19 04:22:51.691641 2025] [:error] [pid 61923:tid 61992] [client 4.194.35.48:48406] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/flower.php"] [unique_id "aURim-IJyAkgoURyh1jBmwAAAI0"]
[Fri Dec 19 04:22:54.208852 2025] [:error] [pid 62008:tid 62034] [client 4.194.35.48:50054] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/flower.php"] [unique_id "aURinpJCOG7NAlbm_ORE1gAAANc"]
[Fri Dec 19 04:22:55.333266 2025] [:error] [pid 61921:tid 61927] [client 4.194.35.48:11538] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/flower.php"] [unique_id "aURinyI5bruBgrPWiCCt6QAAAAI"]
[Fri Dec 19 04:22:58.385660 2025] [:error] [pid 64979:tid 64982] [client 4.194.35.48:11856] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/flower.php"] [unique_id "aURiosTf9GnU9RkPzitylgAAAQE"]
[Fri Dec 19 04:22:59.662428 2025] [:error] [pid 64979:tid 64985] [client 4.194.35.48:47135] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nope.php"] [unique_id "aURio8Tf9GnU9RkPzitynAAAAQQ"]
[Fri Dec 19 04:23:01.609498 2025] [:error] [pid 61921:tid 61933] [client 4.194.35.48:51809] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nope.php"] [unique_id "aURipSI5bruBgrPWiCCt_AAAAAg"]
[Fri Dec 19 04:23:04.077513 2025] [:error] [pid 61922:tid 61966] [client 4.194.35.48:52937] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nope.php"] [unique_id "aURiqBsDXYvsvN0FFlAewwAAAE4"]
[Fri Dec 19 04:23:04.505664 2025] [:error] [pid 62008:tid 62033] [client 4.194.35.48:43052] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nope.php"] [unique_id "aURiqJJCOG7NAlbm_ORE3QAAANY"]
[Fri Dec 19 04:23:06.105396 2025] [:error] [pid 61922:tid 61962] [client 4.194.35.48:48382] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/js.php"] [unique_id "aURiqhsDXYvsvN0FFlAeyAAAAEo"]
[Fri Dec 19 04:23:08.874028 2025] [:error] [pid 61921:tid 61929] [client 4.194.35.48:51787] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/js.php"] [unique_id "aURirCI5bruBgrPWiCCuBwAAAAQ"]
[Fri Dec 19 04:23:09.615887 2025] [:error] [pid 62008:tid 62017] [client 4.194.35.48:51825] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/js.php"] [unique_id "aURirZJCOG7NAlbm_ORE3wAAAMY"]
[Fri Dec 19 04:23:10.416660 2025] [:error] [pid 62008:tid 62011] [client 4.194.35.48:51824] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/js.php"] [unique_id "aURirpJCOG7NAlbm_ORE6AAAAMA"]
[Fri Dec 19 04:23:11.364166 2025] [:error] [pid 62008:tid 62019] [client 4.194.35.48:47133] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aURir5JCOG7NAlbm_ORE6wAAAMg"]
[Fri Dec 19 04:23:12.680525 2025] [:error] [pid 64979:tid 64981] [client 4.194.35.48:49557] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aURisMTf9GnU9RkPzitywgAAAQA"]
[Fri Dec 19 04:23:13.226438 2025] [:error] [pid 61922:tid 61958] [client 4.194.35.48:47113] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aURisRsDXYvsvN0FFlAe0QAAAEY"]
[Fri Dec 19 04:23:14.552017 2025] [:error] [pid 61922:tid 61962] [client 4.194.35.48:11474] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aURishsDXYvsvN0FFlAe0gAAAEo"]
[Fri Dec 19 04:23:15.249067 2025] [:error] [pid 61921:tid 61940] [client 4.194.35.48:44847] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/media.php"] [unique_id "aURisyI5bruBgrPWiCCuIQAAAA8"]
[Fri Dec 19 04:23:17.108171 2025] [:error] [pid 62008:tid 62021] [client 4.194.35.48:50021] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/media.php"] [unique_id "aURitZJCOG7NAlbm_ORE8wAAAMo"]
[Fri Dec 19 04:23:18.272063 2025] [:error] [pid 61923:tid 61986] [client 4.194.35.48:46100] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/media.php"] [unique_id "aURituIJyAkgoURyh1jBwgAAAIc"]
[Fri Dec 19 04:23:19.553516 2025] [:error] [pid 62008:tid 62028] [client 4.194.35.48:44836] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/media.php"] [unique_id "aURit5JCOG7NAlbm_ORE9QAAANE"]
[Fri Dec 19 04:23:21.622436 2025] [:error] [pid 61922:tid 61964] [client 4.194.35.48:43134] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aURiuRsDXYvsvN0FFlAe2AAAAEw"]
[Fri Dec 19 04:23:24.619439 2025] [:error] [pid 64979:tid 64982] [client 4.194.35.48:50046] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aURivMTf9GnU9RkPzityxQAAAQE"]
[Fri Dec 19 04:23:25.517209 2025] [:error] [pid 61922:tid 61957] [client 4.194.35.48:47141] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aURivRsDXYvsvN0FFlAe2wAAAEU"]
[Fri Dec 19 04:23:28.672277 2025] [proxy_fcgi:error] [pid 62008:tid 62033] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:29.190862 2025] [proxy_fcgi:error] [pid 62008:tid 62025] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:29.296705 2025] [proxy_fcgi:error] [pid 62008:tid 62034] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:29.558006 2025] [proxy_fcgi:error] [pid 62008:tid 62021] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:29.975354 2025] [proxy_fcgi:error] [pid 62008:tid 62017] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:31.492685 2025] [proxy_fcgi:error] [pid 62008:tid 62022] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:31.660589 2025] [proxy_fcgi:error] [pid 62008:tid 62030] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:31.761631 2025] [proxy_fcgi:error] [pid 62008:tid 62026] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:31.852512 2025] [proxy_fcgi:error] [pid 62008:tid 62018] [client 4.194.35.48:50018] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:23:31.971023 2025] [:error] [pid 62008:tid 62011] [client 4.194.35.48:50018] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aURiw5JCOG7NAlbm_ORFBwAAAMA"]
[Fri Dec 19 04:23:33.019131 2025] [:error] [pid 64979:tid 64994] [client 4.194.35.48:49430] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aURixcTf9GnU9RkPzityzQAAAQ0"]
[Fri Dec 19 04:23:34.250230 2025] [:error] [pid 61921:tid 61934] [client 4.194.35.48:11287] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aURixiI5bruBgrPWiCCuLQAAAAk"]
[Fri Dec 19 04:23:35.074510 2025] [:error] [pid 62008:tid 62014] [client 4.194.35.48:11692] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aURix5JCOG7NAlbm_ORFCwAAAMM"]
[Fri Dec 19 04:23:37.682586 2025] [:error] [pid 61922:tid 61972] [client 4.194.35.48:49438] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/r4f_1.php"] [unique_id "aURiyRsDXYvsvN0FFlAe4AAAAFQ"]
[Fri Dec 19 04:23:39.682421 2025] [:error] [pid 62008:tid 62030] [client 4.194.35.48:11631] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/r4f_1.php"] [unique_id "aURiy5JCOG7NAlbm_ORFDwAAANM"]
[Fri Dec 19 04:23:41.137138 2025] [:error] [pid 61921:tid 61931] [client 4.194.35.48:11623] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/r4f_1.php"] [unique_id "aURizSI5bruBgrPWiCCuMQAAAAY"]
[Fri Dec 19 04:23:42.230114 2025] [:error] [pid 61921:tid 61943] [client 4.194.35.48:50550] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/r4f_1.php"] [unique_id "aURiziI5bruBgrPWiCCuMgAAABI"]
[Fri Dec 19 04:23:42.718179 2025] [:error] [pid 61921:tid 61937] [client 4.194.35.48:50049] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.php"] [unique_id "aURiziI5bruBgrPWiCCuNAAAAAw"]
[Fri Dec 19 04:23:45.065784 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:11426] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.php"] [unique_id "aURi0cTf9GnU9RkPzity2AAAAQg"]
[Fri Dec 19 04:23:46.651942 2025] [:error] [pid 61922:tid 61965] [client 4.194.35.48:50581] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.php"] [unique_id "aURi0hsDXYvsvN0FFlAe5wAAAE0"]
[Fri Dec 19 04:23:48.047064 2025] [:error] [pid 62008:tid 62012] [client 4.194.35.48:12259] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.php"] [unique_id "aURi1JJCOG7NAlbm_ORFEgAAAME"]
[Fri Dec 19 04:23:49.792972 2025] [:error] [pid 62008:tid 62020] [client 4.194.35.48:44470] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/content.php"] [unique_id "aURi1ZJCOG7NAlbm_ORFEwAAAMk"]
[Fri Dec 19 04:23:51.870304 2025] [:error] [pid 62008:tid 62014] [client 4.194.35.48:45602] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/content.php"] [unique_id "aURi15JCOG7NAlbm_ORFFAAAAMM"]
[Fri Dec 19 04:23:52.802386 2025] [:error] [pid 62008:tid 62029] [client 4.194.35.48:11483] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/content.php"] [unique_id "aURi2JJCOG7NAlbm_ORFFQAAANI"]
[Fri Dec 19 04:23:54.478966 2025] [:error] [pid 62008:tid 62023] [client 4.194.35.48:47432] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/content.php"] [unique_id "aURi2pJCOG7NAlbm_ORFFgAAAMw"]
[Fri Dec 19 04:23:55.703441 2025] [:error] [pid 61921:tid 61930] [client 4.194.35.48:48658] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ext.php"] [unique_id "aURi2yI5bruBgrPWiCCuPgAAAAU"]
[Fri Dec 19 04:23:58.086015 2025] [:error] [pid 61921:tid 61945] [client 4.194.35.48:45605] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ext.php"] [unique_id "aURi3iI5bruBgrPWiCCuRAAAABQ"]
[Fri Dec 19 04:23:59.484188 2025] [:error] [pid 61921:tid 61942] [client 4.194.35.48:46924] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ext.php"] [unique_id "aURi3yI5bruBgrPWiCCuRwAAABE"]
[Fri Dec 19 04:24:00.390041 2025] [:error] [pid 62008:tid 62019] [client 4.194.35.48:46929] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ext.php"] [unique_id "aURi4JJCOG7NAlbm_ORFGwAAAMg"]
[Fri Dec 19 04:24:03.781076 2025] [:error] [pid 64979:tid 64984] [client 4.194.35.48:43294] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/himu.php"] [unique_id "aURi48Tf9GnU9RkPzity3AAAAQM"]
[Fri Dec 19 04:24:04.583842 2025] [:error] [pid 61923:tid 62002] [client 4.194.35.48:45593] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/himu.php"] [unique_id "aURi5OIJyAkgoURyh1jB0wAAAJc"]
[Fri Dec 19 04:24:09.206688 2025] [:error] [pid 62008:tid 62013] [client 4.194.35.48:46950] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/himu.php"] [unique_id "aURi6ZJCOG7NAlbm_ORFJAAAAMI"]
[Fri Dec 19 04:24:11.209733 2025] [:error] [pid 61922:tid 61967] [client 4.194.35.48:50802] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/himu.php"] [unique_id "aURi6xsDXYvsvN0FFlAe7QAAAE8"]
[Fri Dec 19 04:24:12.803334 2025] [:error] [pid 61923:tid 61988] [client 4.194.35.48:46912] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wfile.php"] [unique_id "aURi7OIJyAkgoURyh1jB2wAAAIk"]
[Fri Dec 19 04:24:14.962457 2025] [:error] [pid 62008:tid 62015] [client 4.194.35.48:43834] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wfile.php"] [unique_id "aURi7pJCOG7NAlbm_ORFKQAAAMQ"]
[Fri Dec 19 04:24:16.666895 2025] [:error] [pid 61923:tid 61983] [client 4.194.35.48:49645] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wfile.php"] [unique_id "aURi8OIJyAkgoURyh1jB3QAAAIQ"]
[Fri Dec 19 04:24:18.289200 2025] [:error] [pid 64979:tid 64983] [client 4.194.35.48:49888] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wfile.php"] [unique_id "aURi8sTf9GnU9RkPzity5wAAAQI"]
[Fri Dec 19 04:24:20.512003 2025] [:error] [pid 64979:tid 64998] [client 4.194.35.48:47376] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/pp.php"] [unique_id "aURi9MTf9GnU9RkPzity6AAAARE"]
[Fri Dec 19 04:24:21.623067 2025] [:error] [pid 62008:tid 62018] [client 4.194.35.48:49911] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/pp.php"] [unique_id "aURi9ZJCOG7NAlbm_ORFLgAAAMc"]
[Fri Dec 19 04:24:25.065616 2025] [:error] [pid 61922:tid 61960] [client 4.194.35.48:47377] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/pp.php"] [unique_id "aURi-RsDXYvsvN0FFlAe-gAAAEg"]
[Fri Dec 19 04:24:26.614146 2025] [:error] [pid 61922:tid 61974] [client 4.194.35.48:47627] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/pp.php"] [unique_id "aURi-hsDXYvsvN0FFlAe-wAAAFU"]
[Fri Dec 19 04:24:27.941655 2025] [:error] [pid 61923:tid 61987] [client 4.194.35.48:43833] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/miansha.php"] [unique_id "aURi--IJyAkgoURyh1jB4QAAAIg"]
[Fri Dec 19 04:24:29.276966 2025] [:error] [pid 61922:tid 61954] [client 4.194.35.48:49974] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/miansha.php"] [unique_id "aURi_RsDXYvsvN0FFlAe_AAAAEI"]
[Fri Dec 19 04:24:31.317133 2025] [proxy_fcgi:error] [pid 61922:tid 61969] [client 4.194.35.48:49916] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:31.467804 2025] [proxy_fcgi:error] [pid 61922:tid 61964] [client 4.194.35.48:49916] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:31.661769 2025] [proxy_fcgi:error] [pid 61922:tid 61959] [client 4.194.35.48:49916] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:31.753390 2025] [proxy_fcgi:error] [pid 61922:tid 61978] [client 4.194.35.48:49916] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:31.845480 2025] [proxy_fcgi:error] [pid 61922:tid 61952] [client 4.194.35.48:49916] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:31.933203 2025] [:error] [pid 61922:tid 61966] [client 4.194.35.48:49916] [client 4.194.35.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aURi_xsDXYvsvN0FFlAfBAAAAE4"]
[Fri Dec 19 04:24:33.005816 2025] [proxy_fcgi:error] [pid 64979:tid 64996] [client 4.194.35.48:12161] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:33.112742 2025] [proxy_fcgi:error] [pid 64979:tid 64987] [client 4.194.35.48:12161] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:33.228500 2025] [proxy_fcgi:error] [pid 64979:tid 64982] [client 4.194.35.48:12161] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:33.326291 2025] [proxy_fcgi:error] [pid 64979:tid 64999] [client 4.194.35.48:12161] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:33.416990 2025] [proxy_fcgi:error] [pid 64979:tid 65001] [client 4.194.35.48:12161] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:24:33.564474 2025] [:error] [pid 64979:tid 65004] [client 4.194.35.48:12161] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class-wp.php"] [unique_id "aURjAcTf9GnU9RkPzity7wAAARc"]
[Fri Dec 19 04:24:35.269850 2025] [:error] [pid 64979:tid 64989] [client 4.194.35.48:51106] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class-wp.php"] [unique_id "aURjA8Tf9GnU9RkPzity8AAAAQg"]
[Fri Dec 19 04:24:37.660201 2025] [:error] [pid 61922:tid 61962] [client 4.194.35.48:43784] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class-wp.php"] [unique_id "aURjBRsDXYvsvN0FFlAfBgAAAEo"]
[Fri Dec 19 04:24:38.960104 2025] [:error] [pid 61923:tid 61997] [client 4.194.35.48:47381] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class-wp.php"] [unique_id "aURjBuIJyAkgoURyh1jB8AAAAJI"]
[Fri Dec 19 04:24:41.296715 2025] [:error] [pid 62008:tid 62016] [client 4.194.35.48:49936] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aURjCZJCOG7NAlbm_ORFPQAAAMU"]
[Fri Dec 19 04:24:45.592374 2025] [:error] [pid 64979:tid 65002] [client 4.194.35.48:50248] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aURjDcTf9GnU9RkPzity_AAAARU"]
[Fri Dec 19 04:24:46.004680 2025] [:error] [pid 61923:tid 61987] [client 4.194.35.48:11991] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aURjDuIJyAkgoURyh1jB-AAAAIg"]
[Fri Dec 19 04:24:48.771968 2025] [:error] [pid 62008:tid 62022] [client 4.194.35.48:12185] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aURjEJJCOG7NAlbm_ORFQQAAAMs"]
[Fri Dec 19 04:24:49.669439 2025] [:error] [pid 61922:tid 61964] [client 4.194.35.48:51301] [client 4.194.35.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aURjERsDXYvsvN0FFlAfDAAAAEw"]
[Fri Dec 19 04:24:51.915623 2025] [:error] [pid 62008:tid 62020] [client 4.194.35.48:11992] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o2.php"] [unique_id "aURjE5JCOG7NAlbm_ORFQgAAAMk"]
[Fri Dec 19 04:24:59.144495 2025] [:error] [pid 64979:tid 64995] [client 4.194.35.48:50343] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o2.php"] [unique_id "aURjG8Tf9GnU9RkPzitzBgAAAQ4"]
[Fri Dec 19 04:25:04.685427 2025] [:error] [pid 64979:tid 64998] [client 4.194.35.48:11737] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o2.php"] [unique_id "aURjIMTf9GnU9RkPzitzCgAAARE"]
[Fri Dec 19 04:25:06.311989 2025] [:error] [pid 64979:tid 64982] [client 4.194.35.48:51531] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a.php"] [unique_id "aURjIsTf9GnU9RkPzitzDAAAAQE"]
[Fri Dec 19 04:25:07.253169 2025] [:error] [pid 64979:tid 64986] [client 4.194.35.48:47694] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a.php"] [unique_id "aURjI8Tf9GnU9RkPzitzDwAAAQU"]
[Fri Dec 19 04:25:07.989523 2025] [:error] [pid 61921:tid 61934] [client 4.194.35.48:49758] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a.php"] [unique_id "aURjIyI5bruBgrPWiCCuaQAAAAk"]
[Fri Dec 19 04:25:09.810427 2025] [:error] [pid 61922:tid 61960] [client 4.194.35.48:50336] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/a.php"] [unique_id "aURjJRsDXYvsvN0FFlAfEQAAAEg"]
[Fri Dec 19 04:25:12.904361 2025] [:error] [pid 64979:tid 64982] [client 4.194.35.48:48287] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aURjKMTf9GnU9RkPzitzGwAAAQE"]
[Fri Dec 19 04:25:14.467540 2025] [:error] [pid 61923:tid 62000] [client 4.194.35.48:50346] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aURjKuIJyAkgoURyh1jCAQAAAJU"]
[Fri Dec 19 04:25:16.512247 2025] [:error] [pid 61922:tid 61956] [client 4.194.35.48:49745] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aURjLBsDXYvsvN0FFlAfFgAAAEQ"]
[Fri Dec 19 04:25:16.993277 2025] [:error] [pid 61922:tid 61964] [client 4.194.35.48:47696] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aURjLBsDXYvsvN0FFlAfGAAAAEw"]
[Fri Dec 19 04:25:18.001294 2025] [:error] [pid 61921:tid 61949] [client 4.194.35.48:47688] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/CLA.php"] [unique_id "aURjLSI5bruBgrPWiCCuhAAAABg"]
[Fri Dec 19 04:25:18.706050 2025] [:error] [pid 61921:tid 61944] [client 4.194.35.48:53023] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/CLA.php"] [unique_id "aURjLiI5bruBgrPWiCCuhgAAABM"]
[Fri Dec 19 04:25:20.981661 2025] [:error] [pid 61923:tid 61977] [client 4.194.35.48:49815] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/CLA.php"] [unique_id "aURjMOIJyAkgoURyh1jCAwAAAIE"]
[Fri Dec 19 04:25:24.239658 2025] [:error] [pid 64979:tid 64997] [client 4.194.35.48:49847] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/CLA.php"] [unique_id "aURjNMTf9GnU9RkPzitzJwAAARA"]
[Fri Dec 19 04:25:24.944673 2025] [:error] [pid 61921:tid 61946] [client 4.194.35.48:53006] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ol.php"] [unique_id "aURjNCI5bruBgrPWiCCuiQAAABU"]
[Fri Dec 19 04:25:25.570031 2025] [:error] [pid 61923:tid 61988] [client 4.194.35.48:46530] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ol.php"] [unique_id "aURjNeIJyAkgoURyh1jCCQAAAIk"]
[Fri Dec 19 04:25:26.832198 2025] [:error] [pid 61921:tid 61936] [client 4.194.35.48:49793] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ol.php"] [unique_id "aURjNiI5bruBgrPWiCCujQAAAAs"]
[Fri Dec 19 04:25:28.199562 2025] [:error] [pid 61921:tid 61928] [client 4.194.35.48:46860] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ol.php"] [unique_id "aURjOCI5bruBgrPWiCCujgAAAAM"]
[Fri Dec 19 04:25:30.830565 2025] [:error] [pid 64979:tid 64994] [client 4.194.35.48:11805] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ouh.php"] [unique_id "aURjOsTf9GnU9RkPzitzLQAAAQ0"]
[Fri Dec 19 04:25:32.601972 2025] [:error] [pid 64979:tid 65004] [client 4.194.35.48:46877] [client 4.194.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ouh.php"] [unique_id "aURjPMTf9GnU9RkPzitzLwAAARc"]
[Fri Dec 19 04:25:35.476623 2025] [proxy_fcgi:error] [pid 61922:tid 61970] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:35.568729 2025] [proxy_fcgi:error] [pid 61922:tid 61969] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:35.662837 2025] [proxy_fcgi:error] [pid 61922:tid 61964] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:35.771427 2025] [proxy_fcgi:error] [pid 61922:tid 61978] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:36.099043 2025] [proxy_fcgi:error] [pid 61922:tid 61959] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:36.211398 2025] [proxy_fcgi:error] [pid 61922:tid 61954] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:36.312641 2025] [proxy_fcgi:error] [pid 61922:tid 61975] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:36.407267 2025] [proxy_fcgi:error] [pid 61922:tid 61967] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 04:25:36.510164 2025] [proxy_fcgi:error] [pid 61922:tid 61952] [client 4.194.35.48:12111] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 05:34:58.248004 2025] [autoindex:error] [pid 47035:tid 47061] [client 170.64.215.209:19644] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 05:34:58.269741 2025] [autoindex:error] [pid 47035:tid 47049] [client 170.64.215.209:19644] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 05:34:58.284838 2025] [:error] [pid 47035:tid 47050] [client 170.64.215.209:19644] [client 170.64.215.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aURzgoy3wL45ZxTVK_UQBgAAAY0"]
[Fri Dec 19 05:34:59.706359 2025] [:error] [pid 47035:tid 47047] [client 170.64.215.209:19652] [client 170.64.215.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aURzg4y3wL45ZxTVK_UQEgAAAYo"]
[Fri Dec 19 06:38:41.914332 2025] [autoindex:error] [pid 47035:tid 47040] [client 44.210.117.108:40944] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 07:35:14.457697 2025] [:error] [pid 45026:tid 45029] [client 125.75.66.97:40777] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUSPsom-yUUgtemKdxcXawAAAUA"]
[Fri Dec 19 10:51:31.794820 2025] [:error] [pid 46781:tid 46792] [client 43.130.102.7:56766] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUS9s-U9o3uerz7jjehUqwAAAAc"]
[Fri Dec 19 13:10:16.118674 2025] [autoindex:error] [pid 20582:tid 20649] [client 104.28.154.223:32019] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 13:10:17.903581 2025] [autoindex:error] [pid 20581:tid 20616] [client 151.240.183.34:41756] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 13:10:18.600176 2025] [autoindex:error] [pid 20675:tid 20694] [client 104.28.154.223:29970] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 13:10:19.378308 2025] [autoindex:error] [pid 20581:tid 20627] [client 151.240.183.128:61710] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 16:47:00.861477 2025] [:error] [pid 20580:tid 20600] [client 43.159.141.150:55508] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUURBEmd1op_YdAdgR1LQAAAAE4"]
[Fri Dec 19 19:00:41.344944 2025] [:error] [pid 20581:tid 20632] [client 4.217.199.144:61123] [client 4.217.199.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUUwWfxEv7WXNhnFD1lnRQAAAJE"]
[Fri Dec 19 20:21:55.230902 2025] [:error] [pid 20582:tid 20649] [client 182.42.105.85:59913] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUVDY8pAnrkQKZ4b5gYwjQAAAMc"]
[Fri Dec 19 20:46:42.811882 2025] [autoindex:error] [pid 18438:tid 18454] [client 93.158.90.71:56731] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 22:29:37.759104 2025] [proxy_fcgi:error] [pid 18438:tid 18461] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:37.818386 2025] [proxy_fcgi:error] [pid 18438:tid 18444] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:37.856721 2025] [proxy_fcgi:error] [pid 18438:tid 18446] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:37.896063 2025] [proxy_fcgi:error] [pid 18438:tid 18453] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:37.934978 2025] [proxy_fcgi:error] [pid 18438:tid 18447] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:37.974049 2025] [proxy_fcgi:error] [pid 18438:tid 18456] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:38.017093 2025] [proxy_fcgi:error] [pid 18438:tid 18462] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:38.053075 2025] [proxy_fcgi:error] [pid 18438:tid 18458] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:38.098182 2025] [proxy_fcgi:error] [pid 18438:tid 18465] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:38.135825 2025] [proxy_fcgi:error] [pid 18438:tid 18457] [client 68.218.8.118:20238] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:29:38.170661 2025] [:error] [pid 18438:tid 18463] [client 68.218.8.118:20238] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aUVhUpRArClWV1iij_S55wAAAZY"]
[Fri Dec 19 22:29:38.243199 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:20328] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aUVhUkLVfhf4Jb3enmNVnAAAAUs"]
[Fri Dec 19 22:29:38.313597 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:20324] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aUVhUkmd1op_YdAdgR25oQAAAEE"]
[Fri Dec 19 22:29:38.398834 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:20239] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aUVhUspAnrkQKZ4b5gZZPgAAAMs"]
[Fri Dec 19 22:29:38.474723 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:20298] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aUVhUspAnrkQKZ4b5gZZPwAAAM8"]
[Fri Dec 19 22:29:38.557819 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:20243] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aUVhUspAnrkQKZ4b5gZZQAAAAMU"]
[Fri Dec 19 22:29:38.628283 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:20294] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aUVhUgYXFn-DbZghZBH13gAAAAA"]
[Fri Dec 19 22:29:38.705431 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:20322] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aUVhUvxEv7WXNhnFD1mfhQAAAIE"]
[Fri Dec 19 22:29:38.779217 2025] [:error] [pid 20581:tid 20628] [client 68.218.8.118:20252] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/File.php"] [unique_id "aUVhUvxEv7WXNhnFD1mfhgAAAI0"]
[Fri Dec 19 22:29:38.857094 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:20311] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/File.php"] [unique_id "aUVhUspAnrkQKZ4b5gZZQQAAANU"]
[Fri Dec 19 22:29:38.935786 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:20345] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/File.php"] [unique_id "aUVhUkmd1op_YdAdgR25pAAAAEw"]
[Fri Dec 19 22:29:39.015905 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:20297] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/File.php"] [unique_id "aUVhU_xEv7WXNhnFD1mfhwAAAJE"]
[Fri Dec 19 22:29:39.097865 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:20340] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/all.php"] [unique_id "aUVhUwYXFn-DbZghZBH14QAAAAs"]
[Fri Dec 19 22:29:39.182989 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:20338] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/all.php"] [unique_id "aUVhUwYXFn-DbZghZBH15AAAAA8"]
[Fri Dec 19 22:29:39.266120 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:20296] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/all.php"] [unique_id "aUVhU_xEv7WXNhnFD1mfiQAAAJU"]
[Fri Dec 19 22:29:39.332480 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:20271] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/all.php"] [unique_id "aUVhU0md1op_YdAdgR25pgAAAEc"]
[Fri Dec 19 22:29:39.404525 2025] [:error] [pid 20675:tid 20693] [client 68.218.8.118:20295] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aUVhU7MyJ3XqeDRsbQm4PgAAAQU"]
[Fri Dec 19 22:29:39.472960 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:20346] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aUVhUwYXFn-DbZghZBH15gAAABU"]
[Fri Dec 19 22:29:39.547455 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:20349] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aUVhUwYXFn-DbZghZBH15wAAAA4"]
[Fri Dec 19 22:29:39.626262 2025] [:error] [pid 41451:tid 41477] [client 68.218.8.118:20331] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aUVhUwYXFn-DbZghZBH16AAAABc"]
[Fri Dec 19 22:29:39.695365 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:20285] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berlin.php"] [unique_id "aUVhU0LVfhf4Jb3enmNVnwAAAUM"]
[Fri Dec 19 22:29:39.766941 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:20233] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berlin.php"] [unique_id "aUVhUwYXFn-DbZghZBH16QAAAAI"]
[Fri Dec 19 22:29:39.845963 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:20306] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berlin.php"] [unique_id "aUVhU8pAnrkQKZ4b5gZZRQAAAMo"]
[Fri Dec 19 22:29:39.927820 2025] [:error] [pid 20581:tid 20634] [client 68.218.8.118:20286] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berlin.php"] [unique_id "aUVhU_xEv7WXNhnFD1mfjQAAAJM"]
[Fri Dec 19 22:29:40.005694 2025] [:error] [pid 16026:tid 16048] [client 68.218.8.118:20343] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aUVhVELVfhf4Jb3enmNVoAAAAVM"]
[Fri Dec 19 22:29:40.085285 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:20225] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aUVhVPxEv7WXNhnFD1mfjgAAAIg"]
[Fri Dec 19 22:29:40.160516 2025] [:error] [pid 16026:tid 16039] [client 68.218.8.118:20262] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aUVhVELVfhf4Jb3enmNVoQAAAUo"]
[Fri Dec 19 22:29:40.246001 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:20234] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aUVhVAYXFn-DbZghZBH16wAAAAc"]
[Fri Dec 19 22:29:40.367380 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:20327] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api2.php"] [unique_id "aUVhVAYXFn-DbZghZBH17AAAABM"]
[Fri Dec 19 22:29:40.454044 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:20301] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api2.php"] [unique_id "aUVhVMpAnrkQKZ4b5gZZRwAAAMg"]
[Fri Dec 19 22:29:40.527256 2025] [:error] [pid 16026:tid 16052] [client 68.218.8.118:20251] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api2.php"] [unique_id "aUVhVELVfhf4Jb3enmNVowAAAVc"]
[Fri Dec 19 22:29:40.607448 2025] [:error] [pid 18438:tid 18459] [client 68.218.8.118:20263] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api2.php"] [unique_id "aUVhVJRArClWV1iij_S56AAAAZI"]
[Fri Dec 19 22:29:40.694660 2025] [:error] [pid 18438:tid 18443] [client 68.218.8.118:20299] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aUVhVJRArClWV1iij_S56QAAAYI"]
[Fri Dec 19 22:29:40.765832 2025] [:error] [pid 18438:tid 18448] [client 68.218.8.118:20241] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aUVhVJRArClWV1iij_S56gAAAYc"]
[Fri Dec 19 22:29:40.840892 2025] [:error] [pid 16026:tid 16051] [client 68.218.8.118:20242] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aUVhVELVfhf4Jb3enmNVpQAAAVY"]
[Fri Dec 19 22:29:40.917393 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:20333] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aUVhVPxEv7WXNhnFD1mfkAAAAIE"]
[Fri Dec 19 22:29:41.017624 2025] [:error] [pid 41451:tid 41467] [client 68.218.8.118:20341] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thai.php"] [unique_id "aUVhVQYXFn-DbZghZBH18AAAAA0"]
[Fri Dec 19 22:29:41.113010 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:20332] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thai.php"] [unique_id "aUVhVcpAnrkQKZ4b5gZZSwAAAMs"]
[Fri Dec 19 22:29:41.208083 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:20334] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thai.php"] [unique_id "aUVhVQYXFn-DbZghZBH18QAAABU"]
[Fri Dec 19 22:29:41.301203 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:20244] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thai.php"] [unique_id "aUVhVfxEv7WXNhnFD1mfkQAAAIA"]
[Fri Dec 19 22:29:41.384864 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:17370] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lopst.php"] [unique_id "aUVhVUmd1op_YdAdgR25qQAAAFY"]
[Fri Dec 19 22:29:41.471945 2025] [:error] [pid 16026:tid 16045] [client 68.218.8.118:20284] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lopst.php"] [unique_id "aUVhVULVfhf4Jb3enmNVpwAAAVA"]
[Fri Dec 19 22:29:41.557484 2025] [:error] [pid 16026:tid 16030] [client 68.218.8.118:20224] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lopst.php"] [unique_id "aUVhVULVfhf4Jb3enmNVqAAAAUE"]
[Fri Dec 19 22:29:41.647032 2025] [:error] [pid 20581:tid 20637] [client 68.218.8.118:17376] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lopst.php"] [unique_id "aUVhVfxEv7WXNhnFD1mfkwAAAJY"]
[Fri Dec 19 22:29:41.729309 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:20347] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aUVhVbMyJ3XqeDRsbQm4PwAAARQ"]
[Fri Dec 19 22:29:41.815615 2025] [:error] [pid 18438:tid 18461] [client 68.218.8.118:20255] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aUVhVZRArClWV1iij_S56wAAAZQ"]
[Fri Dec 19 22:29:41.905679 2025] [:error] [pid 20580:tid 20610] [client 68.218.8.118:20335] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aUVhVUmd1op_YdAdgR25rAAAAFg"]
[Fri Dec 19 22:29:41.994698 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:20290] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aUVhVcpAnrkQKZ4b5gZZTQAAAMk"]
[Fri Dec 19 22:29:42.081080 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:20329] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aUVhVkmd1op_YdAdgR25rgAAAEs"]
[Fri Dec 19 22:29:42.169828 2025] [:error] [pid 18438:tid 18456] [client 68.218.8.118:20275] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aUVhVpRArClWV1iij_S57AAAAY8"]
[Fri Dec 19 22:29:42.264544 2025] [:error] [pid 41451:tid 41466] [client 68.218.8.118:20302] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aUVhVgYXFn-DbZghZBH19QAAAAw"]
[Fri Dec 19 22:29:42.348220 2025] [:error] [pid 16026:tid 16047] [client 68.218.8.118:20348] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aUVhVkLVfhf4Jb3enmNVqgAAAVI"]
[Fri Dec 19 22:29:42.428484 2025] [:error] [pid 18438:tid 18452] [client 68.218.8.118:20318] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsheet1.php"] [unique_id "aUVhVpRArClWV1iij_S57QAAAYs"]
[Fri Dec 19 22:29:42.512311 2025] [:error] [pid 18438:tid 18459] [client 68.218.8.118:20312] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsheet1.php"] [unique_id "aUVhVpRArClWV1iij_S57gAAAZI"]
[Fri Dec 19 22:29:42.609119 2025] [:error] [pid 16026:tid 16043] [client 68.218.8.118:17385] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsheet1.php"] [unique_id "aUVhVkLVfhf4Jb3enmNVqwAAAU4"]
[Fri Dec 19 22:29:42.696122 2025] [:error] [pid 16026:tid 16039] [client 68.218.8.118:20337] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsheet1.php"] [unique_id "aUVhVkLVfhf4Jb3enmNVrQAAAUo"]
[Fri Dec 19 22:29:42.784071 2025] [:error] [pid 16026:tid 16049] [client 68.218.8.118:17361] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aUVhVkLVfhf4Jb3enmNVrgAAAVQ"]
[Fri Dec 19 22:29:42.864214 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:20269] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aUVhVrMyJ3XqeDRsbQm4QQAAAQg"]
[Fri Dec 19 22:29:42.966362 2025] [:error] [pid 16026:tid 16037] [client 68.218.8.118:20289] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aUVhVkLVfhf4Jb3enmNVrwAAAUg"]
[Fri Dec 19 22:29:43.058658 2025] [:error] [pid 16026:tid 16051] [client 68.218.8.118:20326] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aUVhV0LVfhf4Jb3enmNVsQAAAVY"]
[Fri Dec 19 22:29:43.142664 2025] [:error] [pid 16026:tid 16030] [client 68.218.8.118:17384] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vbbn.php"] [unique_id "aUVhV0LVfhf4Jb3enmNVswAAAUE"]
[Fri Dec 19 22:29:43.227445 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:20321] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vbbn.php"] [unique_id "aUVhV_xEv7WXNhnFD1mflgAAAI8"]
[Fri Dec 19 22:29:43.308621 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:20288] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vbbn.php"] [unique_id "aUVhV8pAnrkQKZ4b5gZZTgAAAMc"]
[Fri Dec 19 22:29:43.415935 2025] [:error] [pid 18438:tid 18442] [client 68.218.8.118:20254] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vbbn.php"] [unique_id "aUVhV5RArClWV1iij_S58wAAAYE"]
[Fri Dec 19 22:29:43.503638 2025] [:error] [pid 18438:tid 18459] [client 68.218.8.118:17357] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUVhV5RArClWV1iij_S59AAAAZI"]
[Fri Dec 19 22:29:43.601081 2025] [:error] [pid 18438:tid 18441] [client 68.218.8.118:17347] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUVhV5RArClWV1iij_S59gAAAYA"]
[Fri Dec 19 22:29:43.690663 2025] [:error] [pid 18438:tid 18448] [client 68.218.8.118:20339] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUVhV5RArClWV1iij_S59wAAAYc"]
[Fri Dec 19 22:29:43.776042 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:20247] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUVhV_xEv7WXNhnFD1mflwAAAII"]
[Fri Dec 19 22:29:43.859102 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:17406] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aUVhV0LVfhf4Jb3enmNVuAAAAUM"]
[Fri Dec 19 22:29:43.956221 2025] [:error] [pid 18438:tid 18444] [client 68.218.8.118:17301] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aUVhV5RArClWV1iij_S5-QAAAYM"]
[Fri Dec 19 22:29:44.054446 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:20320] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aUVhWMpAnrkQKZ4b5gZZVQAAANE"]
[Fri Dec 19 22:29:44.144657 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:20325] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aUVhWMpAnrkQKZ4b5gZZVgAAAMw"]
[Fri Dec 19 22:29:44.234367 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:20351] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aUVhWMpAnrkQKZ4b5gZZWAAAAMg"]
[Fri Dec 19 22:29:44.322527 2025] [:error] [pid 16026:tid 16031] [client 68.218.8.118:17396] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aUVhWELVfhf4Jb3enmNVvQAAAUI"]
[Fri Dec 19 22:29:44.417099 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:20248] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aUVhWMpAnrkQKZ4b5gZZWgAAANM"]
[Fri Dec 19 22:29:44.537959 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:20344] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aUVhWELVfhf4Jb3enmNVvwAAAU0"]
[Fri Dec 19 22:29:44.643136 2025] [:error] [pid 18438:tid 18447] [client 68.218.8.118:17375] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aUVhWJRArClWV1iij_S5-wAAAYY"]
[Fri Dec 19 22:29:44.742632 2025] [:error] [pid 16026:tid 16045] [client 68.218.8.118:17353] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aUVhWELVfhf4Jb3enmNVwAAAAVA"]
[Fri Dec 19 22:29:44.846333 2025] [:error] [pid 18438:tid 18449] [client 68.218.8.118:20287] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aUVhWJRArClWV1iij_S5_QAAAYg"]
[Fri Dec 19 22:29:44.947693 2025] [:error] [pid 18438:tid 18465] [client 68.218.8.118:20256] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aUVhWJRArClWV1iij_S5_wAAAZg"]
[Fri Dec 19 22:29:45.041826 2025] [:error] [pid 16026:tid 16035] [client 68.218.8.118:20336] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUVhWULVfhf4Jb3enmNVwgAAAUY"]
[Fri Dec 19 22:29:45.135644 2025] [:error] [pid 16026:tid 16036] [client 68.218.8.118:20305] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUVhWULVfhf4Jb3enmNVwwAAAUc"]
[Fri Dec 19 22:29:45.246617 2025] [:error] [pid 16026:tid 16044] [client 68.218.8.118:20245] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUVhWULVfhf4Jb3enmNVxAAAAU8"]
[Fri Dec 19 22:29:45.368812 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:17402] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aUVhWcpAnrkQKZ4b5gZZYAAAANU"]
[Fri Dec 19 22:29:45.488442 2025] [:error] [pid 18438:tid 18443] [client 68.218.8.118:20282] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aUVhWZRArClWV1iij_S6BAAAAYI"]
[Fri Dec 19 22:29:45.616118 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:20317] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aUVhWcpAnrkQKZ4b5gZZYgAAAMA"]
[Fri Dec 19 22:29:45.734465 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:20227] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aUVhWULVfhf4Jb3enmNVyAAAAUQ"]
[Fri Dec 19 22:29:45.842390 2025] [:error] [pid 16026:tid 16037] [client 68.218.8.118:20240] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aUVhWULVfhf4Jb3enmNVyQAAAUg"]
[Fri Dec 19 22:29:45.953169 2025] [:error] [pid 16026:tid 16045] [client 68.218.8.118:17391] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUVhWULVfhf4Jb3enmNVywAAAVA"]
[Fri Dec 19 22:29:46.057040 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:20308] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUVhWvxEv7WXNhnFD1mfmAAAAIY"]
[Fri Dec 19 22:29:46.141440 2025] [:error] [pid 16026:tid 16035] [client 68.218.8.118:20350] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUVhWkLVfhf4Jb3enmNVzQAAAUY"]
[Fri Dec 19 22:29:46.234662 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:20279] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUVhWvxEv7WXNhnFD1mfmQAAAIw"]
[Fri Dec 19 22:29:46.308836 2025] [:error] [pid 18438:tid 18441] [client 68.218.8.118:20228] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aUVhWpRArClWV1iij_S6BgAAAYA"]
[Fri Dec 19 22:29:46.383708 2025] [:error] [pid 20675:tid 20688] [client 68.218.8.118:17287] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aUVhWrMyJ3XqeDRsbQm4RAAAAQA"]
[Fri Dec 19 22:29:46.454247 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:20303] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aUVhWkmd1op_YdAdgR25sQAAAFU"]
[Fri Dec 19 22:29:46.536063 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:20265] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class19.php"] [unique_id "aUVhWvxEv7WXNhnFD1mfmgAAAIQ"]
[Fri Dec 19 22:29:46.618255 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:17365] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aUVhWrMyJ3XqeDRsbQm4RgAAAQE"]
[Fri Dec 19 22:29:46.691031 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:20307] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aUVhWrMyJ3XqeDRsbQm4SAAAARg"]
[Fri Dec 19 22:29:46.774315 2025] [:error] [pid 20675:tid 20709] [client 68.218.8.118:20226] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aUVhWrMyJ3XqeDRsbQm4SQAAARU"]
[Fri Dec 19 22:29:46.853931 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:17392] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aUVhWrMyJ3XqeDRsbQm4SwAAAQ0"]
[Fri Dec 19 22:29:46.934920 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:20264] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhWvxEv7WXNhnFD1mfmwAAAIU"]
[Fri Dec 19 22:29:47.027187 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:20276] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhW0md1op_YdAdgR25sgAAAFQ"]
[Fri Dec 19 22:29:47.131173 2025] [:error] [pid 20580:tid 20594] [client 68.218.8.118:17284] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhW0md1op_YdAdgR25tAAAAEg"]
[Fri Dec 19 22:29:47.240529 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:20253] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhW8pAnrkQKZ4b5gZZZgAAANc"]
[Fri Dec 19 22:29:47.348803 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:17367] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aUVhW0md1op_YdAdgR25twAAAEY"]
[Fri Dec 19 22:29:47.469603 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:17374] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aUVhW8pAnrkQKZ4b5gZZZwAAAMI"]
[Fri Dec 19 22:29:47.588720 2025] [:error] [pid 16026:tid 16047] [client 68.218.8.118:20278] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aUVhW0LVfhf4Jb3enmNVzwAAAVI"]
[Fri Dec 19 22:29:47.702939 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:17359] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aUVhW8pAnrkQKZ4b5gZZaAAAAM0"]
[Fri Dec 19 22:29:47.822928 2025] [:error] [pid 18438:tid 18462] [client 68.218.8.118:17403] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aUVhW5RArClWV1iij_S6CQAAAZU"]
[Fri Dec 19 22:29:47.952310 2025] [:error] [pid 18438:tid 18447] [client 68.218.8.118:20280] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aUVhW5RArClWV1iij_S6CgAAAYY"]
[Fri Dec 19 22:29:48.040593 2025] [:error] [pid 20581:tid 20637] [client 68.218.8.118:20300] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aUVhXPxEv7WXNhnFD1mfugAAAJY"]
[Fri Dec 19 22:29:48.111295 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:20323] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aUVhXMpAnrkQKZ4b5gZZaQAAANE"]
[Fri Dec 19 22:29:48.186262 2025] [:error] [pid 18438:tid 18456] [client 68.218.8.118:17390] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aUVhXJRArClWV1iij_S6CwAAAY8"]
[Fri Dec 19 22:29:48.264463 2025] [:error] [pid 20580:tid 20604] [client 68.218.8.118:17362] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aUVhXEmd1op_YdAdgR25xAAAAFI"]
[Fri Dec 19 22:29:48.336786 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:20232] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aUVhXPxEv7WXNhnFD1mfwwAAAIY"]
[Fri Dec 19 22:29:48.413211 2025] [:error] [pid 41451:tid 41477] [client 68.218.8.118:20229] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aUVhXAYXFn-DbZghZBH2FgAAABc"]
[Fri Dec 19 22:29:48.498825 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:20237] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUVhXAYXFn-DbZghZBH2GQAAAAk"]
[Fri Dec 19 22:29:48.574104 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:17389] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUVhXLMyJ3XqeDRsbQm4TgAAARQ"]
[Fri Dec 19 22:29:48.675365 2025] [:error] [pid 41451:tid 41462] [client 68.218.8.118:17319] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUVhXAYXFn-DbZghZBH2HQAAAAg"]
[Fri Dec 19 22:29:48.751206 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:20235] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUVhXPxEv7WXNhnFD1mf0wAAAIo"]
[Fri Dec 19 22:29:48.829998 2025] [:error] [pid 18438:tid 18458] [client 68.218.8.118:17325] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aUVhXJRArClWV1iij_S6DgAAAZE"]
[Fri Dec 19 22:29:48.917738 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:20236] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aUVhXLMyJ3XqeDRsbQm4TwAAAQo"]
[Fri Dec 19 22:29:49.002313 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:20283] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aUVhXbMyJ3XqeDRsbQm4UAAAAQ8"]
[Fri Dec 19 22:29:49.115700 2025] [:error] [pid 41451:tid 41458] [client 68.218.8.118:17405] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aUVhXQYXFn-DbZghZBH2JAAAAAQ"]
[Fri Dec 19 22:29:49.241736 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:20250] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUVhXcpAnrkQKZ4b5gZZbAAAANI"]
[Fri Dec 19 22:29:49.356223 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:20310] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUVhXUmd1op_YdAdgR25zAAAAEY"]
[Fri Dec 19 22:29:49.474529 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:17393] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUVhXbMyJ3XqeDRsbQm4UgAAAQg"]
[Fri Dec 19 22:29:49.590353 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:17394] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUVhXcpAnrkQKZ4b5gZZcAAAAMs"]
[Fri Dec 19 22:29:49.706626 2025] [:error] [pid 18438:tid 18451] [client 68.218.8.118:17388] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aUVhXZRArClWV1iij_S6DwAAAYo"]
[Fri Dec 19 22:29:49.824343 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:17346] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aUVhXULVfhf4Jb3enmNV1AAAAU0"]
[Fri Dec 19 22:29:49.940517 2025] [:error] [pid 18438:tid 18457] [client 68.218.8.118:20281] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aUVhXZRArClWV1iij_S6EAAAAZA"]
[Fri Dec 19 22:29:50.049816 2025] [:error] [pid 20675:tid 20704] [client 68.218.8.118:20309] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aUVhXrMyJ3XqeDRsbQm4VQAAARA"]
[Fri Dec 19 22:29:50.141895 2025] [:error] [pid 18438:tid 18464] [client 68.218.8.118:17397] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUVhXpRArClWV1iij_S6EQAAAZc"]
[Fri Dec 19 22:29:50.214413 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:17349] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUVhXrMyJ3XqeDRsbQm4VwAAAQE"]
[Fri Dec 19 22:29:50.290679 2025] [:error] [pid 20580:tid 20601] [client 68.218.8.118:17399] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUVhXkmd1op_YdAdgR250wAAAE8"]
[Fri Dec 19 22:29:50.376711 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:17330] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUVhXgYXFn-DbZghZBH2NgAAAAo"]
[Fri Dec 19 22:29:50.480364 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:20266] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUVhXgYXFn-DbZghZBH2OQAAAAA"]
[Fri Dec 19 22:29:50.581383 2025] [:error] [pid 20580:tid 20599] [client 68.218.8.118:20231] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUVhXkmd1op_YdAdgR251wAAAE0"]
[Fri Dec 19 22:29:50.673102 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:20297] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUVhXspAnrkQKZ4b5gZZdAAAAMo"]
[Fri Dec 19 22:29:50.770910 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:20315] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUVhXrMyJ3XqeDRsbQm4WQAAARI"]
[Fri Dec 19 22:29:50.886520 2025] [:error] [pid 18438:tid 18463] [client 68.218.8.118:20258] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUVhXpRArClWV1iij_S6FAAAAZY"]
[Fri Dec 19 22:29:51.015080 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:20246] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUVhX7MyJ3XqeDRsbQm4WwAAAQI"]
[Fri Dec 19 22:29:51.133468 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:17354] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUVhX8pAnrkQKZ4b5gZZdQAAAMI"]
[Fri Dec 19 22:29:51.257121 2025] [:error] [pid 18438:tid 18441] [client 68.218.8.118:20230] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUVhX5RArClWV1iij_S6FQAAAYA"]
[Fri Dec 19 22:29:51.377171 2025] [:error] [pid 16026:tid 16036] [client 68.218.8.118:20292] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUVhX0LVfhf4Jb3enmNV1gAAAUc"]
[Fri Dec 19 22:29:51.496582 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:20259] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUVhX8pAnrkQKZ4b5gZZdgAAANg"]
[Fri Dec 19 22:29:51.621464 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:17222] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUVhX0LVfhf4Jb3enmNV1wAAAUs"]
[Fri Dec 19 22:29:51.727042 2025] [:error] [pid 18438:tid 18446] [client 68.218.8.118:17300] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUVhX5RArClWV1iij_S6GAAAAYU"]
[Fri Dec 19 22:29:51.829062 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:20274] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUVhX8pAnrkQKZ4b5gZZeAAAAMg"]
[Fri Dec 19 22:29:51.905368 2025] [:error] [pid 18438:tid 18444] [client 68.218.8.118:17382] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUVhX5RArClWV1iij_S6GQAAAYM"]
[Fri Dec 19 22:29:51.985832 2025] [:error] [pid 18438:tid 18462] [client 68.218.8.118:20272] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUVhX5RArClWV1iij_S6GgAAAZU"]
[Fri Dec 19 22:29:52.050982 2025] [:error] [pid 18438:tid 18449] [client 68.218.8.118:17224] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUVhYJRArClWV1iij_S6GwAAAYg"]
[Fri Dec 19 22:29:52.112366 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:17286] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aUVhYAYXFn-DbZghZBH2PwAAAA8"]
[Fri Dec 19 22:29:52.188147 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:17332] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aUVhYLMyJ3XqeDRsbQm4XQAAARE"]
[Fri Dec 19 22:29:52.265792 2025] [:error] [pid 18438:tid 18455] [client 68.218.8.118:20261] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aUVhYJRArClWV1iij_S6HAAAAY4"]
[Fri Dec 19 22:29:52.342547 2025] [:error] [pid 20580:tid 20609] [client 68.218.8.118:17157] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aUVhYEmd1op_YdAdgR253QAAAFc"]
[Fri Dec 19 22:29:52.453487 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:17299] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aUVhYAYXFn-DbZghZBH2QAAAAAc"]
[Fri Dec 19 22:29:52.580857 2025] [:error] [pid 16026:tid 16047] [client 68.218.8.118:20249] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aUVhYELVfhf4Jb3enmNV2wAAAVI"]
[Fri Dec 19 22:29:52.711115 2025] [:error] [pid 16026:tid 16029] [client 68.218.8.118:17352] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aUVhYELVfhf4Jb3enmNV3AAAAUA"]
[Fri Dec 19 22:29:52.788211 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:20313] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aUVhYLMyJ3XqeDRsbQm4XgAAAQw"]
[Fri Dec 19 22:29:52.883699 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:17369] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhYPxEv7WXNhnFD1mgCQAAAJE"]
[Fri Dec 19 22:29:52.990082 2025] [:error] [pid 18438:tid 18457] [client 68.218.8.118:20316] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhYJRArClWV1iij_S6HgAAAZA"]
[Fri Dec 19 22:29:53.092371 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:17295] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhYbMyJ3XqeDRsbQm4XwAAARQ"]
[Fri Dec 19 22:29:53.190347 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:17218] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhYfxEv7WXNhnFD1mgCgAAAIU"]
[Fri Dec 19 22:29:53.264072 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:17373] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aUVhYbMyJ3XqeDRsbQm4YAAAAQo"]
[Fri Dec 19 22:29:53.355946 2025] [:error] [pid 20581:tid 20638] [client 68.218.8.118:17377] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aUVhYfxEv7WXNhnFD1mgCwAAAJc"]
[Fri Dec 19 22:29:53.420647 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:20273] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aUVhYcpAnrkQKZ4b5gZZewAAAMU"]
[Fri Dec 19 22:29:53.501764 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:17333] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aUVhYbMyJ3XqeDRsbQm4YQAAAQ8"]
[Fri Dec 19 22:29:53.574531 2025] [:error] [pid 20580:tid 20605] [client 68.218.8.118:17372] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUVhYUmd1op_YdAdgR254QAAAFM"]
[Fri Dec 19 22:29:53.653724 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:20270] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUVhYcpAnrkQKZ4b5gZZfAAAAMs"]
[Fri Dec 19 22:29:53.787260 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:17306] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUVhYcpAnrkQKZ4b5gZZfQAAAMY"]
[Fri Dec 19 22:29:53.882314 2025] [:error] [pid 20580:tid 20595] [client 68.218.8.118:17378] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUVhYUmd1op_YdAdgR254gAAAEk"]
[Fri Dec 19 22:29:53.978868 2025] [:error] [pid 18438:tid 18441] [client 68.218.8.118:17307] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUVhYZRArClWV1iij_S6IgAAAYA"]
[Fri Dec 19 22:29:54.079266 2025] [:error] [pid 18438:tid 18445] [client 68.218.8.118:17344] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUVhYpRArClWV1iij_S6IwAAAYQ"]
[Fri Dec 19 22:29:54.137944 2025] [:error] [pid 20580:tid 20610] [client 68.218.8.118:17225] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUVhYkmd1op_YdAdgR255AAAAFg"]
[Fri Dec 19 22:29:54.238776 2025] [:error] [pid 18438:tid 18455] [client 68.218.8.118:20268] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUVhYpRArClWV1iij_S6JAAAAY4"]
[Fri Dec 19 22:29:54.354213 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:20347] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUVhYkmd1op_YdAdgR255QAAAEs"]
[Fri Dec 19 22:29:54.479986 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:17383] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUVhYspAnrkQKZ4b5gZZfgAAAM8"]
[Fri Dec 19 22:29:54.596166 2025] [:error] [pid 20675:tid 20707] [client 68.218.8.118:17292] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUVhYrMyJ3XqeDRsbQm4YwAAARM"]
[Fri Dec 19 22:29:54.721038 2025] [:error] [pid 20581:tid 20631] [client 68.218.8.118:17363] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUVhYvxEv7WXNhnFD1mgDAAAAJA"]
[Fri Dec 19 22:29:54.795623 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:17340] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aUVhYvxEv7WXNhnFD1mgDQAAAI4"]
[Fri Dec 19 22:29:54.846496 2025] [:error] [pid 18438:tid 18463] [client 68.218.8.118:20319] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aUVhYpRArClWV1iij_S6JgAAAZY"]
[Fri Dec 19 22:29:54.898725 2025] [:error] [pid 20582:tid 20646] [client 68.218.8.118:17401] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aUVhYspAnrkQKZ4b5gZZfwAAAMQ"]
[Fri Dec 19 22:29:54.951863 2025] [:error] [pid 18438:tid 18442] [client 68.218.8.118:17296] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aUVhYpRArClWV1iij_S6JwAAAYE"]
[Fri Dec 19 22:29:55.004409 2025] [:error] [pid 18438:tid 18445] [client 68.218.8.118:17220] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aUVhY5RArClWV1iij_S6KAAAAYQ"]
[Fri Dec 19 22:29:55.057903 2025] [:error] [pid 20580:tid 20588] [client 68.218.8.118:17355] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aUVhY0md1op_YdAdgR255wAAAEI"]
[Fri Dec 19 22:29:55.125194 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:20348] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aUVhY0LVfhf4Jb3enmNV4gAAAUQ"]
[Fri Dec 19 22:29:55.183100 2025] [:error] [pid 16026:tid 16048] [client 68.218.8.118:17386] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aUVhY0LVfhf4Jb3enmNV4wAAAVM"]
[Fri Dec 19 22:29:55.263614 2025] [:error] [pid 16026:tid 16053] [client 68.218.8.118:17338] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhY0LVfhf4Jb3enmNV5AAAAVg"]
[Fri Dec 19 22:29:55.367794 2025] [:error] [pid 18438:tid 18458] [client 68.218.8.118:20260] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhY5RArClWV1iij_S6KwAAAZE"]
[Fri Dec 19 22:29:55.485399 2025] [:error] [pid 41451:tid 41477] [client 68.218.8.118:17314] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhYwYXFn-DbZghZBH2RgAAABc"]
[Fri Dec 19 22:29:55.621208 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:17351] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhYwYXFn-DbZghZBH2SAAAABM"]
[Fri Dec 19 22:29:55.712687 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:17283] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhY7MyJ3XqeDRsbQm4ZQAAAQE"]
[Fri Dec 19 22:29:55.820464 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:17282] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhYwYXFn-DbZghZBH2SQAAABU"]
[Fri Dec 19 22:29:55.926397 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:20342] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhYwYXFn-DbZghZBH2SgAAAAc"]
[Fri Dec 19 22:29:56.044992 2025] [:error] [pid 41451:tid 41471] [client 68.218.8.118:20288] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhZAYXFn-DbZghZBH2SwAAABE"]
[Fri Dec 19 22:29:56.144333 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:17290] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUVhZAYXFn-DbZghZBH2TAAAAA4"]
[Fri Dec 19 22:29:56.249410 2025] [:error] [pid 41451:tid 41474] [client 68.218.8.118:17348] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhZAYXFn-DbZghZBH2TQAAABQ"]
[Fri Dec 19 22:29:56.345013 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:17280] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhZPxEv7WXNhnFD1mgDwAAAJQ"]
[Fri Dec 19 22:29:56.409727 2025] [:error] [pid 16026:tid 16043] [client 68.218.8.118:17387] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aUVhZELVfhf4Jb3enmNV6AAAAU4"]
[Fri Dec 19 22:29:56.462796 2025] [:error] [pid 20580:tid 20595] [client 68.218.8.118:17246] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aUVhZEmd1op_YdAdgR256wAAAEk"]
[Fri Dec 19 22:29:56.523324 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:17368] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aUVhZAYXFn-DbZghZBH2TgAAAAI"]
[Fri Dec 19 22:29:56.572068 2025] [:error] [pid 16026:tid 16045] [client 68.218.8.118:17313] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aUVhZELVfhf4Jb3enmNV6gAAAVA"]
[Fri Dec 19 22:29:56.628020 2025] [:error] [pid 16026:tid 16030] [client 68.218.8.118:20304] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aUVhZELVfhf4Jb3enmNV6wAAAUE"]
[Fri Dec 19 22:29:56.682420 2025] [:error] [pid 16026:tid 16036] [client 68.218.8.118:20257] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVhZELVfhf4Jb3enmNV7AAAAUc"]
[Fri Dec 19 22:29:56.737122 2025] [:error] [pid 18438:tid 18450] [client 68.218.8.118:20314] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVhZJRArClWV1iij_S6LQAAAYk"]
[Fri Dec 19 22:29:56.790299 2025] [:error] [pid 20582:tid 20656] [client 68.218.8.118:17398] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVhZMpAnrkQKZ4b5gZZgQAAAM4"]
[Fri Dec 19 22:29:56.841217 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:17345] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVhZMpAnrkQKZ4b5gZZgwAAAMM"]
[Fri Dec 19 22:29:56.907530 2025] [:error] [pid 20581:tid 20626] [client 68.218.8.118:17336] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVhZPxEv7WXNhnFD1mgEQAAAIs"]
[Fri Dec 19 22:29:56.972505 2025] [:error] [pid 18438:tid 18460] [client 68.218.8.118:17223] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVhZJRArClWV1iij_S6LgAAAZM"]
[Fri Dec 19 22:29:57.050939 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:17261] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVhZcpAnrkQKZ4b5gZZhAAAAMo"]
[Fri Dec 19 22:29:57.138870 2025] [:error] [pid 16026:tid 16049] [client 68.218.8.118:17364] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVhZULVfhf4Jb3enmNV7QAAAVQ"]
[Fri Dec 19 22:29:57.231102 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:17229] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUVhZfxEv7WXNhnFD1mgEgAAAIw"]
[Fri Dec 19 22:29:57.329533 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:17281] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUVhZfxEv7WXNhnFD1mgEwAAAJg"]
[Fri Dec 19 22:29:57.429289 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:17305] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUVhZULVfhf4Jb3enmNV7wAAAUs"]
[Fri Dec 19 22:29:57.537280 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:17350] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aUVhZQYXFn-DbZghZBH2UAAAAAA"]
[Fri Dec 19 22:29:57.656799 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:17303] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhZUmd1op_YdAdgR257gAAAEs"]
[Fri Dec 19 22:29:57.765763 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:17395] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhZfxEv7WXNhnFD1mgFAAAAIQ"]
[Fri Dec 19 22:29:57.871628 2025] [:error] [pid 16026:tid 16048] [client 68.218.8.118:17257] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhZULVfhf4Jb3enmNV8AAAAVM"]
[Fri Dec 19 22:29:57.971459 2025] [:error] [pid 18438:tid 18451] [client 68.218.8.118:17297] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUVhZZRArClWV1iij_S6MwAAAYo"]
[Fri Dec 19 22:29:58.032377 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:17289] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgFQAAAIU"]
[Fri Dec 19 22:29:58.092544 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:17407] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUVhZkmd1op_YdAdgR258AAAAEY"]
[Fri Dec 19 22:29:58.156319 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:17380] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUVhZkmd1op_YdAdgR258gAAAEo"]
[Fri Dec 19 22:29:58.218269 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:17371] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgFgAAAJI"]
[Fri Dec 19 22:29:58.283073 2025] [:error] [pid 16026:tid 16029] [client 68.218.8.118:17298] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aUVhZkLVfhf4Jb3enmNV8wAAAUA"]
[Fri Dec 19 22:29:58.344948 2025] [:error] [pid 20581:tid 20631] [client 68.218.8.118:17254] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgGAAAAJA"]
[Fri Dec 19 22:29:58.419275 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:17311] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgGgAAAIc"]
[Fri Dec 19 22:29:58.541027 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:17187] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgGwAAAIM"]
[Fri Dec 19 22:29:58.670802 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:20240] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgHQAAAI8"]
[Fri Dec 19 22:29:58.791886 2025] [:error] [pid 20580:tid 20594] [client 68.218.8.118:17294] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhZkmd1op_YdAdgR258wAAAEg"]
[Fri Dec 19 22:29:58.912836 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:17252] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhZvxEv7WXNhnFD1mgHgAAAIg"]
[Fri Dec 19 22:29:59.031915 2025] [:error] [pid 41451:tid 41460] [client 68.218.8.118:17265] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aUVhZwYXFn-DbZghZBH2UQAAAAY"]
[Fri Dec 19 22:29:59.153925 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:17231] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUVhZ_xEv7WXNhnFD1mgIAAAAIw"]
[Fri Dec 19 22:29:59.280794 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:17256] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUVhZ_xEv7WXNhnFD1mgIgAAAIQ"]
[Fri Dec 19 22:29:59.412564 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:17316] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUVhZ0md1op_YdAdgR259AAAAEU"]
[Fri Dec 19 22:29:59.538530 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:17200] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUVhZ_xEv7WXNhnFD1mgJQAAAIA"]
[Fri Dec 19 22:29:59.613508 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:20291] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVhZ7MyJ3XqeDRsbQm4ZwAAAQc"]
[Fri Dec 19 22:29:59.684834 2025] [:error] [pid 20675:tid 20693] [client 68.218.8.118:17236] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVhZ7MyJ3XqeDRsbQm4aAAAAQU"]
[Fri Dec 19 22:29:59.747454 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:17228] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVhZ7MyJ3XqeDRsbQm4aQAAARc"]
[Fri Dec 19 22:29:59.830623 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:17374] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVhZ7MyJ3XqeDRsbQm4agAAARY"]
[Fri Dec 19 22:29:59.905272 2025] [:error] [pid 18438:tid 18456] [client 68.218.8.118:17219] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUVhZ5RArClWV1iij_S6OQAAAY8"]
[Fri Dec 19 22:29:59.978371 2025] [:error] [pid 18438:tid 18458] [client 68.218.8.118:17400] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUVhZ5RArClWV1iij_S6OwAAAZE"]
[Fri Dec 19 22:30:00.063089 2025] [:error] [pid 16026:tid 16049] [client 68.218.8.118:17339] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUVhaELVfhf4Jb3enmNV9gAAAVQ"]
[Fri Dec 19 22:30:00.169675 2025] [:error] [pid 18438:tid 18461] [client 68.218.8.118:20293] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUVhaJRArClWV1iij_S6PQAAAZQ"]
[Fri Dec 19 22:30:00.251783 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:20277] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVhaELVfhf4Jb3enmNV9wAAAUs"]
[Fri Dec 19 22:30:00.341264 2025] [:error] [pid 16026:tid 16050] [client 68.218.8.118:20267] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVhaELVfhf4Jb3enmNV-AAAAVU"]
[Fri Dec 19 22:30:00.427472 2025] [:error] [pid 18438:tid 18450] [client 68.218.8.118:20323] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVhaJRArClWV1iij_S6PgAAAYk"]
[Fri Dec 19 22:30:00.526095 2025] [:error] [pid 18438:tid 18459] [client 68.218.8.118:17390] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVhaJRArClWV1iij_S6QQAAAZI"]
[Fri Dec 19 22:30:00.626877 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:17226] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUVhaELVfhf4Jb3enmNV-gAAAUQ"]
[Fri Dec 19 22:30:00.742176 2025] [:error] [pid 16026:tid 16048] [client 68.218.8.118:17158] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUVhaELVfhf4Jb3enmNV-wAAAVM"]
[Fri Dec 19 22:30:00.853777 2025] [:error] [pid 16026:tid 16047] [client 68.218.8.118:17212] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUVhaELVfhf4Jb3enmNV_QAAAVI"]
[Fri Dec 19 22:30:00.955031 2025] [:error] [pid 16026:tid 16051] [client 68.218.8.118:17234] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUVhaELVfhf4Jb3enmNV_gAAAVY"]
[Fri Dec 19 22:30:01.068262 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:17310] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aUVhacpAnrkQKZ4b5gZZigAAANM"]
[Fri Dec 19 22:30:01.188811 2025] [:error] [pid 16026:tid 16031] [client 68.218.8.118:17329] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aUVhaULVfhf4Jb3enmNWAAAAAUI"]
[Fri Dec 19 22:30:01.267500 2025] [:error] [pid 16026:tid 16038] [client 68.218.8.118:17238] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aUVhaULVfhf4Jb3enmNWAQAAAUk"]
[Fri Dec 19 22:30:01.358954 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:17328] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about3.php"] [unique_id "aUVhacpAnrkQKZ4b5gZZjQAAAMU"]
[Fri Dec 19 22:30:01.452633 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:17323] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUVhacpAnrkQKZ4b5gZZjwAAAM8"]
[Fri Dec 19 22:30:01.551958 2025] [:error] [pid 16026:tid 16041] [client 68.218.8.118:17248] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUVhaULVfhf4Jb3enmNWAgAAAUw"]
[Fri Dec 19 22:30:01.677503 2025] [:error] [pid 20580:tid 20595] [client 68.218.8.118:20330] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUVhaUmd1op_YdAdgR259gAAAEk"]
[Fri Dec 19 22:30:01.795467 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:17315] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUVhaULVfhf4Jb3enmNWBAAAAU0"]
[Fri Dec 19 22:30:01.926766 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:17302] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVhaULVfhf4Jb3enmNWBQAAAUM"]
[Fri Dec 19 22:30:02.029988 2025] [:error] [pid 16026:tid 16030] [client 68.218.8.118:17232] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVhakLVfhf4Jb3enmNWBwAAAUE"]
[Fri Dec 19 22:30:02.133283 2025] [:error] [pid 16026:tid 16034] [client 68.218.8.118:17245] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVhakLVfhf4Jb3enmNWCAAAAUU"]
[Fri Dec 19 22:30:02.234091 2025] [:error] [pid 16026:tid 16049] [client 68.218.8.118:17288] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVhakLVfhf4Jb3enmNWCQAAAVQ"]
[Fri Dec 19 22:30:02.345117 2025] [:error] [pid 18438:tid 18463] [client 68.218.8.118:17156] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUVhapRArClWV1iij_S6SAAAAZY"]
[Fri Dec 19 22:30:02.442587 2025] [:error] [pid 16026:tid 16050] [client 68.218.8.118:17274] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUVhakLVfhf4Jb3enmNWCgAAAVU"]
[Fri Dec 19 22:30:02.540082 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:17273] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUVhakLVfhf4Jb3enmNWCwAAAUQ"]
[Fri Dec 19 22:30:02.639643 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:17221] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUVhaspAnrkQKZ4b5gZZlQAAANE"]
[Fri Dec 19 22:30:02.747616 2025] [:error] [pid 18438:tid 18454] [client 68.218.8.118:17379] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUVhapRArClWV1iij_S6SwAAAY0"]
[Fri Dec 19 22:30:02.867722 2025] [:error] [pid 18438:tid 18449] [client 68.218.8.118:17243] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUVhapRArClWV1iij_S6TAAAAYg"]
[Fri Dec 19 22:30:02.972703 2025] [:error] [pid 16026:tid 16039] [client 68.218.8.118:20266] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUVhakLVfhf4Jb3enmNWEAAAAUo"]
[Fri Dec 19 22:30:03.078864 2025] [:error] [pid 16026:tid 16047] [client 68.218.8.118:17356] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUVha0LVfhf4Jb3enmNWEQAAAVI"]
[Fri Dec 19 22:30:03.169875 2025] [:error] [pid 16026:tid 16035] [client 68.218.8.118:20297] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aUVha0LVfhf4Jb3enmNWEgAAAUY"]
[Fri Dec 19 22:30:03.247179 2025] [:error] [pid 41451:tid 41477] [client 68.218.8.118:17253] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aUVhawYXFn-DbZghZBH2UgAAABc"]
[Fri Dec 19 22:30:03.327494 2025] [:error] [pid 16026:tid 16031] [client 68.218.8.118:17153] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aUVha0LVfhf4Jb3enmNWFQAAAUI"]
[Fri Dec 19 22:30:03.412805 2025] [:error] [pid 16026:tid 16038] [client 68.218.8.118:17237] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aUVha0LVfhf4Jb3enmNWFgAAAUk"]
[Fri Dec 19 22:30:03.482066 2025] [:error] [pid 18438:tid 18459] [client 68.218.8.118:17366] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aUVha5RArClWV1iij_S6UQAAAZI"]
[Fri Dec 19 22:30:03.555406 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:17358] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aUVha7MyJ3XqeDRsbQm4bQAAAQ8"]
[Fri Dec 19 22:30:03.630127 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:17227] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aUVhawYXFn-DbZghZBH2VAAAABg"]
[Fri Dec 19 22:30:03.714539 2025] [:error] [pid 16026:tid 16043] [client 68.218.8.118:17335] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aUVha0LVfhf4Jb3enmNWGQAAAU4"]
[Fri Dec 19 22:30:03.793974 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:17159] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVha0LVfhf4Jb3enmNWGgAAAU0"]
[Fri Dec 19 22:30:03.886302 2025] [:error] [pid 18438:tid 18455] [client 68.218.8.118:17180] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVha5RArClWV1iij_S6UgAAAY4"]
[Fri Dec 19 22:30:03.996745 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:17309] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVha8pAnrkQKZ4b5gZZnAAAAMs"]
[Fri Dec 19 22:30:04.121934 2025] [:error] [pid 18438:tid 18453] [client 68.218.8.118:17331] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aUVhbJRArClWV1iij_S6UwAAAYw"]
[Fri Dec 19 22:30:04.224042 2025] [:error] [pid 18438:tid 18464] [client 68.218.8.118:17291] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUVhbJRArClWV1iij_S6VQAAAZc"]
[Fri Dec 19 22:30:04.328207 2025] [:error] [pid 18438:tid 18462] [client 68.218.8.118:20251] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUVhbJRArClWV1iij_S6VgAAAZU"]
[Fri Dec 19 22:30:04.439368 2025] [:error] [pid 18438:tid 18443] [client 68.218.8.118:17275] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUVhbJRArClWV1iij_S6VwAAAYI"]
[Fri Dec 19 22:30:04.541014 2025] [:error] [pid 20582:tid 20658] [client 68.218.8.118:17155] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUVhbMpAnrkQKZ4b5gZZoAAAANA"]
[Fri Dec 19 22:30:04.652606 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:17337] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUVhbMpAnrkQKZ4b5gZZoQAAANU"]
[Fri Dec 19 22:30:04.782390 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:17277] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUVhbELVfhf4Jb3enmNWIwAAAUs"]
[Fri Dec 19 22:30:04.906613 2025] [:error] [pid 18438:tid 18452] [client 68.218.8.118:17369] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUVhbJRArClWV1iij_S6WQAAAYs"]
[Fri Dec 19 22:30:05.011438 2025] [:error] [pid 18438:tid 18446] [client 68.218.8.118:17249] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aUVhbZRArClWV1iij_S6WwAAAYU"]
[Fri Dec 19 22:30:05.114804 2025] [:error] [pid 16026:tid 16046] [client 68.218.8.118:17324] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUVhbULVfhf4Jb3enmNWJQAAAVE"]
[Fri Dec 19 22:30:05.216884 2025] [:error] [pid 18438:tid 18448] [client 68.218.8.118:17322] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUVhbZRArClWV1iij_S6XQAAAYc"]
[Fri Dec 19 22:30:05.321092 2025] [:error] [pid 18438:tid 18454] [client 68.218.8.118:17271] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUVhbZRArClWV1iij_S6XgAAAY0"]
[Fri Dec 19 22:30:05.416879 2025] [:error] [pid 18438:tid 18449] [client 68.218.8.118:17230] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUVhbZRArClWV1iij_S6YQAAAYg"]
[Fri Dec 19 22:30:05.528505 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:17233] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUVhbcpAnrkQKZ4b5gZZqAAAANc"]
[Fri Dec 19 22:30:05.633398 2025] [:error] [pid 18438:tid 18447] [client 68.218.8.118:17100] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUVhbZRArClWV1iij_S6ZAAAAYY"]
[Fri Dec 19 22:30:05.732861 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:17293] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUVhbUmd1op_YdAdgR259wAAAFU"]
[Fri Dec 19 22:30:05.849902 2025] [:error] [pid 20675:tid 20707] [client 68.218.8.118:17204] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUVhbbMyJ3XqeDRsbQm4bwAAARM"]
[Fri Dec 19 22:30:05.964593 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:17251] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUVhbcpAnrkQKZ4b5gZZqgAAANg"]
[Fri Dec 19 22:30:06.085861 2025] [:error] [pid 18438:tid 18464] [client 68.218.8.118:20268] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUVhbpRArClWV1iij_S6ZgAAAZc"]
[Fri Dec 19 22:30:06.219273 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:17341] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUVhbgYXFn-DbZghZBH2VwAAAA4"]
[Fri Dec 19 22:30:06.334601 2025] [:error] [pid 18438:tid 18446] [client 68.218.8.118:17259] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUVhbpRArClWV1iij_S6aAAAAYU"]
[Fri Dec 19 22:30:06.463639 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:17163] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUVhbvxEv7WXNhnFD1mgKgAAAIc"]
[Fri Dec 19 22:30:06.546760 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:17208] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUVhbkmd1op_YdAdgR25-gAAAEE"]
[Fri Dec 19 22:30:06.642490 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:17198] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUVhbspAnrkQKZ4b5gZZrgAAANY"]
[Fri Dec 19 22:30:06.720909 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:17260] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUVhbvxEv7WXNhnFD1mgKwAAAII"]
[Fri Dec 19 22:30:06.793094 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:17326] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUVhbkmd1op_YdAdgR25-wAAAEo"]
[Fri Dec 19 22:30:06.866899 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:17193] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUVhbspAnrkQKZ4b5gZZsAAAAMA"]
[Fri Dec 19 22:30:06.956387 2025] [:error] [pid 18438:tid 18448] [client 68.218.8.118:17342] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUVhbpRArClWV1iij_S6aQAAAYc"]
[Fri Dec 19 22:30:07.040891 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:17268] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUVhb0md1op_YdAdgR25_AAAAE4"]
[Fri Dec 19 22:30:07.162485 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:17202] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUVhb0LVfhf4Jb3enmNWMQAAAUM"]
[Fri Dec 19 22:30:07.282582 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:17263] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUVhb8pAnrkQKZ4b5gZZtAAAAMg"]
[Fri Dec 19 22:30:07.374155 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:17118] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUVhb_xEv7WXNhnFD1mgLgAAAJU"]
[Fri Dec 19 22:30:07.482441 2025] [:error] [pid 16026:tid 16050] [client 68.218.8.118:17197] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUVhb0LVfhf4Jb3enmNWNAAAAVU"]
[Fri Dec 19 22:30:07.605929 2025] [:error] [pid 18438:tid 18461] [client 68.218.8.118:17269] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUVhb5RArClWV1iij_S6awAAAZQ"]
[Fri Dec 19 22:30:07.707371 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:17255] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUVhb8pAnrkQKZ4b5gZZtwAAAMk"]
[Fri Dec 19 22:30:07.810803 2025] [:error] [pid 16026:tid 16036] [client 68.218.8.118:17247] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUVhb0LVfhf4Jb3enmNWNwAAAUc"]
[Fri Dec 19 22:30:07.862965 2025] [:error] [pid 20675:tid 20709] [client 68.218.8.118:17171] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUVhb7MyJ3XqeDRsbQm4cwAAARU"]
[Fri Dec 19 22:30:07.921175 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:17317] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUVhb7MyJ3XqeDRsbQm4dAAAAQ0"]
[Fri Dec 19 22:30:07.983932 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:17211] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUVhb_xEv7WXNhnFD1mgMQAAAIY"]
[Fri Dec 19 22:30:08.057694 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:17174] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUVhcMpAnrkQKZ4b5gZZuQAAAMs"]
[Fri Dec 19 22:30:08.153888 2025] [:error] [pid 16026:tid 16046] [client 68.218.8.118:17235] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUVhcELVfhf4Jb3enmNWOAAAAVE"]
[Fri Dec 19 22:30:08.248147 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:17089] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVhcLMyJ3XqeDRsbQm4dQAAARY"]
[Fri Dec 19 22:30:08.338986 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:17241] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVhcLMyJ3XqeDRsbQm4dgAAARE"]
[Fri Dec 19 22:30:08.410369 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:17091] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVhcEmd1op_YdAdgR25_wAAAEc"]
[Fri Dec 19 22:30:08.476519 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:17320] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVhcEmd1op_YdAdgR26AAAAAFA"]
[Fri Dec 19 22:30:08.540196 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:17250] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUVhcEmd1op_YdAdgR26AgAAAEU"]
[Fri Dec 19 22:30:08.606510 2025] [:error] [pid 18438:tid 18453] [client 68.218.8.118:17267] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUVhcJRArClWV1iij_S6bgAAAYw"]
[Fri Dec 19 22:30:08.675627 2025] [:error] [pid 41451:tid 41476] [client 68.218.8.118:17170] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUVhcAYXFn-DbZghZBH2XAAAABY"]
[Fri Dec 19 22:30:08.745165 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:17189] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUVhcPxEv7WXNhnFD1mgMgAAAIU"]
[Fri Dec 19 22:30:08.825383 2025] [:error] [pid 18438:tid 18446] [client 68.218.8.118:17242] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUVhcJRArClWV1iij_S6cQAAAYU"]
[Fri Dec 19 22:30:08.888240 2025] [:error] [pid 18438:tid 18451] [client 68.218.8.118:17244] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUVhcJRArClWV1iij_S6cgAAAYo"]
[Fri Dec 19 22:30:08.948778 2025] [:error] [pid 18438:tid 18447] [client 68.218.8.118:17321] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUVhcJRArClWV1iij_S6cwAAAYY"]
[Fri Dec 19 22:30:09.012040 2025] [:error] [pid 20581:tid 20637] [client 68.218.8.118:17119] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUVhcfxEv7WXNhnFD1mgNQAAAJY"]
[Fri Dec 19 22:30:09.083094 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:17199] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUVhcfxEv7WXNhnFD1mgNwAAAI4"]
[Fri Dec 19 22:30:09.157947 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:17266] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUVhcUmd1op_YdAdgR26AwAAAFQ"]
[Fri Dec 19 22:30:09.261268 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:17216] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUVhcfxEv7WXNhnFD1mgOAAAAJU"]
[Fri Dec 19 22:30:09.386844 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:17196] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUVhcfxEv7WXNhnFD1mgOgAAAJg"]
[Fri Dec 19 22:30:09.496527 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:17262] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUVhcbMyJ3XqeDRsbQm4dwAAAQo"]
[Fri Dec 19 22:30:09.609881 2025] [:error] [pid 20580:tid 20610] [client 68.218.8.118:17108] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUVhcUmd1op_YdAdgR26BQAAAFg"]
[Fri Dec 19 22:30:09.731357 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:17172] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUVhccpAnrkQKZ4b5gZZugAAAMw"]
[Fri Dec 19 22:30:09.844590 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:17106] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUVhccpAnrkQKZ4b5gZZuwAAANQ"]
[Fri Dec 19 22:30:09.962707 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:17141] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aUVhcQYXFn-DbZghZBH2XgAAAAk"]
[Fri Dec 19 22:30:10.090701 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:17191] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aUVhcgYXFn-DbZghZBH2YAAAABA"]
[Fri Dec 19 22:30:10.220790 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:17109] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aUVhcrMyJ3XqeDRsbQm4eQAAAQE"]
[Fri Dec 19 22:30:10.345066 2025] [:error] [pid 20580:tid 20604] [client 68.218.8.118:17318] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aUVhckmd1op_YdAdgR26CQAAAFI"]
[Fri Dec 19 22:30:10.452387 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:17161] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUVhcvxEv7WXNhnFD1mgQgAAAIc"]
[Fri Dec 19 22:30:10.565955 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:17304] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUVhckmd1op_YdAdgR26DAAAAEo"]
[Fri Dec 19 22:30:10.679678 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:17217] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUVhckmd1op_YdAdgR26DQAAAE4"]
[Fri Dec 19 22:30:10.817662 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:17123] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUVhckmd1op_YdAdgR26DwAAAEY"]
[Fri Dec 19 22:30:10.918494 2025] [:error] [pid 18438:tid 18444] [client 68.218.8.118:17270] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUVhcpRArClWV1iij_S6dAAAAYM"]
[Fri Dec 19 22:30:11.024595 2025] [:error] [pid 20580:tid 20586] [client 68.218.8.118:17168] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUVhc0md1op_YdAdgR26EgAAAEA"]
[Fri Dec 19 22:30:11.126421 2025] [:error] [pid 18438:tid 18450] [client 68.218.8.118:17178] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUVhc5RArClWV1iij_S6dQAAAYk"]
[Fri Dec 19 22:30:11.230966 2025] [:error] [pid 41451:tid 41457] [client 68.218.8.118:17215] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUVhcwYXFn-DbZghZBH2YwAAAAM"]
[Fri Dec 19 22:30:11.327404 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:17327] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aUVhc8pAnrkQKZ4b5gZZvAAAAMg"]
[Fri Dec 19 22:30:11.422648 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:17162] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aUVhc7MyJ3XqeDRsbQm4egAAARI"]
[Fri Dec 19 22:30:11.525563 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:17129] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aUVhc0md1op_YdAdgR26GgAAAEM"]
[Fri Dec 19 22:30:11.629121 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:17110] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aUVhc0md1op_YdAdgR26HAAAAFY"]
[Fri Dec 19 22:30:11.727704 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:17209] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUVhc8pAnrkQKZ4b5gZZvgAAANg"]
[Fri Dec 19 22:30:11.827591 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:17334] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUVhc_xEv7WXNhnFD1mgRgAAAJU"]
[Fri Dec 19 22:30:11.937998 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:17248] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUVhc8pAnrkQKZ4b5gZZwAAAAMU"]
[Fri Dec 19 22:30:12.031980 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:17185] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUVhdELVfhf4Jb3enmNWPQAAAU0"]
[Fri Dec 19 22:30:12.122777 2025] [:error] [pid 20581:tid 20626] [client 68.218.8.118:17240] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUVhdPxEv7WXNhnFD1mgRwAAAIs"]
[Fri Dec 19 22:30:12.217177 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:17176] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUVhdEmd1op_YdAdgR26IQAAAE4"]
[Fri Dec 19 22:30:12.336187 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:17213] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUVhdPxEv7WXNhnFD1mgSQAAAIY"]
[Fri Dec 19 22:30:12.428151 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:17175] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUVhdLMyJ3XqeDRsbQm4ewAAARg"]
[Fri Dec 19 22:30:12.512787 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:17101] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUVhdPxEv7WXNhnFD1mgSwAAAJg"]
[Fri Dec 19 22:30:12.605070 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:17151] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUVhdELVfhf4Jb3enmNWPwAAAUM"]
[Fri Dec 19 22:30:12.689183 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:17164] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUVhdPxEv7WXNhnFD1mgTQAAAIA"]
[Fri Dec 19 22:30:12.769817 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:17278] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUVhdEmd1op_YdAdgR26IwAAAFQ"]
[Fri Dec 19 22:30:12.842327 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:17105] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUVhdEmd1op_YdAdgR26JQAAAEc"]
[Fri Dec 19 22:30:12.920914 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:17207] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUVhdEmd1op_YdAdgR26JwAAAEM"]
[Fri Dec 19 22:30:12.996407 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:17221] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUVhdLMyJ3XqeDRsbQm4fAAAAQI"]
[Fri Dec 19 22:30:13.071912 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:17343] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUVhdbMyJ3XqeDRsbQm4fgAAAQ0"]
[Fri Dec 19 22:30:13.145011 2025] [:error] [pid 20675:tid 20693] [client 68.218.8.118:17188] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUVhdbMyJ3XqeDRsbQm4gAAAAQU"]
[Fri Dec 19 22:30:13.219278 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:17111] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUVhdcpAnrkQKZ4b5gZZxAAAANU"]
[Fri Dec 19 22:30:13.294189 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:17404] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUVhdULVfhf4Jb3enmNWQQAAAUQ"]
[Fri Dec 19 22:30:13.372001 2025] [:error] [pid 16026:tid 16044] [client 68.218.8.118:17102] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUVhdULVfhf4Jb3enmNWQwAAAU8"]
[Fri Dec 19 22:30:13.452990 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:17195] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUVhdUmd1op_YdAdgR26KQAAAFY"]
[Fri Dec 19 22:30:13.523541 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:17312] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUVhdfxEv7WXNhnFD1mgUgAAAIc"]
[Fri Dec 19 22:30:13.602481 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:17214] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUVhdcpAnrkQKZ4b5gZZxQAAANE"]
[Fri Dec 19 22:30:13.682637 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:17381] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUVhdbMyJ3XqeDRsbQm4hAAAAQ8"]
[Fri Dec 19 22:30:13.773597 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:17360] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUVhdbMyJ3XqeDRsbQm4hQAAAQg"]
[Fri Dec 19 22:30:13.872560 2025] [:error] [pid 16026:tid 16035] [client 68.218.8.118:17093] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUVhdULVfhf4Jb3enmNWRgAAAUY"]
[Fri Dec 19 22:30:13.946828 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:20285] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUVhdfxEv7WXNhnFD1mgUwAAAIE"]
[Fri Dec 19 22:30:14.023690 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:17042] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUVhdspAnrkQKZ4b5gZZyAAAAMI"]
[Fri Dec 19 22:30:14.104313 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:17335] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUVhdvxEv7WXNhnFD1mgVAAAAJU"]
[Fri Dec 19 22:30:14.182870 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:17112] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUVhdrMyJ3XqeDRsbQm4hwAAAQE"]
[Fri Dec 19 22:30:14.268700 2025] [:error] [pid 16026:tid 16031] [client 68.218.8.118:17037] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUVhdkLVfhf4Jb3enmNWSAAAAUI"]
[Fri Dec 19 22:30:14.350667 2025] [:error] [pid 20581:tid 20628] [client 68.218.8.118:17117] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUVhdvxEv7WXNhnFD1mgVQAAAI0"]
[Fri Dec 19 22:30:14.447012 2025] [:error] [pid 20675:tid 20691] [client 68.218.8.118:20327] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUVhdrMyJ3XqeDRsbQm4iAAAAQM"]
[Fri Dec 19 22:30:14.537104 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:17177] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUVhdspAnrkQKZ4b5gZZygAAAMk"]
[Fri Dec 19 22:30:14.630633 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:17096] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUVhdvxEv7WXNhnFD1mgVgAAAIg"]
[Fri Dec 19 22:30:14.730205 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:17166] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUVhdvxEv7WXNhnFD1mgVwAAAIY"]
[Fri Dec 19 22:30:14.832083 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:17088] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUVhdrMyJ3XqeDRsbQm4iQAAAQQ"]
[Fri Dec 19 22:30:14.945210 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:17116] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUVhdrMyJ3XqeDRsbQm4igAAAQI"]
[Fri Dec 19 22:30:15.078543 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:17165] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUVhd_xEv7WXNhnFD1mgWQAAAJg"]
[Fri Dec 19 22:30:15.157643 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:17028] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUVhd_xEv7WXNhnFD1mgWgAAAIQ"]
[Fri Dec 19 22:30:15.240791 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:17308] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUVhd_xEv7WXNhnFD1mgWwAAAIA"]
[Fri Dec 19 22:30:15.327972 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:17279] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUVhd_xEv7WXNhnFD1mgXAAAAJI"]
[Fri Dec 19 22:30:15.407795 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:17128] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUVhd_xEv7WXNhnFD1mgXQAAAJE"]
[Fri Dec 19 22:30:15.489684 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:17194] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUVhd7MyJ3XqeDRsbQm4jQAAAQc"]
[Fri Dec 19 22:30:15.569008 2025] [:error] [pid 20582:tid 20646] [client 68.218.8.118:17140] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUVhd8pAnrkQKZ4b5gZZzQAAAMQ"]
[Fri Dec 19 22:30:15.655096 2025] [:error] [pid 16026:tid 16053] [client 68.218.8.118:17145] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUVhd0LVfhf4Jb3enmNWSwAAAVg"]
[Fri Dec 19 22:30:15.727520 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:17218] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUVhd0LVfhf4Jb3enmNWTAAAAUM"]
[Fri Dec 19 22:30:15.790680 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:17181] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUVhd8pAnrkQKZ4b5gZZzgAAAM8"]
[Fri Dec 19 22:30:15.894925 2025] [:error] [pid 16026:tid 16041] [client 68.218.8.118:17271] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aUVhd0LVfhf4Jb3enmNWTQAAAUw"]
[Fri Dec 19 22:30:15.986861 2025] [:error] [pid 16026:tid 16034] [client 68.218.8.118:17094] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aUVhd0LVfhf4Jb3enmNWTwAAAUU"]
[Fri Dec 19 22:30:16.085261 2025] [:error] [pid 16026:tid 16050] [client 68.218.8.118:17133] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aUVheELVfhf4Jb3enmNWUgAAAVU"]
[Fri Dec 19 22:30:16.152052 2025] [:error] [pid 16026:tid 16044] [client 68.218.8.118:17122] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aUVheELVfhf4Jb3enmNWVAAAAU8"]
[Fri Dec 19 22:30:16.215661 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:17098] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUVheEmd1op_YdAdgR26KgAAAEo"]
[Fri Dec 19 22:30:16.277861 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:17075] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUVheEmd1op_YdAdgR26LAAAAFE"]
[Fri Dec 19 22:30:16.339152 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:17099] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUVheMpAnrkQKZ4b5gZZzwAAAMo"]
[Fri Dec 19 22:30:16.398142 2025] [:error] [pid 16026:tid 16035] [client 68.218.8.118:17203] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUVheELVfhf4Jb3enmNWVQAAAUY"]
[Fri Dec 19 22:30:16.457028 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:17239] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aUVheLMyJ3XqeDRsbQm4kAAAARc"]
[Fri Dec 19 22:30:16.511880 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:17147] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aUVheMpAnrkQKZ4b5gZZ0AAAANM"]
[Fri Dec 19 22:30:16.575856 2025] [:error] [pid 20582:tid 20656] [client 68.218.8.118:17205] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aUVheMpAnrkQKZ4b5gZZ0QAAAM4"]
[Fri Dec 19 22:30:16.636060 2025] [:error] [pid 16026:tid 16038] [client 68.218.8.118:17033] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aUVheELVfhf4Jb3enmNWVwAAAUk"]
[Fri Dec 19 22:30:16.694909 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:17107] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUVheMpAnrkQKZ4b5gZZ0gAAANc"]
[Fri Dec 19 22:30:16.755665 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:17190] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUVheLMyJ3XqeDRsbQm4kQAAAQs"]
[Fri Dec 19 22:30:16.824426 2025] [:error] [pid 16026:tid 16053] [client 68.218.8.118:17131] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUVheELVfhf4Jb3enmNWWQAAAVg"]
[Fri Dec 19 22:30:16.889561 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:17029] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aUVheLMyJ3XqeDRsbQm4kgAAAQg"]
[Fri Dec 19 22:30:16.997195 2025] [:error] [pid 18438:tid 18452] [client 68.218.8.118:17097] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUVheJRArClWV1iij_S6ewAAAYs"]
[Fri Dec 19 22:30:17.109466 2025] [:error] [pid 18438:tid 18451] [client 68.218.8.118:17057] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUVheZRArClWV1iij_S6fAAAAYo"]
[Fri Dec 19 22:30:17.223278 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:17095] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUVhefxEv7WXNhnFD1mgYwAAAI4"]
[Fri Dec 19 22:30:17.350340 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:17276] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aUVhefxEv7WXNhnFD1mgZAAAAII"]
[Fri Dec 19 22:30:17.448850 2025] [:error] [pid 16026:tid 16036] [client 68.218.8.118:17272] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUVheULVfhf4Jb3enmNWWgAAAUc"]
[Fri Dec 19 22:30:17.563970 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:17285] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUVhecpAnrkQKZ4b5gZZ1gAAANg"]
[Fri Dec 19 22:30:17.690804 2025] [:error] [pid 16026:tid 16043] [client 68.218.8.118:17137] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUVheULVfhf4Jb3enmNWXQAAAU4"]
[Fri Dec 19 22:30:17.815181 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:17169] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aUVhebMyJ3XqeDRsbQm4lgAAAQE"]
[Fri Dec 19 22:30:17.908943 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:17125] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUVheULVfhf4Jb3enmNWXwAAAUQ"]
[Fri Dec 19 22:30:18.016146 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:17192] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUVhekLVfhf4Jb3enmNWYAAAAUs"]
[Fri Dec 19 22:30:18.117527 2025] [:error] [pid 16026:tid 16048] [client 68.218.8.118:17079] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUVhekLVfhf4Jb3enmNWYQAAAVM"]
[Fri Dec 19 22:30:18.217651 2025] [:error] [pid 16026:tid 16051] [client 68.218.8.118:17154] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUVhekLVfhf4Jb3enmNWYwAAAVY"]
[Fri Dec 19 22:30:18.341932 2025] [:error] [pid 16026:tid 16031] [client 68.218.8.118:17114] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUVhekLVfhf4Jb3enmNWZAAAAUI"]
[Fri Dec 19 22:30:18.450846 2025] [:error] [pid 16026:tid 16029] [client 68.218.8.118:17264] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUVhekLVfhf4Jb3enmNWZgAAAUA"]
[Fri Dec 19 22:30:18.556560 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:17183] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUVhegYXFn-DbZghZBH2ZgAAABM"]
[Fri Dec 19 22:30:18.641303 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:17103] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUVhegYXFn-DbZghZBH2ZwAAABg"]
[Fri Dec 19 22:30:18.730125 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:17138] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUVhegYXFn-DbZghZBH2aAAAABU"]
[Fri Dec 19 22:30:18.834776 2025] [:error] [pid 41451:tid 41455] [client 68.218.8.118:17062] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUVhegYXFn-DbZghZBH2agAAAAE"]
[Fri Dec 19 22:30:18.968851 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:17121] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUVhekLVfhf4Jb3enmNWaQAAAU0"]
[Fri Dec 19 22:30:19.057613 2025] [:error] [pid 20675:tid 20691] [client 68.218.8.118:17041] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUVhe7MyJ3XqeDRsbQm4mQAAAQM"]
[Fri Dec 19 22:30:19.174833 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:17130] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aUVhe8pAnrkQKZ4b5gZZ2gAAAMs"]
[Fri Dec 19 22:30:19.282021 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:17078] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aUVhe8pAnrkQKZ4b5gZZ2wAAANY"]
[Fri Dec 19 22:30:19.393260 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:17167] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aUVhe_xEv7WXNhnFD1mgZQAAAIE"]
[Fri Dec 19 22:30:19.486501 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:17127] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aUVhewYXFn-DbZghZBH2awAAAA8"]
[Fri Dec 19 22:30:19.576890 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:16973] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUVhe7MyJ3XqeDRsbQm4mwAAAQI"]
[Fri Dec 19 22:30:19.673882 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:17186] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUVhewYXFn-DbZghZBH2bAAAAAc"]
[Fri Dec 19 22:30:19.772532 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:17060] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUVhewYXFn-DbZghZBH2bQAAAA4"]
[Fri Dec 19 22:30:19.879442 2025] [:error] [pid 20581:tid 20626] [client 68.218.8.118:17182] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUVhe_xEv7WXNhnFD1mgZgAAAIs"]
[Fri Dec 19 22:30:20.000040 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:17090] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUVhe8pAnrkQKZ4b5gZZ3QAAANU"]
[Fri Dec 19 22:30:20.096590 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:17052] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUVhfPxEv7WXNhnFD1mgZwAAAJQ"]
[Fri Dec 19 22:30:20.222080 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:17030] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUVhfLMyJ3XqeDRsbQm4nQAAARY"]
[Fri Dec 19 22:30:20.330704 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:17084] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUVhfAYXFn-DbZghZBH2cAAAAAo"]
[Fri Dec 19 22:30:20.439671 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:17058] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aUVhfPxEv7WXNhnFD1mgaQAAAJg"]
[Fri Dec 19 22:30:20.543560 2025] [:error] [pid 16026:tid 16032] [client 68.218.8.118:16975] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aUVhfELVfhf4Jb3enmNWbQAAAUM"]
[Fri Dec 19 22:30:20.657310 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:17124] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aUVhfPxEv7WXNhnFD1mgagAAAIQ"]
[Fri Dec 19 22:30:20.768289 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:17136] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aUVhfLMyJ3XqeDRsbQm4ngAAAQo"]
[Fri Dec 19 22:30:20.869376 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:17135] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aUVhfPxEv7WXNhnFD1mgawAAAJI"]
[Fri Dec 19 22:30:20.967898 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:17201] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aUVhfEmd1op_YdAdgR26MgAAAFA"]
[Fri Dec 19 22:30:21.054220 2025] [:error] [pid 16026:tid 16048] [client 68.218.8.118:17053] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aUVhfULVfhf4Jb3enmNWbgAAAVM"]
[Fri Dec 19 22:30:21.138095 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:17056] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aUVhfcpAnrkQKZ4b5gZZ4AAAANQ"]
[Fri Dec 19 22:30:21.210286 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:16972] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aUVhfcpAnrkQKZ4b5gZZ4QAAAMc"]
[Fri Dec 19 22:30:21.281962 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:17001] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aUVhfUmd1op_YdAdgR26MwAAAEU"]
[Fri Dec 19 22:30:21.377458 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:20279] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aUVhfcpAnrkQKZ4b5gZZ4wAAANg"]
[Fri Dec 19 22:30:21.472952 2025] [:error] [pid 16026:tid 16029] [client 68.218.8.118:17070] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aUVhfULVfhf4Jb3enmNWcQAAAUA"]
[Fri Dec 19 22:30:21.551211 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:17092] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aUVhfUmd1op_YdAdgR26NAAAAFU"]
[Fri Dec 19 22:30:21.637127 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:17160] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aUVhfbMyJ3XqeDRsbQm4oAAAAQ8"]
[Fri Dec 19 22:30:21.719575 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:17143] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aUVhfbMyJ3XqeDRsbQm4oQAAAQ4"]
[Fri Dec 19 22:30:21.798679 2025] [:error] [pid 20675:tid 20688] [client 68.218.8.118:17043] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aUVhfbMyJ3XqeDRsbQm4owAAAQA"]
[Fri Dec 19 22:30:21.876363 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:17109] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aUVhfQYXFn-DbZghZBH2dAAAABg"]
[Fri Dec 19 22:30:21.948367 2025] [:error] [pid 20580:tid 20586] [client 68.218.8.118:17044] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aUVhfUmd1op_YdAdgR26NQAAAEA"]
[Fri Dec 19 22:30:22.071971 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:17236] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aUVhfgYXFn-DbZghZBH2eAAAAAc"]
[Fri Dec 19 22:30:22.163902 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:17027] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aUVhfgYXFn-DbZghZBH2eQAAAA4"]
[Fri Dec 19 22:30:22.255581 2025] [:error] [pid 41451:tid 41474] [client 68.218.8.118:17144] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUVhfgYXFn-DbZghZBH2ewAAABQ"]
[Fri Dec 19 22:30:22.333985 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:17080] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUVhfspAnrkQKZ4b5gZZ5QAAAMM"]
[Fri Dec 19 22:30:22.416515 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:17035] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUVhfspAnrkQKZ4b5gZZ5gAAAM0"]
[Fri Dec 19 22:30:22.497506 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:17038] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUVhfspAnrkQKZ4b5gZZ6AAAAMY"]
[Fri Dec 19 22:30:22.578037 2025] [:error] [pid 18438:tid 18443] [client 68.218.8.118:17132] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhfpRArClWV1iij_S6fgAAAYI"]
[Fri Dec 19 22:30:22.653989 2025] [:error] [pid 18438:tid 18445] [client 68.218.8.118:17113] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhfpRArClWV1iij_S6fwAAAYQ"]
[Fri Dec 19 22:30:22.723347 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:17015] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhfkmd1op_YdAdgR26NwAAAFY"]
[Fri Dec 19 22:30:22.807237 2025] [:error] [pid 18438:tid 18441] [client 68.218.8.118:17059] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aUVhfpRArClWV1iij_S6gAAAAYA"]
[Fri Dec 19 22:30:22.885344 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:17025] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aUVhfgYXFn-DbZghZBH2fgAAAAo"]
[Fri Dec 19 22:30:22.968829 2025] [:error] [pid 16026:tid 16035] [client 68.218.8.118:17258] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aUVhfkLVfhf4Jb3enmNWcgAAAUY"]
[Fri Dec 19 22:30:23.054608 2025] [:error] [pid 16026:tid 16049] [client 68.218.8.118:16960] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aUVhf0LVfhf4Jb3enmNWcwAAAVQ"]
[Fri Dec 19 22:30:23.139075 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:17178] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aUVhf0md1op_YdAdgR26OQAAAFE"]
[Fri Dec 19 22:30:23.225774 2025] [:error] [pid 18438:tid 18442] [client 68.218.8.118:17184] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aUVhf5RArClWV1iij_S6gwAAAYE"]
[Fri Dec 19 22:30:23.325682 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:17179] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aUVhf0md1op_YdAdgR26OgAAAEE"]
[Fri Dec 19 22:30:23.402880 2025] [:error] [pid 20580:tid 20588] [client 68.218.8.118:17049] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aUVhf0md1op_YdAdgR26OwAAAEI"]
[Fri Dec 19 22:30:23.477705 2025] [:error] [pid 18438:tid 18453] [client 68.218.8.118:17206] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aUVhf5RArClWV1iij_S6hQAAAYw"]
[Fri Dec 19 22:30:23.555200 2025] [:error] [pid 20580:tid 20595] [client 68.218.8.118:17142] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aUVhf0md1op_YdAdgR26PAAAAEk"]
[Fri Dec 19 22:30:23.635617 2025] [:error] [pid 16026:tid 16041] [client 68.218.8.118:17150] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aUVhf0LVfhf4Jb3enmNWdQAAAUw"]
[Fri Dec 19 22:30:23.719719 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:17173] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aUVhf_xEv7WXNhnFD1mgbgAAAIo"]
[Fri Dec 19 22:30:23.790958 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:17045] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aUVhf0md1op_YdAdgR26PgAAAFU"]
[Fri Dec 19 22:30:23.865710 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:17210] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aUVhf8pAnrkQKZ4b5gZZ6QAAANM"]
[Fri Dec 19 22:30:23.946162 2025] [:error] [pid 16026:tid 16043] [client 68.218.8.118:17016] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aUVhf0LVfhf4Jb3enmNWdwAAAU4"]
[Fri Dec 19 22:30:24.044193 2025] [:error] [pid 16026:tid 16034] [client 68.218.8.118:17047] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aUVhgELVfhf4Jb3enmNWeAAAAUU"]
[Fri Dec 19 22:30:24.130265 2025] [:error] [pid 18438:tid 18451] [client 68.218.8.118:16983] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aUVhgJRArClWV1iij_S6hgAAAYo"]
[Fri Dec 19 22:30:24.231348 2025] [:error] [pid 20675:tid 20694] [client 68.218.8.118:16963] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aUVhgLMyJ3XqeDRsbQm4qAAAAQY"]
[Fri Dec 19 22:30:24.355835 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:17077] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aUVhgEmd1op_YdAdgR26QAAAAEY"]
[Fri Dec 19 22:30:24.473835 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:16967] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aUVhgEmd1op_YdAdgR26QgAAAEQ"]
[Fri Dec 19 22:30:24.601512 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:16930] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aUVhgEmd1op_YdAdgR26QwAAAEo"]
[Fri Dec 19 22:30:24.718611 2025] [:error] [pid 16026:tid 16030] [client 68.218.8.118:16962] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aUVhgELVfhf4Jb3enmNWfAAAAUE"]
[Fri Dec 19 22:30:24.829566 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:17039] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aUVhgLMyJ3XqeDRsbQm4qQAAARc"]
[Fri Dec 19 22:30:24.941272 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:17064] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aUVhgEmd1op_YdAdgR26RAAAAFE"]
[Fri Dec 19 22:30:25.058832 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:16977] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aUVhgfxEv7WXNhnFD1mgcAAAAII"]
[Fri Dec 19 22:30:25.199543 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:17086] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aUVhgbMyJ3XqeDRsbQm4qwAAARE"]
[Fri Dec 19 22:30:25.336284 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:17076] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aUVhgQYXFn-DbZghZBH2gQAAAAs"]
[Fri Dec 19 22:30:25.434565 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:17120] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aUVhgUmd1op_YdAdgR26RwAAAEE"]
[Fri Dec 19 22:30:25.542203 2025] [:error] [pid 18438:tid 18455] [client 68.218.8.118:16927] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aUVhgZRArClWV1iij_S6iAAAAY4"]
[Fri Dec 19 22:30:25.657450 2025] [:error] [pid 18438:tid 18454] [client 68.218.8.118:16955] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUVhgZRArClWV1iij_S6iQAAAY0"]
[Fri Dec 19 22:30:25.763211 2025] [:error] [pid 18438:tid 18443] [client 68.218.8.118:17335] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUVhgZRArClWV1iij_S6igAAAYI"]
[Fri Dec 19 22:30:25.861951 2025] [:error] [pid 18438:tid 18461] [client 68.218.8.118:17063] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUVhgZRArClWV1iij_S6jAAAAZQ"]
[Fri Dec 19 22:30:25.934923 2025] [:error] [pid 18438:tid 18444] [client 68.218.8.118:17022] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUVhgZRArClWV1iij_S6jQAAAYM"]
[Fri Dec 19 22:30:26.003921 2025] [:error] [pid 18438:tid 18460] [client 68.218.8.118:17104] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUVhgpRArClWV1iij_S6jgAAAZM"]
[Fri Dec 19 22:30:26.076705 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:17068] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUVhgspAnrkQKZ4b5gZZ7AAAANg"]
[Fri Dec 19 22:30:26.133906 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:16964] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUVhgspAnrkQKZ4b5gZZ7gAAANI"]
[Fri Dec 19 22:30:26.192477 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:17152] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUVhgrMyJ3XqeDRsbQm4rAAAAQ4"]
[Fri Dec 19 22:30:26.254949 2025] [:error] [pid 41451:tid 41467] [client 68.218.8.118:16981] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUVhggYXFn-DbZghZBH2gwAAAA0"]
[Fri Dec 19 22:30:26.321430 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:17026] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUVhgspAnrkQKZ4b5gZZ7wAAAMU"]
[Fri Dec 19 22:30:26.386353 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:16965] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUVhgkmd1op_YdAdgR26SQAAAFA"]
[Fri Dec 19 22:30:26.475360 2025] [:error] [pid 18438:tid 18459] [client 68.218.8.118:16995] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aUVhgpRArClWV1iij_S6kwAAAZI"]
[Fri Dec 19 22:30:26.571850 2025] [:error] [pid 18438:tid 18456] [client 68.218.8.118:17087] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xse25.php"] [unique_id "aUVhgpRArClWV1iij_S6lQAAAY8"]
[Fri Dec 19 22:30:26.671306 2025] [:error] [pid 18438:tid 18453] [client 68.218.8.118:17046] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xse25.php"] [unique_id "aUVhgpRArClWV1iij_S6lgAAAYw"]
[Fri Dec 19 22:30:26.773783 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:16976] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xse25.php"] [unique_id "aUVhggYXFn-DbZghZBH2hQAAAA8"]
[Fri Dec 19 22:30:26.876815 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:16898] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xse25.php"] [unique_id "aUVhgvxEv7WXNhnFD1mgcwAAAJQ"]
[Fri Dec 19 22:30:26.990651 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:16920] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUVhgspAnrkQKZ4b5gZZ8gAAAMI"]
[Fri Dec 19 22:30:27.121134 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:17008] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ8wAAAMM"]
[Fri Dec 19 22:30:27.240156 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:17004] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ9AAAAMY"]
[Fri Dec 19 22:30:27.341502 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:17139] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUVhg7MyJ3XqeDRsbQm4rgAAAQw"]
[Fri Dec 19 22:30:27.412638 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:16909] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUVhg0LVfhf4Jb3enmNWgAAAAU0"]
[Fri Dec 19 22:30:27.474442 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:17023] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aUVhg7MyJ3XqeDRsbQm4rwAAAQk"]
[Fri Dec 19 22:30:27.532755 2025] [:error] [pid 20582:tid 20646] [client 68.218.8.118:17071] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ9gAAAMQ"]
[Fri Dec 19 22:30:27.598129 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:16985] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ9wAAANU"]
[Fri Dec 19 22:30:27.672868 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:17115] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoyo.php"] [unique_id "aUVhg7MyJ3XqeDRsbQm4swAAARg"]
[Fri Dec 19 22:30:27.753457 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:16905] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoyo.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ-QAAAMA"]
[Fri Dec 19 22:30:27.831547 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:17134] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoyo.php"] [unique_id "aUVhg_xEv7WXNhnFD1mgdQAAAIw"]
[Fri Dec 19 22:30:27.916202 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:16969] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shoyo.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ-gAAANM"]
[Fri Dec 19 22:30:27.983399 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:17072] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ_AAAANc"]
[Fri Dec 19 22:30:28.046451 2025] [:error] [pid 18438:tid 18464] [client 68.218.8.118:17019] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aUVhhJRArClWV1iij_S6lwAAAZc"]
[Fri Dec 19 22:30:28.114885 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:17031] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aUVhhEmd1op_YdAdgR26TAAAAFU"]
[Fri Dec 19 22:30:28.182107 2025] [:error] [pid 18438:tid 18462] [client 68.218.8.118:16984] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower.php"] [unique_id "aUVhhJRArClWV1iij_S6mAAAAZU"]
[Fri Dec 19 22:30:28.249732 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:16907] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waq.php"] [unique_id "aUVhhPxEv7WXNhnFD1mgdgAAAIQ"]
[Fri Dec 19 22:30:28.327319 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:16993] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waq.php"] [unique_id "aUVhhAYXFn-DbZghZBH2hgAAAAk"]
[Fri Dec 19 22:30:28.447611 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:16971] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waq.php"] [unique_id "aUVhhPxEv7WXNhnFD1mgeQAAAJE"]
[Fri Dec 19 22:30:28.559116 2025] [:error] [pid 41451:tid 41474] [client 68.218.8.118:17085] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waq.php"] [unique_id "aUVhhAYXFn-DbZghZBH2iAAAABQ"]
[Fri Dec 19 22:30:28.672721 2025] [:error] [pid 20581:tid 20624] [client 68.218.8.118:17036] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wakak.php"] [unique_id "aUVhhPxEv7WXNhnFD1mgegAAAIk"]
[Fri Dec 19 22:30:28.804936 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:17014] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wakak.php"] [unique_id "aUVhhPxEv7WXNhnFD1mgewAAAIA"]
[Fri Dec 19 22:30:28.923387 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:17034] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wakak.php"] [unique_id "aUVhhEmd1op_YdAdgR26TwAAAEY"]
[Fri Dec 19 22:30:29.038869 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:20319] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wakak.php"] [unique_id "aUVhhbMyJ3XqeDRsbQm4uQAAAQs"]
[Fri Dec 19 22:30:29.108647 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:17276] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aUVhhbMyJ3XqeDRsbQm4uwAAARE"]
[Fri Dec 19 22:30:29.189337 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:16968] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aUVhhfxEv7WXNhnFD1mgfQAAAI8"]
[Fri Dec 19 22:30:29.265349 2025] [:error] [pid 16026:tid 16045] [client 68.218.8.118:16914] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aUVhhULVfhf4Jb3enmNWggAAAVA"]
[Fri Dec 19 22:30:29.334844 2025] [:error] [pid 16026:tid 16047] [client 68.218.8.118:17126] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aUVhhULVfhf4Jb3enmNWgwAAAVI"]
[Fri Dec 19 22:30:29.396457 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:17338] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUVhhUmd1op_YdAdgR26UgAAAEQ"]
[Fri Dec 19 22:30:29.469948 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:17002] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aUVhhUmd1op_YdAdgR26UwAAAEo"]
[Fri Dec 19 22:30:29.533219 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:16997] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aUVhhbMyJ3XqeDRsbQm4vQAAAQ8"]
[Fri Dec 19 22:30:29.603125 2025] [:error] [pid 16026:tid 16050] [client 68.218.8.118:17202] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aUVhhULVfhf4Jb3enmNWhAAAAVU"]
[Fri Dec 19 22:30:29.669208 2025] [:error] [pid 18438:tid 18451] [client 68.218.8.118:16994] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aUVhhZRArClWV1iij_S6mgAAAYo"]
[Fri Dec 19 22:30:29.732611 2025] [:error] [pid 18438:tid 18463] [client 68.218.8.118:16925] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cwclass.php"] [unique_id "aUVhhZRArClWV1iij_S6mwAAAZY"]
[Fri Dec 19 22:30:29.793712 2025] [:error] [pid 20580:tid 20599] [client 68.218.8.118:16923] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cwclass.php"] [unique_id "aUVhhUmd1op_YdAdgR26VQAAAE0"]
[Fri Dec 19 22:30:29.858959 2025] [:error] [pid 16026:tid 16033] [client 68.218.8.118:16903] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cwclass.php"] [unique_id "aUVhhULVfhf4Jb3enmNWhwAAAUQ"]
[Fri Dec 19 22:30:29.924904 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:17149] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cwclass.php"] [unique_id "aUVhhcpAnrkQKZ4b5gZZ_QAAAMc"]
[Fri Dec 19 22:30:29.987852 2025] [:error] [pid 16026:tid 16040] [client 68.218.8.118:16970] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah24.php"] [unique_id "aUVhhULVfhf4Jb3enmNWiAAAAUs"]
[Fri Dec 19 22:30:30.055288 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:17006] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah24.php"] [unique_id "aUVhhkmd1op_YdAdgR26VgAAAEE"]
[Fri Dec 19 22:30:30.131872 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:16979] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah24.php"] [unique_id "aUVhhspAnrkQKZ4b5gZZ_gAAANg"]
[Fri Dec 19 22:30:30.204221 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:16911] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah24.php"] [unique_id "aUVhhkmd1op_YdAdgR26WAAAAFA"]
[Fri Dec 19 22:30:30.289514 2025] [:error] [pid 18438:tid 18454] [client 68.218.8.118:16974] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aUVhhpRArClWV1iij_S6ngAAAY0"]
[Fri Dec 19 22:30:30.401837 2025] [:error] [pid 18438:tid 18443] [client 68.218.8.118:20247] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aUVhhpRArClWV1iij_S6nwAAAYI"]
[Fri Dec 19 22:30:30.521196 2025] [:error] [pid 18438:tid 18445] [client 68.218.8.118:16931] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aUVhhpRArClWV1iij_S6oQAAAYQ"]
[Fri Dec 19 22:30:30.644752 2025] [:error] [pid 18438:tid 18444] [client 68.218.8.118:17054] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aUVhhpRArClWV1iij_S6owAAAYM"]
[Fri Dec 19 22:30:30.768508 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:17081] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aUVhhspAnrkQKZ4b5gZaAAAAANI"]
[Fri Dec 19 22:30:30.868070 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:17066] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aUVhhgYXFn-DbZghZBH2iwAAAAo"]
[Fri Dec 19 22:30:30.968547 2025] [:error] [pid 16026:tid 16051] [client 68.218.8.118:17000] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aUVhhkLVfhf4Jb3enmNWjAAAAVY"]
[Fri Dec 19 22:30:31.070279 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:16934] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aUVhh8pAnrkQKZ4b5gZaAQAAAMs"]
[Fri Dec 19 22:30:31.178191 2025] [:error] [pid 18438:tid 18442] [client 68.218.8.118:16929] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aUVhh5RArClWV1iij_S6pAAAAYE"]
[Fri Dec 19 22:30:31.284269 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:16989] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aUVhh0md1op_YdAdgR26XAAAAFQ"]
[Fri Dec 19 22:30:31.391896 2025] [:error] [pid 18438:tid 18450] [client 68.218.8.118:16878] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aUVhh5RArClWV1iij_S6pQAAAYk"]
[Fri Dec 19 22:30:31.495115 2025] [:error] [pid 20580:tid 20586] [client 68.218.8.118:16980] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aUVhh0md1op_YdAdgR26XgAAAEA"]
[Fri Dec 19 22:30:31.600073 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:17003] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class3.php"] [unique_id "aUVhh7MyJ3XqeDRsbQm4vwAAAQw"]
[Fri Dec 19 22:30:31.712517 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:17017] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class3.php"] [unique_id "aUVhh0md1op_YdAdgR26YAAAAFY"]
[Fri Dec 19 22:30:31.819213 2025] [:error] [pid 18438:tid 18465] [client 68.218.8.118:16933] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class3.php"] [unique_id "aUVhh5RArClWV1iij_S6pwAAAZg"]
[Fri Dec 19 22:30:31.883432 2025] [:error] [pid 18438:tid 18464] [client 68.218.8.118:16885] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class3.php"] [unique_id "aUVhh5RArClWV1iij_S6qAAAAZc"]
[Fri Dec 19 22:30:31.956727 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:16853] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs18.php"] [unique_id "aUVhh_xEv7WXNhnFD1mggQAAAIM"]
[Fri Dec 19 22:30:32.010200 2025] [:error] [pid 18438:tid 18446] [client 68.218.8.118:16988] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs18.php"] [unique_id "aUVhiJRArClWV1iij_S6qQAAAYU"]
[Fri Dec 19 22:30:32.064268 2025] [:error] [pid 20580:tid 20610] [client 68.218.8.118:16901] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs18.php"] [unique_id "aUVhiEmd1op_YdAdgR26YwAAAFg"]
[Fri Dec 19 22:30:32.132852 2025] [:error] [pid 20580:tid 20599] [client 68.218.8.118:16919] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs18.php"] [unique_id "aUVhiEmd1op_YdAdgR26ZQAAAE0"]
[Fri Dec 19 22:30:32.195521 2025] [:error] [pid 20580:tid 20588] [client 68.218.8.118:17289] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/claa.php"] [unique_id "aUVhiEmd1op_YdAdgR26ZwAAAEI"]
[Fri Dec 19 22:30:32.254080 2025] [:error] [pid 18438:tid 18447] [client 68.218.8.118:16876] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/claa.php"] [unique_id "aUVhiJRArClWV1iij_S6qgAAAYY"]
[Fri Dec 19 22:30:32.323364 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:16900] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/claa.php"] [unique_id "aUVhiEmd1op_YdAdgR26aAAAAEU"]
[Fri Dec 19 22:30:32.388314 2025] [:error] [pid 20580:tid 20586] [client 68.218.8.118:16961] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/claa.php"] [unique_id "aUVhiEmd1op_YdAdgR26agAAAEA"]
[Fri Dec 19 22:30:32.476802 2025] [:error] [pid 20580:tid 20609] [client 68.218.8.118:17032] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AL.php"] [unique_id "aUVhiEmd1op_YdAdgR26bAAAAFc"]
[Fri Dec 19 22:30:32.564090 2025] [:error] [pid 20580:tid 20604] [client 68.218.8.118:17201] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AL.php"] [unique_id "aUVhiEmd1op_YdAdgR26bQAAAFI"]
[Fri Dec 19 22:30:32.678436 2025] [:error] [pid 16026:tid 16042] [client 68.218.8.118:16937] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AL.php"] [unique_id "aUVhiELVfhf4Jb3enmNWjwAAAU0"]
[Fri Dec 19 22:30:32.789424 2025] [:error] [pid 18438:tid 18454] [client 68.218.8.118:16846] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/AL.php"] [unique_id "aUVhiJRArClWV1iij_S6rAAAAY0"]
[Fri Dec 19 22:30:32.898735 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:20228] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/little.php"] [unique_id "aUVhiEmd1op_YdAdgR26bgAAAEs"]
[Fri Dec 19 22:30:33.002016 2025] [:error] [pid 18438:tid 18442] [client 68.218.8.118:16839] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/little.php"] [unique_id "aUVhiZRArClWV1iij_S6rwAAAYE"]
[Fri Dec 19 22:30:33.117868 2025] [:error] [pid 18438:tid 18450] [client 68.218.8.118:16904] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/little.php"] [unique_id "aUVhiZRArClWV1iij_S6sQAAAYk"]
[Fri Dec 19 22:30:33.250451 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:16902] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/little.php"] [unique_id "aUVhiQYXFn-DbZghZBH2jQAAAAI"]
[Fri Dec 19 23:50:29.922502 2025] [:error] [pid 20581:tid 20634] [client 43.157.156.190:45400] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUV0RfxEv7WXNhnFD1m3DgAAAJM"]
[Sat Dec 20 00:13:31.470730 2025] [autoindex:error] [pid 35626:tid 35694] [client 66.249.64.225:58511] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 00:33:11.664836 2025] [autoindex:error] [pid 35624:tid 35632] [client 74.7.227.129:45850] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 01:43:57.486112 2025] [autoindex:error] [pid 39268:tid 39328] [client 185.117.225.150:40110] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 01:44:02.016790 2025] [autoindex:error] [pid 39268:tid 39325] [client 185.117.225.150:44206] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 02:49:51.989634 2025] [:error] [pid 35626:tid 35695] [client 162.62.132.25:50844] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUWeTxzVxeBEODU8mCCQ0AAAAM0"]
[Sat Dec 20 02:54:57.262330 2025] [:error] [pid 35625:tid 35676] [client 175.6.217.4:60831] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUWfgY12VmSu4NX34PTuEAAAAJU"]
[Sat Dec 20 06:20:40.206676 2025] [autoindex:error] [pid 39492:tid 39543] [client 192.71.36.158:56441] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:32:01.696601 2025] [:error] [pid 39493:tid 39551] [client 143.198.220.98:62324] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/api/index.php/v1/config/application"] [unique_id "aUXgcWhjL2VG_FmIHqAaiAAAAII"]
[Sat Dec 20 08:54:36.891031 2025] [:error] [pid 39493:tid 39559] [client 49.233.45.47:33634] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUXzzGhjL2VG_FmIHqBT2wAAAIo"]
[Sat Dec 20 08:57:50.276670 2025] [autoindex:error] [pid 39491:tid 39513] [client 100.42.185.115:49408] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 10:45:52.234506 2025] [autoindex:error] [pid 18807:tid 18812] [client 35.187.118.85:47168] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 15:34:39.024950 2025] [:error] [pid 39491:tid 39512] [client 121.37.199.154:38670] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRj1tw2ggYvDxu2EBBogAAABE"]
[Sat Dec 20 15:34:39.025662 2025] [:error] [pid 39492:tid 39526] [client 121.37.199.154:38662] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRj4s_ZYP1UQNM9hYcoQAAAEQ"]
[Sat Dec 20 15:34:39.026053 2025] [:error] [pid 39493:tid 39557] [client 121.37.199.154:38658] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRj2hjL2VG_FmIHqCuzwAAAIg"]
[Sat Dec 20 15:34:39.027254 2025] [:error] [pid 39492:tid 39534] [client 121.37.199.154:38656] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRj4s_ZYP1UQNM9hYcogAAAEw"]
[Sat Dec 20 15:34:39.034999 2025] [proxy_fcgi:error] [pid 39491:tid 39512] [client 121.37.199.154:38670] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:39.035117 2025] [proxy_fcgi:error] [pid 39493:tid 39557] [client 121.37.199.154:38658] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:39.035491 2025] [proxy_fcgi:error] [pid 39492:tid 39526] [client 121.37.199.154:38662] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:39.036134 2025] [proxy_fcgi:error] [pid 39492:tid 39534] [client 121.37.199.154:38656] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:39.041957 2025] [:error] [pid 39493:tid 39567] [client 121.37.199.154:38682] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRj2hjL2VG_FmIHqCu0AAAAJI"]
[Sat Dec 20 15:34:39.046942 2025] [proxy_fcgi:error] [pid 39493:tid 39567] [client 121.37.199.154:38682] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:40.535768 2025] [:error] [pid 39493:tid 39573] [client 121.37.199.154:38710] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRkGhjL2VG_FmIHqCu0wAAAJg"]
[Sat Dec 20 15:34:40.536796 2025] [:error] [pid 39493:tid 39566] [client 121.37.199.154:38730] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRkGhjL2VG_FmIHqCu1AAAAJE"]
[Sat Dec 20 15:34:40.537690 2025] [:error] [pid 39492:tid 39527] [client 121.37.199.154:38724] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRkIs_ZYP1UQNM9hYcowAAAEU"]
[Sat Dec 20 15:34:40.539535 2025] [:error] [pid 39493:tid 39553] [client 121.37.199.154:38708] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRkGhjL2VG_FmIHqCu1QAAAIQ"]
[Sat Dec 20 15:34:40.541141 2025] [:error] [pid 39577:tid 39591] [client 121.37.199.154:38698] [client 121.37.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.37.199.154, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUZRkLviRnt1rJiSOfwabQAAAMw"]
[Sat Dec 20 15:34:40.544592 2025] [proxy_fcgi:error] [pid 39492:tid 39527] [client 121.37.199.154:38724] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:40.544586 2025] [proxy_fcgi:error] [pid 39493:tid 39566] [client 121.37.199.154:38730] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:40.544971 2025] [proxy_fcgi:error] [pid 39493:tid 39553] [client 121.37.199.154:38708] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:40.545185 2025] [proxy_fcgi:error] [pid 39493:tid 39573] [client 121.37.199.154:38710] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 15:34:40.547411 2025] [proxy_fcgi:error] [pid 39577:tid 39591] [client 121.37.199.154:38698] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 17:22:05.557433 2025] [autoindex:error] [pid 39493:tid 39552] [client 51.68.111.240:12061] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 17:48:19.948291 2025] [autoindex:error] [pid 18807:tid 18826] [client 54.166.137.94:54298] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 17:48:20.396987 2025] [autoindex:error] [pid 39493:tid 39550] [client 54.166.137.94:37010] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 18:13:04.295786 2025] [autoindex:error] [pid 39493:tid 39573] [client 34.216.175.253:57243] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 18:13:05.280018 2025] [autoindex:error] [pid 18807:tid 18809] [client 34.216.175.253:32898] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 18:13:05.681723 2025] [autoindex:error] [pid 39577:tid 39598] [client 34.216.175.253:43644] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 18:13:06.080937 2025] [autoindex:error] [pid 39491:tid 39503] [client 34.216.175.253:54476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 20:57:12.770655 2025] [:error] [pid 33570:tid 33580] [client 49.36.179.217:53809] [client 49.36.179.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.179.217, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUadKITNveA-c6YcSrIDngAAAcQ"]
[Sat Dec 20 20:57:12.782928 2025] [proxy_fcgi:error] [pid 33570:tid 33580] [client 49.36.179.217:53809] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 20:58:09.772267 2025] [:error] [pid 39493:tid 39555] [client 223.178.82.4:19680] [client 223.178.82.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.82.4, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUadYWhjL2VG_FmIHqDt2QAAAIY"]
[Sat Dec 20 20:58:09.783286 2025] [proxy_fcgi:error] [pid 39493:tid 39555] [client 223.178.82.4:19680] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:31.295938 2025] [proxy_fcgi:error] [pid 33793:tid 33819] [client 85.203.34.43:37681] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:31.612596 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.43:37681] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aUaqH1SicyB0BFmbRMzoywAAAtI"]
[Sat Dec 20 21:52:32.471645 2025] [proxy_fcgi:error] [pid 14286:tid 14312] [client 85.203.34.41:49475] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:32.778085 2025] [:error] [pid 14286:tid 14303] [client 85.203.34.41:49475] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUaqIJ7rbXIrw6rGSdac2gAAAU0"]
[Sat Dec 20 21:52:33.387500 2025] [proxy_fcgi:error] [pid 33687:tid 33704] [client 85.203.34.41:30237] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:33.668667 2025] [:error] [pid 33687:tid 33702] [client 85.203.34.41:30237] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUaqITYMR4qK1N4g7vjkyQAAAkw"]
[Sat Dec 20 21:52:34.239419 2025] [proxy_fcgi:error] [pid 33844:tid 33866] [client 85.203.34.20:23927] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:34.809711 2025] [proxy_fcgi:error] [pid 33844:tid 33855] [client 85.203.34.20:23927] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:35.120663 2025] [proxy_fcgi:error] [pid 33844:tid 33857] [client 85.203.34.20:23927] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:35.454601 2025] [proxy_fcgi:error] [pid 33844:tid 33866] [client 85.203.34.20:23927] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:36.061129 2025] [:error] [pid 33844:tid 33862] [client 85.203.34.20:23927] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUaqJCaNtwGsyqqVmQELtwAAAxA"]
[Sat Dec 20 21:52:36.615600 2025] [proxy_fcgi:error] [pid 62124:tid 62143] [client 85.203.34.44:28305] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:36.950610 2025] [proxy_fcgi:error] [pid 62124:tid 62129] [client 85.203.34.44:28305] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:37.272954 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.44:28305] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUaqJVs94zPA9ULQOjmWQgAAAAo"]
[Sat Dec 20 21:52:37.881358 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.4:39605] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUaqJZ7rbXIrw6rGSdadAgAAAVU"]
[Sat Dec 20 21:52:55.080817 2025] [autoindex:error] [pid 33570:tid 33589] [client 85.203.34.43:61799] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:53:19.597781 2025] [:error] [pid 33570:tid 33576] [client 85.203.34.43:61799] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aUaqT4TNveA-c6YcSrIlUgAAAcA"]
[Sat Dec 20 23:30:48.544220 2025] [:error] [pid 14286:tid 14304] [client 43.135.134.127:55180] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUbBKJ7rbXIrw6rGSda_GAAAAU4"]
[Sun Dec 21 01:05:42.265180 2025] [proxy_fcgi:error] [pid 8751:tid 8768] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:42.785724 2025] [proxy_fcgi:error] [pid 8751:tid 8774] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:43.047823 2025] [proxy_fcgi:error] [pid 8751:tid 8761] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:43.302068 2025] [proxy_fcgi:error] [pid 8751:tid 8764] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:43.530634 2025] [proxy_fcgi:error] [pid 8751:tid 8763] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:43.759119 2025] [proxy_fcgi:error] [pid 8751:tid 8756] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:44.028156 2025] [proxy_fcgi:error] [pid 8751:tid 8770] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:44.256027 2025] [proxy_fcgi:error] [pid 8751:tid 8777] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:44.846299 2025] [proxy_fcgi:error] [pid 8751:tid 8757] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:45.449407 2025] [proxy_fcgi:error] [pid 8751:tid 8753] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:45.730875 2025] [proxy_fcgi:error] [pid 8751:tid 8771] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:46.020420 2025] [proxy_fcgi:error] [pid 8751:tid 8775] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:46.251826 2025] [proxy_fcgi:error] [pid 8751:tid 8755] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:46.505350 2025] [proxy_fcgi:error] [pid 8751:tid 8769] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:46.762164 2025] [proxy_fcgi:error] [pid 8751:tid 8765] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:47.005271 2025] [proxy_fcgi:error] [pid 8751:tid 8762] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:47.529173 2025] [proxy_fcgi:error] [pid 8751:tid 8766] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:48.918963 2025] [proxy_fcgi:error] [pid 8751:tid 8760] [client 136.144.42.78:20747] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:52.464211 2025] [:error] [pid 8751:tid 8765] [client 136.144.42.78:20747] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbXcGvrnuGjNP7vtDQT2QAAAAw"]
[Sun Dec 21 01:05:53.653155 2025] [:error] [pid 8751:tid 8767] [client 172.98.32.89:30409] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbXcWvrnuGjNP7vtDQT3QAAAA4"]
[Sun Dec 21 01:05:55.275715 2025] [proxy_fcgi:error] [pid 8640:tid 8651] [client 172.98.32.78:57719] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:55.997680 2025] [:error] [pid 8640:tid 8666] [client 172.98.32.78:57719] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbXc_VclzlEWWhvYtleDAAAAJA"]
[Sun Dec 21 01:05:56.951989 2025] [proxy_fcgi:error] [pid 22338:tid 22389] [client 172.98.32.78:26529] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:57.205145 2025] [:error] [pid 22338:tid 22398] [client 172.98.32.78:26529] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbXdXGYQSUt-opKpSIIJQAAAE0"]
[Sun Dec 21 01:05:57.909629 2025] [proxy_fcgi:error] [pid 8751:tid 8759] [client 136.144.42.79:34731] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:05:59.188062 2025] [:error] [pid 8751:tid 8769] [client 136.144.42.79:34731] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbXd2vrnuGjNP7vtDQT6gAAABA"]
[Sun Dec 21 01:05:59.976371 2025] [:error] [pid 8641:tid 8678] [client 45.132.227.55:51413] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbXd3E703usYSvQGLRVVgAAAMA"]
[Sun Dec 21 01:06:01.507629 2025] [:error] [pid 8751:tid 8760] [client 136.144.42.72:46767] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbXeWvrnuGjNP7vtDQT6wAAAAc"]
[Sun Dec 21 01:06:01.997125 2025] [:error] [pid 8751:tid 8776] [client 45.132.227.63:61047] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbXeWvrnuGjNP7vtDQT7gAAABc"]
[Sun Dec 21 01:06:03.505169 2025] [:error] [pid 8642:tid 8715] [client 172.98.32.93:29899] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbXeyJkiik8k41igp0FsQAAAQo"]
[Sun Dec 21 01:06:04.397954 2025] [:error] [pid 22338:tid 22387] [client 172.98.32.77:46645] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbXfHGYQSUt-opKpSIIKgAAAEM"]
[Sun Dec 21 01:06:05.191375 2025] [:error] [pid 22338:tid 22386] [client 172.98.32.85:42397] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbXfXGYQSUt-opKpSIIMQAAAEI"]
[Sun Dec 21 01:06:06.676111 2025] [proxy_fcgi:error] [pid 8751:tid 8765] [client 45.132.227.64:61121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:07.216411 2025] [:error] [pid 8751:tid 8767] [client 45.132.227.64:61121] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aUbXf2vrnuGjNP7vtDQT9wAAAA4"]
[Sun Dec 21 01:06:08.277122 2025] [:error] [pid 8640:tid 8665] [client 172.98.32.90:50461] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbXgPVclzlEWWhvYtleHQAAAI8"]
[Sun Dec 21 01:06:09.086713 2025] [:error] [pid 8641:tid 8703] [client 45.132.227.56:62105] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbXgXE703usYSvQGLRVWwAAANU"]
[Sun Dec 21 01:06:09.898144 2025] [proxy_fcgi:error] [pid 22338:tid 22406] [client 136.144.42.74:47373] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:10.125621 2025] [:error] [pid 22338:tid 22395] [client 136.144.42.74:47373] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbXgnGYQSUt-opKpSIINQAAAEo"]
[Sun Dec 21 01:06:10.578437 2025] [proxy_fcgi:error] [pid 8640:tid 8650] [client 45.132.227.66:22939] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:11.307529 2025] [proxy_fcgi:error] [pid 8640:tid 8668] [client 45.132.227.66:22939] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:12.046084 2025] [:error] [pid 8640:tid 8664] [client 45.132.227.66:22939] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbXhPVclzlEWWhvYtleKAAAAI4"]
[Sun Dec 21 01:06:12.550160 2025] [proxy_fcgi:error] [pid 8751:tid 8770] [client 172.98.32.78:50575] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:12.785601 2025] [:error] [pid 8751:tid 8759] [client 172.98.32.78:50575] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbXhGvrnuGjNP7vtDQT_wAAAAY"]
[Sun Dec 21 01:06:14.331973 2025] [proxy_fcgi:error] [pid 22338:tid 22403] [client 45.132.227.55:65149] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:14.871329 2025] [:error] [pid 22338:tid 22392] [client 45.132.227.55:65149] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUbXhnGYQSUt-opKpSIIPAAAAEg"]
[Sun Dec 21 01:06:15.694767 2025] [:error] [pid 8641:tid 8694] [client 45.132.227.61:34599] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbXh3E703usYSvQGLRVZAAAAM8"]
[Sun Dec 21 01:06:16.549587 2025] [proxy_fcgi:error] [pid 22338:tid 22395] [client 45.132.227.64:42827] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:16.847608 2025] [proxy_fcgi:error] [pid 22338:tid 22384] [client 45.132.227.64:42827] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:17.381402 2025] [:error] [pid 22338:tid 22390] [client 45.132.227.64:42827] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbXiXGYQSUt-opKpSIIRQAAAEY"]
[Sun Dec 21 01:06:18.195176 2025] [:error] [pid 22338:tid 22401] [client 172.98.32.85:51831] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbXinGYQSUt-opKpSIISAAAAFA"]
[Sun Dec 21 01:06:20.249834 2025] [:error] [pid 8641:tid 8702] [client 136.144.42.80:43115] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbXjHE703usYSvQGLRVaAAAANQ"]
[Sun Dec 21 01:06:21.785588 2025] [:error] [pid 8641:tid 8678] [client 172.98.32.80:53239] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbXjXE703usYSvQGLRVawAAAMA"]
[Sun Dec 21 01:06:22.242608 2025] [:error] [pid 22338:tid 22393] [client 172.98.32.83:30087] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbXjnGYQSUt-opKpSIITgAAAEk"]
[Sun Dec 21 01:06:23.195860 2025] [proxy_fcgi:error] [pid 8640:tid 8660] [client 136.144.42.73:34803] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:06:23.452768 2025] [:error] [pid 8640:tid 8670] [client 136.144.42.73:34803] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbXj_VclzlEWWhvYtleOAAAAJQ"]
[Sun Dec 21 01:13:58.264311 2025] [:error] [pid 22338:tid 22404] [client 45.88.186.197:58626] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIMpQAAAFM"]
[Sun Dec 21 01:13:58.679745 2025] [:error] [pid 22338:tid 22400] [client 45.88.186.197:58782] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIMxAAAAE8"]
[Sun Dec 21 01:13:59.094926 2025] [:error] [pid 22338:tid 22408] [client 45.88.186.197:58969] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUbZV3GYQSUt-opKpSIM5wAAAFc"]
[Sun Dec 21 01:13:59.502174 2025] [:error] [pid 8751:tid 8775] [client 45.88.186.197:59113] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUbZV2vrnuGjNP7vtDQYKwAAABY"]
[Sun Dec 21 01:13:59.908696 2025] [:error] [pid 8751:tid 8763] [client 45.88.186.197:59239] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUbZV2vrnuGjNP7vtDQYSwAAAAo"]
[Sun Dec 21 02:40:21.893620 2025] [proxy_fcgi:error] [pid 8640:tid 8658] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:22.146604 2025] [proxy_fcgi:error] [pid 8640:tid 8673] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:22.314797 2025] [proxy_fcgi:error] [pid 8640:tid 8672] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:22.643608 2025] [proxy_fcgi:error] [pid 8640:tid 8671] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:22.814636 2025] [proxy_fcgi:error] [pid 8640:tid 8661] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:23.435596 2025] [proxy_fcgi:error] [pid 8640:tid 8656] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:23.592633 2025] [proxy_fcgi:error] [pid 8640:tid 8659] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:23.936933 2025] [proxy_fcgi:error] [pid 8640:tid 8660] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:24.484616 2025] [proxy_fcgi:error] [pid 8640:tid 8666] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:24.656816 2025] [proxy_fcgi:error] [pid 8640:tid 8663] [client 4.217.235.143:16414] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:40:24.794309 2025] [:error] [pid 8640:tid 8673] [client 4.217.235.143:16414] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUbtmPVclzlEWWhvYtmO-AAAAJc"]
[Sun Dec 21 02:40:30.805846 2025] [:error] [pid 8641:tid 8682] [client 4.217.235.143:16484] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUbtnnE703usYSvQGLSIBwAAAMQ"]
[Sun Dec 21 02:40:32.618469 2025] [:error] [pid 8751:tid 8757] [client 4.217.235.143:16510] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUbtoGvrnuGjNP7vtDRiGAAAAAQ"]
[Sun Dec 21 02:40:34.581702 2025] [:error] [pid 22338:tid 22386] [client 4.217.235.143:16485] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUbtonGYQSUt-opKpSJHWwAAAEI"]
[Sun Dec 21 02:40:35.974602 2025] [:error] [pid 44515:tid 44521] [client 4.217.235.143:16505] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUbto5ZAdBRP9gwGvJ5UAwAAAYM"]
[Sun Dec 21 02:40:37.902638 2025] [:error] [pid 22338:tid 22396] [client 4.217.235.143:16395] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUbtpXGYQSUt-opKpSJHewAAAEs"]
[Sun Dec 21 02:40:43.727939 2025] [:error] [pid 8642:tid 8716] [client 4.217.235.143:16408] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUbtqyJkiik8k41igp04swAAAQs"]
[Sun Dec 21 02:40:47.620838 2025] [:error] [pid 44515:tid 44534] [client 4.217.235.143:16494] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUbtr5ZAdBRP9gwGvJ5UtAAAAZA"]
[Sun Dec 21 02:40:48.591911 2025] [:error] [pid 8641:tid 8678] [client 4.217.235.143:16493] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.1.php"] [unique_id "aUbtsHE703usYSvQGLSIygAAAMA"]
[Sun Dec 21 02:40:49.476420 2025] [:error] [pid 8751:tid 8762] [client 4.217.235.143:16487] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.1.php"] [unique_id "aUbtsWvrnuGjNP7vtDRigwAAAAk"]
[Sun Dec 21 02:40:50.983141 2025] [:error] [pid 44515:tid 44531] [client 4.217.235.143:16470] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.1.php"] [unique_id "aUbtspZAdBRP9gwGvJ5U5QAAAY0"]
[Sun Dec 21 02:40:54.766679 2025] [:error] [pid 8641:tid 8692] [client 4.217.235.143:16409] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.1.php"] [unique_id "aUbttnE703usYSvQGLSI9gAAAM0"]
[Sun Dec 21 02:41:01.767170 2025] [:error] [pid 44515:tid 44533] [client 4.217.235.143:16392] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.0.php"] [unique_id "aUbtvZZAdBRP9gwGvJ5VcAAAAY8"]
[Sun Dec 21 02:41:05.557644 2025] [:error] [pid 44515:tid 44533] [client 4.217.235.143:16397] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-3.2.0.php"] [unique_id "aUbtwZZAdBRP9gwGvJ5VkwAAAY8"]
[Sun Dec 21 02:41:11.152804 2025] [:error] [pid 22338:tid 22387] [client 4.217.235.143:16462] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUbtx3GYQSUt-opKpSJIjAAAAEM"]
[Sun Dec 21 02:41:16.178462 2025] [:error] [pid 8641:tid 8709] [client 4.217.235.143:16391] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUbtzHE703usYSvQGLSJfAAAANg"]
[Sun Dec 21 02:41:21.163640 2025] [:error] [pid 8640:tid 8652] [client 4.217.235.143:16410] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUbt0fVclzlEWWhvYtmPvAAAAII"]
[Sun Dec 21 02:41:23.790469 2025] [:error] [pid 8751:tid 8763] [client 4.217.235.143:16394] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUbt02vrnuGjNP7vtDRjkgAAAAo"]
[Sun Dec 21 02:41:26.627616 2025] [proxy_fcgi:error] [pid 8640:tid 8664] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:26.986617 2025] [proxy_fcgi:error] [pid 8640:tid 8654] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:27.179626 2025] [proxy_fcgi:error] [pid 8640:tid 8673] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:27.334613 2025] [proxy_fcgi:error] [pid 8640:tid 8660] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:27.668595 2025] [proxy_fcgi:error] [pid 8640:tid 8659] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:27.811286 2025] [proxy_fcgi:error] [pid 8640:tid 8667] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:27.952605 2025] [proxy_fcgi:error] [pid 8640:tid 8657] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:28.234013 2025] [proxy_fcgi:error] [pid 8640:tid 8666] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:28.380611 2025] [proxy_fcgi:error] [pid 8640:tid 8663] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:28.543617 2025] [proxy_fcgi:error] [pid 8640:tid 8652] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:28.708208 2025] [proxy_fcgi:error] [pid 8640:tid 8662] [client 4.217.235.143:16511] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:41:28.844205 2025] [:error] [pid 8640:tid 8654] [client 4.217.235.143:16511] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.0-en.php"] [unique_id "aUbt2PVclzlEWWhvYtmP4gAAAIQ"]
[Sun Dec 21 02:41:31.399202 2025] [:error] [pid 8641:tid 8700] [client 4.217.235.143:16387] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.0-en.php"] [unique_id "aUbt23E703usYSvQGLSJ7gAAANM"]
[Sun Dec 21 02:41:34.127688 2025] [:error] [pid 44515:tid 44523] [client 4.217.235.143:16498] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.0-en.php"] [unique_id "aUbt3pZAdBRP9gwGvJ5WfQAAAYU"]
[Sun Dec 21 02:41:36.009033 2025] [:error] [pid 8640:tid 8662] [client 4.217.235.143:16442] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.0-en.php"] [unique_id "aUbt4PVclzlEWWhvYtmP7gAAAIw"]
[Sun Dec 21 02:41:38.386011 2025] [:error] [pid 8640:tid 8655] [client 4.217.235.143:16471] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUbt4vVclzlEWWhvYtmP8QAAAIU"]
[Sun Dec 21 02:41:47.300731 2025] [:error] [pid 44515:tid 44522] [client 4.217.235.143:16466] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUbt65ZAdBRP9gwGvJ5W3AAAAYQ"]
[Sun Dec 21 02:41:49.408725 2025] [:error] [pid 22338:tid 22388] [client 4.217.235.143:16413] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUbt7XGYQSUt-opKpSJJcgAAAEQ"]
[Sun Dec 21 02:41:54.527451 2025] [:error] [pid 44515:tid 44519] [client 4.217.235.143:16495] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUbt8pZAdBRP9gwGvJ5XFgAAAYE"]
[Sun Dec 21 02:42:00.775852 2025] [:error] [pid 8640:tid 8671] [client 4.217.235.143:16454] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUbt-PVclzlEWWhvYtmQNgAAAJU"]
[Sun Dec 21 02:42:02.142681 2025] [:error] [pid 8641:tid 8696] [client 4.217.235.143:12231] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUbt-nE703usYSvQGLSKfAAAANE"]
[Sun Dec 21 02:42:06.181496 2025] [:error] [pid 22338:tid 22407] [client 4.217.235.143:16503] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUbt_nGYQSUt-opKpSJJ0QAAAFY"]
[Sun Dec 21 02:42:11.164193 2025] [:error] [pid 8640:tid 8667] [client 4.217.235.143:16449] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUbuA_VclzlEWWhvYtmQbQAAAJE"]
[Sun Dec 21 02:42:12.430208 2025] [:error] [pid 8642:tid 8714] [client 4.217.235.143:16411] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUbuBCJkiik8k41igp069QAAAQk"]
[Sun Dec 21 02:42:14.548515 2025] [:error] [pid 22338:tid 22408] [client 4.217.235.143:16472] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUbuBnGYQSUt-opKpSJKCQAAAFc"]
[Sun Dec 21 02:42:18.540421 2025] [:error] [pid 8751:tid 8759] [client 4.217.235.143:16416] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUbuCmvrnuGjNP7vtDRlQgAAAAY"]
[Sun Dec 21 02:42:23.768734 2025] [:error] [pid 44515:tid 44529] [client 4.217.235.143:16406] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/raiz0.php"] [unique_id "aUbuD5ZAdBRP9gwGvJ5X6AAAAYs"]
[Sun Dec 21 02:42:24.809090 2025] [:error] [pid 44515:tid 44539] [client 4.217.235.143:12247] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/raiz0.php"] [unique_id "aUbuEJZAdBRP9gwGvJ5X7AAAAZU"]
[Sun Dec 21 02:42:28.213867 2025] [proxy_fcgi:error] [pid 22338:tid 22399] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:28.353771 2025] [proxy_fcgi:error] [pid 22338:tid 22386] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:28.496601 2025] [proxy_fcgi:error] [pid 22338:tid 22385] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:29.134610 2025] [proxy_fcgi:error] [pid 22338:tid 22398] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:29.287783 2025] [proxy_fcgi:error] [pid 22338:tid 22392] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:29.441210 2025] [proxy_fcgi:error] [pid 22338:tid 22393] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:29.611626 2025] [proxy_fcgi:error] [pid 22338:tid 22386] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:29.893773 2025] [proxy_fcgi:error] [pid 22338:tid 22387] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:30.064621 2025] [proxy_fcgi:error] [pid 22338:tid 22390] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:30.206619 2025] [proxy_fcgi:error] [pid 22338:tid 22392] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:30.349618 2025] [proxy_fcgi:error] [pid 22338:tid 22403] [client 4.217.235.143:16415] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:42:30.506459 2025] [:error] [pid 22338:tid 22387] [client 4.217.235.143:16415] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-1ogin_bak.php"] [unique_id "aUbuFnGYQSUt-opKpSJKaAAAAEM"]
[Sun Dec 21 02:42:39.664032 2025] [:error] [pid 44515:tid 44519] [client 4.217.235.143:16388] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-1ogin_bak.php"] [unique_id "aUbuH5ZAdBRP9gwGvJ5YjQAAAYE"]
[Sun Dec 21 02:42:42.122033 2025] [:error] [pid 44515:tid 44523] [client 4.217.235.143:16427] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-1ogin_bak.php"] [unique_id "aUbuIpZAdBRP9gwGvJ5YpQAAAYU"]
[Sun Dec 21 02:42:55.652306 2025] [:error] [pid 8642:tid 8704] [client 4.217.235.143:16486] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUbuLyJkiik8k41igp07mgAAAQM"]
[Sun Dec 21 02:42:58.263782 2025] [:error] [pid 8642:tid 8721] [client 4.217.235.143:16401] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUbuMiJkiik8k41igp07swAAARA"]
[Sun Dec 21 02:42:59.994355 2025] [:error] [pid 43680:tid 43705] [client 4.217.235.143:16488] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUbuM0DkAAJVjNqC6UXHNAAAAVU"]
[Sun Dec 21 02:43:01.079421 2025] [:error] [pid 8642:tid 8697] [client 4.217.235.143:16453] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUbuNSJkiik8k41igp07yQAAAQA"]
[Sun Dec 21 02:43:04.915720 2025] [:error] [pid 8642:tid 8704] [client 4.217.235.143:16399] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.4-mysql.php"] [unique_id "aUbuOCJkiik8k41igp078gAAAQM"]
[Sun Dec 21 02:43:07.070181 2025] [:error] [pid 8642:tid 8710] [client 4.217.235.143:16458] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.4-mysql.php"] [unique_id "aUbuOyJkiik8k41igp08BwAAAQY"]
[Sun Dec 21 02:43:13.715901 2025] [:error] [pid 8641:tid 8683] [client 4.217.235.143:16445] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.4-mysql.php"] [unique_id "aUbuQXE703usYSvQGLSMPgAAAMU"]
[Sun Dec 21 02:43:18.132616 2025] [:error] [pid 8751:tid 8759] [client 4.217.235.143:16390] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.5-mysql.php"] [unique_id "aUbuRmvrnuGjNP7vtDRm_QAAAAY"]
[Sun Dec 21 02:43:20.175465 2025] [:error] [pid 8751:tid 8758] [client 4.217.235.143:12260] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.5-mysql.php"] [unique_id "aUbuSGvrnuGjNP7vtDRnDgAAAAU"]
[Sun Dec 21 02:43:22.591577 2025] [:error] [pid 8642:tid 8706] [client 4.217.235.143:16504] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.5-mysql.php"] [unique_id "aUbuSiJkiik8k41igp08mgAAAQQ"]
[Sun Dec 21 02:43:26.833801 2025] [:error] [pid 8640:tid 8658] [client 4.217.235.143:12275] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer-4.2.5-mysql.php"] [unique_id "aUbuTvVclzlEWWhvYtmSHQAAAIg"]
[Sun Dec 21 02:43:30.741621 2025] [proxy_fcgi:error] [pid 43680:tid 43685] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:30.900970 2025] [proxy_fcgi:error] [pid 43680:tid 43698] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.064629 2025] [proxy_fcgi:error] [pid 43680:tid 43706] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.204474 2025] [proxy_fcgi:error] [pid 43680:tid 43701] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.349618 2025] [proxy_fcgi:error] [pid 43680:tid 43692] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.510616 2025] [proxy_fcgi:error] [pid 43680:tid 43695] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.651596 2025] [proxy_fcgi:error] [pid 43680:tid 43704] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.795612 2025] [proxy_fcgi:error] [pid 43680:tid 43703] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:31.957434 2025] [proxy_fcgi:error] [pid 43680:tid 43693] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:32.127604 2025] [proxy_fcgi:error] [pid 43680:tid 43690] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:32.723608 2025] [proxy_fcgi:error] [pid 43680:tid 43697] [client 4.217.235.143:16451] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:43:32.891383 2025] [:error] [pid 43680:tid 43687] [client 4.217.235.143:16451] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/098.php"] [unique_id "aUbuVEDkAAJVjNqC6UXH_QAAAUM"]
[Sun Dec 21 02:43:37.729446 2025] [:error] [pid 44515:tid 44527] [client 4.217.235.143:16474] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/098.php"] [unique_id "aUbuWZZAdBRP9gwGvJ5aaQAAAYk"]
[Sun Dec 21 02:43:42.026158 2025] [:error] [pid 8642:tid 8697] [client 4.217.235.143:12224] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/098.php"] [unique_id "aUbuXiJkiik8k41igp09HgAAAQA"]
[Sun Dec 21 02:43:46.393939 2025] [:error] [pid 43680:tid 43700] [client 4.217.235.143:16396] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/098.php"] [unique_id "aUbuYkDkAAJVjNqC6UXITAAAAVA"]
[Sun Dec 21 02:43:49.474630 2025] [:error] [pid 8642:tid 8726] [client 4.217.235.143:12227] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/V5.php"] [unique_id "aUbuZSJkiik8k41igp09RwAAARU"]
[Sun Dec 21 02:43:51.268603 2025] [:error] [pid 8641:tid 8692] [client 4.217.235.143:16482] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/V5.php"] [unique_id "aUbuZ3E703usYSvQGLSNYwAAAM0"]
[Sun Dec 21 02:43:55.152343 2025] [:error] [pid 44515:tid 44535] [client 4.217.235.143:12161] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/V5.php"] [unique_id "aUbua5ZAdBRP9gwGvJ5bOQAAAZE"]
[Sun Dec 21 02:43:58.673355 2025] [:error] [pid 8642:tid 8711] [client 4.217.235.143:16400] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/V5.php"] [unique_id "aUbubiJkiik8k41igp09awAAAQc"]
[Sun Dec 21 02:44:00.315526 2025] [:error] [pid 43680:tid 43705] [client 4.217.235.143:16426] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new_license.php"] [unique_id "aUbucEDkAAJVjNqC6UXIgAAAAVU"]
[Sun Dec 21 02:44:06.329423 2025] [:error] [pid 22338:tid 22398] [client 4.217.235.143:16506] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new_license.php"] [unique_id "aUbudnGYQSUt-opKpSJMzQAAAE0"]
[Sun Dec 21 02:44:11.071655 2025] [:error] [pid 22338:tid 22399] [client 4.217.235.143:16424] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new_license.php"] [unique_id "aUbue3GYQSUt-opKpSJM4wAAAE4"]
[Sun Dec 21 02:44:11.933943 2025] [:error] [pid 8640:tid 8672] [client 4.217.235.143:16438] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new_license.php"] [unique_id "aUbue_VclzlEWWhvYtmTpAAAAJY"]
[Sun Dec 21 02:44:17.936555 2025] [:error] [pid 8640:tid 8650] [client 4.217.235.143:16405] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/XxX.php"] [unique_id "aUbugfVclzlEWWhvYtmT3AAAAIA"]
[Sun Dec 21 02:44:20.114774 2025] [:error] [pid 8751:tid 8766] [client 4.217.235.143:16481] [client 4.217.235.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/XxX.php"] [unique_id "aUbuhGvrnuGjNP7vtDRopAAAAA0"]
[Sun Dec 21 02:44:36.108691 2025] [proxy_fcgi:error] [pid 8642:tid 8714] [client 4.217.235.143:16436] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 06:36:59.336139 2025] [:error] [pid 20675:tid 20721] [client 43.130.110.130:38534] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUclC7yUvZnd3bHSR3YbUAAAAE8"]
[Sun Dec 21 06:40:19.599454 2025] [:error] [pid 12191:tid 12201] [client 103.65.236.149:59369] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aUcl0wM0m463UZmqdiD_RwAAAQg"]
[Sun Dec 21 06:40:20.135735 2025] [:error] [pid 12191:tid 12217] [client 103.65.236.149:59109] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aUcl1AM0m463UZmqdiD_SwAAARg"]
[Sun Dec 21 07:12:15.740122 2025] [autoindex:error] [pid 12191:tid 12196] [client 37.27.59.176:34846] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 09:01:23.242470 2025] [:error] [pid 20675:tid 20706] [client 170.106.11.6:49124] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUdG47yUvZnd3bHSR3YyOAAAAEA"]
[Sun Dec 21 09:24:08.583253 2025] [autoindex:error] [pid 12191:tid 12212] [client 51.68.107.151:35959] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 11:31:26.721158 2025] [autoindex:error] [pid 12191:tid 12208] [client 199.244.88.227:22831] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 14:47:54.949538 2025] [autoindex:error] [pid 20675:tid 20729] [client 198.235.24.32:65032] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 15:47:01.040072 2025] [:error] [pid 20760:tid 20775] [client 101.32.15.141:36910] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUel9eXEVvRTAtWo3gk7ggAAAMw"]
[Sun Dec 21 16:10:00.204272 2025] [:error] [pid 20676:tid 20740] [client 49.234.192.248:44456] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUerWKpSa967F4pOO5xcVAAAAIc"]
[Sun Dec 21 18:28:56.083899 2025] [autoindex:error] [pid 59158:tid 59178] [client 74.7.227.6:48814] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 20:45:55.934882 2025] [:error] [pid 59070:tid 59140] [client 165.227.125.5:60800] [client 165.227.125.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aUfsA33dhXne9KX1kgI-HAAAAIw"]
[Sun Dec 21 22:36:35.142411 2025] [:error] [pid 30183:tid 30208] [client 182.44.12.37:47435] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUgF8-CmP2zCzk_WZcUv0gAAARc"]
[Sun Dec 21 22:49:29.670150 2025] [proxy_fcgi:error] [pid 59070:tid 59132] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:29.819985 2025] [proxy_fcgi:error] [pid 59070:tid 59130] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:29.961842 2025] [proxy_fcgi:error] [pid 59070:tid 59148] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:30.388348 2025] [proxy_fcgi:error] [pid 59070:tid 59142] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:30.530818 2025] [proxy_fcgi:error] [pid 59070:tid 59147] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:30.676672 2025] [proxy_fcgi:error] [pid 59070:tid 59136] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:30.832333 2025] [proxy_fcgi:error] [pid 59070:tid 59138] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:30.986719 2025] [proxy_fcgi:error] [pid 59070:tid 59141] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:31.165834 2025] [proxy_fcgi:error] [pid 59070:tid 59133] [client 4.217.178.35:11215] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:49:31.342344 2025] [:error] [pid 59070:tid 59146] [client 4.217.178.35:11215] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUgI-33dhXne9KX1kgJ1LgAAAJI"]
[Sun Dec 21 22:49:32.438448 2025] [:error] [pid 65237:tid 65257] [client 4.217.178.35:24338] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUgI_FVJYjxIpnUJfgJkVwAAAZI"]
[Sun Dec 21 22:49:34.271487 2025] [:error] [pid 65237:tid 65250] [client 4.217.178.35:21827] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUgI_lVJYjxIpnUJfgJkWQAAAYs"]
[Sun Dec 21 22:49:35.492172 2025] [:error] [pid 65237:tid 65254] [client 4.217.178.35:64777] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aUgI_1VJYjxIpnUJfgJkWwAAAY8"]
[Sun Dec 21 22:49:36.456399 2025] [:error] [pid 59067:tid 59083] [client 4.217.178.35:2946] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUgJAMtpsOP1NfIK_qKJaQAAAAk"]
[Sun Dec 21 22:49:37.406492 2025] [:error] [pid 59067:tid 59081] [client 4.217.178.35:24353] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUgJActpsOP1NfIK_qKJagAAAAc"]
[Sun Dec 21 22:49:40.999041 2025] [:error] [pid 59067:tid 59080] [client 4.217.178.35:27545] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUgJBMtpsOP1NfIK_qKJdwAAAAY"]
[Sun Dec 21 22:49:44.304775 2025] [:error] [pid 59070:tid 59148] [client 4.217.178.35:11797] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aUgJCH3dhXne9KX1kgJ1QAAAAJQ"]
[Sun Dec 21 22:49:47.005251 2025] [:error] [pid 59158:tid 59174] [client 4.217.178.35:64773] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUgJC47NvyNF8ab5VgVs-gAAAM4"]
[Sun Dec 21 22:49:48.272889 2025] [:error] [pid 59067:tid 59076] [client 4.217.178.35:48399] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUgJDMtpsOP1NfIK_qKJhQAAAAI"]
[Sun Dec 21 22:49:49.803894 2025] [:error] [pid 59067:tid 59098] [client 4.217.178.35:9916] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUgJDctpsOP1NfIK_qKJiAAAABg"]
[Sun Dec 21 22:49:51.210827 2025] [:error] [pid 59158:tid 59162] [client 4.217.178.35:46783] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUgJD47NvyNF8ab5VgVtAgAAAMI"]
[Sun Dec 21 22:49:53.298136 2025] [:error] [pid 59070:tid 59151] [client 4.217.178.35:20270] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUgJEX3dhXne9KX1kgJ1SgAAAJc"]
[Sun Dec 21 22:49:53.949325 2025] [:error] [pid 59070:tid 59139] [client 4.217.178.35:24963] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUgJEX3dhXne9KX1kgJ1UgAAAIs"]
[Sun Dec 21 22:49:54.790097 2025] [:error] [pid 42755:tid 42777] [client 4.217.178.35:20247] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUgJEuW0XvxgXMTJJbv8SAAAAVQ"]
[Sun Dec 21 22:49:57.010648 2025] [:error] [pid 59067:tid 59094] [client 4.217.178.35:21785] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aUgJFctpsOP1NfIK_qKJlgAAABQ"]
[Sun Dec 21 22:49:59.317291 2025] [:error] [pid 59067:tid 59087] [client 4.217.178.35:46731] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUgJF8tpsOP1NfIK_qKJmAAAAA0"]
[Sun Dec 21 22:50:00.623839 2025] [:error] [pid 59158:tid 59177] [client 4.217.178.35:34040] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUgJGI7NvyNF8ab5VgVtGQAAANE"]
[Sun Dec 21 22:50:01.600924 2025] [:error] [pid 42755:tid 42757] [client 4.217.178.35:2128] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUgJGeW0XvxgXMTJJbv8TAAAAUA"]
[Sun Dec 21 22:50:03.847270 2025] [:error] [pid 65237:tid 65259] [client 4.217.178.35:33032] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aUgJG1VJYjxIpnUJfgJkdgAAAZQ"]
[Sun Dec 21 22:50:06.141907 2025] [:error] [pid 59158:tid 59163] [client 4.217.178.35:64863] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUgJHo7NvyNF8ab5VgVtJAAAAMM"]
[Sun Dec 21 22:50:07.125034 2025] [:error] [pid 30183:tid 30196] [client 4.217.178.35:36816] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUgJH-CmP2zCzk_WZcUzhgAAAQs"]
[Sun Dec 21 22:50:08.111350 2025] [:error] [pid 59158:tid 59166] [client 4.217.178.35:2136] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUgJII7NvyNF8ab5VgVtKQAAAMY"]
[Sun Dec 21 22:50:09.631872 2025] [:error] [pid 59158:tid 59184] [client 4.217.178.35:33973] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aUgJIY7NvyNF8ab5VgVtLwAAANg"]
[Sun Dec 21 22:50:10.962038 2025] [:error] [pid 65237:tid 65243] [client 4.217.178.35:34005] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUgJIlVJYjxIpnUJfgJkeAAAAYQ"]
[Sun Dec 21 22:50:13.512998 2025] [:error] [pid 59158:tid 59182] [client 4.217.178.35:2117] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUgJJY7NvyNF8ab5VgVtMwAAANY"]
[Sun Dec 21 22:50:14.781423 2025] [:error] [pid 65237:tid 65251] [client 4.217.178.35:33945] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUgJJlVJYjxIpnUJfgJkfQAAAYw"]
[Sun Dec 21 22:50:17.288062 2025] [:error] [pid 59070:tid 59141] [client 4.217.178.35:34019] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aUgJKX3dhXne9KX1kgJ1hQAAAI0"]
[Sun Dec 21 22:50:20.105915 2025] [:error] [pid 59067:tid 59087] [client 4.217.178.35:30967] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUgJLMtpsOP1NfIK_qKJrgAAAA0"]
[Sun Dec 21 22:50:23.250014 2025] [:error] [pid 65237:tid 65244] [client 4.217.178.35:12517] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUgJL1VJYjxIpnUJfgJkiQAAAYU"]
[Sun Dec 21 22:50:24.661378 2025] [:error] [pid 59068:tid 59110] [client 4.217.178.35:35468] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUgJMBmLyLqWUlrjwye0cQAAAEk"]
[Sun Dec 21 22:50:26.783228 2025] [:error] [pid 30183:tid 30196] [client 4.217.178.35:27613] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aUgJMuCmP2zCzk_WZcUzkQAAAQs"]
[Sun Dec 21 22:50:30.101477 2025] [:error] [pid 59070:tid 59151] [client 4.217.178.35:27605] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aUgJNn3dhXne9KX1kgJ1lQAAAJc"]
[Sun Dec 21 22:50:32.442504 2025] [proxy_fcgi:error] [pid 65237:tid 65245] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:33.815544 2025] [proxy_fcgi:error] [pid 65237:tid 65261] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:33.980293 2025] [proxy_fcgi:error] [pid 65237:tid 65258] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:34.616748 2025] [proxy_fcgi:error] [pid 65237:tid 65262] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:34.772534 2025] [proxy_fcgi:error] [pid 65237:tid 65257] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:34.913542 2025] [proxy_fcgi:error] [pid 65237:tid 65255] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:35.058620 2025] [proxy_fcgi:error] [pid 65237:tid 65251] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:35.228809 2025] [proxy_fcgi:error] [pid 65237:tid 65249] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:35.394163 2025] [proxy_fcgi:error] [pid 65237:tid 65246] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:35.570226 2025] [proxy_fcgi:error] [pid 65237:tid 65253] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:35.757081 2025] [proxy_fcgi:error] [pid 65237:tid 65239] [client 4.217.178.35:35456] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:50:35.956721 2025] [:error] [pid 65237:tid 65242] [client 4.217.178.35:35456] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUgJO1VJYjxIpnUJfgJkpgAAAYM"]
[Sun Dec 21 22:50:37.838320 2025] [:error] [pid 65237:tid 65248] [client 4.217.178.35:20313] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUgJPVVJYjxIpnUJfgJkqQAAAYk"]
[Sun Dec 21 22:50:40.201861 2025] [:error] [pid 59158:tid 59161] [client 4.217.178.35:25085] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUgJQI7NvyNF8ab5VgVtTgAAAME"]
[Sun Dec 21 22:50:42.546569 2025] [:error] [pid 59068:tid 59119] [client 4.217.178.35:20341] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aUgJQhmLyLqWUlrjwye0jwAAAFI"]
[Sun Dec 21 22:50:44.354096 2025] [:error] [pid 59067:tid 59095] [client 4.217.178.35:25070] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aUgJRMtpsOP1NfIK_qKJwAAAABU"]
[Sun Dec 21 22:50:46.555732 2025] [:error] [pid 59070:tid 59144] [client 4.217.178.35:3040] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aUgJRn3dhXne9KX1kgJ1pwAAAJA"]
[Sun Dec 21 22:50:47.590823 2025] [:error] [pid 59068:tid 59110] [client 4.217.178.35:20344] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aUgJRxmLyLqWUlrjwye0kwAAAEk"]
[Sun Dec 21 22:50:50.243152 2025] [:error] [pid 59158:tid 59173] [client 4.217.178.35:33140] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aUgJSo7NvyNF8ab5VgVtYgAAAM0"]
[Sun Dec 21 22:50:52.520522 2025] [:error] [pid 59067:tid 59085] [client 4.217.178.35:17768] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aUgJTMtpsOP1NfIK_qKJxgAAAAs"]
[Sun Dec 21 22:50:54.162817 2025] [:error] [pid 42755:tid 42776] [client 4.217.178.35:27585] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aUgJTuW0XvxgXMTJJbv8gwAAAVM"]
[Sun Dec 21 22:50:55.922145 2025] [:error] [pid 59067:tid 59094] [client 4.217.178.35:17771] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aUgJT8tpsOP1NfIK_qKJyQAAABQ"]
[Sun Dec 21 22:50:57.296073 2025] [:error] [pid 30183:tid 30204] [client 4.217.178.35:17033] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aUgJUeCmP2zCzk_WZcUzwwAAARM"]
[Sun Dec 21 22:50:59.628102 2025] [:error] [pid 59068:tid 59109] [client 4.217.178.35:17026] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUgJUxmLyLqWUlrjwye0nAAAAEg"]
[Sun Dec 21 22:51:03.294808 2025] [:error] [pid 59068:tid 59116] [client 4.217.178.35:62472] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUgJVxmLyLqWUlrjwye0nwAAAE8"]
[Sun Dec 21 22:51:04.580732 2025] [:error] [pid 30183:tid 30187] [client 4.217.178.35:64944] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUgJWOCmP2zCzk_WZcUzyAAAAQI"]
[Sun Dec 21 22:51:05.665890 2025] [:error] [pid 65237:tid 65254] [client 4.217.178.35:64934] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUgJWVVJYjxIpnUJfgJkywAAAY8"]
[Sun Dec 21 22:51:07.301642 2025] [:error] [pid 59158:tid 59179] [client 4.217.178.35:17713] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUgJW47NvyNF8ab5VgVtfQAAANM"]
[Sun Dec 21 22:51:08.150365 2025] [:error] [pid 42755:tid 42773] [client 4.217.178.35:23050] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUgJXOW0XvxgXMTJJbv8mgAAAVA"]
[Sun Dec 21 22:51:09.181564 2025] [:error] [pid 59068:tid 59111] [client 4.217.178.35:25087] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUgJXRmLyLqWUlrjwye0qAAAAEo"]
[Sun Dec 21 22:51:10.058944 2025] [:error] [pid 59068:tid 59109] [client 4.217.178.35:2738] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aUgJXhmLyLqWUlrjwye0qwAAAEg"]
[Sun Dec 21 22:51:11.639667 2025] [:error] [pid 42755:tid 42778] [client 4.217.178.35:64904] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUgJX-W0XvxgXMTJJbv8owAAAVU"]
[Sun Dec 21 22:51:13.550105 2025] [:error] [pid 59068:tid 59114] [client 4.217.178.35:17031] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUgJYRmLyLqWUlrjwye0sAAAAE0"]
[Sun Dec 21 22:51:15.347778 2025] [:error] [pid 59067:tid 59090] [client 4.217.178.35:33111] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUgJY8tpsOP1NfIK_qKJ3gAAABA"]
[Sun Dec 21 22:51:18.230476 2025] [:error] [pid 30183:tid 30199] [client 4.217.178.35:64955] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aUgJZuCmP2zCzk_WZcUz3QAAAQ4"]
[Sun Dec 21 22:51:19.435511 2025] [:error] [pid 65237:tid 65262] [client 4.217.178.35:64943] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUgJZ1VJYjxIpnUJfgJk0AAAAZc"]
[Sun Dec 21 22:51:21.662291 2025] [:error] [pid 65237:tid 65243] [client 4.217.178.35:45665] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUgJaVVJYjxIpnUJfgJk2AAAAYQ"]
[Sun Dec 21 22:51:22.696513 2025] [:error] [pid 30183:tid 30193] [client 4.217.178.35:64954] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUgJauCmP2zCzk_WZcUz4AAAAQg"]
[Sun Dec 21 22:51:24.161428 2025] [:error] [pid 59070:tid 59143] [client 4.217.178.35:23133] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aUgJbH3dhXne9KX1kgJ1ygAAAI8"]
[Sun Dec 21 22:51:26.187602 2025] [:error] [pid 30183:tid 30196] [client 4.217.178.35:9980] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUgJbuCmP2zCzk_WZcUz5AAAAQs"]
[Sun Dec 21 22:51:27.593372 2025] [:error] [pid 59158:tid 59179] [client 4.217.178.35:45594] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUgJb47NvyNF8ab5VgVtlgAAANM"]
[Sun Dec 21 22:51:28.693091 2025] [:error] [pid 59158:tid 59174] [client 4.217.178.35:38060] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUgJcI7NvyNF8ab5VgVtlwAAAM4"]
[Sun Dec 21 22:51:29.620500 2025] [:error] [pid 59067:tid 59089] [client 4.217.178.35:64442] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUgJcctpsOP1NfIK_qKJ8wAAAA8"]
[Sun Dec 21 22:51:31.005416 2025] [:error] [pid 42755:tid 42776] [client 4.217.178.35:9947] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUgJc-W0XvxgXMTJJbv8tQAAAVM"]
[Sun Dec 21 22:51:32.485316 2025] [:error] [pid 30183:tid 30199] [client 4.217.178.35:38034] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUgJdOCmP2zCzk_WZcUz5gAAAQ4"]
[Sun Dec 21 22:51:33.789662 2025] [:error] [pid 30183:tid 30191] [client 4.217.178.35:40033] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aUgJdeCmP2zCzk_WZcUz6QAAAQY"]
[Sun Dec 21 22:51:36.164529 2025] [proxy_fcgi:error] [pid 42755:tid 42771] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:36.315237 2025] [proxy_fcgi:error] [pid 42755:tid 42773] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:36.462568 2025] [proxy_fcgi:error] [pid 42755:tid 42769] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:36.608076 2025] [proxy_fcgi:error] [pid 42755:tid 42770] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:36.783170 2025] [proxy_fcgi:error] [pid 42755:tid 42779] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:37.255775 2025] [proxy_fcgi:error] [pid 42755:tid 42780] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:37.406483 2025] [proxy_fcgi:error] [pid 42755:tid 42762] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:37.573635 2025] [proxy_fcgi:error] [pid 42755:tid 42758] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:37.725057 2025] [proxy_fcgi:error] [pid 42755:tid 42775] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:37.876405 2025] [proxy_fcgi:error] [pid 42755:tid 42760] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:38.025273 2025] [proxy_fcgi:error] [pid 42755:tid 42772] [client 4.217.178.35:64393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:51:38.391733 2025] [:error] [pid 42755:tid 42761] [client 4.217.178.35:64393] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUgJeuW0XvxgXMTJJbv8zwAAAUQ"]
[Sun Dec 21 22:51:39.354356 2025] [:error] [pid 59067:tid 59083] [client 4.217.178.35:64599] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUgJe8tpsOP1NfIK_qKJ-wAAAAk"]
[Sun Dec 21 22:51:40.081807 2025] [:error] [pid 65237:tid 65263] [client 4.217.178.35:45616] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUgJfFVJYjxIpnUJfgJk5wAAAZg"]
[Sun Dec 21 22:51:40.772507 2025] [:error] [pid 59067:tid 59093] [client 4.217.178.35:64388] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUgJfMtpsOP1NfIK_qKKAAAAABM"]
[Sun Dec 21 22:51:42.272035 2025] [:error] [pid 59158:tid 59183] [client 4.217.178.35:38036] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aUgJfo7NvyNF8ab5VgVtswAAANc"]
[Sun Dec 21 22:51:44.082894 2025] [:error] [pid 65237:tid 65262] [client 4.217.178.35:26295] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aUgJgFVJYjxIpnUJfgJk9QAAAZc"]
[Sun Dec 21 22:51:45.435869 2025] [:error] [pid 42755:tid 42757] [client 4.217.178.35:2097] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aUgJgeW0XvxgXMTJJbv80gAAAUA"]
[Sun Dec 21 22:51:46.020341 2025] [:error] [pid 42755:tid 42762] [client 4.217.178.35:64392] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aUgJguW0XvxgXMTJJbv80wAAAUU"]
[Sun Dec 21 22:51:46.899817 2025] [:error] [pid 59068:tid 59119] [client 4.217.178.35:2095] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aUgJghmLyLqWUlrjwye02wAAAFI"]
[Sun Dec 21 22:51:48.335581 2025] [:error] [pid 59158:tid 59160] [client 4.217.178.35:36744] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aUgJhI7NvyNF8ab5VgVtyQAAAMA"]
[Sun Dec 21 22:51:49.547341 2025] [:error] [pid 65237:tid 65263] [client 4.217.178.35:64573] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aUgJhVVJYjxIpnUJfgJlCgAAAZg"]
[Sun Dec 21 22:51:50.839143 2025] [:error] [pid 59158:tid 59165] [client 4.217.178.35:2055] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aUgJho7NvyNF8ab5VgVt0gAAAMU"]
[Sun Dec 21 22:51:51.776241 2025] [:error] [pid 59070:tid 59146] [client 4.217.178.35:36786] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aUgJh33dhXne9KX1kgJ16AAAAJI"]
[Sun Dec 21 22:51:52.864751 2025] [:error] [pid 42755:tid 42767] [client 4.217.178.35:36751] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aUgJiOW0XvxgXMTJJbv82gAAAUo"]
[Sun Dec 21 22:51:54.444369 2025] [:error] [pid 59158:tid 59184] [client 4.217.178.35:46448] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aUgJio7NvyNF8ab5VgVt2gAAANg"]
[Sun Dec 21 22:51:56.114983 2025] [:error] [pid 42755:tid 42766] [client 4.217.178.35:29658] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aUgJjOW0XvxgXMTJJbv83wAAAUk"]
[Sun Dec 21 22:51:56.799922 2025] [:error] [pid 42755:tid 42762] [client 4.217.178.35:25630] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aUgJjOW0XvxgXMTJJbv84QAAAUU"]
[Sun Dec 21 22:51:57.436500 2025] [:error] [pid 59068:tid 59105] [client 4.217.178.35:29634] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aUgJjRmLyLqWUlrjwye06wAAAEQ"]
[Sun Dec 21 22:51:57.997915 2025] [:error] [pid 59158:tid 59176] [client 4.217.178.35:26904] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aUgJjY7NvyNF8ab5VgVt2wAAANA"]
[Sun Dec 21 22:51:59.552997 2025] [:error] [pid 59067:tid 59096] [client 4.217.178.35:23728] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aUgJj8tpsOP1NfIK_qKKDAAAABY"]
[Sun Dec 21 22:52:03.506931 2025] [:error] [pid 30183:tid 30207] [client 4.217.178.35:29640] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUgJk-CmP2zCzk_WZcUz_QAAARY"]
[Sun Dec 21 22:52:04.684197 2025] [:error] [pid 59070:tid 59134] [client 4.217.178.35:23680] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUgJlH3dhXne9KX1kgJ2DwAAAIY"]
[Sun Dec 21 22:52:05.097481 2025] [:error] [pid 65237:tid 65249] [client 4.217.178.35:2418] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUgJlVVJYjxIpnUJfgJlEQAAAYo"]
[Sun Dec 21 22:52:05.747624 2025] [:error] [pid 59158:tid 59179] [client 4.217.178.35:49315] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUgJlY7NvyNF8ab5VgVt6AAAANM"]
[Sun Dec 21 22:52:06.741362 2025] [:error] [pid 59070:tid 59131] [client 4.217.178.35:2647] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUgJln3dhXne9KX1kgJ2EgAAAIM"]
[Sun Dec 21 22:52:08.926296 2025] [:error] [pid 59158:tid 59178] [client 4.217.178.35:2648] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUgJmI7NvyNF8ab5VgVt7QAAANI"]
[Sun Dec 21 22:52:09.868565 2025] [:error] [pid 59158:tid 59162] [client 4.217.178.35:19198] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUgJmY7NvyNF8ab5VgVt8gAAAMI"]
[Sun Dec 21 22:52:10.921443 2025] [:error] [pid 65237:tid 65240] [client 4.217.178.35:49322] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aUgJmlVJYjxIpnUJfgJlGAAAAYE"]
[Sun Dec 21 22:52:12.034672 2025] [:error] [pid 59158:tid 59181] [client 4.217.178.35:33395] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUgJnI7NvyNF8ab5VgVt9AAAANU"]
[Sun Dec 21 22:52:13.356769 2025] [:error] [pid 59067:tid 59094] [client 4.217.178.35:45735] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUgJnctpsOP1NfIK_qKKHgAAABQ"]
[Sun Dec 21 22:52:14.055303 2025] [:error] [pid 42755:tid 42769] [client 4.217.178.35:2416] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUgJnuW0XvxgXMTJJbv89wAAAUw"]
[Sun Dec 21 22:52:15.023248 2025] [:error] [pid 59068:tid 59122] [client 4.217.178.35:40457] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-info.php"] [unique_id "aUgJnxmLyLqWUlrjwye0_QAAAFU"]
[Sun Dec 21 22:52:16.395769 2025] [:error] [pid 42755:tid 42762] [client 4.217.178.35:19165] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUgJoOW0XvxgXMTJJbv8-wAAAUU"]
[Sun Dec 21 22:52:18.262192 2025] [:error] [pid 42755:tid 42781] [client 4.217.178.35:49324] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUgJouW0XvxgXMTJJbv9AgAAAVg"]
[Sun Dec 21 22:52:18.956559 2025] [:error] [pid 59068:tid 59115] [client 4.217.178.35:13901] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUgJohmLyLqWUlrjwye1AwAAAE4"]
[Sun Dec 21 22:52:19.594569 2025] [:error] [pid 59070:tid 59138] [client 4.217.178.35:13914] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/warm.PhP7"] [unique_id "aUgJo33dhXne9KX1kgJ2HgAAAIo"]
[Sun Dec 21 22:52:20.933884 2025] [:error] [pid 59067:tid 59080] [client 4.217.178.35:45710] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUgJpMtpsOP1NfIK_qKKJQAAAAY"]
[Sun Dec 21 22:52:22.059826 2025] [:error] [pid 59070:tid 59150] [client 4.217.178.35:64944] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUgJpn3dhXne9KX1kgJ2IQAAAJY"]
[Sun Dec 21 22:52:23.141146 2025] [:error] [pid 59068:tid 59122] [client 4.217.178.35:19139] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUgJpxmLyLqWUlrjwye1BwAAAFU"]
[Sun Dec 21 22:52:24.196411 2025] [:error] [pid 59070:tid 59131] [client 4.217.178.35:2318] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aUgJqH3dhXne9KX1kgJ2JwAAAIM"]
[Sun Dec 21 22:52:24.740467 2025] [:error] [pid 59158:tid 59175] [client 4.217.178.35:13911] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUgJqI7NvyNF8ab5VgVuCwAAAM8"]
[Sun Dec 21 22:52:25.671609 2025] [:error] [pid 59067:tid 59076] [client 4.217.178.35:16610] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUgJqctpsOP1NfIK_qKKKQAAAAI"]
[Sun Dec 21 22:52:26.187958 2025] [:error] [pid 59070:tid 59137] [client 4.217.178.35:15893] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUgJqn3dhXne9KX1kgJ2KQAAAIk"]
[Sun Dec 21 22:52:29.125490 2025] [:error] [pid 65237:tid 65257] [client 4.217.178.35:15896] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aUgJrVVJYjxIpnUJfgJlSQAAAZI"]
[Sun Dec 21 22:52:31.146462 2025] [:error] [pid 59158:tid 59174] [client 4.217.178.35:19099] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUgJr47NvyNF8ab5VgVuFwAAAM4"]
[Sun Dec 21 22:52:32.005471 2025] [:error] [pid 59070:tid 59128] [client 4.217.178.35:19122] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUgJsH3dhXne9KX1kgJ2OwAAAIA"]
[Sun Dec 21 22:52:32.797040 2025] [:error] [pid 59068:tid 59110] [client 4.217.178.35:2453] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUgJsBmLyLqWUlrjwye1DwAAAEk"]
[Sun Dec 21 22:52:34.646941 2025] [:error] [pid 59158:tid 59177] [client 4.217.178.35:13076] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aUgJso7NvyNF8ab5VgVuHgAAANE"]
[Sun Dec 21 22:52:35.845813 2025] [:error] [pid 59158:tid 59183] [client 4.217.178.35:19124] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aUgJs47NvyNF8ab5VgVuIgAAANc"]
[Sun Dec 21 22:52:37.351891 2025] [:error] [pid 59067:tid 59084] [client 4.217.178.35:2437] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aUgJtctpsOP1NfIK_qKKPQAAAAo"]
[Sun Dec 21 22:52:38.919710 2025] [proxy_fcgi:error] [pid 30183:tid 30193] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:39.295295 2025] [proxy_fcgi:error] [pid 30183:tid 30208] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:39.436410 2025] [proxy_fcgi:error] [pid 30183:tid 30192] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:39.578616 2025] [proxy_fcgi:error] [pid 30183:tid 30186] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:39.720051 2025] [proxy_fcgi:error] [pid 30183:tid 30203] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:39.969929 2025] [proxy_fcgi:error] [pid 30183:tid 30202] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:40.117146 2025] [proxy_fcgi:error] [pid 30183:tid 30194] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:40.263140 2025] [proxy_fcgi:error] [pid 30183:tid 30189] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:40.545906 2025] [proxy_fcgi:error] [pid 30183:tid 30198] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:40.929118 2025] [proxy_fcgi:error] [pid 30183:tid 30187] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:41.078842 2025] [proxy_fcgi:error] [pid 30183:tid 30207] [client 4.217.178.35:13121] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:52:41.242628 2025] [:error] [pid 30183:tid 30201] [client 4.217.178.35:13121] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUgJueCmP2zCzk_WZcU0LQAAARA"]
[Sun Dec 21 22:52:43.061474 2025] [:error] [pid 42755:tid 42768] [client 4.217.178.35:34781] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUgJu-W0XvxgXMTJJbv9GwAAAUs"]
[Sun Dec 21 22:52:44.072197 2025] [:error] [pid 59158:tid 59162] [client 4.217.178.35:2326] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUgJvI7NvyNF8ab5VgVuLAAAAMI"]
[Sun Dec 21 22:52:46.254229 2025] [:error] [pid 65237:tid 65257] [client 4.217.178.35:2243] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aUgJvlVJYjxIpnUJfgJlZQAAAZI"]
[Sun Dec 21 22:52:47.020244 2025] [:error] [pid 65237:tid 65248] [client 4.217.178.35:13125] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aUgJv1VJYjxIpnUJfgJlZgAAAYk"]
[Sun Dec 21 22:52:48.365276 2025] [:error] [pid 59158:tid 59168] [client 4.217.178.35:34765] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aUgJwI7NvyNF8ab5VgVuNQAAAMg"]
[Sun Dec 21 22:52:49.346560 2025] [:error] [pid 30183:tid 30192] [client 4.217.178.35:13085] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aUgJweCmP2zCzk_WZcU0NAAAAQc"]
[Sun Dec 21 22:52:51.421883 2025] [:error] [pid 30183:tid 30186] [client 4.217.178.35:65086] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aUgJw-CmP2zCzk_WZcU0NgAAAQE"]
[Sun Dec 21 22:52:54.191107 2025] [:error] [pid 59158:tid 59169] [client 4.217.178.35:40424] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUgJxo7NvyNF8ab5VgVuSgAAAMk"]
[Sun Dec 21 22:52:55.152962 2025] [:error] [pid 30183:tid 30206] [client 4.217.178.35:22508] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUgJx-CmP2zCzk_WZcU0NwAAARU"]
[Sun Dec 21 22:52:55.878300 2025] [:error] [pid 59158:tid 59163] [client 4.217.178.35:65044] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUgJx47NvyNF8ab5VgVuUwAAAMM"]
[Sun Dec 21 22:52:56.896455 2025] [:error] [pid 59158:tid 59174] [client 4.217.178.35:34803] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUgJyI7NvyNF8ab5VgVuVAAAAM4"]
[Sun Dec 21 22:52:57.456212 2025] [:error] [pid 59158:tid 59164] [client 4.217.178.35:13143] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUgJyY7NvyNF8ab5VgVuVwAAAMQ"]
[Sun Dec 21 22:52:58.242794 2025] [:error] [pid 65237:tid 65245] [client 4.217.178.35:34791] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUgJylVJYjxIpnUJfgJlcAAAAYY"]
[Sun Dec 21 22:52:59.196941 2025] [:error] [pid 59070:tid 59140] [client 4.217.178.35:16529] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUgJy33dhXne9KX1kgJ2TgAAAIw"]
[Sun Dec 21 22:53:00.199609 2025] [:error] [pid 59070:tid 59129] [client 4.217.178.35:65030] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUgJzH3dhXne9KX1kgJ2VQAAAIE"]
[Sun Dec 21 22:53:01.527042 2025] [:error] [pid 65237:tid 65244] [client 4.217.178.35:38313] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUgJzVVJYjxIpnUJfgJlcgAAAYU"]
[Sun Dec 21 22:53:02.948440 2025] [:error] [pid 59067:tid 59078] [client 4.217.178.35:12517] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUgJzstpsOP1NfIK_qKKXAAAAAQ"]
[Sun Dec 21 22:53:04.419922 2025] [:error] [pid 59158:tid 59169] [client 4.217.178.35:38317] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUgJ0I7NvyNF8ab5VgVucQAAAMk"]
[Sun Dec 21 22:53:06.279080 2025] [:error] [pid 59067:tid 59091] [client 4.217.178.35:2253] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aUgJ0stpsOP1NfIK_qKKYQAAABE"]
[Sun Dec 21 22:53:07.667624 2025] [:error] [pid 59068:tid 59117] [client 4.217.178.35:34808] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aUgJ0xmLyLqWUlrjwye1LgAAAFA"]
[Sun Dec 21 22:53:09.015195 2025] [:error] [pid 59068:tid 59113] [client 4.217.178.35:34777] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aUgJ1RmLyLqWUlrjwye1NAAAAEw"]
[Sun Dec 21 22:53:10.603484 2025] [:error] [pid 65237:tid 65245] [client 4.217.178.35:38282] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aUgJ1lVJYjxIpnUJfgJlewAAAYY"]
[Sun Dec 21 22:53:13.875533 2025] [:error] [pid 59068:tid 59109] [client 4.217.178.35:13110] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aUgJ2RmLyLqWUlrjwye1PQAAAEg"]
[Sun Dec 21 22:53:16.284021 2025] [:error] [pid 59158:tid 59184] [client 4.217.178.35:13133] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aUgJ3I7NvyNF8ab5VgVujAAAANg"]
[Sun Dec 21 22:53:18.006371 2025] [:error] [pid 30183:tid 30194] [client 4.217.178.35:38318] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aUgJ3uCmP2zCzk_WZcU0RAAAAQk"]
[Sun Dec 21 22:53:19.126583 2025] [:error] [pid 30183:tid 30195] [client 4.217.178.35:16548] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aUgJ3-CmP2zCzk_WZcU0RgAAAQo"]
[Sun Dec 21 22:53:19.776040 2025] [:error] [pid 65237:tid 65252] [client 4.217.178.35:38288] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aUgJ31VJYjxIpnUJfgJlfgAAAY0"]
[Sun Dec 21 22:53:20.742517 2025] [:error] [pid 42755:tid 42776] [client 4.217.178.35:25697] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUgJ4OW0XvxgXMTJJbv9NQAAAVM"]
[Sun Dec 21 22:53:22.775372 2025] [:error] [pid 30183:tid 30197] [client 4.217.178.35:2302] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUgJ4uCmP2zCzk_WZcU0TAAAAQw"]
[Sun Dec 21 22:53:24.606426 2025] [:error] [pid 59070:tid 59142] [client 4.217.178.35:25710] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUgJ5H3dhXne9KX1kgJ2bgAAAI4"]
[Sun Dec 21 22:53:25.481401 2025] [:error] [pid 59068:tid 59122] [client 4.217.178.35:40436] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aUgJ5RmLyLqWUlrjwye1TQAAAFU"]
[Sun Dec 21 22:53:28.039145 2025] [:error] [pid 59067:tid 59086] [client 4.217.178.35:22506] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUgJ6MtpsOP1NfIK_qKKZgAAAAw"]
[Sun Dec 21 22:53:31.065849 2025] [:error] [pid 65237:tid 65239] [client 4.217.178.35:22494] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUgJ61VJYjxIpnUJfgJljQAAAYA"]
[Sun Dec 21 22:53:33.749518 2025] [:error] [pid 59068:tid 59105] [client 4.217.178.35:22514] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUgJ7RmLyLqWUlrjwye1XAAAAEQ"]
[Sun Dec 21 22:53:35.076992 2025] [:error] [pid 59068:tid 59124] [client 4.217.178.35:16514] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aUgJ7xmLyLqWUlrjwye1XgAAAFc"]
[Sun Dec 21 22:53:36.296340 2025] [:error] [pid 59070:tid 59135] [client 4.217.178.35:38290] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUgJ8H3dhXne9KX1kgJ2dwAAAIc"]
[Sun Dec 21 22:53:37.936007 2025] [:error] [pid 30183:tid 30195] [client 4.217.178.35:48246] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUgJ8eCmP2zCzk_WZcU0VgAAAQo"]
[Sun Dec 21 22:53:39.220868 2025] [:error] [pid 59068:tid 59124] [client 4.217.178.35:22478] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aUgJ8xmLyLqWUlrjwye1aAAAAFc"]
[Sun Dec 21 22:53:41.357252 2025] [proxy_fcgi:error] [pid 59068:tid 59117] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:41.503039 2025] [proxy_fcgi:error] [pid 59068:tid 59106] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:41.651719 2025] [proxy_fcgi:error] [pid 59068:tid 59120] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:41.799621 2025] [proxy_fcgi:error] [pid 59068:tid 59121] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:41.942354 2025] [proxy_fcgi:error] [pid 59068:tid 59125] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:42.085991 2025] [proxy_fcgi:error] [pid 59068:tid 59111] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:42.245935 2025] [proxy_fcgi:error] [pid 59068:tid 59122] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:42.388053 2025] [proxy_fcgi:error] [pid 59068:tid 59114] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:42.547890 2025] [proxy_fcgi:error] [pid 59068:tid 59102] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:42.706808 2025] [proxy_fcgi:error] [pid 59068:tid 59108] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:42.852937 2025] [proxy_fcgi:error] [pid 59068:tid 59112] [client 4.217.178.35:65028] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:53:43.002389 2025] [:error] [pid 59068:tid 59118] [client 4.217.178.35:65028] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aUgJ9xmLyLqWUlrjwye1hQAAAFE"]
[Sun Dec 21 22:53:44.624455 2025] [:error] [pid 59067:tid 59090] [client 4.217.178.35:40391] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aUgJ-MtpsOP1NfIK_qKKggAAABA"]
[Sun Dec 21 22:53:46.543286 2025] [:error] [pid 30183:tid 30188] [client 4.217.178.35:38294] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aUgJ-uCmP2zCzk_WZcU0XgAAAQM"]
[Sun Dec 21 22:53:48.663879 2025] [:error] [pid 42755:tid 42760] [client 4.217.178.35:48254] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aUgJ_OW0XvxgXMTJJbv9UAAAAUM"]
[Sun Dec 21 22:53:49.227166 2025] [:error] [pid 42755:tid 42761] [client 4.217.178.35:2258] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aUgJ_eW0XvxgXMTJJbv9UgAAAUQ"]
[Sun Dec 21 22:53:49.798110 2025] [:error] [pid 59070:tid 59132] [client 4.217.178.35:2246] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aUgJ_X3dhXne9KX1kgJ2iwAAAIQ"]
[Sun Dec 21 22:53:50.446259 2025] [:error] [pid 59067:tid 59090] [client 4.217.178.35:13056] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aUgJ_stpsOP1NfIK_qKKkgAAABA"]
[Sun Dec 21 22:53:51.298305 2025] [:error] [pid 59068:tid 59125] [client 4.217.178.35:40447] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aUgJ_xmLyLqWUlrjwye1kgAAAFg"]
[Sun Dec 21 22:53:52.896724 2025] [:error] [pid 59067:tid 59091] [client 4.217.178.35:13138] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aUgKAMtpsOP1NfIK_qKKlwAAABE"]
[Sun Dec 21 22:53:54.179092 2025] [:error] [pid 59067:tid 59098] [client 4.217.178.35:2256] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aUgKAstpsOP1NfIK_qKKmQAAABg"]
[Sun Dec 21 22:53:55.422944 2025] [:error] [pid 30183:tid 30206] [client 4.217.178.35:2244] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aUgKA-CmP2zCzk_WZcU0aAAAARU"]
[Sun Dec 21 22:53:57.181808 2025] [:error] [pid 65237:tid 65254] [client 4.217.178.35:38305] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aUgKBVVJYjxIpnUJfgJlogAAAY8"]
[Sun Dec 21 22:53:59.030985 2025] [:error] [pid 65237:tid 65252] [client 4.217.178.35:13152] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aUgKB1VJYjxIpnUJfgJlpQAAAY0"]
[Sun Dec 21 22:54:00.399612 2025] [:error] [pid 59068:tid 59107] [client 4.217.178.35:13079] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aUgKCBmLyLqWUlrjwye1nAAAAEY"]
[Sun Dec 21 22:54:01.293938 2025] [:error] [pid 59068:tid 59110] [client 4.217.178.35:14503] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aUgKCRmLyLqWUlrjwye1nQAAAEk"]
[Sun Dec 21 22:54:02.418512 2025] [:error] [pid 59068:tid 59114] [client 4.217.178.35:65058] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aUgKChmLyLqWUlrjwye1nwAAAE0"]
[Sun Dec 21 22:54:06.240961 2025] [:error] [pid 59068:tid 59109] [client 4.217.178.35:2241] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUgKDhmLyLqWUlrjwye1qQAAAEg"]
[Sun Dec 21 22:54:09.363087 2025] [:error] [pid 59158:tid 59169] [client 4.217.178.35:40445] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUgKEY7NvyNF8ab5VgVu4AAAAMk"]
[Sun Dec 21 22:54:11.283414 2025] [:error] [pid 59070:tid 59137] [client 4.217.178.35:13120] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUgKE33dhXne9KX1kgJ2rgAAAIk"]
[Sun Dec 21 22:54:12.813585 2025] [:error] [pid 59068:tid 59115] [client 4.217.178.35:13093] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUgKFBmLyLqWUlrjwye1uQAAAE4"]
[Sun Dec 21 22:54:14.079383 2025] [:error] [pid 65237:tid 65248] [client 4.217.178.35:16524] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUgKFlVJYjxIpnUJfgJlvAAAAYk"]
[Sun Dec 21 22:54:15.059756 2025] [:error] [pid 65237:tid 65252] [client 4.217.178.35:40394] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUgKF1VJYjxIpnUJfgJlvQAAAY0"]
[Sun Dec 21 22:54:16.704447 2025] [:error] [pid 59067:tid 59096] [client 4.217.178.35:22502] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUgKGMtpsOP1NfIK_qKKpwAAABY"]
[Sun Dec 21 22:54:21.410579 2025] [:error] [pid 59068:tid 59101] [client 4.217.178.35:38272] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aUgKHRmLyLqWUlrjwye1xQAAAEA"]
[Sun Dec 21 22:54:23.004319 2025] [:error] [pid 42755:tid 42767] [client 4.217.178.35:38284] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUgKH-W0XvxgXMTJJbv9ewAAAUo"]
[Sun Dec 21 22:54:25.775505 2025] [:error] [pid 59067:tid 59082] [client 4.217.178.35:13058] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUgKIctpsOP1NfIK_qKKrQAAAAg"]
[Sun Dec 21 22:54:28.116941 2025] [:error] [pid 59067:tid 59075] [client 4.217.178.35:14523] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUgKJMtpsOP1NfIK_qKKswAAAAE"]
[Sun Dec 21 22:54:29.741202 2025] [:error] [pid 59067:tid 59094] [client 4.217.178.35:2295] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asas.php"] [unique_id "aUgKJctpsOP1NfIK_qKKtgAAABQ"]
[Sun Dec 21 22:54:31.911321 2025] [:error] [pid 65237:tid 65255] [client 4.217.178.35:2254] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUgKJ1VJYjxIpnUJfgJlzgAAAZA"]
[Sun Dec 21 22:54:32.734531 2025] [:error] [pid 42755:tid 42768] [client 4.217.178.35:40393] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUgKKOW0XvxgXMTJJbv9igAAAUs"]
[Sun Dec 21 22:54:33.539562 2025] [:error] [pid 65237:tid 65252] [client 4.217.178.35:48244] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUgKKVVJYjxIpnUJfgJl0gAAAY0"]
[Sun Dec 21 22:54:34.957595 2025] [:error] [pid 42755:tid 42772] [client 4.217.178.35:48238] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aUgKKuW0XvxgXMTJJbv9jAAAAU8"]
[Sun Dec 21 22:54:35.613928 2025] [:error] [pid 42755:tid 42758] [client 4.217.178.35:40410] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUgKK-W0XvxgXMTJJbv9jQAAAUE"]
[Sun Dec 21 22:54:37.001603 2025] [:error] [pid 59158:tid 59173] [client 4.217.178.35:22512] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUgKLY7NvyNF8ab5VgVvGgAAAM0"]
[Sun Dec 21 22:54:38.487735 2025] [:error] [pid 65237:tid 65239] [client 4.217.178.35:2279] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUgKLlVJYjxIpnUJfgJl5AAAAYA"]
[Sun Dec 21 22:54:39.816613 2025] [:error] [pid 30183:tid 30208] [client 4.217.178.35:25713] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUgKL-CmP2zCzk_WZcU0qgAAARc"]
[Sun Dec 21 22:54:40.781823 2025] [:error] [pid 59068:tid 59103] [client 4.217.178.35:14514] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUgKMBmLyLqWUlrjwye16AAAAEI"]
[Sun Dec 21 22:54:41.511421 2025] [:error] [pid 65237:tid 65248] [client 4.217.178.35:33395] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUgKMVVJYjxIpnUJfgJl9gAAAYk"]
[Sun Dec 21 22:54:43.145499 2025] [proxy_fcgi:error] [pid 59158:tid 59173] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:43.284708 2025] [proxy_fcgi:error] [pid 59158:tid 59180] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:43.424528 2025] [proxy_fcgi:error] [pid 59158:tid 59181] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:43.914840 2025] [proxy_fcgi:error] [pid 59158:tid 59169] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.052655 2025] [proxy_fcgi:error] [pid 59158:tid 59171] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.233911 2025] [proxy_fcgi:error] [pid 59158:tid 59183] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.382413 2025] [proxy_fcgi:error] [pid 59158:tid 59161] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.520527 2025] [proxy_fcgi:error] [pid 59158:tid 59176] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.658839 2025] [proxy_fcgi:error] [pid 59158:tid 59168] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.797906 2025] [proxy_fcgi:error] [pid 59158:tid 59175] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:44.937476 2025] [proxy_fcgi:error] [pid 59158:tid 59177] [client 4.217.178.35:48233] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:45.073757 2025] [:error] [pid 59158:tid 59178] [client 4.217.178.35:48233] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aUgKNY7NvyNF8ab5VgVvOQAAANI"]
[Sun Dec 21 22:54:46.568212 2025] [:error] [pid 42755:tid 42761] [client 4.217.178.35:22511] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aUgKNuW0XvxgXMTJJbv9uQAAAUQ"]
[Sun Dec 21 22:54:47.665308 2025] [:error] [pid 30183:tid 30201] [client 4.217.178.35:48250] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aUgKN-CmP2zCzk_WZcU0wQAAARA"]
[Sun Dec 21 22:54:49.600160 2025] [:error] [pid 30183:tid 30208] [client 4.217.178.35:22469] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aUgKOeCmP2zCzk_WZcU0ygAAARc"]
[Sun Dec 21 22:54:50.925811 2025] [:error] [pid 59158:tid 59176] [client 4.217.178.35:2266] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUgKOo7NvyNF8ab5VgVvQQAAANA"]
[Sun Dec 21 22:54:51.548969 2025] [:error] [pid 59158:tid 59182] [client 4.217.178.35:40409] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUgKO47NvyNF8ab5VgVvSAAAANY"]
[Sun Dec 21 22:54:52.555392 2025] [:error] [pid 59158:tid 59160] [client 4.217.178.35:16541] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUgKPI7NvyNF8ab5VgVvTgAAAMA"]
[Sun Dec 21 22:54:53.901805 2025] [:error] [pid 59067:tid 59080] [client 4.217.178.35:38314] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aUgKPctpsOP1NfIK_qKK4gAAAAY"]
[Sun Dec 21 22:54:54.733277 2025] [:error] [pid 59070:tid 59150] [client 4.217.178.35:48249] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aUgKPn3dhXne9KX1kgJ28gAAAJY"]
[Sun Dec 21 22:54:55.719616 2025] [:error] [pid 59158:tid 59172] [client 4.217.178.35:25690] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aUgKP47NvyNF8ab5VgVvbQAAAMw"]
[Sun Dec 21 22:54:56.628102 2025] [:error] [pid 59068:tid 59120] [client 4.217.178.35:65077] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aUgKQBmLyLqWUlrjwye18AAAAFM"]
[Sun Dec 21 22:54:57.536729 2025] [:error] [pid 65237:tid 65240] [client 4.217.178.35:38335] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aUgKQVVJYjxIpnUJfgJmIAAAAYE"]
[Sun Dec 21 22:54:59.532634 2025] [:error] [pid 59068:tid 59115] [client 4.217.178.35:22488] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aUgKQxmLyLqWUlrjwye1-wAAAE4"]
[Sun Dec 21 22:55:01.636307 2025] [:error] [pid 59068:tid 59104] [client 4.217.178.35:38285] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aUgKRRmLyLqWUlrjwye2DAAAAEM"]
[Sun Dec 21 22:55:03.277579 2025] [:error] [pid 59068:tid 59108] [client 4.217.178.35:38304] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aUgKRxmLyLqWUlrjwye2HAAAAEc"]
[Sun Dec 21 22:55:06.847796 2025] [:error] [pid 30183:tid 30199] [client 4.217.178.35:25720] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aUgKSuCmP2zCzk_WZcU04QAAAQ4"]
[Sun Dec 21 22:55:08.017628 2025] [:error] [pid 42755:tid 42768] [client 4.217.178.35:40434] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aUgKTOW0XvxgXMTJJbv9-gAAAUs"]
[Sun Dec 21 22:55:08.616056 2025] [:error] [pid 59068:tid 59108] [client 4.217.178.35:48202] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aUgKTBmLyLqWUlrjwye2LQAAAEc"]
[Sun Dec 21 22:55:09.743471 2025] [:error] [pid 42755:tid 42761] [client 4.217.178.35:40443] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aUgKTeW0XvxgXMTJJbv-CAAAAUQ"]
[Sun Dec 21 22:55:10.726324 2025] [:error] [pid 59068:tid 59105] [client 4.217.178.35:13060] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aUgKThmLyLqWUlrjwye2MgAAAEQ"]
[Sun Dec 21 22:55:12.073899 2025] [:error] [pid 42755:tid 42758] [client 4.217.178.35:16627] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aUgKUOW0XvxgXMTJJbv-IQAAAUE"]
[Sun Dec 21 22:55:12.580778 2025] [:error] [pid 42755:tid 42760] [client 4.217.178.35:14471] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aUgKUOW0XvxgXMTJJbv-IwAAAUM"]
[Sun Dec 21 22:55:13.048093 2025] [:error] [pid 59158:tid 59179] [client 4.217.178.35:34766] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aUgKUY7NvyNF8ab5VgVvfwAAANM"]
[Sun Dec 21 22:55:13.452295 2025] [:error] [pid 65237:tid 65244] [client 4.217.178.35:14522] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aUgKUVVJYjxIpnUJfgJmQAAAAYU"]
[Sun Dec 21 22:55:13.977971 2025] [:error] [pid 59067:tid 59094] [client 4.217.178.35:2441] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUgKUctpsOP1NfIK_qKK-gAAABQ"]
[Sun Dec 21 22:55:14.711062 2025] [:error] [pid 59070:tid 59151] [client 4.217.178.35:13140] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUgKUn3dhXne9KX1kgJ3DQAAAJc"]
[Sun Dec 21 22:55:16.197316 2025] [:error] [pid 59158:tid 59170] [client 4.217.178.35:25719] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUgKVI7NvyNF8ab5VgVvhAAAAMo"]
[Sun Dec 21 22:55:16.935658 2025] [:error] [pid 59067:tid 59084] [client 4.217.178.35:13134] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aUgKVMtpsOP1NfIK_qKLAQAAAAo"]
[Sun Dec 21 22:55:17.724910 2025] [:error] [pid 59070:tid 59140] [client 4.217.178.35:48212] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aUgKVX3dhXne9KX1kgJ3GAAAAIw"]
[Sun Dec 21 22:55:18.263468 2025] [:error] [pid 42755:tid 42772] [client 4.217.178.35:13145] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aUgKVuW0XvxgXMTJJbv-LAAAAU8"]
[Sun Dec 21 22:55:18.716977 2025] [:error] [pid 59070:tid 59142] [client 4.217.178.35:14470] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aUgKVn3dhXne9KX1kgJ3GwAAAI4"]
[Sun Dec 21 22:55:19.348471 2025] [:error] [pid 59158:tid 59173] [client 4.217.178.35:48243] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aUgKV47NvyNF8ab5VgVvkAAAAM0"]
[Sun Dec 21 22:55:20.824850 2025] [:error] [pid 59158:tid 59180] [client 4.217.178.35:65041] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUgKWI7NvyNF8ab5VgVvlAAAANQ"]
[Sun Dec 21 22:55:21.921656 2025] [:error] [pid 59070:tid 59136] [client 4.217.178.35:40439] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUgKWX3dhXne9KX1kgJ3IwAAAIg"]
[Sun Dec 21 22:55:22.440090 2025] [:error] [pid 59067:tid 59085] [client 4.217.178.35:38278] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUgKWstpsOP1NfIK_qKLBAAAAAs"]
[Sun Dec 21 22:55:23.333464 2025] [:error] [pid 30183:tid 30202] [client 4.217.178.35:13181] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aUgKW-CmP2zCzk_WZcU09gAAARE"]
[Sun Dec 21 22:55:24.464223 2025] [:error] [pid 65237:tid 65255] [client 4.217.178.35:25705] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUgKXFVJYjxIpnUJfgJmUAAAAZA"]
[Sun Dec 21 22:55:26.206675 2025] [:error] [pid 59068:tid 59120] [client 4.217.178.35:28862] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUgKXhmLyLqWUlrjwye2RAAAAFM"]
[Sun Dec 21 22:55:27.308116 2025] [:error] [pid 30183:tid 30208] [client 4.217.178.35:13136] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUgKX-CmP2zCzk_WZcU1AwAAARc"]
[Sun Dec 21 22:55:28.270137 2025] [:error] [pid 65237:tid 65262] [client 4.217.178.35:25672] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aUgKYFVJYjxIpnUJfgJmUwAAAZc"]
[Sun Dec 21 22:55:30.114075 2025] [:error] [pid 59067:tid 59097] [client 4.217.178.35:38328] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUgKYstpsOP1NfIK_qKLFAAAABc"]
[Sun Dec 21 22:55:31.223175 2025] [:error] [pid 59158:tid 59182] [client 4.217.178.35:16523] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUgKY47NvyNF8ab5VgVvrgAAANY"]
[Sun Dec 21 22:55:33.545529 2025] [:error] [pid 59158:tid 59183] [client 4.217.178.35:48209] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUgKZY7NvyNF8ab5VgVvswAAANc"]
[Sun Dec 21 22:55:35.087323 2025] [:error] [pid 59068:tid 59118] [client 4.217.178.35:38325] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aUgKZxmLyLqWUlrjwye2YQAAAFE"]
[Sun Dec 21 22:55:36.984995 2025] [:error] [pid 30183:tid 30207] [client 4.217.178.35:13154] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUgKaOCmP2zCzk_WZcU1DQAAARY"]
[Sun Dec 21 22:55:38.903226 2025] [:error] [pid 59068:tid 59103] [client 4.217.178.35:40387] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUgKahmLyLqWUlrjwye2agAAAEI"]
[Sun Dec 21 22:55:39.602591 2025] [:error] [pid 59158:tid 59164] [client 4.217.178.35:13174] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUgKa47NvyNF8ab5VgVvxAAAAMQ"]
[Sun Dec 21 22:55:41.877453 2025] [:error] [pid 59068:tid 59109] [client 4.217.178.35:14524] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aUgKbRmLyLqWUlrjwye2bwAAAEg"]
[Sun Dec 21 22:55:43.901941 2025] [:error] [pid 65237:tid 65247] [client 4.217.178.35:65049] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aUgKb1VJYjxIpnUJfgJmaAAAAYg"]
[Sun Dec 21 22:55:45.291525 2025] [proxy_fcgi:error] [pid 30183:tid 30200] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:45.623184 2025] [proxy_fcgi:error] [pid 30183:tid 30188] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:45.760761 2025] [proxy_fcgi:error] [pid 30183:tid 30194] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:45.899680 2025] [proxy_fcgi:error] [pid 30183:tid 30201] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:46.039711 2025] [proxy_fcgi:error] [pid 30183:tid 30199] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:46.198585 2025] [proxy_fcgi:error] [pid 30183:tid 30205] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:46.336707 2025] [proxy_fcgi:error] [pid 30183:tid 30191] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:46.476806 2025] [proxy_fcgi:error] [pid 30183:tid 30209] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:46.618407 2025] [proxy_fcgi:error] [pid 30183:tid 30198] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:46.855908 2025] [proxy_fcgi:error] [pid 30183:tid 30195] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:47.004533 2025] [proxy_fcgi:error] [pid 30183:tid 30207] [client 4.217.178.35:34799] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:55:47.146029 2025] [:error] [pid 30183:tid 30203] [client 4.217.178.35:34799] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUgKc-CmP2zCzk_WZcU1NQAAARI"]
[Sun Dec 21 22:55:48.615440 2025] [:error] [pid 59068:tid 59116] [client 4.217.178.35:16565] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUgKdBmLyLqWUlrjwye2egAAAE8"]
[Sun Dec 21 22:55:50.008729 2025] [:error] [pid 42755:tid 42772] [client 4.217.178.35:38327] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUgKduW0XvxgXMTJJbv-awAAAU8"]
[Sun Dec 21 22:55:51.303362 2025] [:error] [pid 59070:tid 59130] [client 4.217.178.35:40385] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aUgKd33dhXne9KX1kgJ3ZwAAAII"]
[Sun Dec 21 22:55:52.742287 2025] [:error] [pid 59158:tid 59180] [client 4.217.178.35:65046] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aUgKeI7NvyNF8ab5VgVv4AAAANQ"]
[Sun Dec 21 22:55:53.522836 2025] [:error] [pid 59068:tid 59111] [client 4.217.178.35:13083] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aUgKeRmLyLqWUlrjwye2fgAAAEo"]
[Sun Dec 21 22:55:55.261053 2025] [:error] [pid 59067:tid 59086] [client 4.217.178.35:40402] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aUgKe8tpsOP1NfIK_qKLUAAAAAw"]
[Sun Dec 21 22:55:56.760957 2025] [:error] [pid 59070:tid 59146] [client 4.217.178.35:2282] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aUgKfH3dhXne9KX1kgJ3cwAAAJI"]
[Sun Dec 21 22:55:58.030305 2025] [:error] [pid 59068:tid 59105] [client 4.217.178.35:25725] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aUgKfhmLyLqWUlrjwye2jgAAAEQ"]
[Sun Dec 21 22:55:59.018180 2025] [:error] [pid 42755:tid 42774] [client 4.217.178.35:65060] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aUgKf-W0XvxgXMTJJbv-gwAAAVE"]
[Sun Dec 21 22:56:00.018853 2025] [:error] [pid 59068:tid 59110] [client 4.217.178.35:38330] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aUgKgBmLyLqWUlrjwye2kwAAAEk"]
[Sun Dec 21 22:56:01.909033 2025] [:error] [pid 30183:tid 30187] [client 4.217.178.35:2335] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aUgKgeCmP2zCzk_WZcU1UAAAAQI"]
[Sun Dec 21 22:56:03.215189 2025] [:error] [pid 59158:tid 59170] [client 4.217.178.35:13080] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aUgKg47NvyNF8ab5VgVv-wAAAMo"]
[Sun Dec 21 22:56:06.469260 2025] [:error] [pid 30183:tid 30186] [client 4.217.178.35:25682] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aUgKhuCmP2zCzk_WZcU1cAAAAQE"]
[Sun Dec 21 22:56:08.749033 2025] [:error] [pid 59067:tid 59094] [client 4.217.178.35:40416] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aUgKiMtpsOP1NfIK_qKLWQAAABQ"]
[Sun Dec 21 22:56:11.319393 2025] [:error] [pid 59158:tid 59165] [client 4.217.178.35:40423] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aUgKi47NvyNF8ab5VgVwIAAAAMU"]
[Sun Dec 21 22:56:12.969860 2025] [:error] [pid 59070:tid 59149] [client 4.217.178.35:13061] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aUgKjH3dhXne9KX1kgJ3jgAAAJU"]
[Sun Dec 21 22:56:14.852223 2025] [:error] [pid 65237:tid 65255] [client 4.217.178.35:2471] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aUgKjlVJYjxIpnUJfgJmmAAAAZA"]
[Sun Dec 21 22:56:16.056333 2025] [:error] [pid 65237:tid 65261] [client 4.217.178.35:13106] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aUgKkFVJYjxIpnUJfgJmoQAAAZY"]
[Sun Dec 21 22:56:17.757432 2025] [:error] [pid 59068:tid 59108] [client 4.217.178.35:65063] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aUgKkRmLyLqWUlrjwye2pwAAAEc"]
[Sun Dec 21 22:56:19.259955 2025] [:error] [pid 59070:tid 59139] [client 4.217.178.35:13087] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aUgKk33dhXne9KX1kgJ3qwAAAIs"]
[Sun Dec 21 22:56:20.067274 2025] [:error] [pid 59158:tid 59168] [client 4.217.178.35:65080] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aUgKlI7NvyNF8ab5VgVwNAAAAMg"]
[Sun Dec 21 22:56:21.599260 2025] [:error] [pid 59067:tid 59092] [client 4.217.178.35:2329] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aUgKlctpsOP1NfIK_qKLbgAAABI"]
[Sun Dec 21 22:56:22.500336 2025] [:error] [pid 30183:tid 30196] [client 4.217.178.35:34806] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aUgKluCmP2zCzk_WZcU1mQAAAQs"]
[Sun Dec 21 22:56:24.116370 2025] [:error] [pid 59067:tid 59084] [client 4.217.178.35:19098] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aUgKmMtpsOP1NfIK_qKLdAAAAAo"]
[Sun Dec 21 22:56:25.775388 2025] [:error] [pid 30183:tid 30188] [client 4.217.178.35:15897] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aUgKmeCmP2zCzk_WZcU1oAAAAQM"]
[Sun Dec 21 22:56:26.865848 2025] [:error] [pid 65237:tid 65242] [client 4.217.178.35:19132] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aUgKmlVJYjxIpnUJfgJmugAAAYM"]
[Sun Dec 21 22:56:27.963534 2025] [:error] [pid 65237:tid 65243] [client 4.217.178.35:19129] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aUgKm1VJYjxIpnUJfgJmvgAAAYQ"]
[Sun Dec 21 22:56:32.622223 2025] [:error] [pid 59068:tid 59102] [client 4.217.178.35:2446] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aUgKoBmLyLqWUlrjwye2ywAAAEE"]
[Sun Dec 21 22:56:33.022768 2025] [:error] [pid 65237:tid 65252] [client 4.217.178.35:15893] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aUgKoVVJYjxIpnUJfgJmywAAAY0"]
[Sun Dec 21 22:56:33.834478 2025] [:error] [pid 59070:tid 59151] [client 4.217.178.35:40475] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aUgKoX3dhXne9KX1kgJ3zAAAAJc"]
[Sun Dec 21 22:56:35.181362 2025] [:error] [pid 30183:tid 30192] [client 4.217.178.35:40490] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aUgKo-CmP2zCzk_WZcU1swAAAQc"]
[Sun Dec 21 22:56:37.489098 2025] [:error] [pid 59068:tid 59110] [client 4.217.178.35:2454] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUgKpRmLyLqWUlrjwye24wAAAEk"]
[Sun Dec 21 22:56:39.751670 2025] [:error] [pid 59158:tid 59180] [client 4.217.178.35:15926] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUgKp47NvyNF8ab5VgVwUgAAANQ"]
[Sun Dec 21 22:56:41.131456 2025] [:error] [pid 59070:tid 59145] [client 4.217.178.35:45744] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUgKqX3dhXne9KX1kgJ31wAAAJE"]
[Sun Dec 21 22:56:42.787210 2025] [:error] [pid 42755:tid 42778] [client 4.217.178.35:2320] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aUgKquW0XvxgXMTJJbv-wgAAAVU"]
[Sun Dec 21 22:56:44.832752 2025] [:error] [pid 65237:tid 65242] [client 4.217.178.35:2659] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aUgKrFVJYjxIpnUJfgJm5QAAAYM"]
[Sun Dec 21 22:56:45.507240 2025] [:error] [pid 59068:tid 59119] [client 4.217.178.35:13924] [client 4.217.178.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aUgKrRmLyLqWUlrjwye28AAAAFI"]
[Sun Dec 21 22:56:48.363271 2025] [proxy_fcgi:error] [pid 59158:tid 59172] [client 4.217.178.35:2646] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:56:49.589637 2025] [proxy_fcgi:error] [pid 59158:tid 59183] [client 4.217.178.35:2646] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:56:49.736536 2025] [proxy_fcgi:error] [pid 59158:tid 59162] [client 4.217.178.35:2646] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:56:49.882930 2025] [proxy_fcgi:error] [pid 59158:tid 59161] [client 4.217.178.35:2646] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:56:50.023620 2025] [proxy_fcgi:error] [pid 59158:tid 59178] [client 4.217.178.35:2646] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 23:02:36.409335 2025] [:error] [pid 59158:tid 59169] [client 223.181.32.239:5071] [client 223.181.32.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.32.239, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUgMDI7NvyNF8ab5VgVzjwAAAMk"]
[Sun Dec 21 23:02:36.422417 2025] [proxy_fcgi:error] [pid 59158:tid 59169] [client 223.181.32.239:5071] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 23:30:05.186999 2025] [autoindex:error] [pid 42755:tid 42775] [client 40.77.167.15:49284] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 23:50:23.943868 2025] [:error] [pid 59070:tid 59134] [client 157.245.3.60:46522] [client 157.245.3.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aUgXP33dhXne9KX1kgKLhwAAAIY"]
[Mon Dec 22 00:45:32.407558 2025] [autoindex:error] [pid 46343:tid 46355] [client 192.71.12.112:35685] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 02:12:08.347101 2025] [autoindex:error] [pid 45399:tid 45414] [client 46.45.185.179:28587] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 02:15:28.500032 2025] [autoindex:error] [pid 45308:tid 45356] [client 205.210.31.150:60958] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 02:37:18.215458 2025] [autoindex:error] [pid 45308:tid 45366] [client 74.7.227.129:55008] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 03:17:14.810459 2025] [:error] [pid 45306:tid 45333] [client 86.120.178.221:65197] [client 86.120.178.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUhHutsL27CzxZxVWqRE5gAAAFE"]
[Mon Dec 22 08:47:02.470957 2025] [autoindex:error] [pid 33565:tid 33608] [client 66.249.64.225:47965] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 10:31:07.842129 2025] [:error] [pid 56044:tid 56059] [client 104.28.214.113:61798] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aUita-60uUaieriJqP3wPQAAAIs"]
[Mon Dec 22 13:43:35.696065 2025] [autoindex:error] [pid 58172:tid 58182] [client 34.229.239.213:64418] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 13:43:36.520675 2025] [autoindex:error] [pid 33472:tid 33523] [client 34.229.239.213:64423] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 13:59:20.819035 2025] [autoindex:error] [pid 56155:tid 56245] [client 66.249.64.7:53766] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 14:28:46.354038 2025] [autoindex:error] [pid 58078:tid 58083] [client 35.196.249.141:52399] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 14:30:51.741980 2025] [autoindex:error] [pid 56080:tid 56128] [client 46.101.80.192:47856] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 14:34:14.481779 2025] [autoindex:error] [pid 33440:tid 33466] [client 100.24.208.151:54102] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 14:34:14.893714 2025] [autoindex:error] [pid 56080:tid 56127] [client 100.24.208.151:28830] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 15:53:53.354679 2025] [autoindex:error] [pid 58078:tid 58101] [client 35.196.249.141:56361] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 17:10:43.766172 2025] [:error] [pid 33472:tid 33515] [client 192.144.148.122:60124] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUkLE55p2WQpPIK8HAn10QAAAY4"]
[Mon Dec 22 17:22:29.864347 2025] [autoindex:error] [pid 58172:tid 58188] [client 34.148.6.165:45137] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 18:56:51.302250 2025] [autoindex:error] [pid 58078:tid 58099] [client 34.148.6.165:54897] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 19:36:26.802712 2025] [:error] [pid 58172:tid 58174] [client 43.128.67.187:48034] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUktOuSVKDT5jWOcnSXb3wAAAMA"]
[Mon Dec 22 20:35:17.384314 2025] [:error] [pid 56080:tid 56130] [client 167.172.239.23:56769] [client 167.172.239.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.239.23, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aUk7BZIHT3YJq9hjDc7nqAAAAwY"]
[Mon Dec 22 20:35:17.396084 2025] [proxy_fcgi:error] [pid 56080:tid 56130] [client 167.172.239.23:56769] AH01071: Got error 'Primary script unknown'
[Mon Dec 22 20:45:30.519281 2025] [:error] [pid 58172:tid 58182] [client 103.65.236.153:60543] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aUk9auSVKDT5jWOcnSXyvgAAAMg"]
[Mon Dec 22 21:02:11.627347 2025] [autoindex:error] [pid 58078:tid 58106] [client 52.33.199.125:34324] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 23:19:05.649477 2025] [:error] [pid 58078:tid 58099] [client 146.70.228.172:38572] [client 146.70.228.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.228.172, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUlhaZWKg9Bf8njHlB59UgAAABA"]
[Mon Dec 22 23:19:05.661323 2025] [proxy_fcgi:error] [pid 58078:tid 58099] [client 146.70.228.172:38572] AH01071: Got error 'Primary script unknown'
[Mon Dec 22 23:31:26.139444 2025] [:error] [pid 58172:tid 58186] [client 103.178.134.91:56680] [client 103.178.134.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.134.91, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUlkTuSVKDT5jWOcnSUeIgAAAMw"]
[Mon Dec 22 23:31:26.150024 2025] [proxy_fcgi:error] [pid 58172:tid 58186] [client 103.178.134.91:56680] AH01071: Got error 'Primary script unknown'
[Mon Dec 22 23:47:20.746896 2025] [:error] [pid 33472:tid 33520] [client 182.42.105.144:48130] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUloCJ5p2WQpPIK8HAlXHAAAAZM"]
[Tue Dec 23 01:10:18.185017 2025] [autoindex:error] [pid 40361:tid 40364] [client 104.208.100.159:11543] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 01:10:18.193427 2025] [proxy_fcgi:error] [pid 40361:tid 40370] [client 104.208.100.159:9346] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 01:10:18.315703 2025] [proxy_fcgi:error] [pid 40361:tid 40377] [client 104.208.100.159:9346] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 01:10:23.428726 2025] [proxy_fcgi:error] [pid 40361:tid 40383] [client 104.208.100.159:9346] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 01:10:23.973224 2025] [proxy_fcgi:error] [pid 40361:tid 40370] [client 104.208.100.159:9346] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 01:32:07.234371 2025] [proxy_fcgi:error] [pid 40269:tid 40349] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:07.352148 2025] [proxy_fcgi:error] [pid 40269:tid 40330] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:07.620844 2025] [proxy_fcgi:error] [pid 40269:tid 40331] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:07.769138 2025] [proxy_fcgi:error] [pid 40269:tid 40346] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:07.912151 2025] [proxy_fcgi:error] [pid 40269:tid 40338] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:08.030888 2025] [proxy_fcgi:error] [pid 40269:tid 40336] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:08.173781 2025] [proxy_fcgi:error] [pid 40269:tid 40332] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:08.412658 2025] [proxy_fcgi:error] [pid 40269:tid 40340] [client 4.189.136.213:11439] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:32:08.534645 2025] [:error] [pid 40269:tid 40342] [client 4.189.136.213:11439] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUmAmC06Z11fTcfdsqTe2wAAAQ0"]
[Tue Dec 23 01:32:09.515422 2025] [:error] [pid 40267:tid 40276] [client 4.189.136.213:11359] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUmAmeTPWWVt2GkrftBlkgAAAAM"]
[Tue Dec 23 01:32:10.380563 2025] [:error] [pid 40267:tid 40289] [client 4.189.136.213:11448] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUmAmuTPWWVt2GkrftBllAAAABA"]
[Tue Dec 23 01:32:11.393516 2025] [:error] [pid 40361:tid 40373] [client 4.189.136.213:11398] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tx1.php"] [unique_id "aUmAm-xiDEK95vL2EDrH9QAAAEo"]
[Tue Dec 23 01:32:12.215074 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:11345] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xv.php"] [unique_id "aUmAnOTPWWVt2GkrftBlmAAAABI"]
[Tue Dec 23 01:32:13.100890 2025] [:error] [pid 40361:tid 40383] [client 4.189.136.213:11412] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xv.php"] [unique_id "aUmAnexiDEK95vL2EDrH_AAAAFQ"]
[Tue Dec 23 01:32:13.447896 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:11447] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xv.php"] [unique_id "aUmAnZWtCyS5tdJAiFxVRgAAAMc"]
[Tue Dec 23 01:32:13.777928 2025] [:error] [pid 40268:tid 40320] [client 4.189.136.213:11450] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xv.php"] [unique_id "aUmAnZWtCyS5tdJAiFxVSAAAANI"]
[Tue Dec 23 01:32:14.170124 2025] [:error] [pid 40361:tid 40371] [client 4.189.136.213:11435] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x56.php"] [unique_id "aUmAnuxiDEK95vL2EDrH_gAAAEg"]
[Tue Dec 23 01:32:14.622808 2025] [:error] [pid 40268:tid 40313] [client 4.189.136.213:11342] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x56.php"] [unique_id "aUmAnpWtCyS5tdJAiFxVSgAAAMs"]
[Tue Dec 23 01:32:15.235283 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:11444] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x56.php"] [unique_id "aUmAn-xiDEK95vL2EDrIBAAAAEk"]
[Tue Dec 23 01:32:15.649234 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:11356] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x56.php"] [unique_id "aUmAn-xiDEK95vL2EDrICQAAAFI"]
[Tue Dec 23 01:32:16.119828 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:11410] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aUmAoOxiDEK95vL2EDrIDgAAAEE"]
[Tue Dec 23 01:32:16.420430 2025] [:error] [pid 40268:tid 40319] [client 4.189.136.213:11432] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aUmAoJWtCyS5tdJAiFxVTgAAANE"]
[Tue Dec 23 01:32:16.900523 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:11348] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aUmAoOxiDEK95vL2EDrIGQAAAFI"]
[Tue Dec 23 01:32:17.256565 2025] [:error] [pid 40361:tid 40376] [client 4.189.136.213:11390] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aUmAoexiDEK95vL2EDrIHQAAAE0"]
[Tue Dec 23 01:32:17.645917 2025] [:error] [pid 40268:tid 40308] [client 4.189.136.213:11331] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/readme.php"] [unique_id "aUmAoZWtCyS5tdJAiFxVVQAAAMY"]
[Tue Dec 23 01:32:18.533185 2025] [:error] [pid 40361:tid 40376] [client 4.189.136.213:11361] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/readme.php"] [unique_id "aUmAouxiDEK95vL2EDrIKgAAAE0"]
[Tue Dec 23 01:32:19.485429 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:11341] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/readme.php"] [unique_id "aUmAo5WtCyS5tdJAiFxVYgAAAMo"]
[Tue Dec 23 01:32:19.914257 2025] [:error] [pid 40267:tid 40279] [client 4.189.136.213:11420] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/readme.php"] [unique_id "aUmAo-TPWWVt2GkrftBlpgAAAAY"]
[Tue Dec 23 01:32:20.375002 2025] [:error] [pid 40267:tid 40285] [client 4.189.136.213:11455] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x50.php"] [unique_id "aUmApOTPWWVt2GkrftBlqQAAAAw"]
[Tue Dec 23 01:32:20.661402 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:11375] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x50.php"] [unique_id "aUmApJWtCyS5tdJAiFxVawAAAMA"]
[Tue Dec 23 01:32:21.167900 2025] [:error] [pid 40361:tid 40384] [client 4.189.136.213:11350] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x50.php"] [unique_id "aUmApexiDEK95vL2EDrISAAAAFU"]
[Tue Dec 23 01:32:22.000121 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:11414] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x50.php"] [unique_id "aUmApZWtCyS5tdJAiFxVdgAAAMc"]
[Tue Dec 23 01:32:22.476300 2025] [:error] [pid 40267:tid 40273] [client 4.189.136.213:11344] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fv.php"] [unique_id "aUmApuTPWWVt2GkrftBlsQAAAAA"]
[Tue Dec 23 01:32:22.976351 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:11334] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fv.php"] [unique_id "aUmAppWtCyS5tdJAiFxVfgAAAMA"]
[Tue Dec 23 01:32:23.642526 2025] [:error] [pid 40268:tid 40306] [client 4.189.136.213:4071] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fv.php"] [unique_id "aUmAp5WtCyS5tdJAiFxVhAAAAMQ"]
[Tue Dec 23 01:32:24.208646 2025] [:error] [pid 40361:tid 40369] [client 4.189.136.213:11355] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fv.php"] [unique_id "aUmAqOxiDEK95vL2EDrIYwAAAEY"]
[Tue Dec 23 01:32:24.766374 2025] [:error] [pid 40269:tid 40329] [client 4.189.136.213:11388] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file.php"] [unique_id "aUmAqC06Z11fTcfdsqTfBQAAAQA"]
[Tue Dec 23 01:32:25.770436 2025] [:error] [pid 40267:tid 40280] [client 4.189.136.213:11418] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file.php"] [unique_id "aUmAqeTPWWVt2GkrftBlugAAAAc"]
[Tue Dec 23 01:32:26.223820 2025] [:error] [pid 40269:tid 40338] [client 4.189.136.213:4032] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file.php"] [unique_id "aUmAqi06Z11fTcfdsqTfDAAAAQk"]
[Tue Dec 23 01:32:26.921273 2025] [:error] [pid 40269:tid 40347] [client 4.189.136.213:11408] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file.php"] [unique_id "aUmAqi06Z11fTcfdsqTfDgAAARI"]
[Tue Dec 23 01:32:27.656396 2025] [:error] [pid 40267:tid 40281] [client 4.189.136.213:11396] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUmAq-TPWWVt2GkrftBlvwAAAAg"]
[Tue Dec 23 01:32:28.177915 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:11381] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUmArOxiDEK95vL2EDrIcwAAAEk"]
[Tue Dec 23 01:32:28.674325 2025] [:error] [pid 40267:tid 40274] [client 4.189.136.213:11400] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUmArOTPWWVt2GkrftBlwwAAAAE"]
[Tue Dec 23 01:32:29.433443 2025] [:error] [pid 40267:tid 40277] [client 4.189.136.213:11451] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lsd.php"] [unique_id "aUmAreTPWWVt2GkrftBlxwAAAAQ"]
[Tue Dec 23 01:32:30.307792 2025] [:error] [pid 40267:tid 40295] [client 4.189.136.213:11434] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aUmAruTPWWVt2GkrftBlzwAAABY"]
[Tue Dec 23 01:32:31.040453 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:11394] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aUmAr-TPWWVt2GkrftBl0wAAABI"]
[Tue Dec 23 01:32:32.761163 2025] [:error] [pid 40269:tid 40337] [client 4.189.136.213:11354] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aUmAsC06Z11fTcfdsqTfFAAAAQg"]
[Tue Dec 23 01:32:33.757640 2025] [:error] [pid 40269:tid 40344] [client 4.189.136.213:11405] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aUmAsS06Z11fTcfdsqTfGAAAAQ8"]
[Tue Dec 23 01:32:34.769269 2025] [:error] [pid 40269:tid 40351] [client 4.189.136.213:11338] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUmAsi06Z11fTcfdsqTfGwAAARY"]
[Tue Dec 23 01:32:36.366693 2025] [:error] [pid 40269:tid 40331] [client 4.189.136.213:4054] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUmAtC06Z11fTcfdsqTfIwAAAQI"]
[Tue Dec 23 01:32:37.166760 2025] [:error] [pid 40269:tid 40351] [client 4.189.136.213:11440] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUmAtS06Z11fTcfdsqTfJAAAARY"]
[Tue Dec 23 01:32:37.816844 2025] [:error] [pid 40268:tid 40310] [client 4.189.136.213:11376] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wsd.php"] [unique_id "aUmAtZWtCyS5tdJAiFxVmwAAAMg"]
[Tue Dec 23 01:32:38.932695 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:11392] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUmAtuxiDEK95vL2EDrIhQAAAFc"]
[Tue Dec 23 01:32:39.632315 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:11351] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUmAt5WtCyS5tdJAiFxVogAAAMA"]
[Tue Dec 23 01:32:40.006291 2025] [:error] [pid 40269:tid 40334] [client 4.189.136.213:11441] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUmAuC06Z11fTcfdsqTfKQAAAQU"]
[Tue Dec 23 01:32:40.626104 2025] [:error] [pid 40268:tid 40313] [client 4.189.136.213:11429] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gtc.php"] [unique_id "aUmAuJWtCyS5tdJAiFxVpwAAAMs"]
[Tue Dec 23 01:32:41.721789 2025] [:error] [pid 40269:tid 40331] [client 4.189.136.213:11360] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atx.php"] [unique_id "aUmAuS06Z11fTcfdsqTfLQAAAQI"]
[Tue Dec 23 01:32:42.157688 2025] [:error] [pid 40361:tid 40363] [client 4.189.136.213:11366] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atx.php"] [unique_id "aUmAuuxiDEK95vL2EDrIjwAAAEA"]
[Tue Dec 23 01:32:42.964965 2025] [:error] [pid 40269:tid 40351] [client 4.189.136.213:4087] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atx.php"] [unique_id "aUmAui06Z11fTcfdsqTfLwAAARY"]
[Tue Dec 23 01:32:44.053134 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:11358] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atx.php"] [unique_id "aUmAvOxiDEK95vL2EDrIkwAAAEk"]
[Tue Dec 23 01:32:44.396950 2025] [:error] [pid 40267:tid 40281] [client 4.189.136.213:11433] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/z60.php"] [unique_id "aUmAvOTPWWVt2GkrftBl6QAAAAg"]
[Tue Dec 23 01:32:44.703651 2025] [:error] [pid 40267:tid 40293] [client 4.189.136.213:11384] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/z60.php"] [unique_id "aUmAvOTPWWVt2GkrftBl7QAAABQ"]
[Tue Dec 23 01:32:45.164595 2025] [:error] [pid 40267:tid 40284] [client 4.189.136.213:11391] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/z60.php"] [unique_id "aUmAveTPWWVt2GkrftBl8AAAAAs"]
[Tue Dec 23 01:32:45.623692 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:11446] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/z60.php"] [unique_id "aUmAvexiDEK95vL2EDrImQAAAFI"]
[Tue Dec 23 01:32:45.960208 2025] [:error] [pid 40267:tid 40273] [client 4.189.136.213:11343] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aUmAveTPWWVt2GkrftBl9wAAAAA"]
[Tue Dec 23 01:32:46.364616 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:11404] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aUmAvpWtCyS5tdJAiFxVrgAAAMo"]
[Tue Dec 23 01:32:46.700761 2025] [:error] [pid 40268:tid 40314] [client 4.189.136.213:11337] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aUmAvpWtCyS5tdJAiFxVsAAAAMw"]
[Tue Dec 23 01:32:47.144777 2025] [:error] [pid 40361:tid 40368] [client 4.189.136.213:11364] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aUmAv-xiDEK95vL2EDrImgAAAEU"]
[Tue Dec 23 01:32:47.520433 2025] [:error] [pid 40361:tid 40383] [client 4.189.136.213:11422] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aUmAv-xiDEK95vL2EDrImwAAAFQ"]
[Tue Dec 23 01:32:47.909170 2025] [:error] [pid 40269:tid 40342] [client 4.189.136.213:11425] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aUmAvy06Z11fTcfdsqTfNwAAAQ0"]
[Tue Dec 23 01:32:48.484434 2025] [:error] [pid 40361:tid 40374] [client 4.189.136.213:4044] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aUmAwOxiDEK95vL2EDrInwAAAEs"]
[Tue Dec 23 01:32:49.035367 2025] [:error] [pid 40269:tid 40336] [client 4.189.136.213:4056] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/m.php"] [unique_id "aUmAwS06Z11fTcfdsqTfOQAAAQc"]
[Tue Dec 23 01:32:49.736344 2025] [:error] [pid 40269:tid 40346] [client 4.189.136.213:4045] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes.php"] [unique_id "aUmAwS06Z11fTcfdsqTfPAAAARE"]
[Tue Dec 23 01:32:50.209785 2025] [:error] [pid 40267:tid 40273] [client 4.189.136.213:11424] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes.php"] [unique_id "aUmAwuTPWWVt2GkrftBmBQAAAAA"]
[Tue Dec 23 01:32:51.283042 2025] [:error] [pid 40267:tid 40280] [client 4.189.136.213:11442] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes.php"] [unique_id "aUmAw-TPWWVt2GkrftBmDAAAAAc"]
[Tue Dec 23 01:32:51.819680 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:11423] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes.php"] [unique_id "aUmAwy06Z11fTcfdsqTfQAAAAQQ"]
[Tue Dec 23 01:32:52.211273 2025] [:error] [pid 40267:tid 40294] [client 4.189.136.213:11379] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUmAxOTPWWVt2GkrftBmDwAAABU"]
[Tue Dec 23 01:32:52.514447 2025] [:error] [pid 40361:tid 40374] [client 4.189.136.213:4040] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUmAxOxiDEK95vL2EDrIqAAAAEs"]
[Tue Dec 23 01:32:52.881346 2025] [:error] [pid 40267:tid 40283] [client 4.189.136.213:11403] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUmAxOTPWWVt2GkrftBmFQAAAAo"]
[Tue Dec 23 01:32:53.407866 2025] [:error] [pid 40268:tid 40313] [client 4.189.136.213:11411] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUmAxZWtCyS5tdJAiFxVtgAAAMs"]
[Tue Dec 23 01:32:53.800371 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:3988] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUmAxexiDEK95vL2EDrIqwAAAFc"]
[Tue Dec 23 01:32:54.070401 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:11374] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUmAxuxiDEK95vL2EDrIrQAAAEE"]
[Tue Dec 23 01:32:54.381209 2025] [:error] [pid 40361:tid 40371] [client 4.189.136.213:4055] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUmAxuxiDEK95vL2EDrIsAAAAEg"]
[Tue Dec 23 01:32:54.635824 2025] [:error] [pid 40268:tid 40310] [client 4.189.136.213:11427] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUmAxpWtCyS5tdJAiFxVugAAAMg"]
[Tue Dec 23 01:32:55.117506 2025] [:error] [pid 40268:tid 40311] [client 4.189.136.213:11387] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/click.php"] [unique_id "aUmAx5WtCyS5tdJAiFxVvAAAAMk"]
[Tue Dec 23 01:32:55.511280 2025] [:error] [pid 40269:tid 40330] [client 4.189.136.213:11352] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/click.php"] [unique_id "aUmAxy06Z11fTcfdsqTfRwAAAQE"]
[Tue Dec 23 01:32:55.901809 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:11349] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/click.php"] [unique_id "aUmAxy06Z11fTcfdsqTfSQAAAQQ"]
[Tue Dec 23 01:32:56.635027 2025] [:error] [pid 40267:tid 40286] [client 4.189.136.213:11332] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/click.php"] [unique_id "aUmAyOTPWWVt2GkrftBmHQAAAA0"]
[Tue Dec 23 01:32:57.191719 2025] [:error] [pid 40361:tid 40370] [client 4.189.136.213:11347] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aUmAyexiDEK95vL2EDrIvQAAAEc"]
[Tue Dec 23 01:32:57.955441 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:11333] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aUmAyZWtCyS5tdJAiFxVwgAAAMc"]
[Tue Dec 23 01:32:58.508583 2025] [:error] [pid 40268:tid 40322] [client 4.189.136.213:4074] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aUmAypWtCyS5tdJAiFxVxQAAANQ"]
[Tue Dec 23 01:32:58.807399 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:11330] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aUmAyuTPWWVt2GkrftBmIAAAABI"]
[Tue Dec 23 01:32:59.066901 2025] [:error] [pid 40268:tid 40326] [client 4.189.136.213:4047] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lv.php"] [unique_id "aUmAy5WtCyS5tdJAiFxVxgAAANg"]
[Tue Dec 23 01:32:59.426482 2025] [:error] [pid 40269:tid 40353] [client 4.189.136.213:11367] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lv.php"] [unique_id "aUmAyy06Z11fTcfdsqTfUgAAARg"]
[Tue Dec 23 01:32:59.776408 2025] [:error] [pid 40269:tid 40334] [client 4.189.136.213:11373] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lv.php"] [unique_id "aUmAyy06Z11fTcfdsqTfVAAAAQU"]
[Tue Dec 23 01:33:00.061907 2025] [:error] [pid 40267:tid 40283] [client 4.189.136.213:11378] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lv.php"] [unique_id "aUmAzOTPWWVt2GkrftBmJwAAAAo"]
[Tue Dec 23 01:33:00.564096 2025] [:error] [pid 40267:tid 40276] [client 4.189.136.213:4052] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/simple.php"] [unique_id "aUmAzOTPWWVt2GkrftBmKQAAAAM"]
[Tue Dec 23 01:33:01.316237 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:4050] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/simple.php"] [unique_id "aUmAzZWtCyS5tdJAiFxVywAAAMc"]
[Tue Dec 23 01:33:01.708899 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:11372] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/simple.php"] [unique_id "aUmAzeTPWWVt2GkrftBmLQAAABI"]
[Tue Dec 23 01:33:01.969495 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:4048] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/simple.php"] [unique_id "aUmAzeTPWWVt2GkrftBmLgAAAA8"]
[Tue Dec 23 01:33:02.260786 2025] [:error] [pid 40267:tid 40279] [client 4.189.136.213:4067] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aUmAzuTPWWVt2GkrftBmMAAAAAY"]
[Tue Dec 23 01:33:02.556785 2025] [:error] [pid 40267:tid 40274] [client 4.189.136.213:11346] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aUmAzuTPWWVt2GkrftBmMgAAAAE"]
[Tue Dec 23 01:33:02.972088 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:4033] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aUmAzuxiDEK95vL2EDrIxgAAAEE"]
[Tue Dec 23 01:33:03.598190 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:11437] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aUmAz-xiDEK95vL2EDrIxwAAAFI"]
[Tue Dec 23 01:33:03.889452 2025] [:error] [pid 40267:tid 40297] [client 4.189.136.213:11370] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmAz-TPWWVt2GkrftBmOAAAABg"]
[Tue Dec 23 01:33:04.310595 2025] [:error] [pid 40267:tid 40282] [client 4.189.136.213:11443] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmA0OTPWWVt2GkrftBmOwAAAAk"]
[Tue Dec 23 01:33:04.635684 2025] [:error] [pid 40267:tid 40289] [client 4.189.136.213:11416] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmA0OTPWWVt2GkrftBmPQAAABA"]
[Tue Dec 23 01:33:05.051197 2025] [:error] [pid 40267:tid 40286] [client 4.189.136.213:4090] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmA0eTPWWVt2GkrftBmQAAAAA0"]
[Tue Dec 23 01:33:05.468758 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:11448] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUmA0ZWtCyS5tdJAiFxV0wAAAMA"]
[Tue Dec 23 01:33:05.796338 2025] [:error] [pid 40268:tid 40325] [client 4.189.136.213:4064] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmA0ZWtCyS5tdJAiFxV1QAAANc"]
[Tue Dec 23 01:33:06.197016 2025] [:error] [pid 40361:tid 40371] [client 4.189.136.213:11368] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmA0uxiDEK95vL2EDrIyQAAAEg"]
[Tue Dec 23 01:33:06.832597 2025] [:error] [pid 40361:tid 40379] [client 4.189.136.213:11399] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aUmA0uxiDEK95vL2EDrIzQAAAFA"]
[Tue Dec 23 01:33:07.193482 2025] [:error] [pid 40269:tid 40329] [client 4.189.136.213:4080] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/w.php"] [unique_id "aUmA0y06Z11fTcfdsqTfYAAAAQA"]
[Tue Dec 23 01:33:07.501503 2025] [:error] [pid 40361:tid 40366] [client 4.189.136.213:4035] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/w.php"] [unique_id "aUmA0-xiDEK95vL2EDrIzgAAAEM"]
[Tue Dec 23 01:33:07.834578 2025] [:error] [pid 40267:tid 40295] [client 4.189.136.213:11431] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/w.php"] [unique_id "aUmA0-TPWWVt2GkrftBmSwAAABY"]
[Tue Dec 23 01:33:08.102596 2025] [proxy_fcgi:error] [pid 40267:tid 40277] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:08.222285 2025] [proxy_fcgi:error] [pid 40267:tid 40273] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:08.339511 2025] [proxy_fcgi:error] [pid 40267:tid 40296] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:08.456575 2025] [proxy_fcgi:error] [pid 40267:tid 40288] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:08.572398 2025] [proxy_fcgi:error] [pid 40267:tid 40284] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:08.713033 2025] [proxy_fcgi:error] [pid 40267:tid 40285] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:08.979419 2025] [proxy_fcgi:error] [pid 40267:tid 40276] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:09.215522 2025] [proxy_fcgi:error] [pid 40267:tid 40295] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:09.333057 2025] [proxy_fcgi:error] [pid 40267:tid 40277] [client 4.189.136.213:4001] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:33:09.445627 2025] [:error] [pid 40267:tid 40286] [client 4.189.136.213:4001] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUmA1eTPWWVt2GkrftBmWQAAAA0"]
[Tue Dec 23 01:33:09.763103 2025] [:error] [pid 40267:tid 40296] [client 4.189.136.213:11371] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUmA1eTPWWVt2GkrftBmWgAAABc"]
[Tue Dec 23 01:33:10.089318 2025] [:error] [pid 40268:tid 40319] [client 4.189.136.213:3974] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUmA1pWtCyS5tdJAiFxV2wAAANE"]
[Tue Dec 23 01:33:10.525436 2025] [:error] [pid 40361:tid 40385] [client 4.189.136.213:11438] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUmA1uxiDEK95vL2EDrI1gAAAFY"]
[Tue Dec 23 01:33:10.870016 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:4037] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUmA1pWtCyS5tdJAiFxV3QAAAMA"]
[Tue Dec 23 01:33:11.304467 2025] [:error] [pid 40268:tid 40326] [client 4.189.136.213:11415] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUmA15WtCyS5tdJAiFxV3wAAANg"]
[Tue Dec 23 01:33:11.634839 2025] [:error] [pid 40268:tid 40323] [client 4.189.136.213:11335] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUmA15WtCyS5tdJAiFxV4AAAANU"]
[Tue Dec 23 01:33:11.990878 2025] [:error] [pid 40267:tid 40295] [client 4.189.136.213:11382] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/inputs.php"] [unique_id "aUmA1-TPWWVt2GkrftBmYAAAABY"]
[Tue Dec 23 01:33:12.348645 2025] [:error] [pid 40269:tid 40353] [client 4.189.136.213:4049] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aUmA2C06Z11fTcfdsqTfaQAAARg"]
[Tue Dec 23 01:33:13.132863 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:11413] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aUmA2eTPWWVt2GkrftBmZAAAAA8"]
[Tue Dec 23 01:33:13.587611 2025] [:error] [pid 40267:tid 40281] [client 4.189.136.213:4072] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aUmA2eTPWWVt2GkrftBmZgAAAAg"]
[Tue Dec 23 01:33:13.971079 2025] [:error] [pid 40268:tid 40322] [client 4.189.136.213:3993] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about.php"] [unique_id "aUmA2ZWtCyS5tdJAiFxV5gAAANQ"]
[Tue Dec 23 01:33:14.404909 2025] [:error] [pid 40267:tid 40277] [client 4.189.136.213:11328] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA2uTPWWVt2GkrftBmbQAAAAQ"]
[Tue Dec 23 01:33:14.941000 2025] [:error] [pid 40268:tid 40315] [client 4.189.136.213:11449] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA2pWtCyS5tdJAiFxV6AAAAM0"]
[Tue Dec 23 01:33:15.308477 2025] [:error] [pid 40267:tid 40285] [client 4.189.136.213:11336] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA2-TPWWVt2GkrftBmbwAAAAw"]
[Tue Dec 23 01:33:15.827099 2025] [:error] [pid 40269:tid 40341] [client 4.189.136.213:4062] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA2y06Z11fTcfdsqTfcQAAAQw"]
[Tue Dec 23 01:33:16.140063 2025] [:error] [pid 40269:tid 40347] [client 4.189.136.213:11419] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUmA3C06Z11fTcfdsqTfcwAAARI"]
[Tue Dec 23 01:33:16.495728 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:11386] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUmA3OxiDEK95vL2EDrI3gAAAEk"]
[Tue Dec 23 01:33:17.017846 2025] [:error] [pid 40269:tid 40334] [client 4.189.136.213:3977] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUmA3S06Z11fTcfdsqTfeAAAAQU"]
[Tue Dec 23 01:33:17.454852 2025] [:error] [pid 40269:tid 40331] [client 4.189.136.213:3972] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUmA3S06Z11fTcfdsqTfegAAAQI"]
[Tue Dec 23 01:33:18.311613 2025] [:error] [pid 40267:tid 40293] [client 4.189.136.213:4058] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUmA3uTPWWVt2GkrftBmcwAAABQ"]
[Tue Dec 23 01:33:19.069226 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:11430] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUmA3y06Z11fTcfdsqTfgAAAARQ"]
[Tue Dec 23 01:33:19.458916 2025] [:error] [pid 40269:tid 40331] [client 4.189.136.213:3979] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUmA3y06Z11fTcfdsqTfgwAAAQI"]
[Tue Dec 23 01:33:19.894826 2025] [:error] [pid 40268:tid 40325] [client 4.189.136.213:3969] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUmA35WtCyS5tdJAiFxV7AAAANc"]
[Tue Dec 23 01:33:20.271901 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:4057] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUmA4JWtCyS5tdJAiFxV7gAAAMc"]
[Tue Dec 23 01:33:21.154362 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:3926] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUmA4exiDEK95vL2EDrI5wAAAEk"]
[Tue Dec 23 01:33:21.966836 2025] [:error] [pid 40267:tid 40282] [client 4.189.136.213:11402] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUmA4eTPWWVt2GkrftBmegAAAAk"]
[Tue Dec 23 01:33:22.252723 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:4070] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUmA4uxiDEK95vL2EDrI7QAAAFc"]
[Tue Dec 23 01:33:22.695443 2025] [:error] [pid 40267:tid 40294] [client 4.189.136.213:11445] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUmA4uTPWWVt2GkrftBmfQAAABU"]
[Tue Dec 23 01:33:23.116877 2025] [:error] [pid 40267:tid 40273] [client 4.189.136.213:11436] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUmA4-TPWWVt2GkrftBmgAAAAAA"]
[Tue Dec 23 01:33:23.653350 2025] [:error] [pid 40361:tid 40375] [client 4.189.136.213:3927] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUmA4-xiDEK95vL2EDrI8wAAAEw"]
[Tue Dec 23 01:33:24.085700 2025] [:error] [pid 40267:tid 40290] [client 4.189.136.213:11397] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUmA5OTPWWVt2GkrftBmgQAAABE"]
[Tue Dec 23 01:33:24.461259 2025] [:error] [pid 40267:tid 40275] [client 4.189.136.213:11421] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/manager.php"] [unique_id "aUmA5OTPWWVt2GkrftBmggAAAAI"]
[Tue Dec 23 01:33:24.857303 2025] [:error] [pid 40268:tid 40313] [client 4.189.136.213:4043] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/manager.php"] [unique_id "aUmA5JWtCyS5tdJAiFxV9wAAAMs"]
[Tue Dec 23 01:33:25.543525 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:4066] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/manager.php"] [unique_id "aUmA5exiDEK95vL2EDrI9QAAAEE"]
[Tue Dec 23 01:33:25.900278 2025] [:error] [pid 40361:tid 40363] [client 4.189.136.213:11389] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/manager.php"] [unique_id "aUmA5exiDEK95vL2EDrI-QAAAEA"]
[Tue Dec 23 01:33:26.340599 2025] [:error] [pid 40268:tid 40306] [client 4.189.136.213:4020] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aUmA5pWtCyS5tdJAiFxV-gAAAMQ"]
[Tue Dec 23 01:33:26.762198 2025] [:error] [pid 40267:tid 40289] [client 4.189.136.213:4075] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aUmA5uTPWWVt2GkrftBmigAAABA"]
[Tue Dec 23 01:33:27.086888 2025] [:error] [pid 40269:tid 40338] [client 4.189.136.213:4084] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aUmA5y06Z11fTcfdsqTfjAAAAQk"]
[Tue Dec 23 01:33:27.364852 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:4018] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aUmA5-TPWWVt2GkrftBmjQAAABI"]
[Tue Dec 23 01:33:27.732150 2025] [:error] [pid 40268:tid 40307] [client 4.189.136.213:4063] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUmA55WtCyS5tdJAiFxV_gAAAMU"]
[Tue Dec 23 01:33:28.190666 2025] [:error] [pid 40269:tid 40336] [client 4.189.136.213:4041] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUmA6C06Z11fTcfdsqTfkAAAAQc"]
[Tue Dec 23 01:33:28.726489 2025] [:error] [pid 40361:tid 40378] [client 4.189.136.213:11357] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUmA6OxiDEK95vL2EDrI_AAAAE8"]
[Tue Dec 23 01:33:29.249200 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:4036] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUmA6exiDEK95vL2EDrI_wAAAEE"]
[Tue Dec 23 01:33:29.658095 2025] [:error] [pid 40361:tid 40387] [client 4.189.136.213:4093] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aUmA6exiDEK95vL2EDrJAAAAAFg"]
[Tue Dec 23 01:33:29.919267 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:4094] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aUmA6exiDEK95vL2EDrJAgAAAEk"]
[Tue Dec 23 01:33:30.320135 2025] [:error] [pid 40269:tid 40346] [client 4.189.136.213:3983] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aUmA6i06Z11fTcfdsqTfkwAAARE"]
[Tue Dec 23 01:33:30.810804 2025] [:error] [pid 40268:tid 40306] [client 4.189.136.213:4083] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/404.php"] [unique_id "aUmA6pWtCyS5tdJAiFxWBQAAAMQ"]
[Tue Dec 23 01:33:31.355441 2025] [:error] [pid 40267:tid 40289] [client 4.189.136.213:11377] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aUmA6-TPWWVt2GkrftBmlAAAABA"]
[Tue Dec 23 01:33:31.632912 2025] [:error] [pid 40269:tid 40353] [client 4.189.136.213:11401] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aUmA6y06Z11fTcfdsqTflQAAARg"]
[Tue Dec 23 01:33:31.934628 2025] [:error] [pid 40267:tid 40290] [client 4.189.136.213:4015] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aUmA6-TPWWVt2GkrftBmlgAAABE"]
[Tue Dec 23 01:33:32.496504 2025] [:error] [pid 40268:tid 40311] [client 4.189.136.213:3982] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/mail.php"] [unique_id "aUmA7JWtCyS5tdJAiFxWCgAAAMk"]
[Tue Dec 23 01:33:32.963190 2025] [:error] [pid 40361:tid 40378] [client 4.189.136.213:11407] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUmA7OxiDEK95vL2EDrJBQAAAE8"]
[Tue Dec 23 01:33:33.656247 2025] [:error] [pid 40267:tid 40281] [client 4.189.136.213:4030] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUmA7eTPWWVt2GkrftBmmgAAAAg"]
[Tue Dec 23 01:33:34.082063 2025] [:error] [pid 40361:tid 40384] [client 4.189.136.213:4088] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUmA7uxiDEK95vL2EDrJCAAAAFU"]
[Tue Dec 23 01:33:34.402775 2025] [:error] [pid 40267:tid 40287] [client 4.189.136.213:4060] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUmA7uTPWWVt2GkrftBmnwAAAA4"]
[Tue Dec 23 01:33:34.793373 2025] [:error] [pid 40267:tid 40278] [client 4.189.136.213:4019] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sx.php"] [unique_id "aUmA7uTPWWVt2GkrftBmoQAAAAU"]
[Tue Dec 23 01:33:35.283421 2025] [:error] [pid 40269:tid 40335] [client 4.189.136.213:4069] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sx.php"] [unique_id "aUmA7y06Z11fTcfdsqTfmgAAAQY"]
[Tue Dec 23 01:33:35.574664 2025] [:error] [pid 40267:tid 40279] [client 4.189.136.213:11329] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sx.php"] [unique_id "aUmA7-TPWWVt2GkrftBmpQAAAAY"]
[Tue Dec 23 01:33:36.090981 2025] [:error] [pid 40267:tid 40292] [client 4.189.136.213:3986] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/sx.php"] [unique_id "aUmA8OTPWWVt2GkrftBmqAAAABM"]
[Tue Dec 23 01:33:36.542114 2025] [:error] [pid 40267:tid 40282] [client 4.189.136.213:3954] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUmA8OTPWWVt2GkrftBmqgAAAAk"]
[Tue Dec 23 01:33:36.838487 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:4051] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUmA8OxiDEK95vL2EDrJCQAAAEE"]
[Tue Dec 23 01:33:37.153118 2025] [:error] [pid 40267:tid 40295] [client 4.189.136.213:4012] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUmA8eTPWWVt2GkrftBmrgAAABY"]
[Tue Dec 23 01:33:37.571163 2025] [:error] [pid 40269:tid 40329] [client 4.189.136.213:11365] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUmA8S06Z11fTcfdsqTfnQAAAQA"]
[Tue Dec 23 01:33:37.992021 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:11369] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA8eTPWWVt2GkrftBmswAAAA8"]
[Tue Dec 23 01:33:38.397875 2025] [:error] [pid 40267:tid 40285] [client 4.189.136.213:11454] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA8uTPWWVt2GkrftBmtAAAAAw"]
[Tue Dec 23 01:33:38.694186 2025] [:error] [pid 40267:tid 40282] [client 4.189.136.213:4014] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA8uTPWWVt2GkrftBmtgAAAAk"]
[Tue Dec 23 01:33:39.162934 2025] [:error] [pid 40268:tid 40311] [client 4.189.136.213:11363] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/alfa.php"] [unique_id "aUmA85WtCyS5tdJAiFxWEAAAAMk"]
[Tue Dec 23 01:33:39.858086 2025] [:error] [pid 40361:tid 40383] [client 4.189.136.213:3968] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1.php"] [unique_id "aUmA8-xiDEK95vL2EDrJDAAAAFQ"]
[Tue Dec 23 01:33:40.407033 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:3991] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1.php"] [unique_id "aUmA9OxiDEK95vL2EDrJDQAAAEQ"]
[Tue Dec 23 01:33:40.818766 2025] [:error] [pid 40267:tid 40275] [client 4.189.136.213:4089] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1.php"] [unique_id "aUmA9OTPWWVt2GkrftBmvAAAAAI"]
[Tue Dec 23 01:33:41.435207 2025] [:error] [pid 40269:tid 40340] [client 4.189.136.213:11353] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1.php"] [unique_id "aUmA9S06Z11fTcfdsqTfoQAAAQs"]
[Tue Dec 23 01:33:42.184015 2025] [:error] [pid 40361:tid 40379] [client 4.189.136.213:4031] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aUmA9uxiDEK95vL2EDrJEgAAAFA"]
[Tue Dec 23 01:33:42.526511 2025] [:error] [pid 40361:tid 40384] [client 4.189.136.213:4053] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aUmA9uxiDEK95vL2EDrJFQAAAFU"]
[Tue Dec 23 01:33:42.913782 2025] [:error] [pid 40267:tid 40278] [client 4.189.136.213:4059] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aUmA9uTPWWVt2GkrftBmvgAAAAU"]
[Tue Dec 23 01:33:43.206039 2025] [:error] [pid 40269:tid 40329] [client 4.189.136.213:4038] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aUmA9y06Z11fTcfdsqTfpwAAAQA"]
[Tue Dec 23 01:33:43.523751 2025] [:error] [pid 40269:tid 40344] [client 4.189.136.213:3980] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUmA9y06Z11fTcfdsqTfqQAAAQ8"]
[Tue Dec 23 01:33:43.862324 2025] [:error] [pid 40361:tid 40383] [client 4.189.136.213:3905] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUmA9-xiDEK95vL2EDrJGgAAAFQ"]
[Tue Dec 23 01:33:44.202595 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:11426] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUmA-OxiDEK95vL2EDrJHgAAAEQ"]
[Tue Dec 23 01:33:44.640533 2025] [:error] [pid 40361:tid 40370] [client 4.189.136.213:11340] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aUmA-OxiDEK95vL2EDrJIAAAAEc"]
[Tue Dec 23 01:33:44.992171 2025] [:error] [pid 40269:tid 40341] [client 4.189.136.213:3847] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUmA-C06Z11fTcfdsqTfrAAAAQw"]
[Tue Dec 23 01:33:45.429924 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:3920] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUmA-eTPWWVt2GkrftBmwAAAAA8"]
[Tue Dec 23 01:33:46.274191 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:11362] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUmA-uxiDEK95vL2EDrJJgAAAFI"]
[Tue Dec 23 01:33:46.682265 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:3992] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aUmA-uxiDEK95vL2EDrJKQAAAFc"]
[Tue Dec 23 01:33:47.288865 2025] [:error] [pid 40361:tid 40373] [client 4.189.136.213:4086] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUmA--xiDEK95vL2EDrJLQAAAEo"]
[Tue Dec 23 01:33:47.742475 2025] [:error] [pid 40269:tid 40334] [client 4.189.136.213:3938] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUmA-y06Z11fTcfdsqTfsQAAAQU"]
[Tue Dec 23 01:33:48.342997 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:3946] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUmA_OxiDEK95vL2EDrJMAAAAEE"]
[Tue Dec 23 01:33:48.880860 2025] [:error] [pid 40361:tid 40387] [client 4.189.136.213:4005] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUmA_OxiDEK95vL2EDrJMwAAAFg"]
[Tue Dec 23 01:33:49.254878 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:3981] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUmA_exiDEK95vL2EDrJNQAAAEQ"]
[Tue Dec 23 01:33:49.587668 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:11452] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUmA_ZWtCyS5tdJAiFxWGQAAAMo"]
[Tue Dec 23 01:33:49.901755 2025] [:error] [pid 40269:tid 40337] [client 4.189.136.213:3997] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUmA_S06Z11fTcfdsqTftwAAAQg"]
[Tue Dec 23 01:33:50.207340 2025] [:error] [pid 40269:tid 40338] [client 4.189.136.213:3910] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUmA_i06Z11fTcfdsqTfuQAAAQk"]
[Tue Dec 23 01:33:50.552365 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:11393] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aUmA_pWtCyS5tdJAiFxWHAAAAMc"]
[Tue Dec 23 01:33:51.011395 2025] [:error] [pid 40269:tid 40336] [client 4.189.136.213:3971] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aUmA_y06Z11fTcfdsqTfuwAAAQc"]
[Tue Dec 23 01:33:51.422645 2025] [:error] [pid 40268:tid 40318] [client 4.189.136.213:4023] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aUmA_5WtCyS5tdJAiFxWHgAAANA"]
[Tue Dec 23 01:33:52.544500 2025] [:error] [pid 40267:tid 40277] [client 4.189.136.213:3878] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aUmBAOTPWWVt2GkrftBmxAAAAAQ"]
[Tue Dec 23 01:33:52.987009 2025] [:error] [pid 40268:tid 40314] [client 4.189.136.213:3906] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUmBAJWtCyS5tdJAiFxWIgAAAMw"]
[Tue Dec 23 01:33:53.647917 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:4068] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUmBAZWtCyS5tdJAiFxWIwAAAMA"]
[Tue Dec 23 01:33:54.220158 2025] [:error] [pid 40361:tid 40377] [client 4.189.136.213:4028] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUmBAuxiDEK95vL2EDrJRQAAAE4"]
[Tue Dec 23 01:33:54.660258 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:3909] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUmBAuxiDEK95vL2EDrJRwAAAFI"]
[Tue Dec 23 01:33:55.168437 2025] [:error] [pid 40268:tid 40322] [client 4.189.136.213:3965] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css/index.php"] [unique_id "aUmBA5WtCyS5tdJAiFxWKgAAANQ"]
[Tue Dec 23 01:33:55.533616 2025] [:error] [pid 40268:tid 40324] [client 4.189.136.213:4035] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUmBA5WtCyS5tdJAiFxWLQAAANY"]
[Tue Dec 23 01:33:55.864842 2025] [:error] [pid 40267:tid 40274] [client 4.189.136.213:3840] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUmBA-TPWWVt2GkrftBmyQAAAAE"]
[Tue Dec 23 01:33:56.408645 2025] [:error] [pid 40361:tid 40368] [client 4.189.136.213:11409] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUmBBOxiDEK95vL2EDrJSwAAAEU"]
[Tue Dec 23 01:33:56.759175 2025] [:error] [pid 40267:tid 40286] [client 4.189.136.213:4025] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUmBBOTPWWVt2GkrftBmygAAAA0"]
[Tue Dec 23 01:33:57.359245 2025] [:error] [pid 40269:tid 40346] [client 4.189.136.213:4034] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUmBBS06Z11fTcfdsqTfwgAAARE"]
[Tue Dec 23 01:33:57.987608 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:4082] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUmBBZWtCyS5tdJAiFxWMQAAAMA"]
[Tue Dec 23 01:33:58.515500 2025] [:error] [pid 40268:tid 40303] [client 4.189.136.213:11339] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUmBBpWtCyS5tdJAiFxWNAAAAME"]
[Tue Dec 23 01:33:58.856840 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:4039] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUmBBuxiDEK95vL2EDrJTwAAAEk"]
[Tue Dec 23 01:33:59.100972 2025] [:error] [pid 40268:tid 40308] [client 4.189.136.213:3904] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUmBB5WtCyS5tdJAiFxWNwAAAMY"]
[Tue Dec 23 01:33:59.378759 2025] [:error] [pid 40269:tid 40339] [client 4.189.136.213:4085] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUmBBy06Z11fTcfdsqTfxgAAAQo"]
[Tue Dec 23 01:33:59.658466 2025] [:error] [pid 40267:tid 40294] [client 4.189.136.213:3985] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUmBB-TPWWVt2GkrftBmzwAAABU"]
[Tue Dec 23 01:34:00.151402 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:3919] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUmBCOxiDEK95vL2EDrJUAAAAFc"]
[Tue Dec 23 01:34:00.793802 2025] [:error] [pid 40267:tid 40273] [client 4.189.136.213:11417] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUmBCOTPWWVt2GkrftBm0gAAAAA"]
[Tue Dec 23 01:34:01.381952 2025] [:error] [pid 40361:tid 40375] [client 4.189.136.213:3849] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUmBCexiDEK95vL2EDrJUQAAAEw"]
[Tue Dec 23 01:34:01.799186 2025] [:error] [pid 40268:tid 40316] [client 4.189.136.213:3998] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmBCZWtCyS5tdJAiFxWPQAAAM4"]
[Tue Dec 23 01:34:02.936196 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:3928] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmBCuTPWWVt2GkrftBm1wAAAA8"]
[Tue Dec 23 01:34:03.713457 2025] [:error] [pid 40268:tid 40321] [client 4.189.136.213:4092] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmBC5WtCyS5tdJAiFxWQQAAANM"]
[Tue Dec 23 01:34:04.524458 2025] [:error] [pid 40268:tid 40310] [client 4.189.136.213:3994] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmBDJWtCyS5tdJAiFxWRQAAAMg"]
[Tue Dec 23 01:34:04.918235 2025] [:error] [pid 40269:tid 40348] [client 4.189.136.213:3976] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUmBDC06Z11fTcfdsqTfzAAAARM"]
[Tue Dec 23 01:34:05.273809 2025] [:error] [pid 40269:tid 40352] [client 4.189.136.213:4008] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUmBDS06Z11fTcfdsqTfzQAAARc"]
[Tue Dec 23 01:34:05.598041 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:4076] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUmBDexiDEK95vL2EDrJVgAAAFI"]
[Tue Dec 23 01:34:05.914482 2025] [:error] [pid 40267:tid 40295] [client 4.189.136.213:3966] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUmBDeTPWWVt2GkrftBm4AAAABY"]
[Tue Dec 23 01:34:06.400267 2025] [:error] [pid 40361:tid 40371] [client 4.189.136.213:3995] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUmBDuxiDEK95vL2EDrJWAAAAEg"]
[Tue Dec 23 01:34:06.880775 2025] [:error] [pid 40361:tid 40374] [client 4.189.136.213:4078] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUmBDuxiDEK95vL2EDrJWQAAAEs"]
[Tue Dec 23 01:34:07.158243 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:11428] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUmBD-xiDEK95vL2EDrJWgAAAFc"]
[Tue Dec 23 01:34:07.406202 2025] [:error] [pid 40269:tid 40330] [client 4.189.136.213:3960] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUmBDy06Z11fTcfdsqTf0AAAAQE"]
[Tue Dec 23 01:34:07.768218 2025] [:error] [pid 40361:tid 40369] [client 4.189.136.213:4013] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ww1.php"] [unique_id "aUmBD-xiDEK95vL2EDrJXwAAAEY"]
[Tue Dec 23 01:34:08.070748 2025] [:error] [pid 40268:tid 40308] [client 4.189.136.213:3924] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUmBEJWtCyS5tdJAiFxWTwAAAMY"]
[Tue Dec 23 01:34:08.400452 2025] [:error] [pid 40361:tid 40382] [client 4.189.136.213:3917] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUmBEOxiDEK95vL2EDrJYAAAAFM"]
[Tue Dec 23 01:34:08.687018 2025] [:error] [pid 40267:tid 40285] [client 4.189.136.213:3858] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/about/function.php"] [unique_id "aUmBEOTPWWVt2GkrftBm5QAAAAw"]
[Tue Dec 23 01:34:09.327043 2025] [proxy_fcgi:error] [pid 40361:tid 40364] [client 4.189.136.213:3957] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:34:09.597825 2025] [proxy_fcgi:error] [pid 40361:tid 40374] [client 4.189.136.213:3957] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:34:10.155670 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:3957] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUmBEuxiDEK95vL2EDrJbAAAAEQ"]
[Tue Dec 23 01:34:10.871796 2025] [:error] [pid 40268:tid 40313] [client 4.189.136.213:4016] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUmBEpWtCyS5tdJAiFxWVwAAAMs"]
[Tue Dec 23 01:34:11.230402 2025] [:error] [pid 40361:tid 40365] [client 4.189.136.213:3962] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUmBE-xiDEK95vL2EDrJbwAAAEI"]
[Tue Dec 23 01:34:11.817631 2025] [:error] [pid 40361:tid 40387] [client 4.189.136.213:4021] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUmBE-xiDEK95vL2EDrJdAAAAFg"]
[Tue Dec 23 01:34:12.210054 2025] [:error] [pid 40361:tid 40374] [client 4.189.136.213:3975] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUmBFOxiDEK95vL2EDrJdQAAAEs"]
[Tue Dec 23 01:34:12.750872 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:3953] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUmBFOTPWWVt2GkrftBm6wAAAA8"]
[Tue Dec 23 01:34:13.546852 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:3934] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUmBFexiDEK95vL2EDrJeQAAAEQ"]
[Tue Dec 23 01:34:14.138954 2025] [:error] [pid 40361:tid 40375] [client 4.189.136.213:3918] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUmBFuxiDEK95vL2EDrJewAAAEw"]
[Tue Dec 23 01:34:14.867453 2025] [:error] [pid 40269:tid 40342] [client 4.189.136.213:3950] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUmBFi06Z11fTcfdsqTf3wAAAQ0"]
[Tue Dec 23 01:34:15.164695 2025] [:error] [pid 40267:tid 40277] [client 4.189.136.213:4010] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUmBF-TPWWVt2GkrftBm8gAAAAQ"]
[Tue Dec 23 01:34:15.547151 2025] [:error] [pid 40361:tid 40366] [client 4.189.136.213:3952] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUmBF-xiDEK95vL2EDrJfgAAAEM"]
[Tue Dec 23 01:34:16.093598 2025] [:error] [pid 40268:tid 40323] [client 4.189.136.213:3984] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUmBGJWtCyS5tdJAiFxWXgAAANU"]
[Tue Dec 23 01:34:16.835338 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:4081] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUmBGOxiDEK95vL2EDrJggAAAEE"]
[Tue Dec 23 01:34:17.227884 2025] [:error] [pid 40267:tid 40290] [client 4.189.136.213:3842] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aUmBGeTPWWVt2GkrftBm9gAAABE"]
[Tue Dec 23 01:34:17.510291 2025] [:error] [pid 40361:tid 40368] [client 4.189.136.213:11395] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aUmBGexiDEK95vL2EDrJgwAAAEU"]
[Tue Dec 23 01:34:17.934306 2025] [:error] [pid 40268:tid 40326] [client 4.189.136.213:3916] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aUmBGZWtCyS5tdJAiFxWYwAAANg"]
[Tue Dec 23 01:34:18.407916 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:3908] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aUmBGuxiDEK95vL2EDrJhQAAAFI"]
[Tue Dec 23 01:34:18.961607 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:4017] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aUmBGi06Z11fTcfdsqTf5wAAAQQ"]
[Tue Dec 23 01:34:19.440367 2025] [:error] [pid 40361:tid 40378] [client 4.189.136.213:3584] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aUmBG-xiDEK95vL2EDrJhwAAAE8"]
[Tue Dec 23 01:34:19.772057 2025] [:error] [pid 40269:tid 40335] [client 4.189.136.213:11453] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aUmBGy06Z11fTcfdsqTf6wAAAQY"]
[Tue Dec 23 01:34:20.049203 2025] [:error] [pid 40267:tid 40273] [client 4.189.136.213:4073] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class.php"] [unique_id "aUmBHOTPWWVt2GkrftBm-wAAAAA"]
[Tue Dec 23 01:34:20.545406 2025] [:error] [pid 40269:tid 40347] [client 4.189.136.213:3935] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUmBHC06Z11fTcfdsqTf7gAAARI"]
[Tue Dec 23 01:34:20.818258 2025] [:error] [pid 40267:tid 40296] [client 4.189.136.213:3870] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUmBHOTPWWVt2GkrftBm_QAAABc"]
[Tue Dec 23 01:34:21.184306 2025] [:error] [pid 40269:tid 40329] [client 4.189.136.213:3942] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUmBHS06Z11fTcfdsqTf8QAAAQA"]
[Tue Dec 23 01:34:21.486752 2025] [:error] [pid 40361:tid 40382] [client 4.189.136.213:4011] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless5.php"] [unique_id "aUmBHexiDEK95vL2EDrJiAAAAFM"]
[Tue Dec 23 01:34:21.810398 2025] [:error] [pid 40269:tid 40331] [client 4.189.136.213:4065] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUmBHS06Z11fTcfdsqTf8gAAAQI"]
[Tue Dec 23 01:34:22.258647 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:3978] [client 4.189.136.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aUmBHi06Z11fTcfdsqTf9AAAARQ"]
[Tue Dec 23 01:34:22.590141 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:4022] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUmBHuTPWWVt2GkrftBnBAAAABI"]
[Tue Dec 23 01:34:23.008722 2025] [:error] [pid 40267:tid 40294] [client 4.189.136.213:3945] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUmBH-TPWWVt2GkrftBnBQAAABU"]
[Tue Dec 23 01:34:23.547404 2025] [:error] [pid 40268:tid 40311] [client 4.189.136.213:3933] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUmBH5WtCyS5tdJAiFxWbQAAAMk"]
[Tue Dec 23 01:34:23.983333 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:3937] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aUmBH-xiDEK95vL2EDrJiwAAAFI"]
[Tue Dec 23 01:34:24.616752 2025] [:error] [pid 40361:tid 40363] [client 4.189.136.213:3989] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aUmBIOxiDEK95vL2EDrJjQAAAEA"]
[Tue Dec 23 01:34:25.136494 2025] [:error] [pid 40361:tid 40375] [client 4.189.136.213:3944] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aUmBIexiDEK95vL2EDrJjwAAAEw"]
[Tue Dec 23 01:34:25.500756 2025] [:error] [pid 40269:tid 40335] [client 4.189.136.213:4061] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aUmBIS06Z11fTcfdsqTf-QAAAQY"]
[Tue Dec 23 01:34:26.007868 2025] [:error] [pid 40267:tid 40286] [client 4.189.136.213:3956] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUmBIuTPWWVt2GkrftBnDQAAAA0"]
[Tue Dec 23 01:34:26.389709 2025] [:error] [pid 40267:tid 40289] [client 4.189.136.213:3930] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUmBIuTPWWVt2GkrftBnEAAAABA"]
[Tue Dec 23 01:34:26.908620 2025] [:error] [pid 40361:tid 40384] [client 4.189.136.213:3912] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUmBIuxiDEK95vL2EDrJkQAAAFU"]
[Tue Dec 23 01:34:27.408362 2025] [:error] [pid 40361:tid 40376] [client 4.189.136.213:3931] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUmBI-xiDEK95vL2EDrJkwAAAE0"]
[Tue Dec 23 01:34:27.846638 2025] [:error] [pid 40268:tid 40314] [client 4.189.136.213:3987] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aUmBI5WtCyS5tdJAiFxWcQAAAMw"]
[Tue Dec 23 01:34:28.102433 2025] [:error] [pid 40361:tid 40379] [client 4.189.136.213:3939] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aUmBJOxiDEK95vL2EDrJlQAAAFA"]
[Tue Dec 23 01:34:28.383393 2025] [:error] [pid 40267:tid 40290] [client 4.189.136.213:3955] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aUmBJOTPWWVt2GkrftBnFQAAABE"]
[Tue Dec 23 01:34:28.848854 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:3883] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aUmBJC06Z11fTcfdsqTgAQAAAQQ"]
[Tue Dec 23 01:34:29.193232 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:11383] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ha.php"] [unique_id "aUmBJS06Z11fTcfdsqTgBAAAARQ"]
[Tue Dec 23 01:34:29.586203 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:3963] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ha.php"] [unique_id "aUmBJeTPWWVt2GkrftBnFwAAABI"]
[Tue Dec 23 01:34:29.923483 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:3967] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ha.php"] [unique_id "aUmBJexiDEK95vL2EDrJnQAAAEk"]
[Tue Dec 23 01:34:30.249991 2025] [:error] [pid 40269:tid 40344] [client 4.189.136.213:4007] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ha.php"] [unique_id "aUmBJi06Z11fTcfdsqTgCQAAAQ8"]
[Tue Dec 23 01:34:30.981378 2025] [:error] [pid 40361:tid 40380] [client 4.189.136.213:11380] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aUmBJuxiDEK95vL2EDrJnwAAAFE"]
[Tue Dec 23 01:34:31.240438 2025] [:error] [pid 40361:tid 40385] [client 4.189.136.213:3921] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aUmBJ-xiDEK95vL2EDrJowAAAFY"]
[Tue Dec 23 01:34:31.581101 2025] [:error] [pid 40269:tid 40330] [client 4.189.136.213:3598] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aUmBJy06Z11fTcfdsqTgDAAAAQE"]
[Tue Dec 23 01:34:31.892037 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:3923] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aUmBJ-TPWWVt2GkrftBnHAAAAA8"]
[Tue Dec 23 01:34:32.359403 2025] [:error] [pid 40267:tid 40286] [client 4.189.136.213:4029] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/we2.php"] [unique_id "aUmBKOTPWWVt2GkrftBnHgAAAA0"]
[Tue Dec 23 01:34:32.606717 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:3970] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/we2.php"] [unique_id "aUmBKOxiDEK95vL2EDrJpgAAAEk"]
[Tue Dec 23 01:34:32.889485 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:3872] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/we2.php"] [unique_id "aUmBKOxiDEK95vL2EDrJpwAAAFI"]
[Tue Dec 23 01:34:33.250592 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:3999] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/we2.php"] [unique_id "aUmBKZWtCyS5tdJAiFxWeQAAAMo"]
[Tue Dec 23 01:34:33.708529 2025] [:error] [pid 40361:tid 40375] [client 4.189.136.213:3902] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/04.php"] [unique_id "aUmBKexiDEK95vL2EDrJqwAAAEw"]
[Tue Dec 23 01:34:34.172513 2025] [:error] [pid 40269:tid 40341] [client 4.189.136.213:4027] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/04.php"] [unique_id "aUmBKi06Z11fTcfdsqTgDQAAAQw"]
[Tue Dec 23 01:34:34.538490 2025] [:error] [pid 40268:tid 40320] [client 4.189.136.213:3961] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/04.php"] [unique_id "aUmBKpWtCyS5tdJAiFxWfAAAANI"]
[Tue Dec 23 01:34:34.815002 2025] [:error] [pid 40269:tid 40350] [client 4.189.136.213:3943] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/04.php"] [unique_id "aUmBKi06Z11fTcfdsqTgDgAAARU"]
[Tue Dec 23 01:34:35.195921 2025] [:error] [pid 40268:tid 40314] [client 4.189.136.213:3877] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/333.php"] [unique_id "aUmBK5WtCyS5tdJAiFxWgAAAAMw"]
[Tue Dec 23 01:34:35.583348 2025] [:error] [pid 40267:tid 40284] [client 4.189.136.213:3996] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/333.php"] [unique_id "aUmBK-TPWWVt2GkrftBnJAAAAAs"]
[Tue Dec 23 01:34:35.975603 2025] [:error] [pid 40268:tid 40324] [client 4.189.136.213:3844] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/333.php"] [unique_id "aUmBK5WtCyS5tdJAiFxWgwAAANY"]
[Tue Dec 23 01:34:37.377914 2025] [:error] [pid 40267:tid 40292] [client 4.189.136.213:3586] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/333.php"] [unique_id "aUmBLeTPWWVt2GkrftBnKAAAABM"]
[Tue Dec 23 01:34:39.074604 2025] [:error] [pid 40361:tid 40380] [client 4.189.136.213:3929] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/520.php"] [unique_id "aUmBL-xiDEK95vL2EDrJugAAAFE"]
[Tue Dec 23 01:34:39.683424 2025] [:error] [pid 40361:tid 40374] [client 4.189.136.213:4004] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/520.php"] [unique_id "aUmBL-xiDEK95vL2EDrJuwAAAEs"]
[Tue Dec 23 01:34:40.312146 2025] [:error] [pid 40361:tid 40373] [client 4.189.136.213:3990] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/520.php"] [unique_id "aUmBMOxiDEK95vL2EDrJvwAAAEo"]
[Tue Dec 23 01:34:40.732466 2025] [:error] [pid 40269:tid 40341] [client 4.189.136.213:3973] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/520.php"] [unique_id "aUmBMC06Z11fTcfdsqTgFQAAAQw"]
[Tue Dec 23 01:34:41.131506 2025] [:error] [pid 40267:tid 40282] [client 4.189.136.213:11385] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ar.php"] [unique_id "aUmBMeTPWWVt2GkrftBnMAAAAAk"]
[Tue Dec 23 01:34:41.679739 2025] [:error] [pid 40268:tid 40316] [client 4.189.136.213:3857] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ar.php"] [unique_id "aUmBMZWtCyS5tdJAiFxWjAAAAM4"]
[Tue Dec 23 01:34:42.047056 2025] [:error] [pid 40268:tid 40309] [client 4.189.136.213:3948] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ar.php"] [unique_id "aUmBMpWtCyS5tdJAiFxWjgAAAMc"]
[Tue Dec 23 01:34:42.350176 2025] [:error] [pid 40268:tid 40305] [client 4.189.136.213:3861] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ar.php"] [unique_id "aUmBMpWtCyS5tdJAiFxWkAAAAMM"]
[Tue Dec 23 01:34:42.809592 2025] [:error] [pid 40267:tid 40283] [client 4.189.136.213:3941] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aUmBMuTPWWVt2GkrftBnMgAAAAo"]
[Tue Dec 23 01:34:43.240232 2025] [:error] [pid 40267:tid 40285] [client 4.189.136.213:3907] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aUmBM-TPWWVt2GkrftBnNQAAAAw"]
[Tue Dec 23 01:34:43.655736 2025] [:error] [pid 40269:tid 40332] [client 4.189.136.213:3850] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aUmBMy06Z11fTcfdsqTgGAAAAQM"]
[Tue Dec 23 01:34:44.071769 2025] [:error] [pid 40268:tid 40304] [client 4.189.136.213:4003] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aUmBNJWtCyS5tdJAiFxWlAAAAMI"]
[Tue Dec 23 01:34:44.344159 2025] [:error] [pid 40267:tid 40278] [client 4.189.136.213:3886] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aUmBNOTPWWVt2GkrftBnNgAAAAU"]
[Tue Dec 23 01:34:44.864050 2025] [:error] [pid 40268:tid 40308] [client 4.189.136.213:3903] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aUmBNJWtCyS5tdJAiFxWmgAAAMY"]
[Tue Dec 23 01:34:45.483177 2025] [:error] [pid 40268:tid 40302] [client 4.189.136.213:3590] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aUmBNZWtCyS5tdJAiFxWngAAAMA"]
[Tue Dec 23 01:34:45.995508 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:3855] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aUmBNZWtCyS5tdJAiFxWogAAAMo"]
[Tue Dec 23 01:34:46.445933 2025] [:error] [pid 40268:tid 40304] [client 4.189.136.213:3853] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUmBNpWtCyS5tdJAiFxWpAAAAMI"]
[Tue Dec 23 01:34:46.737095 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:3925] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUmBNi06Z11fTcfdsqTgHwAAAQQ"]
[Tue Dec 23 01:34:47.039474 2025] [:error] [pid 40268:tid 40320] [client 4.189.136.213:4095] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUmBN5WtCyS5tdJAiFxWpQAAANI"]
[Tue Dec 23 01:34:47.432071 2025] [:error] [pid 40268:tid 40315] [client 4.189.136.213:4026] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aUmBN5WtCyS5tdJAiFxWqQAAAM0"]
[Tue Dec 23 01:34:47.741345 2025] [:error] [pid 40269:tid 40334] [client 4.189.136.213:4079] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2clas.php"] [unique_id "aUmBNy06Z11fTcfdsqTgJAAAAQU"]
[Tue Dec 23 01:34:48.019295 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:3890] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2clas.php"] [unique_id "aUmBOC06Z11fTcfdsqTgJQAAARQ"]
[Tue Dec 23 01:34:48.260168 2025] [:error] [pid 40267:tid 40280] [client 4.189.136.213:4006] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2clas.php"] [unique_id "aUmBOOTPWWVt2GkrftBnOAAAAAc"]
[Tue Dec 23 01:34:48.520846 2025] [:error] [pid 40267:tid 40279] [client 4.189.136.213:4024] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2clas.php"] [unique_id "aUmBOOTPWWVt2GkrftBnOgAAAAY"]
[Tue Dec 23 01:34:48.921540 2025] [:error] [pid 40267:tid 40297] [client 4.189.136.213:3845] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ave.php"] [unique_id "aUmBOOTPWWVt2GkrftBnPgAAABg"]
[Tue Dec 23 01:34:49.322185 2025] [:error] [pid 40267:tid 40292] [client 4.189.136.213:4042] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ave.php"] [unique_id "aUmBOeTPWWVt2GkrftBnSQAAABM"]
[Tue Dec 23 01:34:49.788348 2025] [:error] [pid 40269:tid 40340] [client 4.189.136.213:3859] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ave.php"] [unique_id "aUmBOS06Z11fTcfdsqTgJwAAAQs"]
[Tue Dec 23 01:34:50.053212 2025] [:error] [pid 40267:tid 40275] [client 4.189.136.213:3626] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ave.php"] [unique_id "aUmBOuTPWWVt2GkrftBnUQAAAAI"]
[Tue Dec 23 01:34:50.320529 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:3795] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aUmBOpWtCyS5tdJAiFxWrQAAAMo"]
[Tue Dec 23 01:34:50.819669 2025] [:error] [pid 40269:tid 40353] [client 4.189.136.213:3596] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aUmBOi06Z11fTcfdsqTgKQAAARg"]
[Tue Dec 23 01:34:51.175696 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:3632] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aUmBOy06Z11fTcfdsqTgKwAAAQQ"]
[Tue Dec 23 01:34:51.543474 2025] [:error] [pid 40268:tid 40311] [client 4.189.136.213:3625] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aUmBO5WtCyS5tdJAiFxWsAAAAMk"]
[Tue Dec 23 01:34:51.835361 2025] [:error] [pid 40361:tid 40385] [client 4.189.136.213:3616] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bibil.php"] [unique_id "aUmBO-xiDEK95vL2EDrJzgAAAFY"]
[Tue Dec 23 01:34:52.127915 2025] [:error] [pid 40269:tid 40341] [client 4.189.136.213:3601] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bibil.php"] [unique_id "aUmBPC06Z11fTcfdsqTgLwAAAQw"]
[Tue Dec 23 01:34:52.418136 2025] [:error] [pid 40268:tid 40305] [client 4.189.136.213:3633] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bibil.php"] [unique_id "aUmBPJWtCyS5tdJAiFxWsgAAAMM"]
[Tue Dec 23 01:34:52.688741 2025] [:error] [pid 40361:tid 40377] [client 4.189.136.213:3634] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bibil.php"] [unique_id "aUmBPOxiDEK95vL2EDrJ0wAAAE4"]
[Tue Dec 23 01:34:53.003241 2025] [:error] [pid 40361:tid 40384] [client 4.189.136.213:3856] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aUmBPexiDEK95vL2EDrJ1QAAAFU"]
[Tue Dec 23 01:34:53.607118 2025] [:error] [pid 40269:tid 40344] [client 4.189.136.213:4091] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aUmBPS06Z11fTcfdsqTgMQAAAQ8"]
[Tue Dec 23 01:34:54.069355 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:4046] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aUmBPi06Z11fTcfdsqTgMwAAAQQ"]
[Tue Dec 23 01:34:54.373459 2025] [:error] [pid 40268:tid 40306] [client 4.189.136.213:3868] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/radio.php"] [unique_id "aUmBPpWtCyS5tdJAiFxWtwAAAMQ"]
[Tue Dec 23 01:34:54.615698 2025] [:error] [pid 40268:tid 40307] [client 4.189.136.213:3901] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aUmBPpWtCyS5tdJAiFxWuAAAAMU"]
[Tue Dec 23 01:34:54.968416 2025] [:error] [pid 40269:tid 40331] [client 4.189.136.213:3876] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aUmBPi06Z11fTcfdsqTgNwAAAQI"]
[Tue Dec 23 01:34:55.273962 2025] [:error] [pid 40361:tid 40365] [client 4.189.136.213:3894] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aUmBP-xiDEK95vL2EDrJ2QAAAEI"]
[Tue Dec 23 01:34:55.633305 2025] [:error] [pid 40268:tid 40316] [client 4.189.136.213:3882] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aUmBP5WtCyS5tdJAiFxWwQAAAM4"]
[Tue Dec 23 01:34:55.947595 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:3964] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file7.php"] [unique_id "aUmBPy06Z11fTcfdsqTgOgAAARQ"]
[Tue Dec 23 01:34:56.256529 2025] [:error] [pid 40269:tid 40339] [client 4.189.136.213:3612] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file7.php"] [unique_id "aUmBQC06Z11fTcfdsqTgPAAAAQo"]
[Tue Dec 23 01:34:56.547847 2025] [:error] [pid 40361:tid 40370] [client 4.189.136.213:3949] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file7.php"] [unique_id "aUmBQOxiDEK95vL2EDrJ4QAAAEc"]
[Tue Dec 23 01:34:57.044224 2025] [:error] [pid 40268:tid 40307] [client 4.189.136.213:3922] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file7.php"] [unique_id "aUmBQZWtCyS5tdJAiFxWyAAAAMU"]
[Tue Dec 23 01:34:57.414937 2025] [:error] [pid 40268:tid 40314] [client 4.189.136.213:3605] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUmBQZWtCyS5tdJAiFxWzAAAAMw"]
[Tue Dec 23 01:34:57.804616 2025] [:error] [pid 40361:tid 40365] [client 4.189.136.213:3588] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUmBQexiDEK95vL2EDrJ6gAAAEI"]
[Tue Dec 23 01:34:58.142493 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:3947] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUmBQi06Z11fTcfdsqTgQQAAARQ"]
[Tue Dec 23 01:34:58.471633 2025] [:error] [pid 40269:tid 40339] [client 4.189.136.213:3635] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aUmBQi06Z11fTcfdsqTgQgAAAQo"]
[Tue Dec 23 01:34:58.724665 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:3587] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUmBQuxiDEK95vL2EDrJ8QAAAEk"]
[Tue Dec 23 01:34:59.052506 2025] [:error] [pid 40269:tid 40351] [client 4.189.136.213:3891] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUmBQy06Z11fTcfdsqTgRAAAARY"]
[Tue Dec 23 01:34:59.464657 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:3603] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUmBQ-xiDEK95vL2EDrJ8wAAAEQ"]
[Tue Dec 23 01:34:59.855073 2025] [:error] [pid 40267:tid 40288] [client 4.189.136.213:3851] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUmBQ-TPWWVt2GkrftBnawAAAA8"]
[Tue Dec 23 01:35:00.171721 2025] [:error] [pid 40267:tid 40280] [client 4.189.136.213:3864] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aUmBROTPWWVt2GkrftBnbAAAAAc"]
[Tue Dec 23 01:35:00.556150 2025] [:error] [pid 40269:tid 40337] [client 4.189.136.213:3940] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aUmBRC06Z11fTcfdsqTgRwAAAQg"]
[Tue Dec 23 01:35:00.894894 2025] [:error] [pid 40361:tid 40377] [client 4.189.136.213:3889] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aUmBROxiDEK95vL2EDrJ-gAAAE4"]
[Tue Dec 23 01:35:01.425138 2025] [:error] [pid 40361:tid 40375] [client 4.189.136.213:3854] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aUmBRexiDEK95vL2EDrJ_wAAAEw"]
[Tue Dec 23 01:35:01.790042 2025] [:error] [pid 40268:tid 40307] [client 4.189.136.213:3873] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file48.php"] [unique_id "aUmBRZWtCyS5tdJAiFxW1gAAAMU"]
[Tue Dec 23 01:35:02.076652 2025] [:error] [pid 40269:tid 40341] [client 4.189.136.213:3807] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file48.php"] [unique_id "aUmBRi06Z11fTcfdsqTgSAAAAQw"]
[Tue Dec 23 01:35:02.416525 2025] [:error] [pid 40267:tid 40279] [client 4.189.136.213:3841] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file48.php"] [unique_id "aUmBRuTPWWVt2GkrftBncAAAAAY"]
[Tue Dec 23 01:35:02.665063 2025] [:error] [pid 40361:tid 40366] [client 4.189.136.213:3869] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file48.php"] [unique_id "aUmBRuxiDEK95vL2EDrKBAAAAEM"]
[Tue Dec 23 01:35:03.030188 2025] [:error] [pid 40361:tid 40377] [client 4.189.136.213:3597] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aUmBR-xiDEK95vL2EDrKBQAAAE4"]
[Tue Dec 23 01:35:03.547308 2025] [:error] [pid 40269:tid 40335] [client 4.189.136.213:3627] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aUmBRy06Z11fTcfdsqTgSwAAAQY"]
[Tue Dec 23 01:35:03.808823 2025] [:error] [pid 40269:tid 40329] [client 4.189.136.213:3893] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aUmBRy06Z11fTcfdsqTgTAAAAQA"]
[Tue Dec 23 01:35:04.139286 2025] [:error] [pid 40268:tid 40313] [client 4.189.136.213:3863] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/info.php"] [unique_id "aUmBSJWtCyS5tdJAiFxW2gAAAMs"]
[Tue Dec 23 01:35:04.376301 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:3641] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aUmBSC06Z11fTcfdsqTgTgAAAQQ"]
[Tue Dec 23 01:35:04.680598 2025] [:error] [pid 40361:tid 40369] [client 4.189.136.213:3614] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aUmBSOxiDEK95vL2EDrKDAAAAEY"]
[Tue Dec 23 01:35:05.194508 2025] [:error] [pid 40268:tid 40319] [client 4.189.136.213:3888] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aUmBSZWtCyS5tdJAiFxW3AAAANE"]
[Tue Dec 23 01:35:05.491877 2025] [:error] [pid 40361:tid 40381] [client 4.189.136.213:4091] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aUmBSexiDEK95vL2EDrKDgAAAFI"]
[Tue Dec 23 01:35:05.741815 2025] [:error] [pid 40269:tid 40350] [client 4.189.136.213:4077] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/la.php"] [unique_id "aUmBSS06Z11fTcfdsqTgTwAAARU"]
[Tue Dec 23 01:35:06.183451 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:3914] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/la.php"] [unique_id "aUmBSuxiDEK95vL2EDrKEwAAAEE"]
[Tue Dec 23 01:35:06.685261 2025] [:error] [pid 40268:tid 40312] [client 4.189.136.213:3911] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/la.php"] [unique_id "aUmBSpWtCyS5tdJAiFxW3wAAAMo"]
[Tue Dec 23 01:35:07.084193 2025] [:error] [pid 40268:tid 40321] [client 4.189.136.213:3644] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/la.php"] [unique_id "aUmBS5WtCyS5tdJAiFxW4AAAANM"]
[Tue Dec 23 01:35:07.412437 2025] [:error] [pid 40267:tid 40283] [client 4.189.136.213:3621] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUmBS-TPWWVt2GkrftBnfgAAAAo"]
[Tue Dec 23 01:35:07.825351 2025] [:error] [pid 40268:tid 40306] [client 4.189.136.213:3871] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUmBS5WtCyS5tdJAiFxW4gAAAMQ"]
[Tue Dec 23 01:35:08.173566 2025] [:error] [pid 40268:tid 40311] [client 4.189.136.213:3629] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUmBTJWtCyS5tdJAiFxW5AAAAMk"]
[Tue Dec 23 01:35:08.420445 2025] [:error] [pid 40361:tid 40368] [client 4.189.136.213:3819] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless11.php"] [unique_id "aUmBTOxiDEK95vL2EDrKHgAAAEU"]
[Tue Dec 23 01:35:08.772411 2025] [:error] [pid 40269:tid 40335] [client 4.189.136.213:3791] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ccou.php"] [unique_id "aUmBTC06Z11fTcfdsqTgWgAAAQY"]
[Tue Dec 23 01:35:09.071487 2025] [:error] [pid 40269:tid 40339] [client 4.189.136.213:3867] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ccou.php"] [unique_id "aUmBTS06Z11fTcfdsqTgWwAAAQo"]
[Tue Dec 23 01:35:09.322167 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:4000] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ccou.php"] [unique_id "aUmBTexiDEK95vL2EDrKIwAAAEk"]
[Tue Dec 23 01:35:09.704872 2025] [:error] [pid 40361:tid 40386] [client 4.189.136.213:3793] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ccou.php"] [unique_id "aUmBTexiDEK95vL2EDrKJgAAAFc"]
[Tue Dec 23 01:35:10.383845 2025] [proxy_fcgi:error] [pid 40268:tid 40324] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:10.669121 2025] [proxy_fcgi:error] [pid 40268:tid 40305] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:10.797868 2025] [proxy_fcgi:error] [pid 40268:tid 40320] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:10.915061 2025] [proxy_fcgi:error] [pid 40268:tid 40303] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.070181 2025] [proxy_fcgi:error] [pid 40268:tid 40316] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.348751 2025] [proxy_fcgi:error] [pid 40268:tid 40323] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.466160 2025] [proxy_fcgi:error] [pid 40268:tid 40321] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.596220 2025] [proxy_fcgi:error] [pid 40268:tid 40326] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.715601 2025] [proxy_fcgi:error] [pid 40268:tid 40304] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.834734 2025] [proxy_fcgi:error] [pid 40268:tid 40318] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:11.953397 2025] [proxy_fcgi:error] [pid 40268:tid 40308] [client 4.189.136.213:3635] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 01:35:12.067133 2025] [:error] [pid 40268:tid 40315] [client 4.189.136.213:3635] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wtz.php"] [unique_id "aUmBUJWtCyS5tdJAiFxW9QAAAM0"]
[Tue Dec 23 01:35:12.674330 2025] [:error] [pid 40267:tid 40291] [client 4.189.136.213:3607] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wtz.php"] [unique_id "aUmBUOTPWWVt2GkrftBnggAAABI"]
[Tue Dec 23 01:35:13.093624 2025] [:error] [pid 40268:tid 40322] [client 4.189.136.213:3624] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wtz.php"] [unique_id "aUmBUZWtCyS5tdJAiFxW9gAAANQ"]
[Tue Dec 23 01:35:13.457467 2025] [:error] [pid 40267:tid 40275] [client 4.189.136.213:3599] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wtz.php"] [unique_id "aUmBUeTPWWVt2GkrftBnhAAAAAI"]
[Tue Dec 23 01:35:13.934021 2025] [:error] [pid 40267:tid 40285] [client 4.189.136.213:3591] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/galex.php"] [unique_id "aUmBUeTPWWVt2GkrftBnhgAAAAw"]
[Tue Dec 23 01:35:14.416497 2025] [:error] [pid 40267:tid 40294] [client 4.189.136.213:3846] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/galex.php"] [unique_id "aUmBUuTPWWVt2GkrftBnhwAAABU"]
[Tue Dec 23 01:35:14.827971 2025] [:error] [pid 40269:tid 40349] [client 4.189.136.213:3642] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/galex.php"] [unique_id "aUmBUi06Z11fTcfdsqTgYQAAARQ"]
[Tue Dec 23 01:35:15.104069 2025] [:error] [pid 40269:tid 40347] [client 4.189.136.213:3885] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/galex.php"] [unique_id "aUmBUy06Z11fTcfdsqTgYgAAARI"]
[Tue Dec 23 01:35:15.443248 2025] [:error] [pid 40361:tid 40380] [client 4.189.136.213:3866] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xb.php"] [unique_id "aUmBU-xiDEK95vL2EDrKOAAAAFE"]
[Tue Dec 23 01:35:15.776686 2025] [:error] [pid 40361:tid 40364] [client 4.189.136.213:3600] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xb.php"] [unique_id "aUmBU-xiDEK95vL2EDrKOQAAAEE"]
[Tue Dec 23 01:35:16.103304 2025] [:error] [pid 40269:tid 40346] [client 4.189.136.213:3936] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xb.php"] [unique_id "aUmBVC06Z11fTcfdsqTgZAAAARE"]
[Tue Dec 23 01:35:16.427515 2025] [:error] [pid 40361:tid 40363] [client 4.189.136.213:3862] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xb.php"] [unique_id "aUmBVOxiDEK95vL2EDrKPAAAAEA"]
[Tue Dec 23 01:35:16.692586 2025] [:error] [pid 40361:tid 40369] [client 4.189.136.213:3835] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ova.php"] [unique_id "aUmBVOxiDEK95vL2EDrKPgAAAEY"]
[Tue Dec 23 01:35:17.195442 2025] [:error] [pid 40269:tid 40333] [client 4.189.136.213:3932] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ova.php"] [unique_id "aUmBVS06Z11fTcfdsqTgZgAAAQQ"]
[Tue Dec 23 01:35:17.950756 2025] [:error] [pid 40267:tid 40277] [client 4.189.136.213:3794] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ova.php"] [unique_id "aUmBVeTPWWVt2GkrftBnjAAAAAQ"]
[Tue Dec 23 01:35:18.246664 2025] [:error] [pid 40361:tid 40383] [client 4.189.136.213:3622] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ova.php"] [unique_id "aUmBVuxiDEK95vL2EDrKRwAAAFQ"]
[Tue Dec 23 01:35:18.581140 2025] [:error] [pid 40361:tid 40374] [client 4.189.136.213:3610] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aUmBVuxiDEK95vL2EDrKSgAAAEs"]
[Tue Dec 23 01:35:18.957399 2025] [:error] [pid 40268:tid 40316] [client 4.189.136.213:3786] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aUmBVpWtCyS5tdJAiFxW-QAAAM4"]
[Tue Dec 23 01:35:19.362512 2025] [:error] [pid 40361:tid 40378] [client 4.189.136.213:3874] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aUmBV-xiDEK95vL2EDrKTgAAAE8"]
[Tue Dec 23 01:35:19.799165 2025] [:error] [pid 40269:tid 40343] [client 4.189.136.213:3593] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aUmBVy06Z11fTcfdsqTgagAAAQ4"]
[Tue Dec 23 01:35:20.152959 2025] [:error] [pid 40361:tid 40372] [client 4.189.136.213:3619] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rh.php"] [unique_id "aUmBWOxiDEK95vL2EDrKUAAAAEk"]
[Tue Dec 23 01:35:20.714617 2025] [:error] [pid 40361:tid 40367] [client 4.189.136.213:3815] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rh.php"] [unique_id "aUmBWOxiDEK95vL2EDrKUgAAAEQ"]
[Tue Dec 23 01:35:21.075734 2025] [:error] [pid 40268:tid 40306] [client 4.189.136.213:3958] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rh.php"] [unique_id "aUmBWZWtCyS5tdJAiFxW_QAAAMQ"]
[Tue Dec 23 01:35:21.590041 2025] [:error] [pid 40361:tid 40378] [client 4.189.136.213:3636] [client 4.189.136.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rh.php"] [unique_id "aUmBWexiDEK95vL2EDrKWQAAAE8"]
[Tue Dec 23 01:57:17.785137 2025] [:error] [pid 40361:tid 40368] [client 43.135.142.37:60854] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUmGfexiDEK95vL2EDrZqQAAAEU"]
[Tue Dec 23 02:13:37.085565 2025] [proxy_fcgi:error] [pid 40269:tid 40353] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:38.312717 2025] [proxy_fcgi:error] [pid 40269:tid 40348] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:38.690717 2025] [proxy_fcgi:error] [pid 40269:tid 40329] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:38.872303 2025] [proxy_fcgi:error] [pid 40269:tid 40347] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:39.048021 2025] [proxy_fcgi:error] [pid 40269:tid 40345] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:39.516524 2025] [proxy_fcgi:error] [pid 40269:tid 40349] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:39.904002 2025] [proxy_fcgi:error] [pid 40269:tid 40350] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:40.084422 2025] [proxy_fcgi:error] [pid 40269:tid 40341] [client 4.230.44.236:15469] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:13:40.356544 2025] [:error] [pid 40269:tid 40337] [client 4.230.44.236:15469] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aUmKVC06Z11fTcfdsqTzPAAAAQg"]
[Tue Dec 23 02:13:42.844424 2025] [:error] [pid 40361:tid 40384] [client 4.230.44.236:15451] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aUmKVuxiDEK95vL2EDrj2QAAAFU"]
[Tue Dec 23 02:13:44.159672 2025] [:error] [pid 40269:tid 40353] [client 4.230.44.236:15363] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aUmKWC06Z11fTcfdsqTzQQAAARg"]
[Tue Dec 23 02:13:48.876695 2025] [:error] [pid 40269:tid 40346] [client 4.230.44.236:15383] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aUmKXC06Z11fTcfdsqTzTAAAARE"]
[Tue Dec 23 02:13:50.291763 2025] [:error] [pid 40269:tid 40338] [client 4.230.44.236:15458] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUmKXi06Z11fTcfdsqTzTQAAAQk"]
[Tue Dec 23 02:13:51.151614 2025] [:error] [pid 40267:tid 40274] [client 4.230.44.236:15461] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUmKX-TPWWVt2GkrftB66QAAAAE"]
[Tue Dec 23 02:13:51.945079 2025] [:error] [pid 40361:tid 40382] [client 4.230.44.236:15376] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUmKX-xiDEK95vL2EDrj8QAAAFM"]
[Tue Dec 23 02:13:55.522756 2025] [:error] [pid 40267:tid 40284] [client 4.230.44.236:15370] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aUmKY-TPWWVt2GkrftB67gAAAAs"]
[Tue Dec 23 02:13:59.446475 2025] [:error] [pid 40268:tid 40321] [client 4.230.44.236:15434] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUmKZ5WtCyS5tdJAiFxnywAAANM"]
[Tue Dec 23 02:14:01.454833 2025] [:error] [pid 40267:tid 40291] [client 4.230.44.236:15378] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUmKaeTPWWVt2GkrftB6-QAAABI"]
[Tue Dec 23 02:14:02.849469 2025] [:error] [pid 40268:tid 40322] [client 4.230.44.236:15453] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUmKapWtCyS5tdJAiFxn2AAAANQ"]
[Tue Dec 23 02:14:04.841586 2025] [:error] [pid 40267:tid 40278] [client 4.230.44.236:15486] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUmKbOTPWWVt2GkrftB7BgAAAAU"]
[Tue Dec 23 02:14:06.187281 2025] [:error] [pid 40267:tid 40280] [client 4.230.44.236:15420] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUmKbuTPWWVt2GkrftB7DQAAAAc"]
[Tue Dec 23 02:14:09.129818 2025] [:error] [pid 40267:tid 40277] [client 4.230.44.236:15377] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUmKceTPWWVt2GkrftB7GwAAAAQ"]
[Tue Dec 23 02:14:10.689433 2025] [:error] [pid 40267:tid 40283] [client 4.230.44.236:15473] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUmKcuTPWWVt2GkrftB7HwAAAAo"]
[Tue Dec 23 02:14:12.431282 2025] [:error] [pid 40269:tid 40331] [client 4.230.44.236:15485] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aUmKdC06Z11fTcfdsqTzbQAAAQI"]
[Tue Dec 23 02:14:13.499228 2025] [:error] [pid 40361:tid 40365] [client 4.230.44.236:15360] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUmKdexiDEK95vL2EDrkDgAAAEI"]
[Tue Dec 23 02:14:15.305287 2025] [:error] [pid 40361:tid 40387] [client 4.230.44.236:15362] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUmKd-xiDEK95vL2EDrkFQAAAFg"]
[Tue Dec 23 02:14:17.530856 2025] [:error] [pid 40269:tid 40344] [client 4.230.44.236:1985] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUmKeS06Z11fTcfdsqTzdAAAAQ8"]
[Tue Dec 23 02:14:19.177982 2025] [:error] [pid 40268:tid 40324] [client 4.230.44.236:15463] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aUmKe5WtCyS5tdJAiFxoDwAAANY"]
[Tue Dec 23 02:14:22.032484 2025] [:error] [pid 40269:tid 40339] [client 4.230.44.236:15471] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUmKfi06Z11fTcfdsqTzfQAAAQo"]
[Tue Dec 23 02:14:24.110759 2025] [:error] [pid 40361:tid 40381] [client 4.230.44.236:15452] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUmKgOxiDEK95vL2EDrkJQAAAFI"]
[Tue Dec 23 02:14:28.733492 2025] [:error] [pid 40267:tid 40285] [client 4.230.44.236:15431] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUmKhOTPWWVt2GkrftB7QAAAAAw"]
[Tue Dec 23 02:14:33.537150 2025] [:error] [pid 40361:tid 40373] [client 4.230.44.236:15380] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aUmKiexiDEK95vL2EDrkQAAAAEo"]
[Tue Dec 23 02:14:36.299621 2025] [:error] [pid 40268:tid 40314] [client 4.230.44.236:15437] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aUmKjJWtCyS5tdJAiFxoHAAAAMw"]
[Tue Dec 23 02:14:39.733213 2025] [:error] [pid 40268:tid 40308] [client 4.230.44.236:15472] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aUmKj5WtCyS5tdJAiFxoIQAAAMY"]
[Tue Dec 23 02:14:41.871464 2025] [proxy_fcgi:error] [pid 40267:tid 40276] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:42.061973 2025] [proxy_fcgi:error] [pid 40267:tid 40273] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:42.238601 2025] [proxy_fcgi:error] [pid 40267:tid 40275] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:42.420778 2025] [proxy_fcgi:error] [pid 40267:tid 40279] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:42.591320 2025] [proxy_fcgi:error] [pid 40267:tid 40297] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:42.756415 2025] [proxy_fcgi:error] [pid 40267:tid 40280] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:42.919237 2025] [proxy_fcgi:error] [pid 40267:tid 40296] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:43.082677 2025] [proxy_fcgi:error] [pid 40267:tid 40281] [client 4.230.44.236:15428] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:43.241530 2025] [:error] [pid 40267:tid 40290] [client 4.230.44.236:15428] [client 4.230.44.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aUmKk-TPWWVt2GkrftB7WgAAABE"]
[Tue Dec 23 02:14:46.818813 2025] [proxy_fcgi:error] [pid 40268:tid 40317] [client 4.230.44.236:15479] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:46.989220 2025] [proxy_fcgi:error] [pid 40268:tid 40308] [client 4.230.44.236:15479] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:47.172613 2025] [proxy_fcgi:error] [pid 40268:tid 40320] [client 4.230.44.236:15479] AH01071: Got error 'Primary script unknown'
[Tue Dec 23 02:14:47.345950 2025] [:error] [pid 40268:tid 40315] [client 4.230.44.236:15479] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manage.php"] [unique_id "aUmKl5WtCyS5tdJAiFxoKwAAAM0"]
[Tue Dec 23 02:14:51.119895 2025] [:error] [pid 40267:tid 40278] [client 4.230.44.236:15483] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manage.php"] [unique_id "aUmKm-TPWWVt2GkrftB7YgAAAAU"]
[Tue Dec 23 02:14:56.347793 2025] [:error] [pid 40361:tid 40373] [client 4.230.44.236:15440] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manage.php"] [unique_id "aUmKoOxiDEK95vL2EDrkagAAAEo"]
[Tue Dec 23 02:15:00.060838 2025] [:error] [pid 40267:tid 40283] [client 4.230.44.236:15446] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manage.php"] [unique_id "aUmKpOTPWWVt2GkrftB7dAAAAAo"]
[Tue Dec 23 02:15:00.794296 2025] [:error] [pid 40361:tid 40378] [client 4.230.44.236:15372] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmKpOxiDEK95vL2EDrkdgAAAE8"]
[Tue Dec 23 02:15:01.944906 2025] [:error] [pid 40268:tid 40319] [client 4.230.44.236:15482] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmKpZWtCyS5tdJAiFxoPwAAANE"]
[Tue Dec 23 02:15:04.142268 2025] [:error] [pid 40269:tid 40340] [client 4.230.44.236:15459] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmKqC06Z11fTcfdsqTzxAAAAQs"]
[Tue Dec 23 02:15:07.639873 2025] [:error] [pid 40269:tid 40350] [client 4.230.44.236:15445] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aUmKqy06Z11fTcfdsqTzzwAAARU"]
[Tue Dec 23 02:15:09.060791 2025] [:error] [pid 40269:tid 40332] [client 4.230.44.236:15385] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aUmKrS06Z11fTcfdsqTz1AAAAQM"]
[Tue Dec 23 02:15:18.423142 2025] [:error] [pid 40267:tid 40274] [client 4.230.44.236:15411] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aUmKtuTPWWVt2GkrftB7hwAAAAE"]
[Tue Dec 23 02:15:20.946181 2025] [:error] [pid 40267:tid 40294] [client 4.230.44.236:15474] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aUmKuOTPWWVt2GkrftB7kQAAABU"]
[Tue Dec 23 02:15:25.609253 2025] [:error] [pid 40267:tid 40273] [client 4.230.44.236:15381] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aUmKveTPWWVt2GkrftB7xwAAAAA"]
[Tue Dec 23 02:15:26.364361 2025] [:error] [pid 40268:tid 40303] [client 4.230.44.236:15386] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aUmKvpWtCyS5tdJAiFxobQAAAME"]
[Tue Dec 23 02:15:29.424463 2025] [:error] [pid 40267:tid 40297] [client 4.230.44.236:15374] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aUmKweTPWWVt2GkrftB73gAAABg"]
[Tue Dec 23 02:15:31.338306 2025] [:error] [pid 40267:tid 40287] [client 4.230.44.236:2000] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aUmKw-TPWWVt2GkrftB74wAAAA4"]
[Tue Dec 23 02:15:32.255001 2025] [:error] [pid 40361:tid 40370] [client 4.230.44.236:15405] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUmKxOxiDEK95vL2EDrkzwAAAEc"]
[Tue Dec 23 02:15:33.166744 2025] [:error] [pid 40267:tid 40294] [client 4.230.44.236:15480] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUmKxeTPWWVt2GkrftB76AAAABU"]
[Tue Dec 23 02:15:35.275899 2025] [:error] [pid 40268:tid 40317] [client 4.230.44.236:15371] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUmKx5WtCyS5tdJAiFxofgAAAM8"]
[Tue Dec 23 02:15:35.929303 2025] [:error] [pid 40268:tid 40325] [client 4.230.44.236:15460] [client 4.230.44.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aUmKx5WtCyS5tdJAiFxogQAAANc"]
[Tue Dec 23 02:48:55.308917 2025] [:error] [pid 40268:tid 40306] [client 195.24.236.147:56796] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUmSl5WtCyS5tdJAiFx11wAAAMQ"]
[Tue Dec 23 02:48:55.950104 2025] [:error] [pid 40268:tid 40318] [client 195.24.236.147:56916] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUmSl5WtCyS5tdJAiFx15wAAANA"]
[Tue Dec 23 02:48:56.598876 2025] [:error] [pid 12110:tid 12122] [client 195.24.236.147:57045] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUmSmAYatzD_WebWpOrregAAAIo"]
[Tue Dec 23 02:48:57.229941 2025] [:error] [pid 40361:tid 40365] [client 195.24.236.147:57202] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUmSmexiDEK95vL2EDr5SgAAAEI"]
[Tue Dec 23 02:48:57.897665 2025] [:error] [pid 40268:tid 40320] [client 195.24.236.147:57338] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUmSmZWtCyS5tdJAiFx2GgAAANI"]
[Tue Dec 23 03:26:24.913242 2025] [autoindex:error] [pid 40267:tid 40287] [client 104.196.199.18:46789] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 04:57:43.013685 2025] [proxy_fcgi:error] [pid 49150:tid 49159] [client 4.230.34.85:11209] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 04:57:43.045398 2025] [autoindex:error] [pid 49060:tid 49079] [client 4.230.34.85:11241] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 04:57:43.188690 2025] [proxy_fcgi:error] [pid 49150:tid 49155] [client 4.230.34.85:11209] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 04:57:44.109410 2025] [proxy_fcgi:error] [pid 49150:tid 49157] [client 4.230.34.85:11221] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 04:57:44.280387 2025] [proxy_fcgi:error] [pid 49150:tid 49161] [client 4.230.34.85:11221] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue Dec 23 04:58:27.020167 2025] [autoindex:error] [pid 49061:tid 49092] [client 104.196.199.18:44955] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 08:01:13.396964 2025] [autoindex:error] [pid 49150:tid 49174] [client 79.174.83.65:7721] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 08:01:14.682767 2025] [autoindex:error] [pid 49060:tid 49065] [client 79.174.83.65:45735] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 08:01:15.536015 2025] [autoindex:error] [pid 49150:tid 49173] [client 79.174.83.65:43590] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 08:01:16.838579 2025] [autoindex:error] [pid 49150:tid 49162] [client 79.174.83.65:30133] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 09:04:04.085982 2025] [autoindex:error] [pid 49061:tid 49105] [client 130.89.144.171:2862] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 09:11:23.017503 2025] [autoindex:error] [pid 49061:tid 49109] [client 34.73.22.152:58167] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 09:40:20.214214 2025] [autoindex:error] [pid 19535:tid 19554] [client 217.113.196.76:32319] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 09:52:58.299167 2025] [autoindex:error] [pid 30142:tid 30160] [client 93.158.91.249:42611] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 11:27:04.119388 2025] [autoindex:error] [pid 49150:tid 49162] [client 34.73.22.152:56281] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 12:05:21.988608 2025] [:error] [pid 3404:tid 3424] [client 121.229.185.160:36672] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUoVAcJGbPWZNlrhVJfWLwAAAc8"]
[Tue Dec 23 18:23:54.522239 2025] [:error] [pid 49993:tid 50016] [client 182.42.104.32:39588] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUptuqjLOkLOc-I9e9uKdAAAAVQ"]
[Tue Dec 23 18:37:36.787853 2025] [autoindex:error] [pid 3404:tid 3428] [client 103.76.238.129:55442] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:38.277387 2025] [autoindex:error] [pid 49993:tid 50001] [client 103.76.239.91:20434] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:40.838382 2025] [autoindex:error] [pid 25976:tid 25994] [client 192.3.37.47:63462] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 23 18:37:41.638858 2025] [autoindex:error] [pid 11812:tid 11838] [client 101.181.54.113:49934] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:43.681709 2025] [autoindex:error] [pid 3406:tid 3470] [client 103.76.238.5:37640] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:44.683587 2025] [autoindex:error] [pid 3405:tid 3456] [client 103.76.237.11:10272] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:45.689859 2025] [autoindex:error] [pid 3406:tid 3465] [client 103.76.237.134:59114] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:47.803642 2025] [autoindex:error] [pid 49993:tid 50001] [client 103.76.237.71:6374] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:48.423898 2025] [autoindex:error] [pid 49993:tid 50011] [client 103.76.237.71:6374] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 23 18:37:49.940331 2025] [autoindex:error] [pid 25976:tid 25982] [client 121.222.106.31:59265] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:51.831975 2025] [autoindex:error] [pid 3405:tid 3452] [client 49.190.152.40:36568] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:37:52.981117 2025] [autoindex:error] [pid 49993:tid 50010] [client 103.76.239.166:8962] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 18:50:55.405138 2025] [autoindex:error] [pid 3405:tid 3461] [client 157.173.122.176:39894] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:37.785027 2025] [autoindex:error] [pid 3405:tid 3449] [client 203.219.146.65:38718] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:40.191154 2025] [autoindex:error] [pid 11812:tid 11822] [client 154.28.108.103:36692] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com.au/
[Tue Dec 23 20:46:42.267440 2025] [autoindex:error] [pid 54375:tid 54388] [client 103.76.237.210:49860] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:44.353974 2025] [autoindex:error] [pid 25976:tid 25982] [client 103.76.236.61:52628] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:46.432798 2025] [autoindex:error] [pid 25976:tid 26000] [client 103.76.236.16:16772] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:48.495329 2025] [autoindex:error] [pid 25976:tid 26001] [client 103.76.236.38:38386] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:50.508786 2025] [autoindex:error] [pid 54408:tid 54413] [client 103.76.239.227:28160] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:52.513998 2025] [autoindex:error] [pid 3406:tid 3486] [client 103.76.237.222:62338] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:54.513066 2025] [autoindex:error] [pid 3406:tid 3477] [client 103.76.238.112:38732] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:55.526865 2025] [autoindex:error] [pid 3497:tid 3501] [client 103.76.239.23:65422] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:56.255884 2025] [autoindex:error] [pid 54340:tid 54355] [client 211.26.50.223:35154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 20:46:57.232242 2025] [autoindex:error] [pid 54375:tid 54380] [client 103.76.237.11:13014] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:25.493430 2025] [autoindex:error] [pid 54297:tid 54307] [client 106.71.181.229:59502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:26.626956 2025] [autoindex:error] [pid 3405:tid 3460] [client 119.15.74.55:20999] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 23 21:50:27.463302 2025] [autoindex:error] [pid 11812:tid 11832] [client 119.15.74.55:21105] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 23 21:50:28.501088 2025] [autoindex:error] [pid 54297:tid 54313] [client 14.200.196.179:47478] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:29.874913 2025] [autoindex:error] [pid 54297:tid 54322] [client 43.252.115.118:4838] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:30.793216 2025] [autoindex:error] [pid 3404:tid 3433] [client 202.171.178.16:39618] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:32.731189 2025] [autoindex:error] [pid 3497:tid 3524] [client 119.18.0.237:12430] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:34.610324 2025] [autoindex:error] [pid 25976:tid 25993] [client 180.150.112.11:17993] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:36.802894 2025] [autoindex:error] [pid 25976:tid 25986] [client 139.218.60.189:42612] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:37.627663 2025] [autoindex:error] [pid 54297:tid 54306] [client 1.121.140.75:54369] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:43.283854 2025] [autoindex:error] [pid 25976:tid 25989] [client 101.115.133.83:1348] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 23 21:50:45.213061 2025] [autoindex:error] [pid 3497:tid 3500] [client 101.187.214.219:64853] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.baidu.com.au/
[Tue Dec 23 21:50:45.954297 2025] [autoindex:error] [pid 3497:tid 3510] [client 101.187.214.219:64854] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 23 22:48:31.207055 2025] [:error] [pid 54340:tid 54346] [client 119.94.169.65:25901] [client 119.94.169.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.94.169.65, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUqrv5ye8-oij4iGhog7LwAAAgQ"]
[Tue Dec 23 22:48:31.218188 2025] [proxy_fcgi:error] [pid 54340:tid 54346] [client 119.94.169.65:25901] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 00:23:21.166641 2025] [autoindex:error] [pid 17493:tid 17516] [client 104.248.231.168:52520] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 00:56:41.988702 2025] [:error] [pid 17495:tid 17572] [client 180.110.203.108:41326] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUrJySX1bYzs2kDzvLW1xgAAAFU"]
[Wed Dec 24 01:12:50.081775 2025] [autoindex:error] [pid 17591:tid 17609] [client 74.7.227.6:45418] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 06:09:11.422805 2025] [autoindex:error] [pid 54139:tid 54142] [client 37.19.223.115:52363] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 24 06:09:12.053977 2025] [autoindex:error] [pid 16550:tid 16556] [client 37.19.223.115:52416] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 24 06:09:13.952163 2025] [autoindex:error] [pid 16550:tid 16553] [client 49.245.80.150:53832] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 24 06:09:16.137600 2025] [autoindex:error] [pid 16550:tid 16557] [client 202.55.67.194:36480] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 24 06:09:17.978472 2025] [autoindex:error] [pid 54139:tid 54143] [client 49.245.80.150:60368] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 24 06:09:20.775907 2025] [autoindex:error] [pid 54139:tid 54163] [client 202.55.67.194:36490] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Dec 24 07:37:29.363695 2025] [proxy_fcgi:error] [pid 16550:tid 16572] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:29.515097 2025] [proxy_fcgi:error] [pid 16550:tid 16558] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:29.662290 2025] [proxy_fcgi:error] [pid 16550:tid 16576] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:29.832422 2025] [proxy_fcgi:error] [pid 16550:tid 16566] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:29.976322 2025] [proxy_fcgi:error] [pid 16550:tid 16559] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:30.119100 2025] [proxy_fcgi:error] [pid 16550:tid 16571] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:30.261915 2025] [proxy_fcgi:error] [pid 16550:tid 16561] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:30.411112 2025] [proxy_fcgi:error] [pid 16550:tid 16560] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:30.779023 2025] [proxy_fcgi:error] [pid 16550:tid 16557] [client 4.230.28.207:34639] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:37:31.060480 2025] [:error] [pid 16550:tid 16563] [client 4.230.28.207:34639] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aUsnu6YYcdD-LuO7vrAZcgAAAMs"]
[Wed Dec 24 07:37:32.861620 2025] [:error] [pid 16468:tid 16540] [client 4.230.28.207:34571] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aUsnvIdyfuSTFLkCbP_egAAAAJA"]
[Wed Dec 24 07:37:34.115658 2025] [:error] [pid 16550:tid 16562] [client 4.230.28.207:34670] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aUsnvqYYcdD-LuO7vrAZeAAAAMo"]
[Wed Dec 24 07:37:35.078590 2025] [:error] [pid 16466:tid 16475] [client 4.230.28.207:34629] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aUsnv7u0JcuKJMjJn6yCxQAAAAU"]
[Wed Dec 24 07:37:36.687277 2025] [:error] [pid 54139:tid 54154] [client 4.230.28.207:34637] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/npi.php"] [unique_id "aUsnwMrYCZenIDzgXuKgeQAAAQ0"]
[Wed Dec 24 07:37:37.958458 2025] [:error] [pid 16550:tid 16564] [client 4.230.28.207:34660] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/npi.php"] [unique_id "aUsnwaYYcdD-LuO7vrAZggAAAMw"]
[Wed Dec 24 07:37:41.593230 2025] [:error] [pid 16467:tid 16506] [client 4.230.28.207:34573] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/npi.php"] [unique_id "aUsnxY0TJMcBxX5slgqcTwAAAEk"]
[Wed Dec 24 07:37:44.487206 2025] [:error] [pid 16550:tid 16564] [client 4.230.28.207:34658] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/npi.php"] [unique_id "aUsnyKYYcdD-LuO7vrAZiwAAAMw"]
[Wed Dec 24 07:37:45.290095 2025] [:error] [pid 16550:tid 16576] [client 4.230.28.207:34643] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ahax.php"] [unique_id "aUsnyaYYcdD-LuO7vrAZjAAAANg"]
[Wed Dec 24 07:37:47.904849 2025] [:error] [pid 16550:tid 16561] [client 4.230.28.207:34681] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ahax.php"] [unique_id "aUsny6YYcdD-LuO7vrAZkgAAAMk"]
[Wed Dec 24 07:37:49.309994 2025] [:error] [pid 16550:tid 16572] [client 4.230.28.207:34679] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ahax.php"] [unique_id "aUsnzaYYcdD-LuO7vrAZlgAAANQ"]
[Wed Dec 24 07:37:50.376029 2025] [:error] [pid 16467:tid 16514] [client 4.230.28.207:34628] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ahax.php"] [unique_id "aUsnzo0TJMcBxX5slgqcZgAAAFE"]
[Wed Dec 24 07:37:52.161909 2025] [:error] [pid 54139:tid 54149] [client 4.230.28.207:34563] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aUsn0MrYCZenIDzgXuKglgAAAQg"]
[Wed Dec 24 07:37:53.274455 2025] [:error] [pid 16466:tid 16481] [client 4.230.28.207:34580] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aUsn0bu0JcuKJMjJn6yCygAAAAs"]
[Wed Dec 24 07:37:55.238196 2025] [:error] [pid 16466:tid 16470] [client 4.230.28.207:34627] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aUsn07u0JcuKJMjJn6yCzAAAAAA"]
[Wed Dec 24 07:37:57.048092 2025] [:error] [pid 16550:tid 16552] [client 4.230.28.207:34562] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aUsn1aYYcdD-LuO7vrAZowAAAMA"]
[Wed Dec 24 07:37:58.785435 2025] [:error] [pid 16466:tid 16486] [client 4.230.28.207:34633] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aUsn1ru0JcuKJMjJn6yC0QAAABA"]
[Wed Dec 24 07:37:59.557965 2025] [:error] [pid 16466:tid 16476] [client 4.230.28.207:34575] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aUsn17u0JcuKJMjJn6yC1AAAAAY"]
[Wed Dec 24 07:38:06.314309 2025] [:error] [pid 16468:tid 16524] [client 4.230.28.207:34576] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aUsn3odyfuSTFLkCbP_erAAAAIA"]
[Wed Dec 24 07:38:07.722930 2025] [:error] [pid 16468:tid 16545] [client 4.230.28.207:34684] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aUsn34dyfuSTFLkCbP_ergAAAJU"]
[Wed Dec 24 07:38:13.776080 2025] [:error] [pid 16466:tid 16489] [client 4.230.28.207:34574] [client 4.230.28.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUsn5bu0JcuKJMjJn6yC4QAAABM"]
[Wed Dec 24 07:38:20.108717 2025] [:error] [pid 54139:tid 54149] [client 4.230.28.207:34680] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUsn7MrYCZenIDzgXuKguQAAAQg"]
[Wed Dec 24 07:38:26.454800 2025] [:error] [pid 16550:tid 16558] [client 4.230.28.207:34685] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aUsn8qYYcdD-LuO7vrAZ3gAAAMY"]
[Wed Dec 24 07:38:40.343784 2025] [proxy_fcgi:error] [pid 16550:tid 16573] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:40.487464 2025] [proxy_fcgi:error] [pid 16550:tid 16566] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:40.629283 2025] [proxy_fcgi:error] [pid 16550:tid 16565] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:41.227111 2025] [proxy_fcgi:error] [pid 16550:tid 16575] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:41.369174 2025] [proxy_fcgi:error] [pid 16550:tid 16552] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:41.533350 2025] [proxy_fcgi:error] [pid 16550:tid 16557] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:41.677435 2025] [proxy_fcgi:error] [pid 16550:tid 16564] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:41.831575 2025] [proxy_fcgi:error] [pid 16550:tid 16569] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:41.984759 2025] [proxy_fcgi:error] [pid 16550:tid 16554] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:42.168903 2025] [proxy_fcgi:error] [pid 16550:tid 16568] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:42.312219 2025] [proxy_fcgi:error] [pid 16550:tid 16560] [client 4.230.28.207:34578] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:38:42.460600 2025] [:error] [pid 16550:tid 16563] [client 4.230.28.207:34578] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/index.php"] [unique_id "aUsoAqYYcdD-LuO7vrAZ-QAAAMs"]
[Wed Dec 24 07:39:03.386115 2025] [:error] [pid 54139:tid 54150] [client 4.230.28.207:34599] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mek.php"] [unique_id "aUsoF8rYCZenIDzgXuKg_AAAAQk"]
[Wed Dec 24 07:39:05.876688 2025] [:error] [pid 16550:tid 16558] [client 4.230.28.207:34594] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mek.php"] [unique_id "aUsoGaYYcdD-LuO7vrAaEwAAAMY"]
[Wed Dec 24 07:39:07.576035 2025] [:error] [pid 16466:tid 16474] [client 4.230.28.207:34532] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mek.php"] [unique_id "aUsoG7u0JcuKJMjJn6yDKwAAAAQ"]
[Wed Dec 24 07:39:11.609888 2025] [:error] [pid 16550:tid 16552] [client 4.230.28.207:34665] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mek.php"] [unique_id "aUsoH6YYcdD-LuO7vrAaGAAAAMA"]
[Wed Dec 24 07:39:14.035322 2025] [:error] [pid 54139:tid 54142] [client 4.230.28.207:34577] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fjpeb.php"] [unique_id "aUsoIsrYCZenIDzgXuKhCgAAAQE"]
[Wed Dec 24 07:39:17.124711 2025] [:error] [pid 16467:tid 16519] [client 4.230.28.207:34682] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fjpeb.php"] [unique_id "aUsoJY0TJMcBxX5slgqdOAAAAFY"]
[Wed Dec 24 07:39:21.386474 2025] [:error] [pid 54139:tid 54145] [client 4.230.28.207:34520] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fjpeb.php"] [unique_id "aUsoKcrYCZenIDzgXuKhEwAAAQQ"]
[Wed Dec 24 07:39:32.308611 2025] [:error] [pid 16466:tid 16486] [client 4.230.28.207:34646] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ex.php"] [unique_id "aUsoNLu0JcuKJMjJn6yDOQAAABA"]
[Wed Dec 24 07:39:34.483126 2025] [:error] [pid 16550:tid 16570] [client 4.230.28.207:34565] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ex.php"] [unique_id "aUsoNqYYcdD-LuO7vrAaNQAAANI"]
[Wed Dec 24 07:39:35.506607 2025] [:error] [pid 16467:tid 16520] [client 4.230.28.207:34652] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ex.php"] [unique_id "aUsoN40TJMcBxX5slgqdQAAAAFc"]
[Wed Dec 24 07:39:38.597391 2025] [:error] [pid 16550:tid 16557] [client 4.230.28.207:34566] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ex.php"] [unique_id "aUsoOqYYcdD-LuO7vrAaOwAAAMU"]
[Wed Dec 24 07:39:39.420268 2025] [:error] [pid 16550:tid 16569] [client 4.230.28.207:34665] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd67.php"] [unique_id "aUsoO6YYcdD-LuO7vrAaPQAAANE"]
[Wed Dec 24 07:39:40.335881 2025] [:error] [pid 16468:tid 16541] [client 4.230.28.207:34579] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd67.php"] [unique_id "aUsoPIdyfuSTFLkCbP_fHAAAAJE"]
[Wed Dec 24 07:39:44.166348 2025] [proxy_fcgi:error] [pid 16466:tid 16473] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:44.707838 2025] [proxy_fcgi:error] [pid 16466:tid 16492] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:44.853212 2025] [proxy_fcgi:error] [pid 16466:tid 16471] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:45.279748 2025] [proxy_fcgi:error] [pid 16466:tid 16474] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:46.051681 2025] [proxy_fcgi:error] [pid 16466:tid 16479] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:46.202673 2025] [proxy_fcgi:error] [pid 16466:tid 16478] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:46.471817 2025] [proxy_fcgi:error] [pid 16466:tid 16491] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:46.794720 2025] [proxy_fcgi:error] [pid 16466:tid 16476] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:46.943446 2025] [proxy_fcgi:error] [pid 16466:tid 16488] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:47.103353 2025] [proxy_fcgi:error] [pid 16466:tid 16490] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:47.250523 2025] [proxy_fcgi:error] [pid 16466:tid 16477] [client 4.230.28.207:34655] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:39:47.392214 2025] [:error] [pid 16466:tid 16494] [client 4.230.28.207:34655] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx21_1.php"] [unique_id "aUsoQ7u0JcuKJMjJn6yDTwAAABg"]
[Wed Dec 24 07:39:49.050414 2025] [:error] [pid 16466:tid 16475] [client 4.230.28.207:34648] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx21_1.php"] [unique_id "aUsoRbu0JcuKJMjJn6yDUQAAAAU"]
[Wed Dec 24 07:39:50.367127 2025] [:error] [pid 54139:tid 54150] [client 4.230.28.207:34663] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx21_1.php"] [unique_id "aUsoRsrYCZenIDzgXuKhOAAAAQk"]
[Wed Dec 24 07:39:51.061559 2025] [:error] [pid 16466:tid 16492] [client 4.230.28.207:34585] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx21_1.php"] [unique_id "aUsoR7u0JcuKJMjJn6yDVQAAABY"]
[Wed Dec 24 07:39:53.253945 2025] [:error] [pid 16550:tid 16575] [client 4.230.28.207:34503] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aUsoSaYYcdD-LuO7vrAaTgAAANc"]
[Wed Dec 24 07:39:55.567937 2025] [:error] [pid 16550:tid 16566] [client 4.230.28.207:34672] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aUsoS6YYcdD-LuO7vrAaUgAAAM4"]
[Wed Dec 24 07:39:58.354241 2025] [:error] [pid 16467:tid 16515] [client 4.230.28.207:34572] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aUsoTo0TJMcBxX5slgqdWwAAAFI"]
[Wed Dec 24 07:40:17.857053 2025] [:error] [pid 16550:tid 16572] [client 4.230.28.207:34507] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx9.php"] [unique_id "aUsoYaYYcdD-LuO7vrAaawAAANQ"]
[Wed Dec 24 07:40:25.714164 2025] [:error] [pid 16468:tid 16534] [client 4.230.28.207:34650] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUsoaYdyfuSTFLkCbP_fTAAAAIo"]
[Wed Dec 24 07:40:28.783440 2025] [:error] [pid 16466:tid 16485] [client 4.230.28.207:34644] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUsobLu0JcuKJMjJn6yDcwAAAA8"]
[Wed Dec 24 07:40:29.679571 2025] [:error] [pid 16467:tid 16499] [client 4.230.28.207:34656] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUsobY0TJMcBxX5slgqdgQAAAEI"]
[Wed Dec 24 07:40:30.722515 2025] [:error] [pid 16466:tid 16487] [client 4.230.28.207:34653] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aUsobru0JcuKJMjJn6yDeQAAABE"]
[Wed Dec 24 07:40:31.949448 2025] [:error] [pid 16550:tid 16576] [client 4.230.28.207:34673] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aw.php"] [unique_id "aUsob6YYcdD-LuO7vrAaeQAAANg"]
[Wed Dec 24 07:40:33.057563 2025] [:error] [pid 16468:tid 16533] [client 4.230.28.207:34669] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aw.php"] [unique_id "aUsocYdyfuSTFLkCbP_fVgAAAIk"]
[Wed Dec 24 07:40:34.088155 2025] [:error] [pid 54139:tid 54158] [client 4.230.28.207:34630] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aw.php"] [unique_id "aUsocsrYCZenIDzgXuKhmgAAARE"]
[Wed Dec 24 07:40:46.772556 2025] [:error] [pid 16466:tid 16475] [client 4.230.28.207:34596] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sfvul.php"] [unique_id "aUsofru0JcuKJMjJn6yDiwAAAAU"]
[Wed Dec 24 07:40:53.488287 2025] [proxy_fcgi:error] [pid 54139:tid 54152] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:53.632564 2025] [proxy_fcgi:error] [pid 54139:tid 54145] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:54.075820 2025] [proxy_fcgi:error] [pid 54139:tid 54154] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:54.363686 2025] [proxy_fcgi:error] [pid 54139:tid 54141] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:54.509250 2025] [proxy_fcgi:error] [pid 54139:tid 54163] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:54.652935 2025] [proxy_fcgi:error] [pid 54139:tid 54160] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:55.029201 2025] [proxy_fcgi:error] [pid 54139:tid 54149] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:55.200731 2025] [proxy_fcgi:error] [pid 54139:tid 54148] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:55.438410 2025] [proxy_fcgi:error] [pid 54139:tid 54153] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:55.579561 2025] [proxy_fcgi:error] [pid 54139:tid 54142] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:55.744126 2025] [proxy_fcgi:error] [pid 54139:tid 54147] [client 4.230.28.207:34570] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:40:55.882267 2025] [:error] [pid 54139:tid 54159] [client 4.230.28.207:34570] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUsoh8rYCZenIDzgXuKhyQAAARI"]
[Wed Dec 24 07:40:56.986491 2025] [:error] [pid 16467:tid 16504] [client 4.230.28.207:34597] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aUsoiI0TJMcBxX5slgqdpwAAAEc"]
[Wed Dec 24 07:41:13.686206 2025] [:error] [pid 16467:tid 16520] [client 4.230.28.207:34590] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUsomY0TJMcBxX5slgqdwQAAAFc"]
[Wed Dec 24 07:41:14.971907 2025] [:error] [pid 16466:tid 16484] [client 4.230.28.207:34512] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUsomru0JcuKJMjJn6yDogAAAA4"]
[Wed Dec 24 07:41:16.860734 2025] [:error] [pid 54139:tid 54142] [client 4.230.28.207:34616] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUsonMrYCZenIDzgXuKh5gAAAQE"]
[Wed Dec 24 07:41:17.569075 2025] [:error] [pid 16550:tid 16569] [client 4.230.28.207:34671] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aUsonaYYcdD-LuO7vrAasQAAANE"]
[Wed Dec 24 07:41:19.796526 2025] [:error] [pid 54139:tid 54164] [client 4.230.28.207:34598] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aUson8rYCZenIDzgXuKh9QAAARc"]
[Wed Dec 24 07:41:32.876598 2025] [:error] [pid 54139:tid 54163] [client 4.230.28.207:34683] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aUsorMrYCZenIDzgXuKiBQAAARY"]
[Wed Dec 24 07:41:34.404485 2025] [:error] [pid 16466:tid 16471] [client 4.230.28.207:34519] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx.php"] [unique_id "aUsorru0JcuKJMjJn6yDtgAAAAE"]
[Wed Dec 24 07:41:41.260123 2025] [:error] [pid 16467:tid 16521] [client 4.230.28.207:34498] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx.php"] [unique_id "aUsotY0TJMcBxX5slgqd5wAAAFg"]
[Wed Dec 24 07:41:44.816373 2025] [:error] [pid 16467:tid 16502] [client 4.230.28.207:34674] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx.php"] [unique_id "aUsouI0TJMcBxX5slgqd7QAAAEU"]
[Wed Dec 24 07:41:47.112928 2025] [:error] [pid 16467:tid 16505] [client 4.230.28.207:34651] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nx.php"] [unique_id "aUsou40TJMcBxX5slgqd8AAAAEg"]
[Wed Dec 24 07:41:49.279359 2025] [:error] [pid 16550:tid 16559] [client 4.230.28.207:34614] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aUsovaYYcdD-LuO7vrAa0gAAAMc"]
[Wed Dec 24 07:41:54.558539 2025] [:error] [pid 54139:tid 54165] [client 4.230.28.207:34586] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aUsowsrYCZenIDzgXuKiOwAAARg"]
[Wed Dec 24 07:41:55.560323 2025] [proxy_fcgi:error] [pid 16468:tid 16529] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:55.715899 2025] [proxy_fcgi:error] [pid 16468:tid 16535] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:55.857281 2025] [proxy_fcgi:error] [pid 16468:tid 16545] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:55.999176 2025] [proxy_fcgi:error] [pid 16468:tid 16536] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:56.142220 2025] [proxy_fcgi:error] [pid 16468:tid 16537] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:56.497603 2025] [proxy_fcgi:error] [pid 16468:tid 16548] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:56.669033 2025] [proxy_fcgi:error] [pid 16468:tid 16534] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:57.113636 2025] [proxy_fcgi:error] [pid 16468:tid 16530] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:57.283387 2025] [proxy_fcgi:error] [pid 16468:tid 16538] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:57.948372 2025] [proxy_fcgi:error] [pid 16468:tid 16539] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:58.139821 2025] [proxy_fcgi:error] [pid 16468:tid 16528] [client 4.230.28.207:34573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:41:58.277620 2025] [:error] [pid 16468:tid 16544] [client 4.230.28.207:34573] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yca.php"] [unique_id "aUsoxodyfuSTFLkCbP_f4gAAAJQ"]
[Wed Dec 24 07:42:00.692660 2025] [:error] [pid 16468:tid 16525] [client 4.230.28.207:34636] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yca.php"] [unique_id "aUsoyIdyfuSTFLkCbP_f5QAAAIE"]
[Wed Dec 24 07:42:01.896235 2025] [:error] [pid 54139:tid 54147] [client 4.230.28.207:34535] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yca.php"] [unique_id "aUsoycrYCZenIDzgXuKiQwAAAQY"]
[Wed Dec 24 07:42:03.088394 2025] [:error] [pid 54139:tid 54155] [client 4.230.28.207:34619] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yca.php"] [unique_id "aUsoy8rYCZenIDzgXuKiSAAAAQ4"]
[Wed Dec 24 07:42:06.302528 2025] [:error] [pid 16468:tid 16534] [client 4.230.28.207:34670] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUsozodyfuSTFLkCbP_f6wAAAIo"]
[Wed Dec 24 07:42:07.426136 2025] [:error] [pid 16550:tid 16564] [client 4.230.28.207:34581] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUsoz6YYcdD-LuO7vrAa5gAAAMw"]
[Wed Dec 24 07:42:13.313145 2025] [:error] [pid 16550:tid 16563] [client 4.230.28.207:34660] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUso1aYYcdD-LuO7vrAa6gAAAMs"]
[Wed Dec 24 07:42:16.576789 2025] [:error] [pid 54139:tid 54158] [client 4.230.28.207:34649] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aUso2MrYCZenIDzgXuKiVwAAARE"]
[Wed Dec 24 07:42:20.280947 2025] [:error] [pid 16550:tid 16558] [client 4.230.28.207:34560] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aUso3KYYcdD-LuO7vrAa_gAAAMY"]
[Wed Dec 24 07:42:22.695800 2025] [:error] [pid 16467:tid 16503] [client 4.230.28.207:34592] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aUso3o0TJMcBxX5slgqeDgAAAEY"]
[Wed Dec 24 07:42:30.235255 2025] [:error] [pid 16466:tid 16487] [client 4.230.28.207:34602] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aUso5ru0JcuKJMjJn6yD5QAAABE"]
[Wed Dec 24 07:42:33.089876 2025] [:error] [pid 16550:tid 16555] [client 4.230.28.207:34601] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUso6aYYcdD-LuO7vrAbBAAAAMM"]
[Wed Dec 24 07:42:35.312819 2025] [:error] [pid 16550:tid 16568] [client 4.230.28.207:34631] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUso66YYcdD-LuO7vrAbBgAAANA"]
[Wed Dec 24 07:42:43.388679 2025] [:error] [pid 16466:tid 16484] [client 4.230.28.207:34568] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUso87u0JcuKJMjJn6yD9AAAAA4"]
[Wed Dec 24 07:42:46.304639 2025] [:error] [pid 16550:tid 16559] [client 4.230.28.207:34571] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aUso9qYYcdD-LuO7vrAbEgAAAMc"]
[Wed Dec 24 07:42:47.732930 2025] [:error] [pid 16550:tid 16556] [client 4.230.28.207:34679] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/j.php"] [unique_id "aUso96YYcdD-LuO7vrAbEwAAAMQ"]
[Wed Dec 24 07:42:48.424270 2025] [:error] [pid 16550:tid 16554] [client 4.230.28.207:34526] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/j.php"] [unique_id "aUso-KYYcdD-LuO7vrAbFgAAAMI"]
[Wed Dec 24 07:42:48.879564 2025] [:error] [pid 16550:tid 16566] [client 4.230.28.207:34563] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/j.php"] [unique_id "aUso-KYYcdD-LuO7vrAbGAAAAM4"]
[Wed Dec 24 07:42:52.750387 2025] [:error] [pid 16466:tid 16485] [client 4.230.28.207:34678] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/j.php"] [unique_id "aUso_Lu0JcuKJMjJn6yEBQAAAA8"]
[Wed Dec 24 07:43:01.232830 2025] [proxy_fcgi:error] [pid 16468:tid 16529] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:01.375444 2025] [proxy_fcgi:error] [pid 16468:tid 16546] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:01.525827 2025] [proxy_fcgi:error] [pid 16468:tid 16536] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:01.683048 2025] [proxy_fcgi:error] [pid 16468:tid 16525] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:01.825119 2025] [proxy_fcgi:error] [pid 16468:tid 16542] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:01.972937 2025] [proxy_fcgi:error] [pid 16468:tid 16526] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:02.236349 2025] [proxy_fcgi:error] [pid 16468:tid 16527] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:02.394635 2025] [proxy_fcgi:error] [pid 16468:tid 16544] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:02.672657 2025] [proxy_fcgi:error] [pid 16468:tid 16524] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:02.824267 2025] [proxy_fcgi:error] [pid 16468:tid 16538] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:03.089301 2025] [proxy_fcgi:error] [pid 16468:tid 16535] [client 4.230.28.207:34574] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:43:03.411114 2025] [:error] [pid 16468:tid 16531] [client 4.230.28.207:34574] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsa.php"] [unique_id "aUspB4dyfuSTFLkCbP_gRAAAAIc"]
[Wed Dec 24 07:43:04.425649 2025] [:error] [pid 16467:tid 16504] [client 4.230.28.207:34667] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsa.php"] [unique_id "aUspCI0TJMcBxX5slgqeLgAAAEc"]
[Wed Dec 24 07:43:07.633597 2025] [:error] [pid 54139:tid 54148] [client 4.230.28.207:34643] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsa.php"] [unique_id "aUspC8rYCZenIDzgXuKirAAAAQc"]
[Wed Dec 24 07:43:15.306430 2025] [:error] [pid 16550:tid 16576] [client 4.230.28.207:34580] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsa.php"] [unique_id "aUspE6YYcdD-LuO7vrAbRwAAANg"]
[Wed Dec 24 07:43:19.763352 2025] [:error] [pid 16550:tid 16558] [client 4.230.28.207:34627] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wolv.php"] [unique_id "aUspF6YYcdD-LuO7vrAbTgAAAMY"]
[Wed Dec 24 07:43:20.624828 2025] [:error] [pid 16466:tid 16479] [client 4.230.28.207:34685] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wolv.php"] [unique_id "aUspGLu0JcuKJMjJn6yEKgAAAAk"]
[Wed Dec 24 07:43:41.825107 2025] [:error] [pid 16466:tid 16473] [client 4.230.28.207:34569] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ea3f.php"] [unique_id "aUspLbu0JcuKJMjJn6yEOwAAAAM"]
[Wed Dec 24 07:43:44.382886 2025] [:error] [pid 16467:tid 16512] [client 4.230.28.207:34637] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ea3f.php"] [unique_id "aUspMI0TJMcBxX5slgqeTQAAAE8"]
[Wed Dec 24 07:43:46.051309 2025] [:error] [pid 16466:tid 16471] [client 4.230.28.207:34500] [client 4.230.28.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ea3f.php"] [unique_id "aUspMru0JcuKJMjJn6yEPQAAAAE"]
[Wed Dec 24 07:44:04.788322 2025] [proxy_fcgi:error] [pid 16468:tid 16538] [client 4.230.28.207:34523] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 08:13:00.968510 2025] [autoindex:error] [pid 54139:tid 54159] [client 54.87.198.205:38206] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 08:13:02.526846 2025] [autoindex:error] [pid 16550:tid 16556] [client 89.35.89.4:59716] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 08:13:03.730974 2025] [autoindex:error] [pid 54139:tid 54153] [client 135.180.69.18:34567] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 13:02:14.254163 2025] [:error] [pid 16550:tid 16571] [client 125.94.144.102:40738] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUtz1qYYcdD-LuO7vrCnWwAAANM"]
[Wed Dec 24 14:12:01.772426 2025] [autoindex:error] [pid 28777:tid 28797] [client 66.249.64.7:38289] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:44:51.487381 2025] [autoindex:error] [pid 54139:tid 54141] [client 98.93.129.154:39984] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:06.900697 2025] [autoindex:error] [pid 54139:tid 54163] [client 37.19.210.75:27234] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:09.058220 2025] [autoindex:error] [pid 28405:tid 28421] [client 207.182.27.9:15991] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:10.301340 2025] [autoindex:error] [pid 16550:tid 16563] [client 37.19.210.75:32495] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:11.461520 2025] [autoindex:error] [pid 16550:tid 16560] [client 168.245.206.22:7585] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:13.351902 2025] [autoindex:error] [pid 29371:tid 29379] [client 37.19.210.75:49440] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:15.214947 2025] [autoindex:error] [pid 29371:tid 29381] [client 168.245.206.22:27229] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:15.831607 2025] [autoindex:error] [pid 16550:tid 16572] [client 37.19.210.75:4187] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 14:50:16.929473 2025] [autoindex:error] [pid 29371:tid 29386] [client 207.182.25.49:38683] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 17:11:58.574498 2025] [autoindex:error] [pid 28777:tid 28801] [client 54.175.111.155:55318] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 17:11:58.983362 2025] [autoindex:error] [pid 16468:tid 16526] [client 54.175.111.155:48066] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 17:19:15.369827 2025] [autoindex:error] [pid 29371:tid 29373] [client 52.221.215.96:39836] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 20:19:15.173944 2025] [autoindex:error] [pid 28405:tid 28415] [client 34.73.43.131:56455] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 20:19:15.393160 2025] [autoindex:error] [pid 28405:tid 28411] [client 34.73.43.131:56455] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 20:19:15.845716 2025] [:error] [pid 28405:tid 28410] [client 34.73.43.131:56455] [client 34.73.43.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.43.131, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvaQ8KkTWlhmfdXFqaQGAAAAUE"]
[Wed Dec 24 20:19:15.848463 2025] [proxy_fcgi:error] [pid 28405:tid 28410] [client 34.73.43.131:56455] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 20:19:16.061361 2025] [autoindex:error] [pid 28405:tid 28419] [client 34.73.43.131:56455] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 20:19:16.970642 2025] [:error] [pid 28405:tid 28434] [client 34.73.43.131:56455] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aUvaRMKkTWlhmfdXFqaQIwAAAVg"]
[Wed Dec 24 20:19:17.420104 2025] [:error] [pid 16468:tid 16537] [client 34.73.43.131:52237] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aUvaRYdyfuSTFLkCbP-aeAAAAI0"]
[Wed Dec 24 20:19:17.891740 2025] [:error] [pid 16467:tid 16497] [client 34.73.43.131:50290] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aUvaRY0TJMcBxX5slgpUjQAAAEA"]
[Wed Dec 24 20:19:18.339446 2025] [:error] [pid 28405:tid 28420] [client 34.73.43.131:63980] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aUvaRsKkTWlhmfdXFqaQJQAAAUo"]
[Wed Dec 24 20:19:18.842813 2025] [:error] [pid 28777:tid 28803] [client 34.73.43.131:65093] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aUvaRpBVBcZ34cSqz8pA8QAAAZg"]
[Wed Dec 24 20:19:19.320612 2025] [:error] [pid 16466:tid 16492] [client 34.73.43.131:55006] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aUvaR7u0JcuKJMjJn6xIRwAAABY"]
[Wed Dec 24 20:19:19.777938 2025] [:error] [pid 16466:tid 16487] [client 34.73.43.131:63830] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUvaR7u0JcuKJMjJn6xISQAAABE"]
[Wed Dec 24 20:19:20.271004 2025] [:error] [pid 28777:tid 28780] [client 34.73.43.131:55069] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUvaSJBVBcZ34cSqz8pA8gAAAYE"]
[Wed Dec 24 20:19:20.721438 2025] [:error] [pid 54139:tid 54156] [client 34.73.43.131:59160] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aUvaSMrYCZenIDzgXuKtWwAAAQ8"]
[Wed Dec 24 20:19:21.189475 2025] [:error] [pid 16550:tid 16565] [client 34.73.43.131:54226] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUvaSaYYcdD-LuO7vrAKPgAAAM0"]
[Wed Dec 24 20:19:21.642853 2025] [:error] [pid 28777:tid 28794] [client 34.73.43.131:55278] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUvaSZBVBcZ34cSqz8pA9QAAAY8"]
[Wed Dec 24 20:19:22.104682 2025] [:error] [pid 16468:tid 16534] [client 34.73.43.131:53212] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUvaSodyfuSTFLkCbP-afQAAAIo"]
[Wed Dec 24 20:19:22.571206 2025] [:error] [pid 16468:tid 16532] [client 34.73.43.131:50212] [client 34.73.43.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUvaSodyfuSTFLkCbP-afgAAAIg"]
[Wed Dec 24 20:34:52.016856 2025] [autoindex:error] [pid 28405:tid 28423] [client 74.7.227.129:50900] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 20:38:34.691850 2025] [autoindex:error] [pid 54139:tid 54162] [client 34.230.129.147:59289] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Wed Dec 24 20:38:35.611036 2025] [autoindex:error] [pid 16466:tid 16491] [client 34.230.129.147:23199] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Wed Dec 24 20:38:36.734205 2025] [autoindex:error] [pid 54139:tid 54159] [client 34.230.129.147:62120] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Thu Dec 25 02:12:18.514020 2025] [:error] [pid 38703:tid 38721] [client 170.106.107.87:32950] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUwtAvmvKu9DsbfjDPguBAAAAM8"]
[Thu Dec 25 02:17:33.392257 2025] [:error] [pid 16659:tid 16710] [client 182.42.110.255:43105] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUwuPS2KqR0Lr_kutLvNQgAAAUM"]
[Thu Dec 25 04:22:55.678648 2025] [autoindex:error] [pid 31570:tid 31614] [client 20.89.218.14:13975] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 04:22:55.685249 2025] [proxy_fcgi:error] [pid 31655:tid 31669] [client 20.89.218.14:13651] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Dec 25 04:22:55.883448 2025] [proxy_fcgi:error] [pid 31655:tid 31677] [client 20.89.218.14:13651] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Dec 25 04:22:56.898215 2025] [proxy_fcgi:error] [pid 31570:tid 31621] [client 20.89.218.14:13636] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Dec 25 04:22:57.058995 2025] [proxy_fcgi:error] [pid 31570:tid 31620] [client 20.89.218.14:13636] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Dec 25 05:09:01.674083 2025] [autoindex:error] [pid 31570:tid 31617] [client 161.118.209.86:61707] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 05:09:02.055413 2025] [:error] [pid 2996:tid 3018] [client 161.118.209.86:58705] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUxWbqrrTp0EWNyhaIQ3nwAAARQ"]
[Thu Dec 25 05:09:02.442487 2025] [:error] [pid 31655:tid 31659] [client 161.118.209.86:58491] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aUxWbpozPMk9HPtIJPPePwAAAMI"]
[Thu Dec 25 05:09:02.443023 2025] [:error] [pid 31569:tid 31580] [client 161.118.209.86:58519] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/prevlaravel/sftp-config.json"] [unique_id "aUxWbmiSFBH7Ee_uldXQcgAAAAc"]
[Thu Dec 25 05:09:02.801309 2025] [:error] [pid 31571:tid 31651] [client 161.118.209.86:59873] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/prevlaravel/sftp-config.json"] [unique_id "aUxWbu7e_lLK2X5wU8nt4AAAAJg"]
[Thu Dec 25 05:09:02.801920 2025] [:error] [pid 31571:tid 31637] [client 161.118.209.86:59869] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aUxWbu7e_lLK2X5wU8nt4QAAAIo"]
[Thu Dec 25 05:09:02.804413 2025] [:error] [pid 31569:tid 31588] [client 161.118.209.86:53004] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aUxWbmiSFBH7Ee_uldXQdAAAAA8"]
[Thu Dec 25 05:09:02.804875 2025] [:error] [pid 31569:tid 31593] [client 161.118.209.86:52948] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sftp.json"] [unique_id "aUxWbmiSFBH7Ee_uldXQdQAAABQ"]
[Thu Dec 25 05:25:37.811645 2025] [:error] [pid 31571:tid 31645] [client 100.42.185.115:35160] [client 100.42.185.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUxaUe7e_lLK2X5wU8nytwAAAJI"]
[Thu Dec 25 05:25:42.398986 2025] [autoindex:error] [pid 31569:tid 31589] [client 149.154.161.246:52100] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 05:45:13.071245 2025] [autoindex:error] [pid 31570:tid 31619] [client 151.242.49.70:56009] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 05:45:53.358933 2025] [autoindex:error] [pid 31655:tid 31664] [client 37.202.206.15:33831] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 06:29:09.978357 2025] [autoindex:error] [pid 31655:tid 31675] [client 100.42.185.115:53074] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 09:18:53.856915 2025] [autoindex:error] [pid 2996:tid 3013] [client 44.244.170.58:34452] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 09:54:21.255425 2025] [:error] [pid 31570:tid 31605] [client 43.159.128.247:56906] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aUyZTWPy2DpAzW_4a2jPnwAAAEU"]
[Thu Dec 25 13:51:36.833351 2025] [autoindex:error] [pid 31570:tid 31610] [client 178.159.37.16:54523] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 14:34:08.379569 2025] [:error] [pid 2996:tid 3015] [client 175.6.217.4:54643] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aUza4KrrTp0EWNyhaITs9QAAARE"]
[Thu Dec 25 17:50:31.652352 2025] [autoindex:error] [pid 31569:tid 31574] [client 45.156.128.149:38001] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 17:51:49.629929 2025] [autoindex:error] [pid 2996:tid 3016] [client 45.156.128.151:42573] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 18:11:41.830936 2025] [autoindex:error] [pid 2996:tid 3015] [client 192.36.109.128:57685] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 18:32:30.868248 2025] [autoindex:error] [pid 31569:tid 31575] [client 44.249.194.211:58160] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 21:54:26.150605 2025] [:error] [pid 22131:tid 22153] [client 43.128.156.124:39956] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aU1CEpvVMtSTB4lX2fYv_wAAAFI"]
[Thu Dec 25 22:38:48.620061 2025] [autoindex:error] [pid 22043:tid 22052] [client 34.96.49.187:17534] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:38:50.665737 2025] [autoindex:error] [pid 22045:tid 22117] [client 203.40.116.201:46266] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:38:52.554589 2025] [autoindex:error] [pid 22044:tid 22092] [client 34.96.49.187:50911] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:38:55.606813 2025] [autoindex:error] [pid 22043:tid 22067] [client 5.151.150.170:52525] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:39:52.138323 2025] [autoindex:error] [pid 22131:tid 22149] [client 13.210.139.144:33860] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:39:54.223560 2025] [autoindex:error] [pid 27869:tid 27873] [client 13.210.139.144:33876] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:43:19.396146 2025] [autoindex:error] [pid 22044:tid 22097] [client 44.211.85.242:52664] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:43:20.671796 2025] [autoindex:error] [pid 27869:tid 27887] [client 82.39.112.118:47899] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:43:22.466199 2025] [autoindex:error] [pid 22043:tid 22067] [client 149.143.129.253:55767] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:43:23.935233 2025] [autoindex:error] [pid 22043:tid 22064] [client 151.145.179.44:56813] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:43:24.155277 2025] [autoindex:error] [pid 27869:tid 27885] [client 66.249.64.14:65348] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 22:43:24.287489 2025] [autoindex:error] [pid 27869:tid 27888] [client 66.249.64.14:62960] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 23:42:04.021151 2025] [proxy_fcgi:error] [pid 27869:tid 27892] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:04.112260 2025] [proxy_fcgi:error] [pid 27869:tid 27873] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:04.207415 2025] [proxy_fcgi:error] [pid 27869:tid 27883] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:04.307811 2025] [proxy_fcgi:error] [pid 27869:tid 27885] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:04.923616 2025] [proxy_fcgi:error] [pid 27869:tid 27882] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:05.012190 2025] [proxy_fcgi:error] [pid 27869:tid 27884] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:05.107133 2025] [proxy_fcgi:error] [pid 27869:tid 27894] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:05.202663 2025] [proxy_fcgi:error] [pid 27869:tid 27892] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:05.298160 2025] [proxy_fcgi:error] [pid 27869:tid 27876] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:05.392327 2025] [proxy_fcgi:error] [pid 27869:tid 27889] [client 4.194.81.228:18357] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:42:05.479797 2025] [:error] [pid 27869:tid 27877] [client 4.194.81.228:18357] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dng.php"] [unique_id "aU1bTRNK7_n86kBD7qcFBwAAAIY"]
[Thu Dec 25 23:42:06.690502 2025] [:error] [pid 22043:tid 22062] [client 4.194.81.228:36320] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dng.php"] [unique_id "aU1bTj4YVtlb2Iz_QE5s7wAAAA4"]
[Thu Dec 25 23:42:07.701136 2025] [:error] [pid 22043:tid 22053] [client 4.194.81.228:36388] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dng.php"] [unique_id "aU1bTz4YVtlb2Iz_QE5s9gAAAAU"]
[Thu Dec 25 23:42:09.003980 2025] [:error] [pid 22044:tid 22084] [client 4.194.81.228:15222] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dng.php"] [unique_id "aU1bUXPTC5rQKTB0FQ_BRgAAAMk"]
[Thu Dec 25 23:42:10.051176 2025] [:error] [pid 22044:tid 22079] [client 4.194.81.228:14466] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh1.php"] [unique_id "aU1bUnPTC5rQKTB0FQ_BTQAAAMQ"]
[Thu Dec 25 23:42:11.616593 2025] [:error] [pid 22043:tid 22071] [client 4.194.81.228:16657] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh1.php"] [unique_id "aU1bUz4YVtlb2Iz_QE5tCAAAABc"]
[Thu Dec 25 23:42:15.025439 2025] [:error] [pid 27869:tid 27880] [client 4.194.81.228:20496] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh1.php"] [unique_id "aU1bVxNK7_n86kBD7qcFRAAAAIk"]
[Thu Dec 25 23:42:16.697410 2025] [:error] [pid 22044:tid 22098] [client 4.194.81.228:15182] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh1.php"] [unique_id "aU1bWHPTC5rQKTB0FQ_BdAAAANc"]
[Thu Dec 25 23:42:19.175854 2025] [:error] [pid 22044:tid 22095] [client 4.194.81.228:18145] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w3llstore.php"] [unique_id "aU1bW3PTC5rQKTB0FQ_BggAAANQ"]
[Thu Dec 25 23:42:21.199955 2025] [:error] [pid 22043:tid 22066] [client 4.194.81.228:16642] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w3llstore.php"] [unique_id "aU1bXT4YVtlb2Iz_QE5tHQAAABI"]
[Thu Dec 25 23:42:22.944352 2025] [:error] [pid 22043:tid 22060] [client 4.194.81.228:14476] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w3llstore.php"] [unique_id "aU1bXj4YVtlb2Iz_QE5tHwAAAAw"]
[Thu Dec 25 23:42:24.358858 2025] [:error] [pid 22043:tid 22071] [client 4.194.81.228:22787] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w3llstore.php"] [unique_id "aU1bYD4YVtlb2Iz_QE5tIQAAABc"]
[Thu Dec 25 23:42:26.624274 2025] [:error] [pid 22044:tid 22098] [client 4.194.81.228:18327] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s12.php"] [unique_id "aU1bYnPTC5rQKTB0FQ_BkAAAANc"]
[Thu Dec 25 23:42:27.638781 2025] [:error] [pid 22131:tid 22155] [client 4.194.81.228:22795] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s12.php"] [unique_id "aU1bY5vVMtSTB4lX2fZRZAAAAFM"]
[Thu Dec 25 23:42:29.506205 2025] [:error] [pid 22044:tid 22090] [client 4.194.81.228:16700] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s12.php"] [unique_id "aU1bZXPTC5rQKTB0FQ_BmgAAAM8"]
[Thu Dec 25 23:42:30.720254 2025] [:error] [pid 27869:tid 27888] [client 4.194.81.228:36360] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s12.php"] [unique_id "aU1bZhNK7_n86kBD7qcFaQAAAJE"]
[Thu Dec 25 23:42:31.664417 2025] [:error] [pid 22044:tid 22078] [client 4.194.81.228:36393] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1bZ3PTC5rQKTB0FQ_BnwAAAMM"]
[Thu Dec 25 23:42:33.942642 2025] [:error] [pid 22131:tid 22144] [client 4.194.81.228:18325] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1baZvVMtSTB4lX2fZRbgAAAEo"]
[Thu Dec 25 23:42:35.078857 2025] [:error] [pid 22131:tid 22151] [client 4.194.81.228:16699] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1ba5vVMtSTB4lX2fZRcAAAAFA"]
[Thu Dec 25 23:42:37.627049 2025] [:error] [pid 22045:tid 22109] [client 4.194.81.228:15168] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1bbasGGmXjDnvlmHuI3AAAAUc"]
[Thu Dec 25 23:42:39.420441 2025] [:error] [pid 27869:tid 27875] [client 4.194.81.228:14498] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ol.php"] [unique_id "aU1bbxNK7_n86kBD7qcFggAAAIQ"]
[Thu Dec 25 23:42:42.001905 2025] [:error] [pid 27869:tid 27893] [client 4.194.81.228:20233] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ol.php"] [unique_id "aU1bchNK7_n86kBD7qcFiAAAAJY"]
[Thu Dec 25 23:42:45.087447 2025] [:error] [pid 27869:tid 27887] [client 4.194.81.228:20263] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ol.php"] [unique_id "aU1bdRNK7_n86kBD7qcFjwAAAJA"]
[Thu Dec 25 23:42:47.526750 2025] [:error] [pid 22045:tid 22123] [client 4.194.81.228:18115] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ol.php"] [unique_id "aU1bd6sGGmXjDnvlmHuI7AAAAVU"]
[Thu Dec 25 23:42:48.354670 2025] [:error] [pid 22044:tid 22086] [client 4.194.81.228:15206] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/man.php"] [unique_id "aU1beHPTC5rQKTB0FQ_BvgAAAMs"]
[Thu Dec 25 23:42:49.359252 2025] [:error] [pid 27869:tid 27871] [client 4.194.81.228:16696] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/man.php"] [unique_id "aU1beRNK7_n86kBD7qcFlwAAAIA"]
[Thu Dec 25 23:42:49.781172 2025] [:error] [pid 22043:tid 22068] [client 4.194.81.228:36303] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/man.php"] [unique_id "aU1beT4YVtlb2Iz_QE5tQQAAABQ"]
[Thu Dec 25 23:42:50.667184 2025] [:error] [pid 27869:tid 27889] [client 4.194.81.228:15203] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/man.php"] [unique_id "aU1behNK7_n86kBD7qcFmwAAAJI"]
[Thu Dec 25 23:42:51.640203 2025] [:error] [pid 27869:tid 27890] [client 4.194.81.228:20262] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g7y.php"] [unique_id "aU1bexNK7_n86kBD7qcFnQAAAJM"]
[Thu Dec 25 23:42:52.062638 2025] [:error] [pid 22131:tid 22149] [client 4.194.81.228:15216] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g7y.php"] [unique_id "aU1bfJvVMtSTB4lX2fZRhgAAAE4"]
[Thu Dec 25 23:42:52.782658 2025] [:error] [pid 27869:tid 27873] [client 4.194.81.228:36309] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g7y.php"] [unique_id "aU1bfBNK7_n86kBD7qcFowAAAII"]
[Thu Dec 25 23:42:54.090994 2025] [:error] [pid 22044:tid 22076] [client 4.194.81.228:18134] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g7y.php"] [unique_id "aU1bfnPTC5rQKTB0FQ_BxwAAAME"]
[Thu Dec 25 23:42:54.894992 2025] [:error] [pid 22045:tid 22124] [client 4.194.81.228:20492] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ging.php"] [unique_id "aU1bfqsGGmXjDnvlmHuI9gAAAVY"]
[Thu Dec 25 23:42:57.041006 2025] [:error] [pid 27869:tid 27887] [client 4.194.81.228:20502] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ging.php"] [unique_id "aU1bgRNK7_n86kBD7qcFrwAAAJA"]
[Thu Dec 25 23:43:00.139197 2025] [:error] [pid 22044:tid 22083] [client 4.194.81.228:22806] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ging.php"] [unique_id "aU1bhHPTC5rQKTB0FQ_BzwAAAMg"]
[Thu Dec 25 23:43:01.294424 2025] [:error] [pid 27869:tid 27872] [client 4.194.81.228:28740] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ging.php"] [unique_id "aU1bhRNK7_n86kBD7qcFtwAAAIE"]
[Thu Dec 25 23:43:02.968330 2025] [:error] [pid 22044:tid 22079] [client 4.194.81.228:14490] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/veuntzdf.php"] [unique_id "aU1bhnPTC5rQKTB0FQ_B1gAAAMQ"]
[Thu Dec 25 23:43:05.249743 2025] [proxy_fcgi:error] [pid 22045:tid 22107] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.341558 2025] [proxy_fcgi:error] [pid 22045:tid 22122] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.432347 2025] [proxy_fcgi:error] [pid 22045:tid 22104] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.524001 2025] [proxy_fcgi:error] [pid 22045:tid 22111] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.635546 2025] [proxy_fcgi:error] [pid 22045:tid 22118] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.734346 2025] [proxy_fcgi:error] [pid 22045:tid 22105] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.831333 2025] [proxy_fcgi:error] [pid 22045:tid 22114] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:05.922539 2025] [proxy_fcgi:error] [pid 22045:tid 22120] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:06.015595 2025] [proxy_fcgi:error] [pid 22045:tid 22110] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:06.382675 2025] [proxy_fcgi:error] [pid 22045:tid 22106] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:06.473320 2025] [proxy_fcgi:error] [pid 22045:tid 22108] [client 4.194.81.228:36300] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:43:06.564459 2025] [:error] [pid 22045:tid 22126] [client 4.194.81.228:36300] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU1biqsGGmXjDnvlmHuJDgAAAVg"]
[Thu Dec 25 23:43:07.719595 2025] [:error] [pid 22044:tid 22079] [client 4.194.81.228:36290] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU1bi3PTC5rQKTB0FQ_B5AAAAMQ"]
[Thu Dec 25 23:43:09.031745 2025] [:error] [pid 22045:tid 22102] [client 4.194.81.228:15219] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU1bjasGGmXjDnvlmHuJGAAAAUA"]
[Thu Dec 25 23:43:10.766026 2025] [:error] [pid 22044:tid 22082] [client 4.194.81.228:16689] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU1bjnPTC5rQKTB0FQ_B7AAAAMc"]
[Thu Dec 25 23:43:13.298298 2025] [:error] [pid 22045:tid 22115] [client 4.194.81.228:20532] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-729.php"] [unique_id "aU1bkasGGmXjDnvlmHuJHQAAAU0"]
[Thu Dec 25 23:43:16.286695 2025] [:error] [pid 22043:tid 22049] [client 4.194.81.228:36403] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-729.php"] [unique_id "aU1blD4YVtlb2Iz_QE5tVgAAAAE"]
[Thu Dec 25 23:43:17.400795 2025] [:error] [pid 27869:tid 27894] [client 4.194.81.228:20500] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-729.php"] [unique_id "aU1blRNK7_n86kBD7qcF0gAAAJc"]
[Thu Dec 25 23:43:20.930414 2025] [:error] [pid 22043:tid 22056] [client 4.194.81.228:20266] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zc-729.php"] [unique_id "aU1bmD4YVtlb2Iz_QE5tYwAAAAg"]
[Thu Dec 25 23:43:22.065731 2025] [:error] [pid 27869:tid 27887] [client 4.194.81.228:15190] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aU1bmhNK7_n86kBD7qcF8gAAAJA"]
[Thu Dec 25 23:43:25.071090 2025] [:error] [pid 27869:tid 27884] [client 4.194.81.228:18358] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aU1bnRNK7_n86kBD7qcGBwAAAI0"]
[Thu Dec 25 23:43:27.059735 2025] [:error] [pid 22131:tid 22134] [client 4.194.81.228:20232] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aU1bn5vVMtSTB4lX2fZRrAAAAEE"]
[Thu Dec 25 23:43:28.376538 2025] [:error] [pid 22043:tid 22052] [client 4.194.81.228:18126] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aU1boD4YVtlb2Iz_QE5tcwAAAAQ"]
[Thu Dec 25 23:43:29.512746 2025] [:error] [pid 22043:tid 22060] [client 4.194.81.228:36288] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aU1boT4YVtlb2Iz_QE5tdgAAAAw"]
[Thu Dec 25 23:43:30.615610 2025] [:error] [pid 22043:tid 22067] [client 4.194.81.228:16693] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aU1boj4YVtlb2Iz_QE5teAAAABM"]
[Thu Dec 25 23:43:31.824260 2025] [:error] [pid 27869:tid 27895] [client 4.194.81.228:20284] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aU1boxNK7_n86kBD7qcGEwAAAJg"]
[Thu Dec 25 23:43:33.388722 2025] [:error] [pid 22043:tid 22064] [client 4.194.81.228:22795] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid3.php"] [unique_id "aU1bpT4YVtlb2Iz_QE5tfgAAABA"]
[Thu Dec 25 23:43:35.475574 2025] [:error] [pid 22045:tid 22122] [client 4.194.81.228:36361] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file30.php"] [unique_id "aU1bp6sGGmXjDnvlmHuJPQAAAVQ"]
[Thu Dec 25 23:43:38.424366 2025] [:error] [pid 22044:tid 22088] [client 4.194.81.228:20275] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file30.php"] [unique_id "aU1bqnPTC5rQKTB0FQ_CPAAAAM0"]
[Thu Dec 25 23:43:40.414389 2025] [:error] [pid 27869:tid 27873] [client 4.194.81.228:36329] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file30.php"] [unique_id "aU1brBNK7_n86kBD7qcGLQAAAII"]
[Thu Dec 25 23:43:42.666744 2025] [:error] [pid 22131:tid 22151] [client 4.194.81.228:22833] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file30.php"] [unique_id "aU1brpvVMtSTB4lX2fZRygAAAFA"]
[Thu Dec 25 23:43:43.506207 2025] [:error] [pid 22131:tid 22139] [client 4.194.81.228:18146] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/clss.php"] [unique_id "aU1br5vVMtSTB4lX2fZRzAAAAEU"]
[Thu Dec 25 23:43:45.339283 2025] [:error] [pid 22044:tid 22097] [client 4.194.81.228:22813] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/clss.php"] [unique_id "aU1bsXPTC5rQKTB0FQ_CVQAAANY"]
[Thu Dec 25 23:43:46.105475 2025] [:error] [pid 27869:tid 27872] [client 4.194.81.228:36354] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/clss.php"] [unique_id "aU1bshNK7_n86kBD7qcGTQAAAIE"]
[Thu Dec 25 23:43:47.428002 2025] [:error] [pid 22044:tid 22077] [client 4.194.81.228:16661] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/clss.php"] [unique_id "aU1bs3PTC5rQKTB0FQ_CWQAAAMI"]
[Thu Dec 25 23:43:49.499412 2025] [:error] [pid 22043:tid 22071] [client 4.194.81.228:24104] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aU1btT4YVtlb2Iz_QE5tkgAAABc"]
[Thu Dec 25 23:43:51.513918 2025] [:error] [pid 22045:tid 22112] [client 4.194.81.228:27871] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aU1bt6sGGmXjDnvlmHuJRgAAAUo"]
[Thu Dec 25 23:43:52.672155 2025] [:error] [pid 22043:tid 22059] [client 4.194.81.228:32309] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aU1buD4YVtlb2Iz_QE5tnAAAAAs"]
[Thu Dec 25 23:43:53.693656 2025] [:error] [pid 22131:tid 22145] [client 4.194.81.228:23206] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aU1buZvVMtSTB4lX2fZR7AAAAEs"]
[Thu Dec 25 23:43:55.013588 2025] [:error] [pid 22044:tid 22081] [client 4.194.81.228:55634] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1bu3PTC5rQKTB0FQ_CbwAAAMY"]
[Thu Dec 25 23:43:56.461419 2025] [:error] [pid 22044:tid 22086] [client 4.194.81.228:1946] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1bvHPTC5rQKTB0FQ_CdwAAAMs"]
[Thu Dec 25 23:43:58.717288 2025] [:error] [pid 27869:tid 27885] [client 4.194.81.228:14651] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1bvhNK7_n86kBD7qcGegAAAI4"]
[Thu Dec 25 23:44:00.853628 2025] [:error] [pid 22131:tid 22135] [client 4.194.81.228:32213] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1bwJvVMtSTB4lX2fZSBgAAAEI"]
[Thu Dec 25 23:44:01.392963 2025] [:error] [pid 22131:tid 22158] [client 4.194.81.228:44265] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aU1bwZvVMtSTB4lX2fZSCgAAAFY"]
[Thu Dec 25 23:44:04.349177 2025] [:error] [pid 22131:tid 22148] [client 4.194.81.228:31747] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aU1bxJvVMtSTB4lX2fZSDgAAAE0"]
[Thu Dec 25 23:44:06.809793 2025] [proxy_fcgi:error] [pid 22043:tid 22056] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:06.914946 2025] [proxy_fcgi:error] [pid 22043:tid 22052] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:07.022283 2025] [proxy_fcgi:error] [pid 22043:tid 22066] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:07.113004 2025] [proxy_fcgi:error] [pid 22043:tid 22049] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:08.533313 2025] [proxy_fcgi:error] [pid 22043:tid 22057] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:08.670838 2025] [proxy_fcgi:error] [pid 22043:tid 22062] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:08.761455 2025] [proxy_fcgi:error] [pid 22043:tid 22063] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:08.851730 2025] [proxy_fcgi:error] [pid 22043:tid 22067] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:08.944960 2025] [proxy_fcgi:error] [pid 22043:tid 22051] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:09.035012 2025] [proxy_fcgi:error] [pid 22043:tid 22069] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:09.140998 2025] [proxy_fcgi:error] [pid 22043:tid 22070] [client 4.194.81.228:19895] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:44:09.373565 2025] [:error] [pid 22043:tid 22056] [client 4.194.81.228:19895] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU1byT4YVtlb2Iz_QE5tuQAAAAg"]
[Thu Dec 25 23:44:12.257577 2025] [:error] [pid 22131:tid 22149] [client 4.194.81.228:11621] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU1bzJvVMtSTB4lX2fZSNwAAAE4"]
[Thu Dec 25 23:44:14.808197 2025] [:error] [pid 22131:tid 22156] [client 4.194.81.228:27328] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU1bzpvVMtSTB4lX2fZSRgAAAFQ"]
[Thu Dec 25 23:44:16.083823 2025] [:error] [pid 22043:tid 22059] [client 4.194.81.228:2004] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU1b0D4YVtlb2Iz_QE5t0wAAAAs"]
[Thu Dec 25 23:44:19.177712 2025] [:error] [pid 27869:tid 27880] [client 4.194.81.228:22852] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1b0xNK7_n86kBD7qcGqAAAAIk"]
[Thu Dec 25 23:44:21.037186 2025] [:error] [pid 27869:tid 27875] [client 4.194.81.228:19857] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1b1RNK7_n86kBD7qcGtAAAAIQ"]
[Thu Dec 25 23:44:23.439062 2025] [:error] [pid 22044:tid 22088] [client 4.194.81.228:22855] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1b13PTC5rQKTB0FQ_CsAAAAM0"]
[Thu Dec 25 23:44:25.885723 2025] [:error] [pid 27869:tid 27871] [client 4.194.81.228:25166] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1b2RNK7_n86kBD7qcGzwAAAIA"]
[Thu Dec 25 23:44:27.501880 2025] [:error] [pid 22044:tid 22084] [client 4.194.81.228:35510] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU1b23PTC5rQKTB0FQ_CwQAAAMk"]
[Thu Dec 25 23:44:32.664394 2025] [:error] [pid 22045:tid 22110] [client 4.194.81.228:14671] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU1b4KsGGmXjDnvlmHuJiAAAAUg"]
[Thu Dec 25 23:44:36.915562 2025] [:error] [pid 22044:tid 22094] [client 4.194.81.228:25185] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU1b5HPTC5rQKTB0FQ_C6AAAANM"]
[Thu Dec 25 23:44:39.030853 2025] [:error] [pid 22044:tid 22089] [client 4.194.81.228:18398] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU1b53PTC5rQKTB0FQ_C-AAAAM4"]
[Thu Dec 25 23:44:40.876769 2025] [:error] [pid 27869:tid 27892] [client 4.194.81.228:38378] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU1b6BNK7_n86kBD7qcHFAAAAJU"]
[Thu Dec 25 23:44:42.666705 2025] [:error] [pid 22043:tid 22048] [client 4.194.81.228:35484] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU1b6j4YVtlb2Iz_QE5uGQAAAAA"]
[Thu Dec 25 23:44:47.452147 2025] [:error] [pid 27869:tid 27873] [client 4.194.81.228:23291] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU1b7xNK7_n86kBD7qcHMwAAAII"]
[Thu Dec 25 23:44:49.264740 2025] [:error] [pid 27869:tid 27880] [client 4.194.81.228:28852] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU1b8RNK7_n86kBD7qcHOgAAAIk"]
[Thu Dec 25 23:44:50.511144 2025] [:error] [pid 22131:tid 22152] [client 4.194.81.228:21154] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aU1b8pvVMtSTB4lX2fZSlAAAAFE"]
[Thu Dec 25 23:44:51.223009 2025] [:error] [pid 27869:tid 27889] [client 4.194.81.228:11474] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aU1b8xNK7_n86kBD7qcHRQAAAJI"]
[Thu Dec 25 23:44:53.134426 2025] [:error] [pid 27869:tid 27881] [client 4.194.81.228:44820] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aU1b9RNK7_n86kBD7qcHTAAAAIo"]
[Thu Dec 25 23:44:54.420205 2025] [:error] [pid 27869:tid 27887] [client 4.194.81.228:25586] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kdgok.php"] [unique_id "aU1b9hNK7_n86kBD7qcHVAAAAJA"]
[Thu Dec 25 23:44:56.039579 2025] [:error] [pid 22044:tid 22095] [client 4.194.81.228:1916] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aU1b-HPTC5rQKTB0FQ_DFQAAANQ"]
[Thu Dec 25 23:44:57.828428 2025] [:error] [pid 22045:tid 22115] [client 4.194.81.228:23168] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aU1b-asGGmXjDnvlmHuJ6gAAAU0"]
[Thu Dec 25 23:44:59.882747 2025] [:error] [pid 22131:tid 22136] [client 4.194.81.228:33843] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aU1b-5vVMtSTB4lX2fZSqwAAAEM"]
[Thu Dec 25 23:45:02.222746 2025] [:error] [pid 27869:tid 27880] [client 4.194.81.228:33828] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aU1b_hNK7_n86kBD7qcHbgAAAIk"]
[Thu Dec 25 23:45:04.279932 2025] [:error] [pid 22043:tid 22066] [client 4.194.81.228:20221] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/okxh.php"] [unique_id "aU1cAD4YVtlb2Iz_QE5uSQAAABI"]
[Thu Dec 25 23:45:06.586043 2025] [:error] [pid 27869:tid 27874] [client 4.194.81.228:20168] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/okxh.php"] [unique_id "aU1cAhNK7_n86kBD7qcHdgAAAIM"]
[Thu Dec 25 23:45:10.525289 2025] [proxy_fcgi:error] [pid 22045:tid 22107] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:10.634850 2025] [proxy_fcgi:error] [pid 22045:tid 22114] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:10.750622 2025] [proxy_fcgi:error] [pid 22045:tid 22105] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:10.903358 2025] [proxy_fcgi:error] [pid 22045:tid 22110] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.036625 2025] [proxy_fcgi:error] [pid 22045:tid 22117] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.200454 2025] [proxy_fcgi:error] [pid 22045:tid 22112] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.333065 2025] [proxy_fcgi:error] [pid 22045:tid 22115] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.464291 2025] [proxy_fcgi:error] [pid 22045:tid 22119] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.592640 2025] [proxy_fcgi:error] [pid 22045:tid 22104] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.727905 2025] [proxy_fcgi:error] [pid 22045:tid 22116] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:11.871764 2025] [proxy_fcgi:error] [pid 22045:tid 22123] [client 4.194.81.228:55693] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:45:12.013100 2025] [:error] [pid 22045:tid 22121] [client 4.194.81.228:55693] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aU1cCKsGGmXjDnvlmHuKLAAAAVM"]
[Thu Dec 25 23:45:15.338537 2025] [:error] [pid 27869:tid 27878] [client 4.194.81.228:1578] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aU1cCxNK7_n86kBD7qcHogAAAIc"]
[Thu Dec 25 23:45:20.317189 2025] [:error] [pid 22043:tid 22050] [client 4.194.81.228:44740] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aU1cED4YVtlb2Iz_QE5ufgAAAAI"]
[Thu Dec 25 23:45:24.216805 2025] [:error] [pid 22045:tid 22103] [client 4.194.81.228:28247] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww3.php"] [unique_id "aU1cFKsGGmXjDnvlmHuKQwAAAUE"]
[Thu Dec 25 23:45:27.718161 2025] [:error] [pid 22045:tid 22112] [client 4.194.81.228:21386] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1cF6sGGmXjDnvlmHuKTAAAAUo"]
[Thu Dec 25 23:45:31.288894 2025] [:error] [pid 22043:tid 22072] [client 4.194.81.228:35428] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1cGz4YVtlb2Iz_QE5ujgAAABg"]
[Thu Dec 25 23:45:33.574109 2025] [:error] [pid 27869:tid 27874] [client 4.194.81.228:20448] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1cHRNK7_n86kBD7qcH4gAAAIM"]
[Thu Dec 25 23:45:35.351320 2025] [:error] [pid 22045:tid 22111] [client 4.194.81.228:20417] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1cH6sGGmXjDnvlmHuKaQAAAUk"]
[Thu Dec 25 23:45:37.933383 2025] [:error] [pid 22043:tid 22064] [client 4.194.81.228:32940] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aU1cIT4YVtlb2Iz_QE5ungAAABA"]
[Thu Dec 25 23:45:40.521173 2025] [:error] [pid 22045:tid 22114] [client 4.194.81.228:33466] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aU1cJKsGGmXjDnvlmHuKgAAAAUw"]
[Thu Dec 25 23:45:43.169317 2025] [:error] [pid 22045:tid 22104] [client 4.194.81.228:56326] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aU1cJ6sGGmXjDnvlmHuKiAAAAUI"]
[Thu Dec 25 23:45:46.246966 2025] [:error] [pid 27869:tid 27886] [client 4.194.81.228:20553] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-sid.php"] [unique_id "aU1cKhNK7_n86kBD7qcIIwAAAI8"]
[Thu Dec 25 23:45:47.938961 2025] [:error] [pid 22131:tid 22140] [client 4.194.81.228:27430] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aU1cK5vVMtSTB4lX2fZTQAAAAEY"]
[Thu Dec 25 23:45:51.173102 2025] [:error] [pid 27869:tid 27875] [client 4.194.81.228:11452] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aU1cLxNK7_n86kBD7qcIQgAAAIQ"]
[Thu Dec 25 23:45:52.370519 2025] [:error] [pid 22131:tid 22157] [client 4.194.81.228:1690] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aU1cMJvVMtSTB4lX2fZTUAAAAFU"]
[Thu Dec 25 23:45:53.727206 2025] [:error] [pid 22045:tid 22115] [client 4.194.81.228:23652] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-title.php"] [unique_id "aU1cMasGGmXjDnvlmHuKowAAAU0"]
[Thu Dec 25 23:45:55.337222 2025] [:error] [pid 22045:tid 22118] [client 4.194.81.228:21443] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aU1cM6sGGmXjDnvlmHuKpwAAAVA"]
[Thu Dec 25 23:46:01.146630 2025] [:error] [pid 27869:tid 27891] [client 4.194.81.228:20612] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aU1cORNK7_n86kBD7qcIYAAAAJQ"]
[Thu Dec 25 23:46:02.888406 2025] [:error] [pid 22131:tid 22136] [client 4.194.81.228:11434] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aU1cOpvVMtSTB4lX2fZTcgAAAEM"]
[Thu Dec 25 23:46:07.762120 2025] [:error] [pid 27869:tid 27885] [client 4.194.81.228:22479] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-home.php"] [unique_id "aU1cPxNK7_n86kBD7qcIcwAAAI4"]
[Thu Dec 25 23:46:17.044899 2025] [proxy_fcgi:error] [pid 22043:tid 22055] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:17.138809 2025] [proxy_fcgi:error] [pid 22043:tid 22061] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:17.239393 2025] [proxy_fcgi:error] [pid 22043:tid 22069] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:17.341933 2025] [proxy_fcgi:error] [pid 22043:tid 22058] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.296317 2025] [proxy_fcgi:error] [pid 22043:tid 22065] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.419481 2025] [proxy_fcgi:error] [pid 22043:tid 22066] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.541100 2025] [proxy_fcgi:error] [pid 22043:tid 22054] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.690445 2025] [proxy_fcgi:error] [pid 22043:tid 22053] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.784254 2025] [proxy_fcgi:error] [pid 22043:tid 22059] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.900405 2025] [proxy_fcgi:error] [pid 22043:tid 22057] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:19.991526 2025] [proxy_fcgi:error] [pid 22043:tid 22068] [client 4.194.81.228:20295] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:46:20.104078 2025] [:error] [pid 22043:tid 22062] [client 4.194.81.228:20295] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1cTD4YVtlb2Iz_QE5vDAAAAA4"]
[Thu Dec 25 23:46:23.230465 2025] [:error] [pid 27869:tid 27886] [client 4.194.81.228:11454] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1cTxNK7_n86kBD7qcIuQAAAI8"]
[Thu Dec 25 23:46:23.708290 2025] [:error] [pid 27869:tid 27875] [client 4.194.81.228:28320] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1cTxNK7_n86kBD7qcIuwAAAIQ"]
[Thu Dec 25 23:46:27.241074 2025] [:error] [pid 22131:tid 22134] [client 4.194.81.228:11410] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1cU5vVMtSTB4lX2fZTiwAAAEE"]
[Thu Dec 25 23:46:29.896625 2025] [:error] [pid 22045:tid 22106] [client 4.194.81.228:23645] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fc72f.php"] [unique_id "aU1cVasGGmXjDnvlmHuK3AAAAUQ"]
[Thu Dec 25 23:46:36.705967 2025] [:error] [pid 22045:tid 22105] [client 4.194.81.228:38445] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fc72f.php"] [unique_id "aU1cXKsGGmXjDnvlmHuK7gAAAUM"]
[Thu Dec 25 23:46:46.469444 2025] [:error] [pid 27869:tid 27886] [client 4.194.81.228:1699] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU1cZhNK7_n86kBD7qcI5wAAAI8"]
[Thu Dec 25 23:46:47.788149 2025] [:error] [pid 22045:tid 22115] [client 4.194.81.228:14946] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU1cZ6sGGmXjDnvlmHuK_wAAAU0"]
[Thu Dec 25 23:46:49.252813 2025] [:error] [pid 22045:tid 22112] [client 4.194.81.228:1252] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU1caasGGmXjDnvlmHuLAgAAAUo"]
[Thu Dec 25 23:46:51.246910 2025] [:error] [pid 22045:tid 22124] [client 4.194.81.228:28315] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU1ca6sGGmXjDnvlmHuLBQAAAVY"]
[Thu Dec 25 23:46:53.629830 2025] [:error] [pid 27869:tid 27884] [client 4.194.81.228:1678] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aU1cbRNK7_n86kBD7qcI-QAAAI0"]
[Thu Dec 25 23:46:56.575412 2025] [:error] [pid 22131:tid 22151] [client 4.194.81.228:38400] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aU1ccJvVMtSTB4lX2fZTygAAAFA"]
[Thu Dec 25 23:46:59.140626 2025] [:error] [pid 22044:tid 22093] [client 4.194.81.228:1713] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aU1cc3PTC5rQKTB0FQ_ErwAAANI"]
[Thu Dec 25 23:47:01.613215 2025] [:error] [pid 22044:tid 22077] [client 4.194.81.228:21486] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jjrpo.php"] [unique_id "aU1cdXPTC5rQKTB0FQ_EtgAAAMI"]
[Thu Dec 25 23:47:02.438527 2025] [:error] [pid 22043:tid 22070] [client 4.194.81.228:17387] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd.php"] [unique_id "aU1cdj4YVtlb2Iz_QE5vRgAAABY"]
[Thu Dec 25 23:47:03.629521 2025] [:error] [pid 22045:tid 22110] [client 4.194.81.228:21498] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd.php"] [unique_id "aU1cd6sGGmXjDnvlmHuLJAAAAUg"]
[Thu Dec 25 23:47:05.688813 2025] [:error] [pid 22131:tid 22135] [client 4.194.81.228:11448] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd.php"] [unique_id "aU1ceZvVMtSTB4lX2fZT0gAAAEI"]
[Thu Dec 25 23:47:07.144446 2025] [:error] [pid 22044:tid 22077] [client 4.194.81.228:1404] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asd.php"] [unique_id "aU1ce3PTC5rQKTB0FQ_ExAAAAMI"]
[Thu Dec 25 23:47:12.527781 2025] [:error] [pid 22043:tid 22051] [client 4.194.81.228:27432] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtt.php"] [unique_id "aU1cgD4YVtlb2Iz_QE5vVgAAAAM"]
[Thu Dec 25 23:47:15.808385 2025] [:error] [pid 22043:tid 22071] [client 4.194.81.228:32933] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtt.php"] [unique_id "aU1cgz4YVtlb2Iz_QE5vWwAAABc"]
[Thu Dec 25 23:47:20.388736 2025] [proxy_fcgi:error] [pid 22045:tid 22123] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:20.481802 2025] [proxy_fcgi:error] [pid 22045:tid 22116] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:20.583709 2025] [proxy_fcgi:error] [pid 22045:tid 22125] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:20.678136 2025] [proxy_fcgi:error] [pid 22045:tid 22109] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:20.769080 2025] [proxy_fcgi:error] [pid 22045:tid 22115] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:20.872249 2025] [proxy_fcgi:error] [pid 22045:tid 22105] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:20.964393 2025] [proxy_fcgi:error] [pid 22045:tid 22112] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:22.451676 2025] [proxy_fcgi:error] [pid 22045:tid 22126] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:22.568483 2025] [proxy_fcgi:error] [pid 22045:tid 22119] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:22.659144 2025] [proxy_fcgi:error] [pid 22045:tid 22118] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:22.782618 2025] [proxy_fcgi:error] [pid 22045:tid 22102] [client 4.194.81.228:44863] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:47:22.896104 2025] [:error] [pid 22045:tid 22124] [client 4.194.81.228:44863] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aU1ciqsGGmXjDnvlmHuLVAAAAVY"]
[Thu Dec 25 23:47:27.663922 2025] [:error] [pid 27869:tid 27877] [client 4.194.81.228:33797] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aU1cjxNK7_n86kBD7qcJSAAAAIY"]
[Thu Dec 25 23:47:32.111140 2025] [:error] [pid 22043:tid 22057] [client 4.194.81.228:20686] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aU1clD4YVtlb2Iz_QE5vdwAAAAk"]
[Thu Dec 25 23:47:34.568800 2025] [:error] [pid 27869:tid 27893] [client 4.194.81.228:44828] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/56c53.php"] [unique_id "aU1clhNK7_n86kBD7qcJVwAAAJY"]
[Thu Dec 25 23:47:36.807403 2025] [:error] [pid 27869:tid 27884] [client 4.194.81.228:20694] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aU1cmBNK7_n86kBD7qcJWAAAAI0"]
[Thu Dec 25 23:47:37.989942 2025] [:error] [pid 22044:tid 22081] [client 4.194.81.228:31687] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aU1cmXPTC5rQKTB0FQ_FFAAAAMY"]
[Thu Dec 25 23:47:40.029293 2025] [:error] [pid 22045:tid 22116] [client 4.194.81.228:11514] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aU1cnKsGGmXjDnvlmHuLbAAAAU4"]
[Thu Dec 25 23:47:42.077182 2025] [:error] [pid 22131:tid 22133] [client 4.194.81.228:11471] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ce.php"] [unique_id "aU1cnpvVMtSTB4lX2fZUBAAAAEA"]
[Thu Dec 25 23:47:44.457628 2025] [:error] [pid 22044:tid 22095] [client 4.194.81.228:33845] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aU1coHPTC5rQKTB0FQ_FJAAAANQ"]
[Thu Dec 25 23:47:47.220713 2025] [:error] [pid 27869:tid 27886] [client 4.194.81.228:23195] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aU1coxNK7_n86kBD7qcJbAAAAI8"]
[Thu Dec 25 23:47:49.465260 2025] [:error] [pid 22043:tid 22059] [client 4.194.81.228:11486] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aU1cpT4YVtlb2Iz_QE5vmAAAAAs"]
[Thu Dec 25 23:47:50.312645 2025] [:error] [pid 22131:tid 22153] [client 4.194.81.228:31711] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/domains.php"] [unique_id "aU1cppvVMtSTB4lX2fZUDwAAAFI"]
[Thu Dec 25 23:47:51.587648 2025] [:error] [pid 22131:tid 22155] [client 4.194.81.228:11477] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aU1cp5vVMtSTB4lX2fZUEgAAAFM"]
[Thu Dec 25 23:47:53.129867 2025] [:error] [pid 27869:tid 27888] [client 4.194.81.228:44857] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aU1cqRNK7_n86kBD7qcJfwAAAJE"]
[Thu Dec 25 23:47:54.787270 2025] [:error] [pid 27869:tid 27888] [client 4.194.81.228:24163] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aU1cqhNK7_n86kBD7qcJjgAAAJE"]
[Thu Dec 25 23:47:56.793648 2025] [:error] [pid 22131:tid 22159] [client 4.194.81.228:31701] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/55b76.php"] [unique_id "aU1crJvVMtSTB4lX2fZUHgAAAFc"]
[Thu Dec 25 23:47:58.666947 2025] [:error] [pid 27869:tid 27877] [client 4.194.81.228:23191] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aU1crhNK7_n86kBD7qcJoAAAAIY"]
[Thu Dec 25 23:47:59.641445 2025] [:error] [pid 22045:tid 22107] [client 4.194.81.228:31691] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aU1cr6sGGmXjDnvlmHuLhAAAAUU"]
[Thu Dec 25 23:48:00.510088 2025] [:error] [pid 22044:tid 22092] [client 4.194.81.228:11507] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aU1csHPTC5rQKTB0FQ_FTwAAANE"]
[Thu Dec 25 23:48:02.240760 2025] [:error] [pid 22044:tid 22083] [client 4.194.81.228:24143] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asa.php"] [unique_id "aU1csnPTC5rQKTB0FQ_FUwAAAMg"]
[Thu Dec 25 23:48:03.335226 2025] [:error] [pid 22044:tid 22089] [client 4.194.81.228:33825] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aU1cs3PTC5rQKTB0FQ_FWAAAAM4"]
[Thu Dec 25 23:48:05.180479 2025] [:error] [pid 22044:tid 22093] [client 4.194.81.228:20707] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aU1ctXPTC5rQKTB0FQ_FXwAAANI"]
[Thu Dec 25 23:48:06.107052 2025] [:error] [pid 22131:tid 22149] [client 4.194.81.228:12215] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aU1ctpvVMtSTB4lX2fZUKQAAAE4"]
[Thu Dec 25 23:48:07.407321 2025] [:error] [pid 27869:tid 27872] [client 4.194.81.228:21128] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4fk6.php"] [unique_id "aU1ctxNK7_n86kBD7qcJsgAAAIE"]
[Thu Dec 25 23:48:08.579249 2025] [:error] [pid 27869:tid 27884] [client 4.194.81.228:11472] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aU1cuBNK7_n86kBD7qcJtAAAAI0"]
[Thu Dec 25 23:48:09.722672 2025] [:error] [pid 22043:tid 22051] [client 4.194.81.228:12194] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aU1cuT4YVtlb2Iz_QE5vvgAAAAM"]
[Thu Dec 25 23:48:11.707589 2025] [:error] [pid 22043:tid 22052] [client 4.194.81.228:21162] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aU1cuz4YVtlb2Iz_QE5vxQAAAAQ"]
[Thu Dec 25 23:48:13.691612 2025] [:error] [pid 27869:tid 27882] [client 4.194.81.228:20711] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z123.php"] [unique_id "aU1cvRNK7_n86kBD7qcJwQAAAIs"]
[Thu Dec 25 23:48:15.739896 2025] [:error] [pid 22043:tid 22067] [client 4.194.81.228:1859] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aU1cvz4YVtlb2Iz_QE5vyQAAABM"]
[Thu Dec 25 23:48:18.407765 2025] [:error] [pid 22043:tid 22051] [client 4.194.81.228:44861] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aU1cwj4YVtlb2Iz_QE5vzQAAAAM"]
[Thu Dec 25 23:48:19.789650 2025] [:error] [pid 22043:tid 22049] [client 4.194.81.228:11460] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccea.php"] [unique_id "aU1cwz4YVtlb2Iz_QE5v0AAAAAE"]
[Thu Dec 25 23:48:22.048652 2025] [proxy_fcgi:error] [pid 22045:tid 22106] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.149393 2025] [proxy_fcgi:error] [pid 22045:tid 22116] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.334844 2025] [proxy_fcgi:error] [pid 22045:tid 22113] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.425933 2025] [proxy_fcgi:error] [pid 22045:tid 22125] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.517062 2025] [proxy_fcgi:error] [pid 22045:tid 22118] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.609093 2025] [proxy_fcgi:error] [pid 22045:tid 22109] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.703737 2025] [proxy_fcgi:error] [pid 22045:tid 22114] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.831637 2025] [proxy_fcgi:error] [pid 22045:tid 22126] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:22.928078 2025] [proxy_fcgi:error] [pid 22045:tid 22119] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:23.589401 2025] [proxy_fcgi:error] [pid 22045:tid 22124] [client 4.194.81.228:23190] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:48:23.679908 2025] [:error] [pid 22045:tid 22108] [client 4.194.81.228:23190] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aU1cx6sGGmXjDnvlmHuLtgAAAUY"]
[Thu Dec 25 23:48:24.814346 2025] [:error] [pid 22045:tid 22121] [client 4.194.81.228:23227] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aU1cyKsGGmXjDnvlmHuLuAAAAVM"]
[Thu Dec 25 23:48:27.140150 2025] [:error] [pid 22043:tid 22048] [client 4.194.81.228:12202] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aU1cyz4YVtlb2Iz_QE5v2gAAAAA"]
[Thu Dec 25 23:48:29.729762 2025] [:error] [pid 22043:tid 22069] [client 4.194.81.228:21149] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gdn.php"] [unique_id "aU1czT4YVtlb2Iz_QE5v3gAAABU"]
[Thu Dec 25 23:48:30.568313 2025] [:error] [pid 22044:tid 22080] [client 4.194.81.228:24135] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aU1cznPTC5rQKTB0FQ_FmAAAAMU"]
[Thu Dec 25 23:48:31.156570 2025] [:error] [pid 22131:tid 22133] [client 4.194.81.228:33800] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aU1cz5vVMtSTB4lX2fZUSwAAAEA"]
[Thu Dec 25 23:48:33.231228 2025] [:error] [pid 27869:tid 27881] [client 4.194.81.228:44806] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aU1c0RNK7_n86kBD7qcJ1QAAAIo"]
[Thu Dec 25 23:48:34.580015 2025] [:error] [pid 22131:tid 22136] [client 4.194.81.228:23206] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aU1c0pvVMtSTB4lX2fZUTgAAAEM"]
[Thu Dec 25 23:48:35.755064 2025] [:error] [pid 22044:tid 22080] [client 4.194.81.228:23219] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1c03PTC5rQKTB0FQ_FrwAAAMU"]
[Thu Dec 25 23:48:36.971239 2025] [:error] [pid 22044:tid 22088] [client 4.194.81.228:23176] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1c1HPTC5rQKTB0FQ_FtQAAAM0"]
[Thu Dec 25 23:48:39.383636 2025] [:error] [pid 22044:tid 22077] [client 4.194.81.228:20164] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1c13PTC5rQKTB0FQ_FuwAAAMI"]
[Thu Dec 25 23:48:40.542220 2025] [:error] [pid 22131:tid 22152] [client 4.194.81.228:21201] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1c2JvVMtSTB4lX2fZUWAAAAFE"]
[Thu Dec 25 23:48:43.134043 2025] [:error] [pid 22044:tid 22088] [client 4.194.81.228:21127] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aU1c23PTC5rQKTB0FQ_FwQAAAM0"]
[Thu Dec 25 23:48:45.134832 2025] [:error] [pid 22045:tid 22125] [client 4.194.81.228:24180] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aU1c3asGGmXjDnvlmHuL0wAAAVc"]
[Thu Dec 25 23:48:45.937270 2025] [:error] [pid 22131:tid 22150] [client 4.194.81.228:33809] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aU1c3ZvVMtSTB4lX2fZUXwAAAE8"]
[Thu Dec 25 23:48:47.373079 2025] [:error] [pid 22044:tid 22093] [client 4.194.81.228:1881] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzki.php"] [unique_id "aU1c33PTC5rQKTB0FQ_FxwAAANI"]
[Thu Dec 25 23:48:49.040917 2025] [:error] [pid 27869:tid 27877] [client 4.194.81.228:24137] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1c4RNK7_n86kBD7qcJ6wAAAIY"]
[Thu Dec 25 23:48:50.847197 2025] [:error] [pid 22044:tid 22087] [client 4.194.81.228:21144] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1c4nPTC5rQKTB0FQ_FzwAAAMw"]
[Thu Dec 25 23:48:51.957457 2025] [:error] [pid 22045:tid 22107] [client 4.194.81.228:12183] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1c46sGGmXjDnvlmHuL3gAAAUU"]
[Thu Dec 25 23:48:52.401333 2025] [:error] [pid 22044:tid 22093] [client 4.194.81.228:1878] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1c5HPTC5rQKTB0FQ_F1gAAANI"]
[Thu Dec 25 23:48:54.339252 2025] [:error] [pid 22044:tid 22088] [client 4.194.81.228:21164] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aU1c5nPTC5rQKTB0FQ_F3AAAAM0"]
[Thu Dec 25 23:48:55.376851 2025] [:error] [pid 22044:tid 22086] [client 4.194.81.228:16742] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aU1c53PTC5rQKTB0FQ_F4AAAAMs"]
[Thu Dec 25 23:48:57.312245 2025] [:error] [pid 27869:tid 27887] [client 4.194.81.228:56293] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aU1c6RNK7_n86kBD7qcJ9wAAAJA"]
[Thu Dec 25 23:49:00.768240 2025] [:error] [pid 22131:tid 22151] [client 4.194.81.228:22891] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aU1c7JvVMtSTB4lX2fZUaAAAAFA"]
[Thu Dec 25 23:49:03.202176 2025] [:error] [pid 22043:tid 22058] [client 4.194.81.228:11612] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rp8zi.php"] [unique_id "aU1c7z4YVtlb2Iz_QE5v9wAAAAo"]
[Thu Dec 25 23:49:03.609498 2025] [:error] [pid 27869:tid 27871] [client 4.194.81.228:2042] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rp8zi.php"] [unique_id "aU1c7xNK7_n86kBD7qcKAAAAAIA"]
[Thu Dec 25 23:49:04.008001 2025] [:error] [pid 22131:tid 22135] [client 4.194.81.228:14399] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rp8zi.php"] [unique_id "aU1c8JvVMtSTB4lX2fZUawAAAEI"]
[Thu Dec 25 23:49:05.519787 2025] [:error] [pid 22043:tid 22054] [client 4.194.81.228:25545] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rp8zi.php"] [unique_id "aU1c8T4YVtlb2Iz_QE5v-wAAAAY"]
[Thu Dec 25 23:49:06.122912 2025] [:error] [pid 22043:tid 22060] [client 4.194.81.228:32839] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc3.php"] [unique_id "aU1c8j4YVtlb2Iz_QE5v_wAAAAw"]
[Thu Dec 25 23:49:08.997409 2025] [:error] [pid 22131:tid 22157] [client 4.194.81.228:11644] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc3.php"] [unique_id "aU1c9JvVMtSTB4lX2fZUcwAAAFU"]
[Thu Dec 25 23:49:10.523456 2025] [:error] [pid 22131:tid 22143] [client 4.194.81.228:1998] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc3.php"] [unique_id "aU1c9pvVMtSTB4lX2fZUdQAAAEk"]
[Thu Dec 25 23:49:13.184082 2025] [:error] [pid 22044:tid 22078] [client 4.194.81.228:44236] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc3.php"] [unique_id "aU1c-XPTC5rQKTB0FQ_GBgAAAMM"]
[Thu Dec 25 23:49:14.518504 2025] [:error] [pid 22043:tid 22056] [client 4.194.81.228:19873] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-user.php"] [unique_id "aU1c-j4YVtlb2Iz_QE5wCgAAAAg"]
[Thu Dec 25 23:49:17.466001 2025] [:error] [pid 22131:tid 22143] [client 4.194.81.228:31745] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-user.php"] [unique_id "aU1c_ZvVMtSTB4lX2fZUgwAAAEk"]
[Thu Dec 25 23:49:23.638953 2025] [proxy_fcgi:error] [pid 22131:tid 22150] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:23.740924 2025] [proxy_fcgi:error] [pid 22131:tid 22158] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:23.834505 2025] [proxy_fcgi:error] [pid 22131:tid 22152] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:23.936167 2025] [proxy_fcgi:error] [pid 22131:tid 22143] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.030054 2025] [proxy_fcgi:error] [pid 22131:tid 22157] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.191714 2025] [proxy_fcgi:error] [pid 22131:tid 22139] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.304451 2025] [proxy_fcgi:error] [pid 22131:tid 22137] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.402918 2025] [proxy_fcgi:error] [pid 22131:tid 22136] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.513359 2025] [proxy_fcgi:error] [pid 22131:tid 22140] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.613996 2025] [proxy_fcgi:error] [pid 22131:tid 22155] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.729378 2025] [proxy_fcgi:error] [pid 22131:tid 22144] [client 4.194.81.228:44285] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:49:24.821391 2025] [:error] [pid 22131:tid 22160] [client 4.194.81.228:44285] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1dBJvVMtSTB4lX2fZUmgAAAFg"]
[Thu Dec 25 23:49:27.252283 2025] [:error] [pid 22131:tid 22152] [client 4.194.81.228:31793] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1dB5vVMtSTB4lX2fZUnQAAAFE"]
[Thu Dec 25 23:49:29.688455 2025] [:error] [pid 22044:tid 22075] [client 4.194.81.228:19849] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1dCXPTC5rQKTB0FQ_GIwAAAMA"]
[Thu Dec 25 23:49:33.510654 2025] [:error] [pid 27869:tid 27871] [client 4.194.81.228:20388] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1dDRNK7_n86kBD7qcKdAAAAIA"]
[Thu Dec 25 23:49:35.071508 2025] [:error] [pid 27869:tid 27880] [client 4.194.81.228:17049] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1dDxNK7_n86kBD7qcKfwAAAIk"]
[Thu Dec 25 23:49:36.328895 2025] [:error] [pid 22043:tid 22049] [client 4.194.81.228:20882] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1dED4YVtlb2Iz_QE5wKAAAAAE"]
[Thu Dec 25 23:49:38.983481 2025] [:error] [pid 22044:tid 22098] [client 4.194.81.228:20871] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1dEnPTC5rQKTB0FQ_GQAAAANc"]
[Thu Dec 25 23:49:39.892608 2025] [:error] [pid 22043:tid 22057] [client 4.194.81.228:38360] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1dEz4YVtlb2Iz_QE5wKwAAAAk"]
[Thu Dec 25 23:49:41.895662 2025] [:error] [pid 22044:tid 22078] [client 4.194.81.228:18069] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1dFXPTC5rQKTB0FQ_GRgAAAMM"]
[Thu Dec 25 23:49:45.978773 2025] [:error] [pid 22045:tid 22110] [client 4.194.81.228:14652] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1dGasGGmXjDnvlmHuMNQAAAUg"]
[Thu Dec 25 23:49:49.531259 2025] [:error] [pid 22045:tid 22126] [client 4.194.81.228:1070] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1dHasGGmXjDnvlmHuMPAAAAVg"]
[Thu Dec 25 23:49:51.063521 2025] [:error] [pid 22131:tid 22158] [client 4.194.81.228:14533] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1dH5vVMtSTB4lX2fZUuAAAAFY"]
[Thu Dec 25 23:49:53.168565 2025] [:error] [pid 22045:tid 22119] [client 4.194.81.228:1923] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1dIasGGmXjDnvlmHuMPwAAAVE"]
[Thu Dec 25 23:49:56.292163 2025] [:error] [pid 22044:tid 22094] [client 4.194.81.228:25534] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1dJHPTC5rQKTB0FQ_GmgAAANM"]
[Thu Dec 25 23:49:59.547497 2025] [:error] [pid 22045:tid 22121] [client 4.194.81.228:25882] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1dJ6sGGmXjDnvlmHuMSQAAAVM"]
[Thu Dec 25 23:50:02.211187 2025] [:error] [pid 22045:tid 22112] [client 4.194.81.228:20939] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1dKqsGGmXjDnvlmHuMTQAAAUo"]
[Thu Dec 25 23:50:04.976313 2025] [:error] [pid 27869:tid 27892] [client 4.194.81.228:15164] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1dLBNK7_n86kBD7qcK6AAAAJU"]
[Thu Dec 25 23:50:08.160358 2025] [:error] [pid 22131:tid 22136] [client 4.194.81.228:21421] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1dMJvVMtSTB4lX2fZU0QAAAEM"]
[Thu Dec 25 23:50:09.849517 2025] [:error] [pid 22045:tid 22110] [client 4.194.81.228:31687] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1dMasGGmXjDnvlmHuMUgAAAUg"]
[Thu Dec 25 23:50:13.163353 2025] [:error] [pid 27869:tid 27881] [client 4.194.81.228:15107] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1dNRNK7_n86kBD7qcK9wAAAIo"]
[Thu Dec 25 23:50:14.622891 2025] [:error] [pid 27869:tid 27884] [client 4.194.81.228:56334] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1dNhNK7_n86kBD7qcK-wAAAI0"]
[Thu Dec 25 23:50:16.052464 2025] [:error] [pid 27869:tid 27875] [client 4.194.81.228:1390] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1dOBNK7_n86kBD7qcLAAAAAIQ"]
[Thu Dec 25 23:50:18.852817 2025] [:error] [pid 27869:tid 27877] [client 4.194.81.228:20470] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1dOhNK7_n86kBD7qcLBwAAAIY"]
[Thu Dec 25 23:50:20.928057 2025] [:error] [pid 22044:tid 22089] [client 4.194.81.228:20487] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1dPHPTC5rQKTB0FQ_G4AAAAM4"]
[Thu Dec 25 23:50:21.800600 2025] [:error] [pid 22043:tid 22069] [client 4.194.81.228:1344] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU1dPT4YVtlb2Iz_QE5wTAAAABU"]
[Thu Dec 25 23:50:24.299990 2025] [proxy_fcgi:error] [pid 22044:tid 22093] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:24.395721 2025] [proxy_fcgi:error] [pid 22044:tid 22097] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:24.488511 2025] [proxy_fcgi:error] [pid 22044:tid 22098] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:24.584120 2025] [proxy_fcgi:error] [pid 22044:tid 22077] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.158787 2025] [proxy_fcgi:error] [pid 22044:tid 22095] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.253240 2025] [proxy_fcgi:error] [pid 22044:tid 22082] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.395494 2025] [proxy_fcgi:error] [pid 22044:tid 22087] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.493635 2025] [proxy_fcgi:error] [pid 22044:tid 22086] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.585643 2025] [proxy_fcgi:error] [pid 22044:tid 22078] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.679303 2025] [proxy_fcgi:error] [pid 22044:tid 22094] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.772135 2025] [proxy_fcgi:error] [pid 22044:tid 22099] [client 4.194.81.228:20432] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:50:25.864772 2025] [:error] [pid 22044:tid 22081] [client 4.194.81.228:20432] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aU1dQXPTC5rQKTB0FQ_G9wAAAMY"]
[Thu Dec 25 23:50:29.378499 2025] [:error] [pid 22131:tid 22145] [client 4.194.81.228:34611] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aU1dRZvVMtSTB4lX2fZU7gAAAEs"]
[Thu Dec 25 23:50:33.168520 2025] [:error] [pid 22044:tid 22092] [client 4.194.81.228:33445] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aU1dSXPTC5rQKTB0FQ_HBQAAANE"]
[Thu Dec 25 23:50:36.053444 2025] [:error] [pid 22043:tid 22060] [client 4.194.81.228:22476] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aU1dTD4YVtlb2Iz_QE5wZQAAAAw"]
[Thu Dec 25 23:50:39.980646 2025] [:error] [pid 22131:tid 22145] [client 4.194.81.228:44755] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aU1dT5vVMtSTB4lX2fZU-gAAAEs"]
[Thu Dec 25 23:50:41.622869 2025] [:error] [pid 27869:tid 27873] [client 4.194.81.228:34565] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aU1dURNK7_n86kBD7qcLKgAAAII"]
[Thu Dec 25 23:50:43.229465 2025] [:error] [pid 22044:tid 22098] [client 4.194.81.228:16694] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aU1dU3PTC5rQKTB0FQ_HHgAAANc"]
[Thu Dec 25 23:50:45.184087 2025] [:error] [pid 22043:tid 22061] [client 4.194.81.228:14520] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aU1dVT4YVtlb2Iz_QE5wagAAAA0"]
[Thu Dec 25 23:50:46.313536 2025] [:error] [pid 27869:tid 27895] [client 4.194.81.228:14517] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aU1dVhNK7_n86kBD7qcLMgAAAJg"]
[Thu Dec 25 23:50:49.247659 2025] [:error] [pid 22045:tid 22102] [client 4.194.81.228:44236] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aU1dWasGGmXjDnvlmHuMewAAAUA"]
[Thu Dec 25 23:50:52.169404 2025] [:error] [pid 22043:tid 22050] [client 4.194.81.228:14466] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aU1dXD4YVtlb2Iz_QE5wcwAAAAI"]
[Thu Dec 25 23:50:53.349613 2025] [:error] [pid 22131:tid 22151] [client 4.194.81.228:22784] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aU1dXZvVMtSTB4lX2fZVEQAAAFA"]
[Thu Dec 25 23:50:55.462781 2025] [:error] [pid 22044:tid 22096] [client 4.194.81.228:22400] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sikma.php"] [unique_id "aU1dX3PTC5rQKTB0FQ_HNQAAANU"]
[Thu Dec 25 23:50:59.653196 2025] [:error] [pid 27869:tid 27890] [client 4.194.81.228:18158] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sikma.php"] [unique_id "aU1dYxNK7_n86kBD7qcLWQAAAJM"]
[Thu Dec 25 23:51:01.582938 2025] [:error] [pid 22044:tid 22092] [client 4.194.81.228:18142] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sikma.php"] [unique_id "aU1dZXPTC5rQKTB0FQ_HPwAAANE"]
[Thu Dec 25 23:51:04.423731 2025] [:error] [pid 22044:tid 22077] [client 4.194.81.228:19591] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sikma.php"] [unique_id "aU1daHPTC5rQKTB0FQ_HSgAAAMI"]
[Thu Dec 25 23:51:07.880742 2025] [:error] [pid 22044:tid 22075] [client 4.194.81.228:28736] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/44.php"] [unique_id "aU1da3PTC5rQKTB0FQ_HUQAAAMA"]
[Thu Dec 25 23:51:10.486103 2025] [:error] [pid 22045:tid 22122] [client 4.194.81.228:28341] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/44.php"] [unique_id "aU1dbqsGGmXjDnvlmHuMigAAAVQ"]
[Thu Dec 25 23:51:17.551435 2025] [:error] [pid 22045:tid 22123] [client 4.194.81.228:1675] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/44.php"] [unique_id "aU1ddasGGmXjDnvlmHuMmAAAAVU"]
[Thu Dec 25 23:51:21.175460 2025] [:error] [pid 22045:tid 22109] [client 4.194.81.228:28303] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/database.php"] [unique_id "aU1deasGGmXjDnvlmHuMpAAAAUc"]
[Thu Dec 25 23:51:23.220913 2025] [:error] [pid 22043:tid 22070] [client 4.194.81.228:23657] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/database.php"] [unique_id "aU1dez4YVtlb2Iz_QE5wjAAAABY"]
[Thu Dec 25 23:51:24.750745 2025] [:error] [pid 22131:tid 22156] [client 4.194.81.228:1717] [client 4.194.81.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/database.php"] [unique_id "aU1dfJvVMtSTB4lX2fZVNwAAAFQ"]
[Thu Dec 25 23:51:28.783706 2025] [proxy_fcgi:error] [pid 27869:tid 27889] [client 4.194.81.228:23636] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:51:28.886625 2025] [proxy_fcgi:error] [pid 27869:tid 27883] [client 4.194.81.228:23636] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:51:29.882352 2025] [proxy_fcgi:error] [pid 27869:tid 27891] [client 4.194.81.228:23636] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:38.945222 2025] [proxy_fcgi:error] [pid 22045:tid 22107] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:39.089423 2025] [proxy_fcgi:error] [pid 22045:tid 22104] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:39.347401 2025] [proxy_fcgi:error] [pid 22045:tid 22123] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:39.506620 2025] [proxy_fcgi:error] [pid 22045:tid 22110] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:39.645994 2025] [proxy_fcgi:error] [pid 22045:tid 22106] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:39.796739 2025] [proxy_fcgi:error] [pid 22045:tid 22111] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:39.936448 2025] [proxy_fcgi:error] [pid 22045:tid 22109] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:40.101680 2025] [proxy_fcgi:error] [pid 22045:tid 22117] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:40.871912 2025] [proxy_fcgi:error] [pid 22045:tid 22120] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:41.040414 2025] [proxy_fcgi:error] [pid 22045:tid 22105] [client 4.213.65.240:32498] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:57:41.204658 2025] [:error] [pid 22045:tid 22113] [client 4.213.65.240:32498] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qual.php"] [unique_id "aU1e9asGGmXjDnvlmHuPWAAAAUs"]
[Thu Dec 25 23:57:41.869153 2025] [:error] [pid 22044:tid 22079] [client 4.213.65.240:11918] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qual.php"] [unique_id "aU1e9XPTC5rQKTB0FQ_J9QAAAMQ"]
[Thu Dec 25 23:57:42.144985 2025] [:error] [pid 22045:tid 22126] [client 4.213.65.240:32479] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qual.php"] [unique_id "aU1e9qsGGmXjDnvlmHuPWQAAAVg"]
[Thu Dec 25 23:57:42.534182 2025] [:error] [pid 22043:tid 22051] [client 4.213.65.240:35765] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/qual.php"] [unique_id "aU1e9j4YVtlb2Iz_QE5yZgAAAAM"]
[Thu Dec 25 23:57:43.026164 2025] [:error] [pid 22044:tid 22092] [client 4.213.65.240:32501] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/udnkq.php"] [unique_id "aU1e93PTC5rQKTB0FQ_J9gAAANE"]
[Thu Dec 25 23:57:43.513696 2025] [:error] [pid 22045:tid 22125] [client 4.213.65.240:12067] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/udnkq.php"] [unique_id "aU1e96sGGmXjDnvlmHuPXgAAAVc"]
[Thu Dec 25 23:57:43.945527 2025] [:error] [pid 22045:tid 22123] [client 4.213.65.240:40110] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/udnkq.php"] [unique_id "aU1e96sGGmXjDnvlmHuPYAAAAVU"]
[Thu Dec 25 23:57:44.606741 2025] [:error] [pid 22131:tid 22134] [client 4.213.65.240:40086] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/udnkq.php"] [unique_id "aU1e-JvVMtSTB4lX2fZXRQAAAEE"]
[Thu Dec 25 23:57:44.943223 2025] [:error] [pid 22131:tid 22143] [client 4.213.65.240:12074] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ng.php"] [unique_id "aU1e-JvVMtSTB4lX2fZXRgAAAEk"]
[Thu Dec 25 23:57:45.559130 2025] [:error] [pid 22044:tid 22080] [client 4.213.65.240:49821] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ng.php"] [unique_id "aU1e-XPTC5rQKTB0FQ_J-wAAAMU"]
[Thu Dec 25 23:57:46.144743 2025] [:error] [pid 22045:tid 22108] [client 4.213.65.240:40064] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ng.php"] [unique_id "aU1e-qsGGmXjDnvlmHuPZAAAAUY"]
[Thu Dec 25 23:57:47.758435 2025] [:error] [pid 27869:tid 27883] [client 4.213.65.240:42674] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ng.php"] [unique_id "aU1e-xNK7_n86kBD7qcPTAAAAIw"]
[Thu Dec 25 23:57:48.656599 2025] [:error] [pid 22044:tid 22090] [client 4.213.65.240:11928] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1e_HPTC5rQKTB0FQ_J_QAAAM8"]
[Thu Dec 25 23:57:49.138277 2025] [:error] [pid 27869:tid 27890] [client 4.213.65.240:42675] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1e_RNK7_n86kBD7qcPTgAAAJM"]
[Thu Dec 25 23:57:49.922330 2025] [:error] [pid 27869:tid 27875] [client 4.213.65.240:12091] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1e_RNK7_n86kBD7qcPUQAAAIQ"]
[Thu Dec 25 23:57:51.060594 2025] [:error] [pid 22045:tid 22113] [client 4.213.65.240:12066] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1e_6sGGmXjDnvlmHuPaAAAAUs"]
[Thu Dec 25 23:57:51.536311 2025] [:error] [pid 22044:tid 22083] [client 4.213.65.240:40066] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/no3.php"] [unique_id "aU1e_3PTC5rQKTB0FQ_KAwAAAMg"]
[Thu Dec 25 23:57:51.895976 2025] [:error] [pid 27869:tid 27881] [client 4.213.65.240:32468] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/no3.php"] [unique_id "aU1e_xNK7_n86kBD7qcPUwAAAIo"]
[Thu Dec 25 23:57:52.323974 2025] [:error] [pid 22045:tid 22115] [client 4.213.65.240:40124] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/no3.php"] [unique_id "aU1fAKsGGmXjDnvlmHuPbQAAAU0"]
[Thu Dec 25 23:57:52.715989 2025] [:error] [pid 22043:tid 22052] [client 4.213.65.240:40079] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/no3.php"] [unique_id "aU1fAD4YVtlb2Iz_QE5yawAAAAQ"]
[Thu Dec 25 23:57:53.276299 2025] [:error] [pid 22043:tid 22056] [client 4.213.65.240:49808] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/om.php"] [unique_id "aU1fAT4YVtlb2Iz_QE5ybQAAAAg"]
[Thu Dec 25 23:57:53.699805 2025] [:error] [pid 22043:tid 22069] [client 4.213.65.240:40075] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/om.php"] [unique_id "aU1fAT4YVtlb2Iz_QE5ycgAAABU"]
[Thu Dec 25 23:57:54.197085 2025] [:error] [pid 22043:tid 22068] [client 4.213.65.240:12046] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/om.php"] [unique_id "aU1fAj4YVtlb2Iz_QE5ydQAAABQ"]
[Thu Dec 25 23:57:55.352061 2025] [:error] [pid 22044:tid 22084] [client 4.213.65.240:42658] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/om.php"] [unique_id "aU1fA3PTC5rQKTB0FQ_KDAAAAMk"]
[Thu Dec 25 23:57:56.104223 2025] [:error] [pid 22131:tid 22157] [client 4.213.65.240:35726] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/webix.php"] [unique_id "aU1fBJvVMtSTB4lX2fZXTQAAAFU"]
[Thu Dec 25 23:57:56.505530 2025] [:error] [pid 27869:tid 27885] [client 4.213.65.240:42676] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/webix.php"] [unique_id "aU1fBBNK7_n86kBD7qcPWwAAAI4"]
[Thu Dec 25 23:57:57.171724 2025] [:error] [pid 22044:tid 22077] [client 4.213.65.240:35761] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/webix.php"] [unique_id "aU1fBXPTC5rQKTB0FQ_KDgAAAMI"]
[Thu Dec 25 23:57:57.738446 2025] [:error] [pid 22045:tid 22106] [client 4.213.65.240:11537] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/webix.php"] [unique_id "aU1fBasGGmXjDnvlmHuPcgAAAUQ"]
[Thu Dec 25 23:57:58.086424 2025] [:error] [pid 22045:tid 22107] [client 4.213.65.240:42686] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aU1fBqsGGmXjDnvlmHuPdAAAAUU"]
[Thu Dec 25 23:57:58.688038 2025] [:error] [pid 22044:tid 22088] [client 4.213.65.240:35772] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aU1fBnPTC5rQKTB0FQ_KFQAAAM0"]
[Thu Dec 25 23:57:59.010226 2025] [:error] [pid 22045:tid 22108] [client 4.213.65.240:35759] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aU1fB6sGGmXjDnvlmHuPdgAAAUY"]
[Thu Dec 25 23:57:59.436544 2025] [:error] [pid 27869:tid 27874] [client 4.213.65.240:32469] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aU1fBxNK7_n86kBD7qcPXQAAAIM"]
[Thu Dec 25 23:57:59.755465 2025] [:error] [pid 22044:tid 22084] [client 4.213.65.240:49798] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cka.php"] [unique_id "aU1fB3PTC5rQKTB0FQ_KFwAAAMk"]
[Thu Dec 25 23:58:00.080775 2025] [:error] [pid 22044:tid 22082] [client 4.213.65.240:40094] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cka.php"] [unique_id "aU1fCHPTC5rQKTB0FQ_KGAAAAMc"]
[Thu Dec 25 23:58:00.561440 2025] [:error] [pid 22044:tid 22098] [client 4.213.65.240:42624] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cka.php"] [unique_id "aU1fCHPTC5rQKTB0FQ_KGQAAANc"]
[Thu Dec 25 23:58:01.503318 2025] [:error] [pid 22043:tid 22068] [client 4.213.65.240:32448] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cka.php"] [unique_id "aU1fCT4YVtlb2Iz_QE5yfgAAABQ"]
[Thu Dec 25 23:58:02.161420 2025] [:error] [pid 22043:tid 22065] [client 4.213.65.240:42630] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1fCj4YVtlb2Iz_QE5ygQAAABE"]
[Thu Dec 25 23:58:02.534661 2025] [:error] [pid 22131:tid 22136] [client 4.213.65.240:32488] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1fCpvVMtSTB4lX2fZXWAAAAEM"]
[Thu Dec 25 23:58:03.075587 2025] [:error] [pid 22043:tid 22062] [client 4.213.65.240:49814] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1fCz4YVtlb2Iz_QE5ygwAAAA4"]
[Thu Dec 25 23:58:03.520692 2025] [:error] [pid 22131:tid 22143] [client 4.213.65.240:40118] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU1fC5vVMtSTB4lX2fZXXQAAAEk"]
[Thu Dec 25 23:58:03.839970 2025] [:error] [pid 27869:tid 27888] [client 4.213.65.240:49836] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1fCxNK7_n86kBD7qcPZQAAAJE"]
[Thu Dec 25 23:58:04.283253 2025] [:error] [pid 22044:tid 22079] [client 4.213.65.240:33602] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1fDHPTC5rQKTB0FQ_KGwAAAMQ"]
[Thu Dec 25 23:58:04.672351 2025] [:error] [pid 22131:tid 22147] [client 4.213.65.240:35723] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1fDJvVMtSTB4lX2fZXXwAAAEw"]
[Thu Dec 25 23:58:05.014369 2025] [:error] [pid 22045:tid 22104] [client 4.213.65.240:12041] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aU1fDasGGmXjDnvlmHuPfgAAAUI"]
[Thu Dec 25 23:58:05.487399 2025] [:error] [pid 22131:tid 22148] [client 4.213.65.240:32476] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aU1fDZvVMtSTB4lX2fZXYAAAAE0"]
[Thu Dec 25 23:58:05.827715 2025] [:error] [pid 22131:tid 22156] [client 4.213.65.240:33613] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aU1fDZvVMtSTB4lX2fZXYgAAAFQ"]
[Thu Dec 25 23:58:06.345991 2025] [:error] [pid 22045:tid 22123] [client 4.213.65.240:49799] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aU1fDqsGGmXjDnvlmHuPgAAAAVU"]
[Thu Dec 25 23:58:06.980564 2025] [:error] [pid 27869:tid 27874] [client 4.213.65.240:32463] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aU1fDhNK7_n86kBD7qcPagAAAIM"]
[Thu Dec 25 23:58:07.693056 2025] [:error] [pid 22045:tid 22108] [client 4.213.65.240:42627] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aU1fD6sGGmXjDnvlmHuPggAAAUY"]
[Thu Dec 25 23:58:08.183828 2025] [:error] [pid 22131:tid 22140] [client 4.213.65.240:40100] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aU1fEJvVMtSTB4lX2fZXZQAAAEY"]
[Thu Dec 25 23:58:08.696333 2025] [:error] [pid 22044:tid 22078] [client 4.213.65.240:42668] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aU1fEHPTC5rQKTB0FQ_KIgAAAMM"]
[Thu Dec 25 23:58:09.220651 2025] [:error] [pid 22044:tid 22095] [client 4.213.65.240:35774] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aU1fEXPTC5rQKTB0FQ_KIwAAANQ"]
[Thu Dec 25 23:58:09.739869 2025] [:error] [pid 27869:tid 27889] [client 4.213.65.240:33632] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aU1fERNK7_n86kBD7qcPbwAAAJI"]
[Thu Dec 25 23:58:10.152134 2025] [:error] [pid 22043:tid 22060] [client 4.213.65.240:32507] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aU1fEj4YVtlb2Iz_QE5ylwAAAAw"]
[Thu Dec 25 23:58:10.645981 2025] [:error] [pid 22131:tid 22153] [client 4.213.65.240:32456] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aU1fEpvVMtSTB4lX2fZXZwAAAFI"]
[Thu Dec 25 23:58:11.005379 2025] [:error] [pid 27869:tid 27876] [client 4.213.65.240:35718] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aU1fExNK7_n86kBD7qcPcgAAAIU"]
[Thu Dec 25 23:58:11.434910 2025] [:error] [pid 22131:tid 22133] [client 4.213.65.240:49817] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU1fE5vVMtSTB4lX2fZXaAAAAEA"]
[Thu Dec 25 23:58:11.794170 2025] [:error] [pid 27869:tid 27895] [client 4.213.65.240:33605] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU1fExNK7_n86kBD7qcPdAAAAJg"]
[Thu Dec 25 23:58:12.280639 2025] [:error] [pid 27869:tid 27891] [client 4.213.65.240:40067] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU1fFBNK7_n86kBD7qcPdgAAAJQ"]
[Thu Dec 25 23:58:12.649741 2025] [:error] [pid 22043:tid 22062] [client 4.213.65.240:33654] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU1fFD4YVtlb2Iz_QE5ynAAAAA4"]
[Thu Dec 25 23:58:13.059485 2025] [:error] [pid 22131:tid 22151] [client 4.213.65.240:42661] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1fFZvVMtSTB4lX2fZXbQAAAFA"]
[Thu Dec 25 23:58:13.441795 2025] [:error] [pid 27869:tid 27885] [client 4.213.65.240:32489] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1fFRNK7_n86kBD7qcPeAAAAI4"]
[Thu Dec 25 23:58:13.728981 2025] [:error] [pid 22043:tid 22056] [client 4.213.65.240:32496] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1fFT4YVtlb2Iz_QE5ynQAAAAg"]
[Thu Dec 25 23:58:14.487786 2025] [:error] [pid 22043:tid 22055] [client 4.213.65.240:33661] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1fFj4YVtlb2Iz_QE5yngAAAAc"]
[Thu Dec 25 23:58:14.895484 2025] [:error] [pid 27869:tid 27874] [client 4.213.65.240:40072] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1fFhNK7_n86kBD7qcPegAAAIM"]
[Thu Dec 25 23:58:15.485644 2025] [:error] [pid 22131:tid 22148] [client 4.213.65.240:33621] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1fF5vVMtSTB4lX2fZXbwAAAE0"]
[Thu Dec 25 23:58:16.210162 2025] [:error] [pid 22043:tid 22048] [client 4.213.65.240:35725] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1fGD4YVtlb2Iz_QE5ynwAAAAA"]
[Thu Dec 25 23:58:16.629617 2025] [:error] [pid 22044:tid 22091] [client 4.213.65.240:35773] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1fGHPTC5rQKTB0FQ_KKgAAANA"]
[Thu Dec 25 23:58:17.192066 2025] [:error] [pid 27869:tid 27876] [client 4.213.65.240:33617] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU1fGRNK7_n86kBD7qcPfgAAAIU"]
[Thu Dec 25 23:58:17.529634 2025] [:error] [pid 22131:tid 22134] [client 4.213.65.240:12073] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU1fGZvVMtSTB4lX2fZXcgAAAEE"]
[Thu Dec 25 23:58:18.109599 2025] [:error] [pid 22044:tid 22083] [client 4.213.65.240:49803] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU1fGnPTC5rQKTB0FQ_KLAAAAMg"]
[Thu Dec 25 23:58:18.674387 2025] [:error] [pid 22131:tid 22155] [client 4.213.65.240:33600] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU1fGpvVMtSTB4lX2fZXdgAAAFM"]
[Thu Dec 25 23:58:19.095081 2025] [:error] [pid 22131:tid 22133] [client 4.213.65.240:32470] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU1fG5vVMtSTB4lX2fZXdwAAAEA"]
[Thu Dec 25 23:58:19.547459 2025] [:error] [pid 22043:tid 22058] [client 4.213.65.240:40125] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU1fGz4YVtlb2Iz_QE5yoQAAAAo"]
[Thu Dec 25 23:58:19.973398 2025] [:error] [pid 22131:tid 22160] [client 4.213.65.240:39305] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU1fG5vVMtSTB4lX2fZXegAAAFg"]
[Thu Dec 25 23:58:21.138360 2025] [:error] [pid 22043:tid 22049] [client 4.213.65.240:35745] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU1fHT4YVtlb2Iz_QE5ypgAAAAE"]
[Thu Dec 25 23:58:21.658973 2025] [:error] [pid 22045:tid 22116] [client 4.213.65.240:42684] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU1fHasGGmXjDnvlmHuPmwAAAU4"]
[Thu Dec 25 23:58:22.337887 2025] [:error] [pid 22131:tid 22142] [client 4.213.65.240:42652] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU1fHpvVMtSTB4lX2fZXjAAAAEg"]
[Thu Dec 25 23:58:23.116502 2025] [:error] [pid 22131:tid 22157] [client 4.213.65.240:11912] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU1fH5vVMtSTB4lX2fZXlgAAAFU"]
[Thu Dec 25 23:58:23.695525 2025] [:error] [pid 22043:tid 22067] [client 4.213.65.240:40097] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU1fHz4YVtlb2Iz_QE5ytwAAABM"]
[Thu Dec 25 23:58:24.056213 2025] [:error] [pid 22045:tid 22121] [client 4.213.65.240:42665] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU1fIKsGGmXjDnvlmHuPpgAAAVM"]
[Thu Dec 25 23:58:24.399388 2025] [:error] [pid 22045:tid 22125] [client 4.213.65.240:33606] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU1fIKsGGmXjDnvlmHuPqAAAAVc"]
[Thu Dec 25 23:58:24.847910 2025] [:error] [pid 22045:tid 22113] [client 4.213.65.240:33660] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU1fIKsGGmXjDnvlmHuPqQAAAUs"]
[Thu Dec 25 23:58:25.581605 2025] [:error] [pid 22043:tid 22063] [client 4.213.65.240:42649] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU1fIT4YVtlb2Iz_QE5yvgAAAA8"]
[Thu Dec 25 23:58:26.989356 2025] [:error] [pid 22043:tid 22053] [client 4.213.65.240:49812] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aU1fIj4YVtlb2Iz_QE5ywQAAAAU"]
[Thu Dec 25 23:58:27.484124 2025] [:error] [pid 22045:tid 22123] [client 4.213.65.240:32493] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aU1fI6sGGmXjDnvlmHuPrgAAAVU"]
[Thu Dec 25 23:58:28.246882 2025] [:error] [pid 27869:tid 27875] [client 4.213.65.240:11566] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aU1fJBNK7_n86kBD7qcPjAAAAIQ"]
[Thu Dec 25 23:58:28.708765 2025] [:error] [pid 22043:tid 22052] [client 4.213.65.240:12051] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aU1fJD4YVtlb2Iz_QE5yyQAAAAQ"]
[Thu Dec 25 23:58:29.116262 2025] [:error] [pid 22131:tid 22141] [client 4.213.65.240:59428] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU1fJZvVMtSTB4lX2fZXpQAAAEc"]
[Thu Dec 25 23:58:29.392696 2025] [:error] [pid 22131:tid 22139] [client 4.213.65.240:12094] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU1fJZvVMtSTB4lX2fZXpgAAAEU"]
[Thu Dec 25 23:58:29.984150 2025] [:error] [pid 22044:tid 22087] [client 4.213.65.240:40101] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU1fJXPTC5rQKTB0FQ_KNgAAAMw"]
[Thu Dec 25 23:58:30.393180 2025] [:error] [pid 22044:tid 22091] [client 4.213.65.240:40070] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU1fJnPTC5rQKTB0FQ_KNwAAANA"]
[Thu Dec 25 23:58:30.830076 2025] [:error] [pid 22045:tid 22114] [client 4.213.65.240:12064] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU1fJqsGGmXjDnvlmHuPtAAAAUw"]
[Thu Dec 25 23:58:31.251375 2025] [:error] [pid 22045:tid 22122] [client 4.213.65.240:40075] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU1fJ6sGGmXjDnvlmHuPtQAAAVQ"]
[Thu Dec 25 23:58:31.933565 2025] [:error] [pid 22044:tid 22081] [client 4.213.65.240:42654] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU1fJ3PTC5rQKTB0FQ_KPQAAAMY"]
[Thu Dec 25 23:58:34.563030 2025] [:error] [pid 22044:tid 22075] [client 4.213.65.240:49792] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU1fKnPTC5rQKTB0FQ_KPwAAAMA"]
[Thu Dec 25 23:58:34.908640 2025] [:error] [pid 22044:tid 22080] [client 4.213.65.240:35727] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aU1fKnPTC5rQKTB0FQ_KQgAAAMU"]
[Thu Dec 25 23:58:35.267934 2025] [:error] [pid 22043:tid 22052] [client 4.213.65.240:12042] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aU1fKz4YVtlb2Iz_QE5y0wAAAAQ"]
[Thu Dec 25 23:58:35.675065 2025] [:error] [pid 22044:tid 22099] [client 4.213.65.240:35722] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aU1fK3PTC5rQKTB0FQ_KQwAAANg"]
[Thu Dec 25 23:58:36.097417 2025] [:error] [pid 22045:tid 22112] [client 4.213.65.240:11964] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aU1fLKsGGmXjDnvlmHuPuwAAAUo"]
[Thu Dec 25 23:58:36.448787 2025] [:error] [pid 27869:tid 27873] [client 4.213.65.240:40078] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU1fLBNK7_n86kBD7qcPlwAAAII"]
[Thu Dec 25 23:58:36.793837 2025] [:error] [pid 22045:tid 22106] [client 4.213.65.240:49852] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU1fLKsGGmXjDnvlmHuPvAAAAUQ"]
[Thu Dec 25 23:58:37.197876 2025] [:error] [pid 22043:tid 22069] [client 4.213.65.240:11935] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU1fLT4YVtlb2Iz_QE5y1gAAABU"]
[Thu Dec 25 23:58:37.553344 2025] [:error] [pid 22045:tid 22107] [client 4.213.65.240:33636] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU1fLasGGmXjDnvlmHuPvgAAAUU"]
[Thu Dec 25 23:58:37.972421 2025] [:error] [pid 22045:tid 22117] [client 4.213.65.240:35746] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1fLasGGmXjDnvlmHuPvwAAAU8"]
[Thu Dec 25 23:58:38.503163 2025] [:error] [pid 22044:tid 22084] [client 4.213.65.240:35755] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1fLnPTC5rQKTB0FQ_KSAAAAMk"]
[Thu Dec 25 23:58:39.011918 2025] [:error] [pid 22043:tid 22050] [client 4.213.65.240:32486] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1fLz4YVtlb2Iz_QE5y3AAAAAI"]
[Thu Dec 25 23:58:39.733052 2025] [:error] [pid 22043:tid 22064] [client 4.213.65.240:32458] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1fLz4YVtlb2Iz_QE5y3QAAABA"]
[Thu Dec 25 23:58:40.388774 2025] [:error] [pid 22043:tid 22049] [client 4.213.65.240:40104] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aU1fMD4YVtlb2Iz_QE5y3wAAAAE"]
[Thu Dec 25 23:58:40.863435 2025] [:error] [pid 22131:tid 22143] [client 4.213.65.240:49830] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aU1fMJvVMtSTB4lX2fZXtwAAAEk"]
[Thu Dec 25 23:58:41.467419 2025] [proxy_fcgi:error] [pid 22044:tid 22082] [client 4.213.65.240:32464] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:41.612329 2025] [proxy_fcgi:error] [pid 22044:tid 22099] [client 4.213.65.240:32464] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:41.752323 2025] [proxy_fcgi:error] [pid 22044:tid 22098] [client 4.213.65.240:32464] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:41.953093 2025] [proxy_fcgi:error] [pid 22044:tid 22093] [client 4.213.65.240:32464] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:42.274444 2025] [proxy_fcgi:error] [pid 22044:tid 22097] [client 4.213.65.240:32464] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:42.413376 2025] [:error] [pid 22044:tid 22091] [client 4.213.65.240:32464] [client 4.213.65.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU1fMnPTC5rQKTB0FQ_KVQAAANA"]
[Thu Dec 25 23:58:43.095544 2025] [proxy_fcgi:error] [pid 22131:tid 22134] [client 4.213.65.240:35764] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:43.375413 2025] [proxy_fcgi:error] [pid 22131:tid 22136] [client 4.213.65.240:35764] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:43.686994 2025] [proxy_fcgi:error] [pid 22131:tid 22160] [client 4.213.65.240:35764] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:58:43.845703 2025] [:error] [pid 22131:tid 22149] [client 4.213.65.240:35764] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aU1fM5vVMtSTB4lX2fZXxQAAAE4"]
[Thu Dec 25 23:58:44.308636 2025] [:error] [pid 22044:tid 22092] [client 4.213.65.240:49850] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aU1fNHPTC5rQKTB0FQ_KWQAAANE"]
[Thu Dec 25 23:58:44.822487 2025] [:error] [pid 22044:tid 22075] [client 4.213.65.240:12090] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aU1fNHPTC5rQKTB0FQ_KWwAAAMA"]
[Thu Dec 25 23:58:45.395491 2025] [:error] [pid 22045:tid 22122] [client 4.213.65.240:33648] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aU1fNasGGmXjDnvlmHuPxQAAAVQ"]
[Thu Dec 25 23:58:45.776216 2025] [:error] [pid 22043:tid 22048] [client 4.213.65.240:42672] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1fNT4YVtlb2Iz_QE5y4AAAAAA"]
[Thu Dec 25 23:58:46.088888 2025] [:error] [pid 22131:tid 22140] [client 4.213.65.240:35737] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1fNpvVMtSTB4lX2fZXxwAAAEY"]
[Thu Dec 25 23:58:46.855047 2025] [:error] [pid 27869:tid 27887] [client 4.213.65.240:42629] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1fNhNK7_n86kBD7qcPnAAAAJA"]
[Thu Dec 25 23:58:47.327492 2025] [:error] [pid 22043:tid 22060] [client 4.213.65.240:12037] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1fNz4YVtlb2Iz_QE5y4QAAAAw"]
[Thu Dec 25 23:58:47.725282 2025] [:error] [pid 27869:tid 27886] [client 4.213.65.240:35747] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1fNxNK7_n86kBD7qcPngAAAI8"]
[Thu Dec 25 23:58:48.343347 2025] [:error] [pid 22043:tid 22057] [client 4.213.65.240:35712] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1fOD4YVtlb2Iz_QE5y5AAAAAk"]
[Thu Dec 25 23:58:48.820506 2025] [:error] [pid 22043:tid 22066] [client 4.213.65.240:49801] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1fOD4YVtlb2Iz_QE5y5gAAABI"]
[Thu Dec 25 23:58:49.207290 2025] [:error] [pid 27869:tid 27890] [client 4.213.65.240:35720] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1fORNK7_n86kBD7qcPogAAAJM"]
[Thu Dec 25 23:58:49.693591 2025] [:error] [pid 22044:tid 22096] [client 4.213.65.240:42628] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aU1fOXPTC5rQKTB0FQ_KYAAAANU"]
[Thu Dec 25 23:58:50.031942 2025] [:error] [pid 22131:tid 22159] [client 4.213.65.240:12043] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aU1fOpvVMtSTB4lX2fZXyQAAAFc"]
[Thu Dec 25 23:58:50.339446 2025] [:error] [pid 27869:tid 27892] [client 4.213.65.240:49827] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aU1fOhNK7_n86kBD7qcPpAAAAJU"]
[Thu Dec 25 23:58:50.730113 2025] [:error] [pid 27869:tid 27889] [client 4.213.65.240:12062] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aU1fOhNK7_n86kBD7qcPpwAAAJI"]
[Thu Dec 25 23:58:51.400852 2025] [:error] [pid 22043:tid 22058] [client 4.213.65.240:33611] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU1fOz4YVtlb2Iz_QE5y6wAAAAo"]
[Thu Dec 25 23:58:51.859259 2025] [:error] [pid 27869:tid 27881] [client 4.213.65.240:39334] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU1fOxNK7_n86kBD7qcPqQAAAIo"]
[Thu Dec 25 23:58:52.569499 2025] [:error] [pid 27869:tid 27875] [client 4.213.65.240:34667] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU1fPBNK7_n86kBD7qcPqgAAAIQ"]
[Thu Dec 25 23:58:53.011620 2025] [:error] [pid 27869:tid 27874] [client 4.213.65.240:40127] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU1fPRNK7_n86kBD7qcPrAAAAIM"]
[Thu Dec 25 23:58:53.412738 2025] [:error] [pid 22045:tid 22110] [client 4.213.65.240:32450] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1fPasGGmXjDnvlmHuPzgAAAUg"]
[Thu Dec 25 23:58:53.948304 2025] [:error] [pid 27869:tid 27880] [client 4.213.65.240:33652] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1fPRNK7_n86kBD7qcPsQAAAIk"]
[Thu Dec 25 23:58:54.353364 2025] [:error] [pid 22045:tid 22124] [client 4.213.65.240:45525] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1fPqsGGmXjDnvlmHuP0QAAAVY"]
[Thu Dec 25 23:58:55.398128 2025] [:error] [pid 22045:tid 22122] [client 4.213.65.240:33609] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aU1fP6sGGmXjDnvlmHuP0gAAAVQ"]
[Thu Dec 25 23:58:55.921623 2025] [:error] [pid 22043:tid 22051] [client 4.213.65.240:49820] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aU1fPz4YVtlb2Iz_QE5y9AAAAAM"]
[Thu Dec 25 23:58:56.508454 2025] [:error] [pid 22044:tid 22078] [client 4.213.65.240:40085] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aU1fQHPTC5rQKTB0FQ_KZgAAAMM"]
[Thu Dec 25 23:58:56.953700 2025] [:error] [pid 22044:tid 22076] [client 4.213.65.240:45531] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aU1fQHPTC5rQKTB0FQ_KaAAAAME"]
[Thu Dec 25 23:58:57.395541 2025] [:error] [pid 22043:tid 22069] [client 4.213.65.240:35748] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aU1fQT4YVtlb2Iz_QE5y9gAAABU"]
[Thu Dec 25 23:58:58.018684 2025] [:error] [pid 27869:tid 27871] [client 4.213.65.240:12034] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aU1fQhNK7_n86kBD7qcPtwAAAIA"]
[Thu Dec 25 23:58:58.535822 2025] [:error] [pid 22043:tid 22056] [client 4.213.65.240:40076] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aU1fQj4YVtlb2Iz_QE5y9wAAAAg"]
[Thu Dec 25 23:58:58.913774 2025] [:error] [pid 27869:tid 27881] [client 4.213.65.240:35715] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aU1fQhNK7_n86kBD7qcPuQAAAIo"]
[Thu Dec 25 23:58:59.469857 2025] [:error] [pid 22043:tid 22067] [client 4.213.65.240:33642] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aU1fQz4YVtlb2Iz_QE5y-gAAABM"]
[Thu Dec 25 23:58:59.844416 2025] [:error] [pid 22131:tid 22136] [client 4.213.65.240:45564] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aU1fQ5vVMtSTB4lX2fZXzwAAAEM"]
[Thu Dec 25 23:59:00.415929 2025] [:error] [pid 27869:tid 27876] [client 4.213.65.240:33633] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aU1fRBNK7_n86kBD7qcPuwAAAIU"]
[Thu Dec 25 23:59:01.318911 2025] [:error] [pid 27869:tid 27891] [client 4.213.65.240:40045] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aU1fRRNK7_n86kBD7qcPvQAAAJQ"]
[Thu Dec 25 23:59:01.693983 2025] [:error] [pid 22043:tid 22049] [client 4.213.65.240:34110] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aU1fRT4YVtlb2Iz_QE5y_QAAAAE"]
[Thu Dec 25 23:59:02.589195 2025] [:error] [pid 27869:tid 27890] [client 4.213.65.240:40000] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aU1fRhNK7_n86kBD7qcPwwAAAJM"]
[Thu Dec 25 23:59:03.038645 2025] [:error] [pid 27869:tid 27884] [client 4.213.65.240:11755] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aU1fRxNK7_n86kBD7qcPxAAAAI0"]
[Thu Dec 25 23:59:03.636020 2025] [:error] [pid 27869:tid 27894] [client 4.213.65.240:11746] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aU1fRxNK7_n86kBD7qcPxwAAAJc"]
[Thu Dec 25 23:59:04.071319 2025] [:error] [pid 22044:tid 22084] [client 4.213.65.240:65171] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aU1fSHPTC5rQKTB0FQ_KcwAAAMk"]
[Thu Dec 25 23:59:04.602511 2025] [:error] [pid 27869:tid 27875] [client 4.213.65.240:65164] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aU1fSBNK7_n86kBD7qcPygAAAIQ"]
[Thu Dec 25 23:59:04.999961 2025] [:error] [pid 22131:tid 22159] [client 4.213.65.240:40018] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aU1fSJvVMtSTB4lX2fZX1AAAAFc"]
[Thu Dec 25 23:59:05.873491 2025] [:error] [pid 22045:tid 22123] [client 4.213.65.240:34924] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aU1fSasGGmXjDnvlmHuP2gAAAVU"]
[Thu Dec 25 23:59:06.857598 2025] [:error] [pid 22044:tid 22079] [client 4.213.65.240:65198] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aU1fSnPTC5rQKTB0FQ_KdQAAAMQ"]
[Thu Dec 25 23:59:07.706619 2025] [:error] [pid 27869:tid 27895] [client 4.213.65.240:65178] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1fSxNK7_n86kBD7qcPzwAAAJg"]
[Thu Dec 25 23:59:08.378478 2025] [:error] [pid 22045:tid 22115] [client 4.213.65.240:11991] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1fTKsGGmXjDnvlmHuP3QAAAU0"]
[Thu Dec 25 23:59:09.468872 2025] [:error] [pid 22043:tid 22066] [client 4.213.65.240:27721] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1fTT4YVtlb2Iz_QE5zAgAAABI"]
[Thu Dec 25 23:59:10.115844 2025] [:error] [pid 22043:tid 22069] [client 4.213.65.240:42593] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1fTj4YVtlb2Iz_QE5zBQAAABU"]
[Thu Dec 25 23:59:11.088150 2025] [:error] [pid 22131:tid 22151] [client 4.213.65.240:58953] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU1fT5vVMtSTB4lX2fZX3wAAAFA"]
[Thu Dec 25 23:59:12.522087 2025] [:error] [pid 27869:tid 27894] [client 4.213.65.240:42573] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU1fUBNK7_n86kBD7qcP1AAAAJc"]
[Thu Dec 25 23:59:13.731299 2025] [:error] [pid 22045:tid 22120] [client 4.213.65.240:58967] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU1fUasGGmXjDnvlmHuP4QAAAVI"]
[Thu Dec 25 23:59:14.807958 2025] [:error] [pid 22043:tid 22049] [client 4.213.65.240:11997] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU1fUj4YVtlb2Iz_QE5zCwAAAAE"]
[Thu Dec 25 23:59:16.113254 2025] [:error] [pid 27869:tid 27882] [client 4.213.65.240:11421] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU1fVBNK7_n86kBD7qcP1gAAAIs"]
[Thu Dec 25 23:59:16.958690 2025] [:error] [pid 22043:tid 22048] [client 4.213.65.240:43102] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU1fVD4YVtlb2Iz_QE5zDgAAAAA"]
[Thu Dec 25 23:59:18.598334 2025] [:error] [pid 22043:tid 22056] [client 4.213.65.240:58954] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU1fVj4YVtlb2Iz_QE5zGwAAAAg"]
[Thu Dec 25 23:59:19.184475 2025] [:error] [pid 27869:tid 27879] [client 4.213.65.240:58977] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU1fVxNK7_n86kBD7qcP2QAAAIg"]
[Thu Dec 25 23:59:19.752097 2025] [:error] [pid 27869:tid 27875] [client 4.213.65.240:41882] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aU1fVxNK7_n86kBD7qcP2gAAAIQ"]
[Thu Dec 25 23:59:20.324862 2025] [:error] [pid 27869:tid 27891] [client 4.213.65.240:18600] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aU1fWBNK7_n86kBD7qcP3QAAAJQ"]
[Thu Dec 25 23:59:21.001751 2025] [:error] [pid 22131:tid 22156] [client 4.213.65.240:33812] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aU1fWZvVMtSTB4lX2fZX6gAAAFQ"]
[Thu Dec 25 23:59:22.306810 2025] [:error] [pid 22131:tid 22157] [client 4.213.65.240:18619] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aU1fWpvVMtSTB4lX2fZX7AAAAFU"]
[Thu Dec 25 23:59:23.020226 2025] [:error] [pid 22045:tid 22109] [client 4.213.65.240:18621] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aU1fW6sGGmXjDnvlmHuP6wAAAUc"]
[Thu Dec 25 23:59:24.142436 2025] [:error] [pid 22045:tid 22114] [client 4.213.65.240:46163] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aU1fXKsGGmXjDnvlmHuP7gAAAUw"]
[Thu Dec 25 23:59:25.295868 2025] [:error] [pid 22045:tid 22111] [client 4.213.65.240:41916] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aU1fXasGGmXjDnvlmHuP7wAAAUk"]
[Thu Dec 25 23:59:26.998846 2025] [:error] [pid 27869:tid 27883] [client 4.213.65.240:33814] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aU1fXhNK7_n86kBD7qcP7AAAAIw"]
[Thu Dec 25 23:59:27.903135 2025] [:error] [pid 22045:tid 22107] [client 4.213.65.240:49729] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU1fX6sGGmXjDnvlmHuP9gAAAUU"]
[Thu Dec 25 23:59:29.069517 2025] [:error] [pid 22044:tid 22085] [client 4.213.65.240:49786] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU1fYXPTC5rQKTB0FQ_KggAAAMo"]
[Thu Dec 25 23:59:30.126484 2025] [:error] [pid 27869:tid 27882] [client 4.213.65.240:40628] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU1fYhNK7_n86kBD7qcP8wAAAIs"]
[Thu Dec 25 23:59:31.445421 2025] [:error] [pid 22043:tid 22058] [client 4.213.65.240:49739] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU1fYz4YVtlb2Iz_QE5zKAAAAAo"]
[Thu Dec 25 23:59:32.316741 2025] [:error] [pid 27869:tid 27872] [client 4.213.65.240:11393] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1fZBNK7_n86kBD7qcP-wAAAIE"]
[Thu Dec 25 23:59:33.193001 2025] [:error] [pid 22043:tid 22065] [client 4.213.65.240:39285] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1fZT4YVtlb2Iz_QE5zKQAAABE"]
[Thu Dec 25 23:59:35.583794 2025] [:error] [pid 22045:tid 22124] [client 4.213.65.240:18634] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1fZ6sGGmXjDnvlmHuP_AAAAVY"]
[Thu Dec 25 23:59:37.077934 2025] [:error] [pid 22131:tid 22151] [client 4.213.65.240:39273] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1faZvVMtSTB4lX2fZX_QAAAFA"]
[Thu Dec 25 23:59:38.283077 2025] [:error] [pid 27869:tid 27892] [client 4.213.65.240:11399] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1fahNK7_n86kBD7qcQBAAAAJU"]
[Thu Dec 25 23:59:39.648408 2025] [:error] [pid 22131:tid 22133] [client 4.213.65.240:50347] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1fa5vVMtSTB4lX2fZYAgAAAEA"]
[Thu Dec 25 23:59:40.957604 2025] [:error] [pid 27869:tid 27884] [client 4.213.65.240:11416] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1fbBNK7_n86kBD7qcQCgAAAI0"]
[Thu Dec 25 23:59:41.538193 2025] [:error] [pid 27869:tid 27881] [client 4.213.65.240:32784] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1fbRNK7_n86kBD7qcQDAAAAIo"]
[Thu Dec 25 23:59:42.346204 2025] [:error] [pid 22131:tid 22139] [client 4.213.65.240:18671] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xaz.php"] [unique_id "aU1fbpvVMtSTB4lX2fZYAwAAAEU"]
[Thu Dec 25 23:59:43.563879 2025] [proxy_fcgi:error] [pid 27869:tid 27892] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:44.488299 2025] [proxy_fcgi:error] [pid 27869:tid 27871] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:44.659915 2025] [proxy_fcgi:error] [pid 27869:tid 27876] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:45.295017 2025] [proxy_fcgi:error] [pid 27869:tid 27881] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:46.268959 2025] [proxy_fcgi:error] [pid 27869:tid 27872] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:46.623689 2025] [proxy_fcgi:error] [pid 27869:tid 27885] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:46.800435 2025] [proxy_fcgi:error] [pid 27869:tid 27883] [client 4.213.65.240:32803] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 23:59:46.970640 2025] [:error] [pid 27869:tid 27889] [client 4.213.65.240:32803] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1fchNK7_n86kBD7qcQIQAAAJI"]
[Thu Dec 25 23:59:48.190221 2025] [:error] [pid 27869:tid 27871] [client 4.213.65.240:50314] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1fdBNK7_n86kBD7qcQJAAAAIA"]
[Thu Dec 25 23:59:49.607005 2025] [:error] [pid 27869:tid 27881] [client 4.213.65.240:50324] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1fdRNK7_n86kBD7qcQKwAAAIo"]
[Thu Dec 25 23:59:50.263405 2025] [:error] [pid 22131:tid 22143] [client 4.213.65.240:34490] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1fdpvVMtSTB4lX2fZYDAAAAEk"]
[Thu Dec 25 23:59:50.922300 2025] [:error] [pid 22043:tid 22054] [client 4.213.65.240:50343] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU1fdj4YVtlb2Iz_QE5zPgAAAAY"]
[Thu Dec 25 23:59:51.677039 2025] [:error] [pid 22045:tid 22124] [client 4.213.65.240:33152] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU1fd6sGGmXjDnvlmHuQCgAAAVY"]
[Thu Dec 25 23:59:52.263518 2025] [:error] [pid 22043:tid 22064] [client 4.213.65.240:34448] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU1feD4YVtlb2Iz_QE5zQAAAABA"]
[Thu Dec 25 23:59:53.825990 2025] [:error] [pid 22043:tid 22070] [client 4.213.65.240:41283] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU1feT4YVtlb2Iz_QE5zQgAAABY"]
[Thu Dec 25 23:59:55.172070 2025] [:error] [pid 27869:tid 27886] [client 4.213.65.240:11496] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1fexNK7_n86kBD7qcQLQAAAI8"]
[Thu Dec 25 23:59:56.358864 2025] [:error] [pid 27869:tid 27872] [client 4.213.65.240:53911] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1ffBNK7_n86kBD7qcQLgAAAIE"]
[Thu Dec 25 23:59:57.851383 2025] [:error] [pid 22044:tid 22085] [client 4.213.65.240:34462] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1ffXPTC5rQKTB0FQ_KpQAAAMo"]
[Fri Dec 26 00:00:00.180715 2025] [:error] [pid 22045:tid 22109] [client 4.213.65.240:53259] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1fgKsGGmXjDnvlmHuQFQAAAUc"]
[Fri Dec 26 00:00:01.596728 2025] [:error] [pid 27869:tid 27879] [client 4.213.65.240:11508] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aU1fgRNK7_n86kBD7qcQMgAAAIg"]
[Fri Dec 26 00:00:02.604329 2025] [:error] [pid 27869:tid 27875] [client 4.213.65.240:33203] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aU1fghNK7_n86kBD7qcQMwAAAIQ"]
[Fri Dec 26 00:00:03.316380 2025] [:error] [pid 27869:tid 27871] [client 4.213.65.240:51684] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aU1fgxNK7_n86kBD7qcQNQAAAIA"]
[Fri Dec 26 00:00:04.895108 2025] [:error] [pid 22131:tid 22140] [client 4.213.65.240:34454] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aU1fhJvVMtSTB4lX2fZYGQAAAEY"]
[Fri Dec 26 00:00:06.097108 2025] [:error] [pid 22131:tid 22150] [client 4.213.65.240:33173] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aU1fhpvVMtSTB4lX2fZYGwAAAE8"]
[Fri Dec 26 00:00:06.746087 2025] [:error] [pid 22045:tid 22105] [client 4.213.65.240:51651] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aU1fhqsGGmXjDnvlmHuQHAAAAUM"]
[Fri Dec 26 00:00:07.776501 2025] [:error] [pid 22131:tid 22139] [client 4.213.65.240:53253] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aU1fh5vVMtSTB4lX2fZYHgAAAEU"]
[Fri Dec 26 00:00:08.668787 2025] [:error] [pid 22043:tid 22048] [client 4.213.65.240:51655] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aU1fiD4YVtlb2Iz_QE5zTAAAAAA"]
[Fri Dec 26 00:00:09.938517 2025] [:error] [pid 27869:tid 27887] [client 4.213.65.240:33189] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1fiRNK7_n86kBD7qcQOwAAAJA"]
[Fri Dec 26 00:00:11.365937 2025] [:error] [pid 27869:tid 27890] [client 4.213.65.240:12277] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1fixNK7_n86kBD7qcQPwAAAJM"]
[Fri Dec 26 00:00:12.809660 2025] [:error] [pid 22045:tid 22108] [client 4.213.65.240:51672] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1fjKsGGmXjDnvlmHuQIwAAAUY"]
[Fri Dec 26 00:00:14.848666 2025] [:error] [pid 22045:tid 22117] [client 4.213.65.240:34044] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1fjqsGGmXjDnvlmHuQJwAAAU8"]
[Fri Dec 26 00:00:15.692385 2025] [:error] [pid 22043:tid 22071] [client 4.213.65.240:32876] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU1fjz4YVtlb2Iz_QE5zTwAAABc"]
[Fri Dec 26 00:00:16.619406 2025] [:error] [pid 27869:tid 27894] [client 4.213.65.240:57328] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU1fkBNK7_n86kBD7qcQRgAAAJc"]
[Fri Dec 26 00:00:17.226510 2025] [:error] [pid 22045:tid 22120] [client 4.213.65.240:51682] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU1fkasGGmXjDnvlmHuQKAAAAVI"]
[Fri Dec 26 00:00:17.870742 2025] [:error] [pid 22045:tid 22106] [client 4.213.65.240:34013] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU1fkasGGmXjDnvlmHuQKgAAAUQ"]
[Fri Dec 26 00:00:18.533754 2025] [:error] [pid 27869:tid 27889] [client 4.213.65.240:32849] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1fkhNK7_n86kBD7qcQSwAAAJI"]
[Fri Dec 26 00:00:20.233389 2025] [:error] [pid 22044:tid 22081] [client 4.213.65.240:33984] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1flHPTC5rQKTB0FQ_KvgAAAMY"]
[Fri Dec 26 00:00:21.462455 2025] [:error] [pid 22043:tid 22068] [client 4.213.65.240:32871] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1flT4YVtlb2Iz_QE5zWAAAABQ"]
[Fri Dec 26 00:00:21.985134 2025] [:error] [pid 22043:tid 22058] [client 4.213.65.240:32866] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1flT4YVtlb2Iz_QE5zWgAAAAo"]
[Fri Dec 26 00:00:24.549415 2025] [:error] [pid 27869:tid 27878] [client 4.213.65.240:57394] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aU1fmBNK7_n86kBD7qcQYQAAAIc"]
[Fri Dec 26 00:00:26.492686 2025] [:error] [pid 22044:tid 22090] [client 4.213.65.240:32105] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aU1fmnPTC5rQKTB0FQ_KwgAAAM8"]
[Fri Dec 26 00:00:28.280936 2025] [:error] [pid 22131:tid 22140] [client 4.213.65.240:46271] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aU1fnJvVMtSTB4lX2fZYMwAAAEY"]
[Fri Dec 26 00:00:30.134477 2025] [:error] [pid 27869:tid 27888] [client 4.213.65.240:57299] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aU1fnhNK7_n86kBD7qcQfQAAAJE"]
[Fri Dec 26 00:00:31.123926 2025] [:error] [pid 27869:tid 27890] [client 4.213.65.240:12209] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU1fnxNK7_n86kBD7qcQgAAAAJM"]
[Fri Dec 26 00:00:32.486366 2025] [:error] [pid 22043:tid 22051] [client 4.213.65.240:46211] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU1foD4YVtlb2Iz_QE5zdQAAAAM"]
[Fri Dec 26 00:00:34.450226 2025] [:error] [pid 22044:tid 22098] [client 4.213.65.240:32854] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU1fonPTC5rQKTB0FQ_K0wAAANc"]
[Fri Dec 26 00:00:36.504313 2025] [:error] [pid 27869:tid 27888] [client 4.213.65.240:32065] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU1fpBNK7_n86kBD7qcQjwAAAJE"]
[Fri Dec 26 00:00:38.063467 2025] [:error] [pid 22045:tid 22125] [client 4.213.65.240:57326] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1fpqsGGmXjDnvlmHuQNwAAAVc"]
[Fri Dec 26 00:00:38.610274 2025] [:error] [pid 22043:tid 22072] [client 4.213.65.240:44250] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1fpj4YVtlb2Iz_QE5zfgAAABg"]
[Fri Dec 26 00:00:41.175055 2025] [:error] [pid 27869:tid 27876] [client 4.213.65.240:34015] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1fqRNK7_n86kBD7qcQnwAAAIU"]
[Fri Dec 26 00:00:42.447996 2025] [:error] [pid 22044:tid 22093] [client 4.213.65.240:46256] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1fqnPTC5rQKTB0FQ_K4wAAANI"]
[Fri Dec 26 00:00:44.201126 2025] [:error] [pid 27869:tid 27891] [client 4.213.65.240:46241] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU1frBNK7_n86kBD7qcQpwAAAJQ"]
[Fri Dec 26 00:00:44.820028 2025] [:error] [pid 22045:tid 22125] [client 4.213.65.240:32082] [client 4.213.65.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU1frKsGGmXjDnvlmHuQRwAAAVc"]
[Fri Dec 26 00:00:46.081309 2025] [proxy_fcgi:error] [pid 27869:tid 27884] [client 4.213.65.240:57332] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 00:00:46.424563 2025] [proxy_fcgi:error] [pid 27869:tid 27887] [client 4.213.65.240:57332] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 00:00:46.591467 2025] [proxy_fcgi:error] [pid 27869:tid 27881] [client 4.213.65.240:57332] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 00:00:46.938667 2025] [proxy_fcgi:error] [pid 27869:tid 27880] [client 4.213.65.240:57332] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 00:00:47.443928 2025] [proxy_fcgi:error] [pid 27869:tid 27892] [client 4.213.65.240:57332] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 00:00:47.620763 2025] [proxy_fcgi:error] [pid 27869:tid 27893] [client 4.213.65.240:57332] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 01:06:05.212366 2025] [autoindex:error] [pid 24864:tid 24932] [client 18.209.228.126:19683] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 01:06:06.408430 2025] [autoindex:error] [pid 24946:tid 24964] [client 149.143.131.107:41689] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 01:06:08.376464 2025] [autoindex:error] [pid 24863:tid 24893] [client 216.46.91.152:49827] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 01:13:33.433658 2025] [autoindex:error] [pid 24862:tid 24874] [client 74.7.227.6:55920] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 10:35:08.579865 2025] [autoindex:error] [pid 15063:tid 15077] [client 47.128.17.41:52548] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 10:39:33.143078 2025] [autoindex:error] [pid 28268:tid 28297] [client 155.94.177.69:37695] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 10:43:10.878216 2025] [autoindex:error] [pid 28268:tid 28289] [client 1.40.9.71:40447] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 10:43:14.885020 2025] [autoindex:error] [pid 28270:tid 28352] [client 1.41.251.211:45571] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 10:43:19.595902 2025] [autoindex:error] [pid 28270:tid 28342] [client 1.41.251.211:45571] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 13:53:11.993864 2025] [autoindex:error] [pid 34865:tid 34881] [client 149.56.160.145:39315] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 13:53:14.235750 2025] [autoindex:error] [pid 15063:tid 15088] [client 149.56.160.145:55821] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:31.585868 2025] [proxy_fcgi:error] [pid 28270:tid 28337] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:32.016645 2025] [proxy_fcgi:error] [pid 28270:tid 28336] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:32.548969 2025] [proxy_fcgi:error] [pid 28270:tid 28340] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:32.986599 2025] [proxy_fcgi:error] [pid 28270:tid 28334] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:33.428951 2025] [proxy_fcgi:error] [pid 28270:tid 28352] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:33.867883 2025] [proxy_fcgi:error] [pid 28270:tid 28349] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:34.333617 2025] [proxy_fcgi:error] [pid 28270:tid 28330] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:34.829628 2025] [proxy_fcgi:error] [pid 28270:tid 28338] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:35.737944 2025] [proxy_fcgi:error] [pid 28270:tid 28335] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:36.686083 2025] [proxy_fcgi:error] [pid 28270:tid 28339] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:37.160919 2025] [proxy_fcgi:error] [pid 28270:tid 28353] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:38.027649 2025] [proxy_fcgi:error] [pid 28270:tid 28329] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:38.520607 2025] [proxy_fcgi:error] [pid 28270:tid 28348] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:39.307641 2025] [proxy_fcgi:error] [pid 28270:tid 28337] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:39.783612 2025] [proxy_fcgi:error] [pid 28270:tid 28341] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:40.234773 2025] [proxy_fcgi:error] [pid 28270:tid 28335] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:40.777612 2025] [proxy_fcgi:error] [pid 28270:tid 28331] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:41.231965 2025] [proxy_fcgi:error] [pid 28270:tid 28329] [client 203.159.81.14:32839] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:49.411805 2025] [:error] [pid 28270:tid 28334] [client 203.159.81.14:32839] [client 203.159.81.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4ttV9Ac79_ckdPN5L_jwAAAIU"]
[Fri Dec 26 14:39:52.911301 2025] [:error] [pid 28269:tid 28310] [client 203.159.81.33:60695] [client 203.159.81.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4tuJ3ZK8bJ-c9-kjPwvgAAAEg"]
[Fri Dec 26 14:39:56.691830 2025] [proxy_fcgi:error] [pid 28269:tid 28305] [client 203.159.81.46:41255] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:39:58.106528 2025] [:error] [pid 28269:tid 28303] [client 203.159.81.46:41255] [client 203.159.81.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aU4tvp3ZK8bJ-c9-kjPw7wAAAEE"]
[Fri Dec 26 14:40:00.106617 2025] [proxy_fcgi:error] [pid 28355:tid 28380] [client 203.159.81.7:26321] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:40:00.582794 2025] [:error] [pid 28355:tid 28367] [client 203.159.81.7:26321] [client 203.159.81.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aU4twLsFqKXf7ADZcTbB_QAAAMo"]
[Fri Dec 26 14:40:01.981275 2025] [proxy_fcgi:error] [pid 28270:tid 28353] [client 203.159.81.13:51749] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:40:05.040914 2025] [:error] [pid 28270:tid 28334] [client 203.159.81.13:51749] [client 203.159.81.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aU4txV9Ac79_ckdPN5IAhQAAAIU"]
[Fri Dec 26 14:40:06.488397 2025] [:error] [pid 28355:tid 28369] [client 203.159.81.18:48567] [client 203.159.81.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU4txrsFqKXf7ADZcTbCRQAAAMw"]
[Fri Dec 26 14:40:07.976348 2025] [:error] [pid 28269:tid 28309] [client 203.159.81.22:22079] [client 203.159.81.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aU4tx53ZK8bJ-c9-kjPxQAAAAEc"]
[Fri Dec 26 14:40:10.065258 2025] [:error] [pid 7160:tid 7167] [client 203.159.81.30:36205] [client 203.159.81.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aU4tyuw_ihNZR5L8vEUT1gAAAYQ"]
[Fri Dec 26 14:40:11.001339 2025] [:error] [pid 34865:tid 34867] [client 203.159.81.22:26139] [client 203.159.81.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aU4ty6i4zjVVKBdvuTSRLwAAAUA"]
[Fri Dec 26 14:40:12.679314 2025] [:error] [pid 28269:tid 28316] [client 203.159.81.10:60405] [client 203.159.81.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aU4tzJ3ZK8bJ-c9-kjPxZQAAAE4"]
[Fri Dec 26 14:40:24.445070 2025] [:error] [pid 34865:tid 34875] [client 203.159.81.25:29119] [client 203.159.81.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aU4t2Ki4zjVVKBdvuTSRggAAAUg"]
[Fri Dec 26 15:25:07.158884 2025] [autoindex:error] [pid 28270:tid 28334] [client 66.249.64.9:56847] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 15:58:46.299785 2025] [:error] [pid 28269:tid 28319] [client 123.187.240.242:32875] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aU5ANp3ZK8bJ-c9-kjMRdgAAAFE"]
[Fri Dec 26 17:13:42.118659 2025] [autoindex:error] [pid 28269:tid 28309] [client 54.245.221.142:38694] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 18:01:51.510668 2025] [autoindex:error] [pid 28270:tid 28333] [client 65.21.244.165:46226] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 19:54:08.968241 2025] [autoindex:error] [pid 34865:tid 34867] [client 47.128.43.100:17790] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 21:11:02.004112 2025] [proxy_fcgi:error] [pid 28268:tid 28296] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.146067 2025] [proxy_fcgi:error] [pid 28268:tid 28276] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.300651 2025] [proxy_fcgi:error] [pid 28268:tid 28298] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.453981 2025] [proxy_fcgi:error] [pid 28268:tid 28279] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.586312 2025] [proxy_fcgi:error] [pid 28268:tid 28275] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.709716 2025] [proxy_fcgi:error] [pid 28268:tid 28297] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.846672 2025] [proxy_fcgi:error] [pid 28268:tid 28277] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:02.970527 2025] [proxy_fcgi:error] [pid 28268:tid 28281] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:03.093664 2025] [proxy_fcgi:error] [pid 28268:tid 28292] [client 13.75.69.45:14219] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:11:03.216343 2025] [:error] [pid 28268:tid 28293] [client 13.75.69.45:14219] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aU6JZ3c_KuO_55-uPTS7VwAAABI"]
[Fri Dec 26 21:11:03.466960 2025] [:error] [pid 28269:tid 28303] [client 13.75.69.45:14283] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aU6JZ53ZK8bJ-c9-kjOHrgAAAEE"]
[Fri Dec 26 21:11:03.940320 2025] [:error] [pid 28269:tid 28322] [client 13.75.69.45:14321] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aU6JZ53ZK8bJ-c9-kjOHsAAAAFQ"]
[Fri Dec 26 21:11:04.660563 2025] [:error] [pid 7160:tid 7174] [client 13.75.69.45:14272] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aU6JaOw_ihNZR5L8vEWOwAAAAYs"]
[Fri Dec 26 21:11:05.010984 2025] [:error] [pid 15063:tid 15089] [client 13.75.69.45:14210] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aU6JaeDsf_aL46Jy7z8Z8gAAARg"]
[Fri Dec 26 21:11:05.284115 2025] [:error] [pid 28270:tid 28352] [client 13.75.69.45:14216] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aU6JaV9Ac79_ckdPN5JgLQAAAJc"]
[Fri Dec 26 21:11:05.580129 2025] [:error] [pid 28270:tid 28333] [client 13.75.69.45:14146] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aU6JaV9Ac79_ckdPN5JgLwAAAIQ"]
[Fri Dec 26 21:11:05.877963 2025] [:error] [pid 28355:tid 28369] [client 13.75.69.45:14317] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aU6JabsFqKXf7ADZcTYiPQAAAMw"]
[Fri Dec 26 21:11:06.137934 2025] [:error] [pid 28355:tid 28364] [client 13.75.69.45:14316] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aU6JarsFqKXf7ADZcTYiPgAAAMc"]
[Fri Dec 26 21:11:06.373658 2025] [:error] [pid 7160:tid 7180] [client 13.75.69.45:14299] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aU6Jauw_ihNZR5L8vEWOwgAAAZE"]
[Fri Dec 26 21:11:06.779805 2025] [:error] [pid 28355:tid 28375] [client 13.75.69.45:14282] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aU6JarsFqKXf7ADZcTYiQQAAANI"]
[Fri Dec 26 21:11:07.075163 2025] [:error] [pid 7160:tid 7172] [client 13.75.69.45:14213] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aU6Ja-w_ihNZR5L8vEWOxAAAAYk"]
[Fri Dec 26 21:11:07.330006 2025] [:error] [pid 28355:tid 28359] [client 13.75.69.45:14294] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aU6Ja7sFqKXf7ADZcTYiQwAAAMI"]
[Fri Dec 26 21:11:07.623724 2025] [:error] [pid 28269:tid 28305] [client 13.75.69.45:14297] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aU6Ja53ZK8bJ-c9-kjOHsgAAAEM"]
[Fri Dec 26 21:11:08.087234 2025] [:error] [pid 28355:tid 28358] [client 13.75.69.45:14214] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aU6JbLsFqKXf7ADZcTYiRAAAAME"]
[Fri Dec 26 21:11:08.333179 2025] [:error] [pid 28269:tid 28307] [client 13.75.69.45:14223] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aU6JbJ3ZK8bJ-c9-kjOHswAAAEU"]
[Fri Dec 26 21:11:08.589987 2025] [:error] [pid 28269:tid 28302] [client 13.75.69.45:14313] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aU6JbJ3ZK8bJ-c9-kjOHtAAAAEA"]
[Fri Dec 26 21:11:08.837217 2025] [:error] [pid 28355:tid 28366] [client 13.75.69.45:14311] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aU6JbLsFqKXf7ADZcTYiSAAAAMk"]
[Fri Dec 26 21:11:09.167271 2025] [:error] [pid 15063:tid 15078] [client 13.75.69.45:14274] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aU6JbeDsf_aL46Jy7z8Z9QAAAQ0"]
[Fri Dec 26 21:11:09.419648 2025] [:error] [pid 7160:tid 7179] [client 13.75.69.45:14221] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aU6Jbew_ihNZR5L8vEWOxgAAAZA"]
[Fri Dec 26 21:11:09.687946 2025] [:error] [pid 15063:tid 15084] [client 13.75.69.45:14237] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aU6JbeDsf_aL46Jy7z8Z9wAAARM"]
[Fri Dec 26 21:11:09.951171 2025] [:error] [pid 34865:tid 34877] [client 13.75.69.45:14314] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aU6Jbai4zjVVKBdvuTT0cAAAAUo"]
[Fri Dec 26 21:11:10.372610 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:14306] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aU6Jbp3ZK8bJ-c9-kjOHuAAAAE0"]
[Fri Dec 26 21:11:10.641838 2025] [:error] [pid 28269:tid 28319] [client 13.75.69.45:14295] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aU6Jbp3ZK8bJ-c9-kjOHugAAAFE"]
[Fri Dec 26 21:11:10.943319 2025] [:error] [pid 15063:tid 15085] [client 13.75.69.45:14217] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aU6JbuDsf_aL46Jy7z8Z-AAAARQ"]
[Fri Dec 26 21:11:11.282693 2025] [:error] [pid 34865:tid 34867] [client 13.75.69.45:14324] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aU6Jb6i4zjVVKBdvuTT0cQAAAUA"]
[Fri Dec 26 21:11:11.571737 2025] [:error] [pid 34865:tid 34889] [client 13.75.69.45:14305] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aU6Jb6i4zjVVKBdvuTT0cwAAAVY"]
[Fri Dec 26 21:11:11.831744 2025] [:error] [pid 34865:tid 34886] [client 13.75.69.45:14320] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aU6Jb6i4zjVVKBdvuTT0dAAAAVM"]
[Fri Dec 26 21:11:12.131320 2025] [:error] [pid 15063:tid 15072] [client 13.75.69.45:14258] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aU6JcODsf_aL46Jy7z8Z-QAAAQc"]
[Fri Dec 26 21:11:12.398822 2025] [:error] [pid 28269:tid 28316] [client 13.75.69.45:14162] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aU6JcJ3ZK8bJ-c9-kjOHuwAAAE4"]
[Fri Dec 26 21:11:12.681515 2025] [:error] [pid 28269:tid 28313] [client 13.75.69.45:14323] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aU6JcJ3ZK8bJ-c9-kjOHvAAAAEs"]
[Fri Dec 26 21:11:12.948415 2025] [:error] [pid 28269:tid 28303] [client 13.75.69.45:14163] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aU6JcJ3ZK8bJ-c9-kjOHvQAAAEE"]
[Fri Dec 26 21:11:13.276863 2025] [:error] [pid 28268:tid 28294] [client 13.75.69.45:14226] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aU6JcXc_KuO_55-uPTS7WwAAABM"]
[Fri Dec 26 21:11:13.593687 2025] [:error] [pid 15063:tid 15070] [client 13.75.69.45:14304] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aU6JceDsf_aL46Jy7z8Z-gAAAQU"]
[Fri Dec 26 21:11:13.851157 2025] [:error] [pid 15063:tid 15076] [client 13.75.69.45:14285] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aU6JceDsf_aL46Jy7z8Z_AAAAQs"]
[Fri Dec 26 21:11:14.132215 2025] [:error] [pid 28355:tid 28369] [client 13.75.69.45:14302] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aU6JcrsFqKXf7ADZcTYiSwAAAMw"]
[Fri Dec 26 21:11:14.374393 2025] [:error] [pid 15063:tid 15069] [client 13.75.69.45:14293] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aU6JcuDsf_aL46Jy7z8Z_gAAAQQ"]
[Fri Dec 26 21:11:14.662757 2025] [:error] [pid 28268:tid 28290] [client 13.75.69.45:14334] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aU6Jcnc_KuO_55-uPTS7XAAAAA8"]
[Fri Dec 26 21:11:14.956391 2025] [:error] [pid 15063:tid 15081] [client 13.75.69.45:14246] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aU6JcuDsf_aL46Jy7z8Z_wAAARA"]
[Fri Dec 26 21:11:15.299623 2025] [:error] [pid 34865:tid 34884] [client 13.75.69.45:14309] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aU6Jc6i4zjVVKBdvuTT0dwAAAVE"]
[Fri Dec 26 21:11:15.702386 2025] [:error] [pid 28270:tid 28347] [client 13.75.69.45:14224] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU6Jc19Ac79_ckdPN5JgMgAAAJI"]
[Fri Dec 26 21:11:15.947600 2025] [:error] [pid 28270:tid 28335] [client 13.75.69.45:14266] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU6Jc19Ac79_ckdPN5JgMwAAAIY"]
[Fri Dec 26 21:11:16.366699 2025] [:error] [pid 15063:tid 15089] [client 13.75.69.45:14212] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU6JdODsf_aL46Jy7z8aAQAAARg"]
[Fri Dec 26 21:11:16.639506 2025] [:error] [pid 28270:tid 28336] [client 13.75.69.45:14326] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU6JdF9Ac79_ckdPN5JgNQAAAIc"]
[Fri Dec 26 21:11:16.878690 2025] [:error] [pid 28355:tid 28375] [client 13.75.69.45:14307] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aU6JdLsFqKXf7ADZcTYiTgAAANI"]
[Fri Dec 26 21:11:17.181283 2025] [:error] [pid 28269:tid 28305] [client 13.75.69.45:14259] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aU6JdZ3ZK8bJ-c9-kjOHwgAAAEM"]
[Fri Dec 26 21:11:17.459066 2025] [:error] [pid 34865:tid 34871] [client 13.75.69.45:14291] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aU6Jdai4zjVVKBdvuTT0ewAAAUQ"]
[Fri Dec 26 21:11:17.817282 2025] [:error] [pid 28270:tid 28338] [client 13.75.69.45:14327] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aU6JdV9Ac79_ckdPN5JgOQAAAIk"]
[Fri Dec 26 21:11:18.121071 2025] [:error] [pid 28269:tid 28307] [client 13.75.69.45:14279] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aU6Jdp3ZK8bJ-c9-kjOHwwAAAEU"]
[Fri Dec 26 21:11:18.398816 2025] [:error] [pid 34865:tid 34879] [client 13.75.69.45:14273] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aU6Jdqi4zjVVKBdvuTT0fQAAAUw"]
[Fri Dec 26 21:11:18.658312 2025] [:error] [pid 34865:tid 34890] [client 13.75.69.45:14278] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aU6Jdqi4zjVVKBdvuTT0fgAAAVc"]
[Fri Dec 26 21:11:19.018745 2025] [:error] [pid 34865:tid 34876] [client 13.75.69.45:14292] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aU6Jd6i4zjVVKBdvuTT0fwAAAUk"]
[Fri Dec 26 21:11:19.352744 2025] [:error] [pid 15063:tid 15068] [client 13.75.69.45:14286] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aU6Jd-Dsf_aL46Jy7z8aBQAAAQM"]
[Fri Dec 26 21:11:19.602331 2025] [:error] [pid 28268:tid 28276] [client 13.75.69.45:14218] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aU6Jd3c_KuO_55-uPTS7YQAAAAE"]
[Fri Dec 26 21:11:19.836170 2025] [:error] [pid 15063:tid 15084] [client 13.75.69.45:14235] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aU6Jd-Dsf_aL46Jy7z8aBgAAARM"]
[Fri Dec 26 21:11:20.111354 2025] [:error] [pid 15063:tid 15087] [client 13.75.69.45:14228] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aU6JeODsf_aL46Jy7z8aCAAAARY"]
[Fri Dec 26 21:11:20.405916 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:14164] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aU6JeOw_ihNZR5L8vEWOywAAAZY"]
[Fri Dec 26 21:11:20.713736 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:14298] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aU6JeOw_ihNZR5L8vEWOzAAAAZM"]
[Fri Dec 26 21:11:20.952480 2025] [:error] [pid 28269:tid 28309] [client 13.75.69.45:14330] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aU6JeJ3ZK8bJ-c9-kjOHxQAAAEc"]
[Fri Dec 26 21:11:21.274200 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14243] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aU6JeZ3ZK8bJ-c9-kjOHyAAAAEw"]
[Fri Dec 26 21:11:21.555949 2025] [:error] [pid 7160:tid 7176] [client 13.75.69.45:14261] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aU6Jeew_ihNZR5L8vEWO1AAAAY0"]
[Fri Dec 26 21:11:21.835858 2025] [:error] [pid 7160:tid 7166] [client 13.75.69.45:14189] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aU6Jeew_ihNZR5L8vEWO2wAAAYM"]
[Fri Dec 26 21:11:22.110188 2025] [:error] [pid 28269:tid 28304] [client 13.75.69.45:14332] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aU6Jep3ZK8bJ-c9-kjOIAQAAAEI"]
[Fri Dec 26 21:11:22.572488 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:14241] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aU6Jeuw_ihNZR5L8vEWO4wAAAZM"]
[Fri Dec 26 21:11:22.942242 2025] [:error] [pid 7160:tid 7180] [client 13.75.69.45:14234] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aU6Jeuw_ihNZR5L8vEWO5gAAAZE"]
[Fri Dec 26 21:11:23.243449 2025] [:error] [pid 7160:tid 7178] [client 13.75.69.45:14220] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aU6Je-w_ihNZR5L8vEWO5wAAAY8"]
[Fri Dec 26 21:11:23.658528 2025] [:error] [pid 28270:tid 28340] [client 13.75.69.45:14208] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aU6Je19Ac79_ckdPN5JgPQAAAIs"]
[Fri Dec 26 21:11:24.126598 2025] [:error] [pid 28269:tid 28318] [client 13.75.69.45:14300] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aU6JfJ3ZK8bJ-c9-kjOIFwAAAFA"]
[Fri Dec 26 21:11:24.488126 2025] [:error] [pid 7160:tid 7172] [client 13.75.69.45:14222] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aU6JfOw_ihNZR5L8vEWO6QAAAYk"]
[Fri Dec 26 21:11:24.866566 2025] [:error] [pid 28268:tid 28297] [client 13.75.69.45:14329] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aU6JfHc_KuO_55-uPTS7YwAAABY"]
[Fri Dec 26 21:11:25.158983 2025] [:error] [pid 28270:tid 28334] [client 13.75.69.45:14257] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aU6JfV9Ac79_ckdPN5JgPwAAAIU"]
[Fri Dec 26 21:11:25.399271 2025] [:error] [pid 28270:tid 28329] [client 13.75.69.45:14239] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aU6JfV9Ac79_ckdPN5JgQQAAAIA"]
[Fri Dec 26 21:11:25.691352 2025] [:error] [pid 15063:tid 15083] [client 13.75.69.45:14173] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aU6JfeDsf_aL46Jy7z8aDgAAARI"]
[Fri Dec 26 21:11:25.987957 2025] [:error] [pid 34865:tid 34881] [client 13.75.69.45:14281] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aU6Jfai4zjVVKBdvuTT0hwAAAU4"]
[Fri Dec 26 21:11:26.446455 2025] [:error] [pid 28270:tid 28347] [client 13.75.69.45:14211] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aU6Jfl9Ac79_ckdPN5JgQwAAAJI"]
[Fri Dec 26 21:11:26.735563 2025] [:error] [pid 28268:tid 28295] [client 13.75.69.45:14333] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aU6Jfnc_KuO_55-uPTS7ZQAAABQ"]
[Fri Dec 26 21:11:26.999080 2025] [:error] [pid 7160:tid 7181] [client 13.75.69.45:14154] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aU6Jfuw_ihNZR5L8vEWO6wAAAZI"]
[Fri Dec 26 21:11:27.270490 2025] [:error] [pid 28268:tid 28285] [client 13.75.69.45:14247] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aU6Jf3c_KuO_55-uPTS7aAAAAAo"]
[Fri Dec 26 21:11:27.546249 2025] [:error] [pid 28268:tid 28291] [client 13.75.69.45:14280] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aU6Jf3c_KuO_55-uPTS7agAAABA"]
[Fri Dec 26 21:11:27.836343 2025] [:error] [pid 34865:tid 34876] [client 13.75.69.45:14310] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aU6Jf6i4zjVVKBdvuTT0iwAAAUk"]
[Fri Dec 26 21:11:28.133271 2025] [:error] [pid 28270:tid 28346] [client 13.75.69.45:14315] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6JgF9Ac79_ckdPN5JgRAAAAJE"]
[Fri Dec 26 21:11:28.441795 2025] [:error] [pid 7160:tid 7183] [client 13.75.69.45:14182] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6JgOw_ihNZR5L8vEWO7QAAAZQ"]
[Fri Dec 26 21:11:28.775029 2025] [:error] [pid 28355:tid 28365] [client 13.75.69.45:14233] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6JgLsFqKXf7ADZcTYiigAAAMg"]
[Fri Dec 26 21:11:29.122799 2025] [:error] [pid 28270:tid 28331] [client 13.75.69.45:14171] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6JgV9Ac79_ckdPN5JgRwAAAII"]
[Fri Dec 26 21:11:29.559393 2025] [:error] [pid 28268:tid 28287] [client 13.75.69.45:14287] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aU6JgXc_KuO_55-uPTS7bQAAAAw"]
[Fri Dec 26 21:11:29.881210 2025] [:error] [pid 34865:tid 34873] [client 13.75.69.45:14271] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aU6Jgai4zjVVKBdvuTT0jQAAAUY"]
[Fri Dec 26 21:11:30.202712 2025] [:error] [pid 28269:tid 28323] [client 13.75.69.45:14152] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aU6Jgp3ZK8bJ-c9-kjOIGgAAAFU"]
[Fri Dec 26 21:11:30.528756 2025] [:error] [pid 28268:tid 28298] [client 13.75.69.45:14151] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aU6Jgnc_KuO_55-uPTS7cQAAABc"]
[Fri Dec 26 21:11:30.866967 2025] [:error] [pid 15063:tid 15080] [client 13.75.69.45:14236] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU6JguDsf_aL46Jy7z8aFAAAAQ8"]
[Fri Dec 26 21:11:31.267724 2025] [:error] [pid 34865:tid 34888] [client 13.75.69.45:14308] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU6Jg6i4zjVVKBdvuTT0kAAAAVU"]
[Fri Dec 26 21:11:31.677097 2025] [:error] [pid 34865:tid 34874] [client 13.75.69.45:14225] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU6Jg6i4zjVVKBdvuTT0kQAAAUc"]
[Fri Dec 26 21:11:32.128975 2025] [:error] [pid 28270:tid 28339] [client 13.75.69.45:14256] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aU6JhF9Ac79_ckdPN5JgSQAAAIo"]
[Fri Dec 26 21:11:32.423297 2025] [:error] [pid 28270:tid 28332] [client 13.75.69.45:14260] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aU6JhF9Ac79_ckdPN5JgSgAAAIM"]
[Fri Dec 26 21:11:32.828940 2025] [:error] [pid 15063:tid 15072] [client 13.75.69.45:14288] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aU6JhODsf_aL46Jy7z8aFQAAAQc"]
[Fri Dec 26 21:11:33.421627 2025] [:error] [pid 15063:tid 15070] [client 13.75.69.45:14179] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aU6JheDsf_aL46Jy7z8aFgAAAQU"]
[Fri Dec 26 21:11:33.860084 2025] [:error] [pid 15063:tid 15088] [client 13.75.69.45:14149] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aU6JheDsf_aL46Jy7z8aGAAAARc"]
[Fri Dec 26 21:11:34.282785 2025] [:error] [pid 15063:tid 15076] [client 13.75.69.45:14240] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aU6JhuDsf_aL46Jy7z8aGQAAAQs"]
[Fri Dec 26 21:11:34.678618 2025] [:error] [pid 28270:tid 28334] [client 13.75.69.45:14194] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aU6Jhl9Ac79_ckdPN5JgTwAAAIU"]
[Fri Dec 26 21:11:35.097057 2025] [:error] [pid 28270:tid 28329] [client 13.75.69.45:14296] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aU6Jh19Ac79_ckdPN5JgUAAAAIA"]
[Fri Dec 26 21:11:35.475714 2025] [:error] [pid 28355:tid 28362] [client 13.75.69.45:14190] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aU6Jh7sFqKXf7ADZcTYijQAAAMU"]
[Fri Dec 26 21:11:35.895673 2025] [:error] [pid 15063:tid 15078] [client 13.75.69.45:14148] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aU6Jh-Dsf_aL46Jy7z8aHQAAAQ0"]
[Fri Dec 26 21:11:36.377668 2025] [:error] [pid 34865:tid 34875] [client 13.75.69.45:14335] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aU6JiKi4zjVVKBdvuTT0lwAAAUg"]
[Fri Dec 26 21:11:36.690764 2025] [:error] [pid 15063:tid 15079] [client 13.75.69.45:14165] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aU6JiODsf_aL46Jy7z8aIgAAAQ4"]
[Fri Dec 26 21:11:37.054981 2025] [:error] [pid 15063:tid 15074] [client 13.75.69.45:14168] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aU6JieDsf_aL46Jy7z8aIwAAAQk"]
[Fri Dec 26 21:11:37.428865 2025] [:error] [pid 28270:tid 28347] [client 13.75.69.45:14108] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU6JiV9Ac79_ckdPN5JgUQAAAJI"]
[Fri Dec 26 21:11:38.590924 2025] [:error] [pid 7160:tid 7168] [client 13.75.69.45:14200] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU6Jiuw_ihNZR5L8vEWO8gAAAYU"]
[Fri Dec 26 21:11:38.885636 2025] [:error] [pid 7160:tid 7178] [client 13.75.69.45:14263] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU6Jiuw_ihNZR5L8vEWO9AAAAY8"]
[Fri Dec 26 21:11:39.207085 2025] [:error] [pid 7160:tid 7172] [client 13.75.69.45:14144] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU6Ji-w_ihNZR5L8vEWO9QAAAYk"]
[Fri Dec 26 21:11:39.692927 2025] [:error] [pid 7160:tid 7173] [client 13.75.69.45:14172] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aU6Ji-w_ihNZR5L8vEWO9wAAAYo"]
[Fri Dec 26 21:11:40.069543 2025] [:error] [pid 28270:tid 28336] [client 13.75.69.45:14242] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aU6JjF9Ac79_ckdPN5JgUgAAAIc"]
[Fri Dec 26 21:11:40.356611 2025] [:error] [pid 7160:tid 7179] [client 13.75.69.45:14328] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aU6JjOw_ihNZR5L8vEWO-wAAAZA"]
[Fri Dec 26 21:11:40.708027 2025] [:error] [pid 28355:tid 28366] [client 13.75.69.45:14276] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aU6JjLsFqKXf7ADZcTYijgAAAMk"]
[Fri Dec 26 21:11:41.029422 2025] [:error] [pid 34865:tid 34883] [client 13.75.69.45:14249] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6Jjai4zjVVKBdvuTT0mQAAAVA"]
[Fri Dec 26 21:11:41.469087 2025] [:error] [pid 28270:tid 28344] [client 13.75.69.45:14248] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6JjV9Ac79_ckdPN5JgUwAAAI8"]
[Fri Dec 26 21:11:41.909013 2025] [:error] [pid 34865:tid 34888] [client 13.75.69.45:14245] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6Jjai4zjVVKBdvuTT0mgAAAVU"]
[Fri Dec 26 21:11:42.248007 2025] [:error] [pid 15063:tid 15066] [client 13.75.69.45:14166] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6JjuDsf_aL46Jy7z8aKgAAAQE"]
[Fri Dec 26 21:11:42.634965 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:14084] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU6Jjuw_ihNZR5L8vEWPAQAAAZY"]
[Fri Dec 26 21:11:43.105451 2025] [:error] [pid 28268:tid 28290] [client 13.75.69.45:14083] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU6Jj3c_KuO_55-uPTS7dQAAAA8"]
[Fri Dec 26 21:11:43.515147 2025] [:error] [pid 28355:tid 28370] [client 13.75.69.45:14318] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU6Jj7sFqKXf7ADZcTYikwAAAM0"]
[Fri Dec 26 21:11:44.181452 2025] [:error] [pid 28355:tid 28367] [client 13.75.69.45:14268] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aU6JkLsFqKXf7ADZcTYilAAAAMo"]
[Fri Dec 26 21:11:44.508128 2025] [:error] [pid 28355:tid 28377] [client 13.75.69.45:14231] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU6JkLsFqKXf7ADZcTYilQAAANQ"]
[Fri Dec 26 21:11:44.808877 2025] [:error] [pid 28270:tid 28331] [client 13.75.69.45:14185] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU6JkF9Ac79_ckdPN5JgVQAAAII"]
[Fri Dec 26 21:11:45.281360 2025] [:error] [pid 28270:tid 28330] [client 13.75.69.45:14082] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU6JkV9Ac79_ckdPN5JgVgAAAIE"]
[Fri Dec 26 21:11:45.642700 2025] [:error] [pid 28269:tid 28321] [client 13.75.69.45:14267] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU6JkZ3ZK8bJ-c9-kjOINgAAAFM"]
[Fri Dec 26 21:11:46.086738 2025] [:error] [pid 28269:tid 28316] [client 13.75.69.45:14089] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aU6Jkp3ZK8bJ-c9-kjOINwAAAE4"]
[Fri Dec 26 21:11:46.427266 2025] [:error] [pid 28269:tid 28317] [client 13.75.69.45:14197] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aU6Jkp3ZK8bJ-c9-kjOIOAAAAE8"]
[Fri Dec 26 21:11:46.807526 2025] [:error] [pid 7160:tid 7171] [client 13.75.69.45:14227] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aU6Jkuw_ihNZR5L8vEWPBAAAAYg"]
[Fri Dec 26 21:11:47.137512 2025] [:error] [pid 28355:tid 28365] [client 13.75.69.45:14153] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aU6Jk7sFqKXf7ADZcTYimQAAAMg"]
[Fri Dec 26 21:11:47.477292 2025] [:error] [pid 7160:tid 7186] [client 13.75.69.45:14161] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6Jk-w_ihNZR5L8vEWPCAAAAZc"]
[Fri Dec 26 21:11:47.840464 2025] [:error] [pid 28268:tid 28298] [client 13.75.69.45:14275] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6Jk3c_KuO_55-uPTS7eQAAABc"]
[Fri Dec 26 21:11:48.175980 2025] [:error] [pid 28269:tid 28303] [client 13.75.69.45:14319] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6JlJ3ZK8bJ-c9-kjOIOwAAAEE"]
[Fri Dec 26 21:11:48.526960 2025] [:error] [pid 28355:tid 28378] [client 13.75.69.45:14254] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6JlLsFqKXf7ADZcTYimwAAANU"]
[Fri Dec 26 21:11:48.850370 2025] [:error] [pid 7160:tid 7169] [client 13.75.69.45:14175] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aU6JlOw_ihNZR5L8vEWPDQAAAYY"]
[Fri Dec 26 21:11:49.138938 2025] [:error] [pid 28269:tid 28311] [client 13.75.69.45:14204] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aU6JlZ3ZK8bJ-c9-kjOIPgAAAEk"]
[Fri Dec 26 21:11:49.578919 2025] [:error] [pid 28270:tid 28343] [client 13.75.69.45:14183] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aU6JlV9Ac79_ckdPN5JgWAAAAI4"]
[Fri Dec 26 21:11:50.042439 2025] [:error] [pid 28355:tid 28362] [client 13.75.69.45:14290] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aU6JlrsFqKXf7ADZcTYinQAAAMU"]
[Fri Dec 26 21:11:50.314494 2025] [:error] [pid 28268:tid 28279] [client 13.75.69.45:14269] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aU6Jlnc_KuO_55-uPTS7egAAAAQ"]
[Fri Dec 26 21:11:50.807779 2025] [:error] [pid 28268:tid 28288] [client 13.75.69.45:14181] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aU6Jlnc_KuO_55-uPTS7ewAAAA0"]
[Fri Dec 26 21:11:51.094396 2025] [:error] [pid 28355:tid 28363] [client 13.75.69.45:14177] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aU6Jl7sFqKXf7ADZcTYinwAAAMY"]
[Fri Dec 26 21:11:51.406046 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:14238] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aU6Jl-w_ihNZR5L8vEWPDwAAAZM"]
[Fri Dec 26 21:11:51.700391 2025] [:error] [pid 28355:tid 28357] [client 13.75.69.45:14303] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aU6Jl7sFqKXf7ADZcTYioAAAAMA"]
[Fri Dec 26 21:11:51.965681 2025] [:error] [pid 28355:tid 28374] [client 13.75.69.45:14091] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aU6Jl7sFqKXf7ADZcTYioQAAANE"]
[Fri Dec 26 21:11:52.300471 2025] [:error] [pid 28268:tid 28276] [client 13.75.69.45:14198] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aU6JmHc_KuO_55-uPTS7fAAAAAE"]
[Fri Dec 26 21:11:52.537737 2025] [:error] [pid 28355:tid 28377] [client 13.75.69.45:14195] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aU6JmLsFqKXf7ADZcTYipAAAANQ"]
[Fri Dec 26 21:11:52.887138 2025] [:error] [pid 28269:tid 28306] [client 13.75.69.45:14107] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU6JmJ3ZK8bJ-c9-kjOIRAAAAEQ"]
[Fri Dec 26 21:11:53.201327 2025] [:error] [pid 15063:tid 15076] [client 13.75.69.45:14284] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU6JmeDsf_aL46Jy7z8aLgAAAQs"]
[Fri Dec 26 21:11:53.612897 2025] [:error] [pid 15063:tid 15073] [client 13.75.69.45:14270] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU6JmeDsf_aL46Jy7z8aLwAAAQg"]
[Fri Dec 26 21:11:53.988115 2025] [:error] [pid 7160:tid 7165] [client 13.75.69.45:14111] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU6Jmew_ihNZR5L8vEWPFAAAAYI"]
[Fri Dec 26 21:11:54.323054 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:14085] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aU6Jmp3ZK8bJ-c9-kjOISAAAAE0"]
[Fri Dec 26 21:11:54.668213 2025] [:error] [pid 15063:tid 15084] [client 13.75.69.45:14110] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aU6JmuDsf_aL46Jy7z8aMAAAARM"]
[Fri Dec 26 21:11:55.052668 2025] [:error] [pid 28269:tid 28325] [client 13.75.69.45:14090] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aU6Jm53ZK8bJ-c9-kjOISwAAAFc"]
[Fri Dec 26 21:11:55.399067 2025] [:error] [pid 15063:tid 15088] [client 13.75.69.45:14095] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aU6Jm-Dsf_aL46Jy7z8aMQAAARc"]
[Fri Dec 26 21:11:55.671248 2025] [:error] [pid 15063:tid 15089] [client 13.75.69.45:14187] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aU6Jm-Dsf_aL46Jy7z8aMgAAARg"]
[Fri Dec 26 21:11:55.927991 2025] [:error] [pid 28355:tid 28376] [client 13.75.69.45:14106] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aU6Jm7sFqKXf7ADZcTYiqQAAANM"]
[Fri Dec 26 21:11:56.186796 2025] [:error] [pid 28355:tid 28365] [client 13.75.69.45:14206] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aU6JnLsFqKXf7ADZcTYiqgAAAMg"]
[Fri Dec 26 21:11:56.467163 2025] [:error] [pid 28355:tid 28360] [client 13.75.69.45:14138] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aU6JnLsFqKXf7ADZcTYirAAAAMM"]
[Fri Dec 26 21:11:56.782475 2025] [:error] [pid 28355:tid 28362] [client 13.75.69.45:14255] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aU6JnLsFqKXf7ADZcTYirQAAAMU"]
[Fri Dec 26 21:11:57.154262 2025] [:error] [pid 7160:tid 7183] [client 13.75.69.45:14103] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aU6Jnew_ihNZR5L8vEWPFwAAAZQ"]
[Fri Dec 26 21:11:57.477177 2025] [:error] [pid 28268:tid 28281] [client 13.75.69.45:14086] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aU6JnXc_KuO_55-uPTS7fwAAAAY"]
[Fri Dec 26 21:11:57.837626 2025] [:error] [pid 28355:tid 28359] [client 13.75.69.45:14160] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uana.php"] [unique_id "aU6JnbsFqKXf7ADZcTYirwAAAMI"]
[Fri Dec 26 21:11:58.130659 2025] [:error] [pid 28268:tid 28293] [client 13.75.69.45:14098] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aU6Jnnc_KuO_55-uPTS7gAAAABI"]
[Fri Dec 26 21:11:58.371153 2025] [:error] [pid 28268:tid 28280] [client 13.75.69.45:14253] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aU6Jnnc_KuO_55-uPTS7gQAAAAU"]
[Fri Dec 26 21:11:58.734477 2025] [:error] [pid 28268:tid 28295] [client 13.75.69.45:14232] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aU6Jnnc_KuO_55-uPTS7ggAAABQ"]
[Fri Dec 26 21:11:59.360920 2025] [:error] [pid 28269:tid 28323] [client 13.75.69.45:14155] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aU6Jn53ZK8bJ-c9-kjOITwAAAFU"]
[Fri Dec 26 21:11:59.645420 2025] [:error] [pid 28269:tid 28306] [client 13.75.69.45:14120] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aU6Jn53ZK8bJ-c9-kjOIUgAAAEQ"]
[Fri Dec 26 21:11:59.932743 2025] [:error] [pid 28269:tid 28318] [client 13.75.69.45:14262] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aU6Jn53ZK8bJ-c9-kjOIUwAAAFA"]
[Fri Dec 26 21:12:00.314786 2025] [:error] [pid 15063:tid 15071] [client 13.75.69.45:14192] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aU6JoODsf_aL46Jy7z8aOAAAAQY"]
[Fri Dec 26 21:12:00.591008 2025] [:error] [pid 28268:tid 28290] [client 13.75.69.45:14244] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aU6JoHc_KuO_55-uPTS7hQAAAA8"]
[Fri Dec 26 21:12:00.893347 2025] [:error] [pid 28268:tid 28294] [client 13.75.69.45:14265] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6JoHc_KuO_55-uPTS7hwAAABM"]
[Fri Dec 26 21:12:01.166103 2025] [:error] [pid 28269:tid 28303] [client 13.75.69.45:14176] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6JoZ3ZK8bJ-c9-kjOIVAAAAEE"]
[Fri Dec 26 21:12:01.498567 2025] [:error] [pid 15063:tid 15082] [client 13.75.69.45:14104] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6JoeDsf_aL46Jy7z8aPAAAARE"]
[Fri Dec 26 21:12:01.784363 2025] [:error] [pid 7160:tid 7167] [client 13.75.69.45:14229] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6Joew_ihNZR5L8vEWPGAAAAYQ"]
[Fri Dec 26 21:12:02.093606 2025] [:error] [pid 15063:tid 15073] [client 13.75.69.45:14127] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aU6JouDsf_aL46Jy7z8aPgAAAQg"]
[Fri Dec 26 21:12:02.372077 2025] [:error] [pid 7160:tid 7181] [client 13.75.69.45:14044] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aU6Jouw_ihNZR5L8vEWPGwAAAZI"]
[Fri Dec 26 21:12:02.637464 2025] [:error] [pid 28268:tid 28282] [client 13.75.69.45:14325] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inc.php"] [unique_id "aU6Jonc_KuO_55-uPTS7iAAAAAc"]
[Fri Dec 26 21:12:03.040723 2025] [proxy_fcgi:error] [pid 28269:tid 28307] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:03.167142 2025] [proxy_fcgi:error] [pid 28269:tid 28314] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:03.413696 2025] [proxy_fcgi:error] [pid 28269:tid 28311] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:03.536503 2025] [proxy_fcgi:error] [pid 28269:tid 28325] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:03.925019 2025] [proxy_fcgi:error] [pid 28269:tid 28324] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:04.127683 2025] [proxy_fcgi:error] [pid 28269:tid 28321] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:04.329465 2025] [proxy_fcgi:error] [pid 28269:tid 28312] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:04.963364 2025] [proxy_fcgi:error] [pid 28269:tid 28319] [client 13.75.69.45:14130] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:12:05.084928 2025] [:error] [pid 28269:tid 28326] [client 13.75.69.45:14130] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aU6JpZ3ZK8bJ-c9-kjOIYQAAAFg"]
[Fri Dec 26 21:12:05.380084 2025] [:error] [pid 7160:tid 7163] [client 13.75.69.45:14289] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aU6Jpew_ihNZR5L8vEWPIQAAAYA"]
[Fri Dec 26 21:12:05.748499 2025] [:error] [pid 28268:tid 28296] [client 13.75.69.45:14191] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aU6JpXc_KuO_55-uPTS7igAAABU"]
[Fri Dec 26 21:12:06.206312 2025] [:error] [pid 34865:tid 34870] [client 13.75.69.45:14209] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aU6Jpqi4zjVVKBdvuTT0nAAAAUM"]
[Fri Dec 26 21:12:06.616375 2025] [:error] [pid 15063:tid 15066] [client 13.75.69.45:14119] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aU6JpuDsf_aL46Jy7z8aQwAAAQE"]
[Fri Dec 26 21:12:06.971882 2025] [:error] [pid 28269:tid 28323] [client 13.75.69.45:14016] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aU6Jpp3ZK8bJ-c9-kjOIYgAAAFU"]
[Fri Dec 26 21:12:07.301823 2025] [:error] [pid 15063:tid 15077] [client 13.75.69.45:14277] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aU6Jp-Dsf_aL46Jy7z8aRQAAAQw"]
[Fri Dec 26 21:12:07.557457 2025] [:error] [pid 28355:tid 28358] [client 13.75.69.45:14112] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aU6Jp7sFqKXf7ADZcTYiwAAAAME"]
[Fri Dec 26 21:12:07.885915 2025] [:error] [pid 28355:tid 28364] [client 13.75.69.45:14122] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aU6Jp7sFqKXf7ADZcTYiwQAAAMc"]
[Fri Dec 26 21:12:08.204116 2025] [:error] [pid 28269:tid 28305] [client 13.75.69.45:14207] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aU6JqJ3ZK8bJ-c9-kjOIZgAAAEM"]
[Fri Dec 26 21:12:08.505021 2025] [:error] [pid 15063:tid 15069] [client 13.75.69.45:14150] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aU6JqODsf_aL46Jy7z8aRwAAAQQ"]
[Fri Dec 26 21:12:08.807804 2025] [:error] [pid 28269:tid 28303] [client 13.75.69.45:14167] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aU6JqJ3ZK8bJ-c9-kjOIaAAAAEE"]
[Fri Dec 26 21:12:09.234704 2025] [:error] [pid 28270:tid 28339] [client 13.75.69.45:14184] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6JqV9Ac79_ckdPN5JgWQAAAIo"]
[Fri Dec 26 21:12:09.634416 2025] [:error] [pid 34865:tid 34880] [client 13.75.69.45:14036] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6Jqai4zjVVKBdvuTT0nwAAAU0"]
[Fri Dec 26 21:12:09.982816 2025] [:error] [pid 34865:tid 34869] [client 13.75.69.45:14157] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6Jqai4zjVVKBdvuTT0oQAAAUI"]
[Fri Dec 26 21:12:10.420275 2025] [:error] [pid 28268:tid 28281] [client 13.75.69.45:14092] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aU6Jqnc_KuO_55-uPTS7jwAAAAY"]
[Fri Dec 26 21:12:10.744610 2025] [:error] [pid 34865:tid 34890] [client 13.75.69.45:14331] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU6Jqqi4zjVVKBdvuTT0owAAAVc"]
[Fri Dec 26 21:12:11.054232 2025] [:error] [pid 7160:tid 7184] [client 13.75.69.45:14029] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU6Jq-w_ihNZR5L8vEWPJAAAAZU"]
[Fri Dec 26 21:12:11.384698 2025] [:error] [pid 7160:tid 7170] [client 13.75.69.45:14196] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU6Jq-w_ihNZR5L8vEWPJQAAAYc"]
[Fri Dec 26 21:12:11.804341 2025] [:error] [pid 34865:tid 34877] [client 13.75.69.45:14133] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aU6Jq6i4zjVVKBdvuTT0pgAAAUo"]
[Fri Dec 26 21:12:12.125488 2025] [:error] [pid 7160:tid 7175] [client 13.75.69.45:14042] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aU6JrOw_ihNZR5L8vEWPJgAAAYw"]
[Fri Dec 26 21:12:12.429384 2025] [:error] [pid 15063:tid 15071] [client 13.75.69.45:14124] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aU6JrODsf_aL46Jy7z8aSgAAAQY"]
[Fri Dec 26 21:12:12.750160 2025] [:error] [pid 15063:tid 15084] [client 13.75.69.45:14109] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aU6JrODsf_aL46Jy7z8aSwAAARM"]
[Fri Dec 26 21:12:13.038305 2025] [:error] [pid 28270:tid 28329] [client 13.75.69.45:14040] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aU6JrV9Ac79_ckdPN5JgXQAAAIA"]
[Fri Dec 26 21:12:13.300871 2025] [:error] [pid 28268:tid 28280] [client 13.75.69.45:14136] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aU6JrXc_KuO_55-uPTS7kQAAAAU"]
[Fri Dec 26 21:12:13.685155 2025] [:error] [pid 28355:tid 28376] [client 13.75.69.45:14126] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aU6JrbsFqKXf7ADZcTYixgAAANM"]
[Fri Dec 26 21:12:14.082280 2025] [:error] [pid 28270:tid 28333] [client 13.75.69.45:14188] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aU6Jrl9Ac79_ckdPN5JgXwAAAIQ"]
[Fri Dec 26 21:12:14.503521 2025] [:error] [pid 34865:tid 34873] [client 13.75.69.45:13955] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aU6Jrqi4zjVVKBdvuTT0pwAAAUY"]
[Fri Dec 26 21:12:14.896648 2025] [:error] [pid 28355:tid 28372] [client 13.75.69.45:14062] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aU6JrrsFqKXf7ADZcTYiygAAAM8"]
[Fri Dec 26 21:12:15.233925 2025] [:error] [pid 34865:tid 34883] [client 13.75.69.45:14264] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aU6Jr6i4zjVVKBdvuTT0qAAAAVA"]
[Fri Dec 26 21:12:15.514391 2025] [:error] [pid 28355:tid 28366] [client 13.75.69.45:13956] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aU6Jr7sFqKXf7ADZcTYizgAAAMk"]
[Fri Dec 26 21:12:15.841050 2025] [:error] [pid 34865:tid 34885] [client 13.75.69.45:14159] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aU6Jr6i4zjVVKBdvuTT0qgAAAVI"]
[Fri Dec 26 21:12:16.143323 2025] [:error] [pid 7160:tid 7171] [client 13.75.69.45:14169] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aU6JsOw_ihNZR5L8vEWPKQAAAYg"]
[Fri Dec 26 21:12:16.668377 2025] [:error] [pid 34865:tid 34881] [client 13.75.69.45:14105] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aU6JsKi4zjVVKBdvuTT0rwAAAU4"]
[Fri Dec 26 21:12:16.977211 2025] [:error] [pid 28269:tid 28308] [client 13.75.69.45:14230] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aU6JsJ3ZK8bJ-c9-kjOIcQAAAEY"]
[Fri Dec 26 21:12:17.412757 2025] [:error] [pid 28269:tid 28308] [client 13.75.69.45:14215] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aU6JsZ3ZK8bJ-c9-kjOIiAAAAEY"]
[Fri Dec 26 21:12:17.837427 2025] [:error] [pid 28355:tid 28368] [client 13.75.69.45:14180] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU6JsbsFqKXf7ADZcTYi1wAAAMs"]
[Fri Dec 26 21:12:18.448846 2025] [:error] [pid 28355:tid 28381] [client 13.75.69.45:14251] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU6JsrsFqKXf7ADZcTYi2AAAANg"]
[Fri Dec 26 21:12:18.858837 2025] [:error] [pid 15063:tid 15079] [client 13.75.69.45:14117] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU6JsuDsf_aL46Jy7z8aUgAAAQ4"]
[Fri Dec 26 21:12:19.183428 2025] [:error] [pid 34865:tid 34885] [client 13.75.69.45:14301] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU6Js6i4zjVVKBdvuTT0vQAAAVI"]
[Fri Dec 26 21:12:19.649389 2025] [:error] [pid 7160:tid 7167] [client 13.75.69.45:14100] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU6Js-w_ihNZR5L8vEWPNwAAAYQ"]
[Fri Dec 26 21:12:20.091647 2025] [:error] [pid 7160:tid 7170] [client 13.75.69.45:14312] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU6JtOw_ihNZR5L8vEWPOAAAAYc"]
[Fri Dec 26 21:12:20.483848 2025] [:error] [pid 28355:tid 28371] [client 13.75.69.45:14125] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU6JtLsFqKXf7ADZcTYi2gAAAM4"]
[Fri Dec 26 21:12:20.858716 2025] [:error] [pid 34865:tid 34884] [client 13.75.69.45:14178] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU6JtKi4zjVVKBdvuTT0wQAAAVE"]
[Fri Dec 26 21:12:21.176014 2025] [:error] [pid 15063:tid 15071] [client 13.75.69.45:14174] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU6JteDsf_aL46Jy7z8aVQAAAQY"]
[Fri Dec 26 21:12:21.598806 2025] [:error] [pid 7160:tid 7181] [client 13.75.69.45:14022] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU6Jtew_ihNZR5L8vEWPOQAAAZI"]
[Fri Dec 26 21:12:21.957970 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:14199] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU6Jtew_ihNZR5L8vEWPOwAAAZY"]
[Fri Dec 26 21:12:22.270426 2025] [:error] [pid 15063:tid 15070] [client 13.75.69.45:14047] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU6JtuDsf_aL46Jy7z8aVgAAAQU"]
[Fri Dec 26 21:12:22.711884 2025] [:error] [pid 7160:tid 7171] [client 13.75.69.45:14035] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU6Jtuw_ihNZR5L8vEWPPQAAAYg"]
[Fri Dec 26 21:12:23.268064 2025] [:error] [pid 28355:tid 28375] [client 13.75.69.45:14123] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU6Jt7sFqKXf7ADZcTYi2wAAANI"]
[Fri Dec 26 21:12:23.679054 2025] [:error] [pid 28270:tid 28337] [client 13.75.69.45:14131] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU6Jt19Ac79_ckdPN5JgZgAAAIg"]
[Fri Dec 26 21:12:23.980247 2025] [:error] [pid 28355:tid 28366] [client 13.75.69.45:14038] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU6Jt7sFqKXf7ADZcTYi3QAAAMk"]
[Fri Dec 26 21:12:24.525821 2025] [:error] [pid 28269:tid 28317] [client 13.75.69.45:14046] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU6JuJ3ZK8bJ-c9-kjOIswAAAE8"]
[Fri Dec 26 21:12:25.559588 2025] [:error] [pid 28270:tid 28353] [client 13.75.69.45:14025] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU6JuV9Ac79_ckdPN5JgaQAAAJg"]
[Fri Dec 26 21:12:26.412597 2025] [:error] [pid 28270:tid 28334] [client 13.75.69.45:14088] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU6Jul9Ac79_ckdPN5JgawAAAIU"]
[Fri Dec 26 21:12:26.734009 2025] [:error] [pid 15063:tid 15076] [client 13.75.69.45:14081] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU6JuuDsf_aL46Jy7z8aWgAAAQs"]
[Fri Dec 26 21:12:27.064173 2025] [:error] [pid 7160:tid 7166] [client 13.75.69.45:14242] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aU6Ju-w_ihNZR5L8vEWPQQAAAYM"]
[Fri Dec 26 21:12:28.007995 2025] [:error] [pid 28269:tid 28313] [client 13.75.69.45:14031] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aU6JvJ3ZK8bJ-c9-kjOIugAAAEs"]
[Fri Dec 26 21:12:28.463502 2025] [:error] [pid 15063:tid 15067] [client 13.75.69.45:14158] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aU6JvODsf_aL46Jy7z8aXQAAAQI"]
[Fri Dec 26 21:12:28.879228 2025] [:error] [pid 34865:tid 34889] [client 13.75.69.45:14101] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aU6JvKi4zjVVKBdvuTT0xwAAAVY"]
[Fri Dec 26 21:12:30.414305 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14186] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aU6Jvp3ZK8bJ-c9-kjOIvwAAAEw"]
[Fri Dec 26 21:12:31.382427 2025] [:error] [pid 28268:tid 28299] [client 13.75.69.45:14072] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aU6Jv3c_KuO_55-uPTS7mAAAABg"]
[Fri Dec 26 21:12:32.084612 2025] [:error] [pid 28355:tid 28368] [client 13.75.69.45:14058] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aU6JwLsFqKXf7ADZcTYi5QAAAMs"]
[Fri Dec 26 21:12:32.669029 2025] [:error] [pid 28269:tid 28312] [client 13.75.69.45:14129] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aU6JwJ3ZK8bJ-c9-kjOIwwAAAEo"]
[Fri Dec 26 21:12:33.306456 2025] [:error] [pid 28269:tid 28321] [client 13.75.69.45:14097] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aU6JwZ3ZK8bJ-c9-kjOIxAAAAFM"]
[Fri Dec 26 21:12:33.817186 2025] [:error] [pid 28355:tid 28371] [client 13.75.69.45:14140] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aU6JwbsFqKXf7ADZcTYi6AAAAM4"]
[Fri Dec 26 21:12:34.567656 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:13960] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aU6Jwp3ZK8bJ-c9-kjOIxgAAAE0"]
[Fri Dec 26 21:12:35.067708 2025] [:error] [pid 28269:tid 28318] [client 13.75.69.45:13975] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aU6Jw53ZK8bJ-c9-kjOIyAAAAFA"]
[Fri Dec 26 21:12:35.464657 2025] [:error] [pid 28269:tid 28305] [client 13.75.69.45:14007] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU6Jw53ZK8bJ-c9-kjOIygAAAEM"]
[Fri Dec 26 21:12:35.837109 2025] [:error] [pid 34865:tid 34875] [client 13.75.69.45:14115] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU6Jw6i4zjVVKBdvuTT01AAAAUg"]
[Fri Dec 26 21:12:36.318341 2025] [:error] [pid 34865:tid 34867] [client 13.75.69.45:14033] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU6JxKi4zjVVKBdvuTT01gAAAUA"]
[Fri Dec 26 21:12:36.935135 2025] [:error] [pid 28269:tid 28306] [client 13.75.69.45:14052] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aU6JxJ3ZK8bJ-c9-kjOIzAAAAEQ"]
[Fri Dec 26 21:12:37.561246 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14071] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6JxZ3ZK8bJ-c9-kjOIzgAAAEw"]
[Fri Dec 26 21:12:38.057217 2025] [:error] [pid 28269:tid 28310] [client 13.75.69.45:14282] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6Jxp3ZK8bJ-c9-kjOI0AAAAEg"]
[Fri Dec 26 21:12:38.424199 2025] [:error] [pid 28268:tid 28297] [client 13.75.69.45:14061] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6Jxnc_KuO_55-uPTS7nAAAABY"]
[Fri Dec 26 21:12:38.912000 2025] [:error] [pid 28270:tid 28346] [client 13.75.69.45:14096] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aU6Jxl9Ac79_ckdPN5JgcQAAAJE"]
[Fri Dec 26 21:12:39.497834 2025] [:error] [pid 28268:tid 28293] [client 13.75.69.45:14030] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aU6Jx3c_KuO_55-uPTS7oQAAABI"]
[Fri Dec 26 21:12:40.323460 2025] [:error] [pid 28355:tid 28374] [client 13.75.69.45:14043] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aU6JyLsFqKXf7ADZcTYi9AAAANE"]
[Fri Dec 26 21:12:41.266826 2025] [:error] [pid 28355:tid 28360] [client 13.75.69.45:14147] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aU6JybsFqKXf7ADZcTYjBQAAAMM"]
[Fri Dec 26 21:12:41.947015 2025] [:error] [pid 7160:tid 7180] [client 13.75.69.45:14034] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aU6Jyew_ihNZR5L8vEWPXAAAAZE"]
[Fri Dec 26 21:12:42.353561 2025] [:error] [pid 28270:tid 28348] [client 13.75.69.45:14068] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6Jyl9Ac79_ckdPN5JgcgAAAJM"]
[Fri Dec 26 21:12:42.738388 2025] [:error] [pid 7160:tid 7187] [client 13.75.69.45:14114] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6Jyuw_ihNZR5L8vEWPYwAAAZg"]
[Fri Dec 26 21:12:43.405362 2025] [:error] [pid 7160:tid 7172] [client 13.75.69.45:14065] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6Jy-w_ihNZR5L8vEWPZwAAAYk"]
[Fri Dec 26 21:12:43.804757 2025] [:error] [pid 28268:tid 28294] [client 13.75.69.45:14077] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aU6Jy3c_KuO_55-uPTS7pAAAABM"]
[Fri Dec 26 21:12:44.446722 2025] [:error] [pid 15063:tid 15081] [client 13.75.69.45:14087] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aU6JzODsf_aL46Jy7z8aaAAAARA"]
[Fri Dec 26 21:12:45.127059 2025] [:error] [pid 15063:tid 15078] [client 13.75.69.45:14027] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aU6JzeDsf_aL46Jy7z8abAAAAQ0"]
[Fri Dec 26 21:12:45.872306 2025] [:error] [pid 34865:tid 34867] [client 13.75.69.45:13958] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aU6Jzai4zjVVKBdvuTT05QAAAUA"]
[Fri Dec 26 21:12:46.226222 2025] [:error] [pid 15063:tid 15087] [client 13.75.69.45:14010] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aU6JzuDsf_aL46Jy7z8abgAAARY"]
[Fri Dec 26 21:12:46.740862 2025] [:error] [pid 15063:tid 15074] [client 13.75.69.45:14050] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aU6JzuDsf_aL46Jy7z8acQAAAQk"]
[Fri Dec 26 21:12:47.189833 2025] [:error] [pid 34865:tid 34889] [client 13.75.69.45:14053] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aU6Jz6i4zjVVKBdvuTT06AAAAVY"]
[Fri Dec 26 21:12:47.591898 2025] [:error] [pid 28270:tid 28353] [client 13.75.69.45:14118] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aU6Jz19Ac79_ckdPN5JgdgAAAJg"]
[Fri Dec 26 21:12:47.928677 2025] [:error] [pid 34865:tid 34884] [client 13.75.69.45:14070] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aU6Jz6i4zjVVKBdvuTT06QAAAVE"]
[Fri Dec 26 21:12:48.200286 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14026] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aU6J0J3ZK8bJ-c9-kjOI_AAAAEw"]
[Fri Dec 26 21:12:48.480686 2025] [:error] [pid 15063:tid 15073] [client 13.75.69.45:14134] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aU6J0ODsf_aL46Jy7z8adAAAAQg"]
[Fri Dec 26 21:12:48.828901 2025] [:error] [pid 28355:tid 28380] [client 13.75.69.45:13959] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aU6J0LsFqKXf7ADZcTYjNwAAANc"]
[Fri Dec 26 21:12:49.275903 2025] [:error] [pid 28269:tid 28317] [client 13.75.69.45:14049] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aU6J0Z3ZK8bJ-c9-kjOJAAAAAE8"]
[Fri Dec 26 21:12:49.663511 2025] [:error] [pid 7160:tid 7171] [client 13.75.69.45:14079] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aU6J0ew_ihNZR5L8vEWPeQAAAYg"]
[Fri Dec 26 21:12:50.060044 2025] [:error] [pid 28269:tid 28312] [client 13.75.69.45:14121] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aU6J0p3ZK8bJ-c9-kjOJBAAAAEo"]
[Fri Dec 26 21:12:50.435886 2025] [:error] [pid 28269:tid 28305] [client 13.75.69.45:14057] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aU6J0p3ZK8bJ-c9-kjOJBgAAAEM"]
[Fri Dec 26 21:12:50.860293 2025] [:error] [pid 15063:tid 15068] [client 13.75.69.45:14116] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aU6J0uDsf_aL46Jy7z8adgAAAQM"]
[Fri Dec 26 21:12:51.359083 2025] [:error] [pid 7160:tid 7172] [client 13.75.69.45:14041] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aU6J0-w_ihNZR5L8vEWPewAAAYk"]
[Fri Dec 26 21:12:51.744498 2025] [:error] [pid 34865:tid 34883] [client 13.75.69.45:14021] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aU6J06i4zjVVKBdvuTT07gAAAVA"]
[Fri Dec 26 21:12:52.205683 2025] [:error] [pid 15063:tid 15078] [client 13.75.69.45:13993] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aU6J1ODsf_aL46Jy7z8aewAAAQ0"]
[Fri Dec 26 21:12:52.517135 2025] [:error] [pid 28270:tid 28334] [client 13.75.69.45:14135] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aU6J1F9Ac79_ckdPN5JgeAAAAIU"]
[Fri Dec 26 21:12:52.998273 2025] [:error] [pid 34865:tid 34875] [client 13.75.69.45:14203] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aU6J1Ki4zjVVKBdvuTT08AAAAUg"]
[Fri Dec 26 21:12:53.344025 2025] [:error] [pid 15063:tid 15087] [client 13.75.69.45:14193] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aU6J1eDsf_aL46Jy7z8afAAAARY"]
[Fri Dec 26 21:12:53.703795 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:14145] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aU6J1Z3ZK8bJ-c9-kjOJCwAAAE0"]
[Fri Dec 26 21:12:54.534403 2025] [:error] [pid 28270:tid 28329] [client 13.75.69.45:13963] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aU6J1l9Ac79_ckdPN5JgewAAAIA"]
[Fri Dec 26 21:12:54.919453 2025] [:error] [pid 28270:tid 28352] [client 13.75.69.45:14102] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aU6J1l9Ac79_ckdPN5JgfQAAAJc"]
[Fri Dec 26 21:12:55.406300 2025] [:error] [pid 15063:tid 15082] [client 13.75.69.45:14252] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aU6J1-Dsf_aL46Jy7z8agQAAARE"]
[Fri Dec 26 21:12:55.771453 2025] [:error] [pid 15063:tid 15077] [client 13.75.69.45:14128] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aU6J1-Dsf_aL46Jy7z8aggAAAQw"]
[Fri Dec 26 21:12:56.229952 2025] [:error] [pid 15063:tid 15073] [client 13.75.69.45:14037] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aU6J2ODsf_aL46Jy7z8agwAAAQg"]
[Fri Dec 26 21:12:56.610168 2025] [:error] [pid 15063:tid 15075] [client 13.75.69.45:13964] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aU6J2ODsf_aL46Jy7z8ahQAAAQo"]
[Fri Dec 26 21:12:57.024196 2025] [:error] [pid 28355:tid 28359] [client 13.75.69.45:13936] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aU6J2bsFqKXf7ADZcTYjQAAAAMI"]
[Fri Dec 26 21:12:57.494439 2025] [:error] [pid 15063:tid 15067] [client 13.75.69.45:13970] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aU6J2eDsf_aL46Jy7z8aiQAAAQI"]
[Fri Dec 26 21:12:58.077365 2025] [:error] [pid 28355:tid 28362] [client 13.75.69.45:14132] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aU6J2rsFqKXf7ADZcTYjQQAAAMU"]
[Fri Dec 26 21:12:58.381845 2025] [:error] [pid 28355:tid 28367] [client 13.75.69.45:14113] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aU6J2rsFqKXf7ADZcTYjQwAAAMo"]
[Fri Dec 26 21:12:58.724366 2025] [:error] [pid 7160:tid 7184] [client 13.75.69.45:14142] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aU6J2uw_ihNZR5L8vEWPgAAAAZU"]
[Fri Dec 26 21:12:59.089659 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:14024] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aU6J2-w_ihNZR5L8vEWPgQAAAZY"]
[Fri Dec 26 21:12:59.354474 2025] [:error] [pid 7160:tid 7175] [client 13.75.69.45:13998] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aU6J2-w_ihNZR5L8vEWPhAAAAYw"]
[Fri Dec 26 21:12:59.741023 2025] [:error] [pid 15063:tid 15082] [client 13.75.69.45:13913] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aU6J2-Dsf_aL46Jy7z8akAAAARE"]
[Fri Dec 26 21:13:00.080039 2025] [:error] [pid 28270:tid 28344] [client 13.75.69.45:13954] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aU6J3F9Ac79_ckdPN5JggQAAAI8"]
[Fri Dec 26 21:13:00.337251 2025] [:error] [pid 7160:tid 7172] [client 13.75.69.45:14156] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aU6J3Ow_ihNZR5L8vEWPhgAAAYk"]
[Fri Dec 26 21:13:00.654256 2025] [:error] [pid 15063:tid 15075] [client 13.75.69.45:14080] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aU6J3ODsf_aL46Jy7z8alAAAAQo"]
[Fri Dec 26 21:13:00.903569 2025] [:error] [pid 15063:tid 15067] [client 13.75.69.45:14139] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aU6J3ODsf_aL46Jy7z8algAAAQI"]
[Fri Dec 26 21:13:01.256509 2025] [:error] [pid 28268:tid 28298] [client 13.75.69.45:14094] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aU6J3Xc_KuO_55-uPTS7qAAAABc"]
[Fri Dec 26 21:13:01.607629 2025] [:error] [pid 28270:tid 28350] [client 13.75.69.45:14028] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aU6J3V9Ac79_ckdPN5JggwAAAJU"]
[Fri Dec 26 21:13:01.872712 2025] [:error] [pid 15063:tid 15078] [client 13.75.69.45:13971] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aU6J3eDsf_aL46Jy7z8amAAAAQ0"]
[Fri Dec 26 21:13:02.133712 2025] [:error] [pid 28270:tid 28332] [client 13.75.69.45:13889] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aU6J3l9Ac79_ckdPN5JghQAAAIM"]
[Fri Dec 26 21:13:02.416966 2025] [:error] [pid 28269:tid 28321] [client 13.75.69.45:14020] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aU6J3p3ZK8bJ-c9-kjOJEgAAAFM"]
[Fri Dec 26 21:13:02.723616 2025] [:error] [pid 28270:tid 28353] [client 13.75.69.45:13972] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aU6J3l9Ac79_ckdPN5JgiQAAAJg"]
[Fri Dec 26 21:13:03.012138 2025] [:error] [pid 28269:tid 28307] [client 13.75.69.45:14201] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aU6J353ZK8bJ-c9-kjOJFAAAAEU"]
[Fri Dec 26 21:13:03.775488 2025] [:error] [pid 28270:tid 28329] [client 13.75.69.45:13979] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aU6J319Ac79_ckdPN5JgiwAAAIA"]
[Fri Dec 26 21:13:04.113931 2025] [proxy_fcgi:error] [pid 34865:tid 34885] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:04.537334 2025] [proxy_fcgi:error] [pid 34865:tid 34887] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:04.673235 2025] [proxy_fcgi:error] [pid 34865:tid 34868] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:04.805004 2025] [proxy_fcgi:error] [pid 34865:tid 34890] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:04.926274 2025] [proxy_fcgi:error] [pid 34865:tid 34869] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:05.047810 2025] [proxy_fcgi:error] [pid 34865:tid 34881] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:05.180961 2025] [proxy_fcgi:error] [pid 34865:tid 34872] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:05.372430 2025] [proxy_fcgi:error] [pid 34865:tid 34878] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:05.550661 2025] [proxy_fcgi:error] [pid 34865:tid 34867] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:05.672050 2025] [proxy_fcgi:error] [pid 34865:tid 34882] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:05.792839 2025] [proxy_fcgi:error] [pid 34865:tid 34879] [client 13.75.69.45:14322] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:13:06.062769 2025] [:error] [pid 34865:tid 34876] [client 13.75.69.45:14322] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aU6J4qi4zjVVKBdvuTT1BwAAAUk"]
[Fri Dec 26 21:13:06.521099 2025] [:error] [pid 28268:tid 28292] [client 13.75.69.45:14005] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aU6J4nc_KuO_55-uPTS7rQAAABE"]
[Fri Dec 26 21:13:06.788245 2025] [:error] [pid 28269:tid 28320] [client 13.75.69.45:14054] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aU6J4p3ZK8bJ-c9-kjOJGgAAAFI"]
[Fri Dec 26 21:13:07.095050 2025] [:error] [pid 28269:tid 28311] [client 13.75.69.45:13982] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aU6J453ZK8bJ-c9-kjOJHAAAAEk"]
[Fri Dec 26 21:13:07.491494 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14202] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aU6J453ZK8bJ-c9-kjOJHQAAAEw"]
[Fri Dec 26 21:13:07.904949 2025] [:error] [pid 28269:tid 28319] [client 13.75.69.45:14143] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aU6J453ZK8bJ-c9-kjOJHwAAAFE"]
[Fri Dec 26 21:13:08.222675 2025] [:error] [pid 28269:tid 28318] [client 13.75.69.45:14069] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aU6J5J3ZK8bJ-c9-kjOJIAAAAFA"]
[Fri Dec 26 21:13:08.502429 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:13968] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aU6J5Ow_ihNZR5L8vEWPiQAAAZM"]
[Fri Dec 26 21:13:08.871475 2025] [:error] [pid 7160:tid 7183] [client 13.75.69.45:14023] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aU6J5Ow_ihNZR5L8vEWPigAAAZQ"]
[Fri Dec 26 21:13:09.131046 2025] [:error] [pid 28268:tid 28287] [client 13.75.69.45:13965] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aU6J5Xc_KuO_55-uPTS7sQAAAAw"]
[Fri Dec 26 21:13:09.604998 2025] [:error] [pid 28269:tid 28324] [client 13.75.69.45:14074] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aU6J5Z3ZK8bJ-c9-kjOJJAAAAFY"]
[Fri Dec 26 21:13:09.990459 2025] [:error] [pid 28268:tid 28299] [client 13.75.69.45:13983] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aU6J5Xc_KuO_55-uPTS7sgAAABg"]
[Fri Dec 26 21:13:10.678989 2025] [:error] [pid 28268:tid 28282] [client 13.75.69.45:14075] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU6J5nc_KuO_55-uPTS7swAAAAc"]
[Fri Dec 26 21:13:11.310604 2025] [:error] [pid 7160:tid 7184] [client 13.75.69.45:14018] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU6J5-w_ihNZR5L8vEWPjgAAAZU"]
[Fri Dec 26 21:13:11.682531 2025] [:error] [pid 28355:tid 28359] [client 13.75.69.45:14250] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU6J57sFqKXf7ADZcTYjSwAAAMI"]
[Fri Dec 26 21:13:12.395608 2025] [:error] [pid 28270:tid 28346] [client 13.75.69.45:13894] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU6J6F9Ac79_ckdPN5JgkwAAAJE"]
[Fri Dec 26 21:13:12.974809 2025] [:error] [pid 28268:tid 28298] [client 13.75.69.45:14001] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6J6Hc_KuO_55-uPTS7uAAAABc"]
[Fri Dec 26 21:13:13.256220 2025] [:error] [pid 28268:tid 28284] [client 13.75.69.45:14205] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6J6Xc_KuO_55-uPTS7uQAAAAk"]
[Fri Dec 26 21:13:13.626190 2025] [:error] [pid 15063:tid 15075] [client 13.75.69.45:14073] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6J6eDsf_aL46Jy7z8aoAAAAQo"]
[Fri Dec 26 21:13:14.222110 2025] [:error] [pid 34865:tid 34884] [client 13.75.69.45:13941] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6J6qi4zjVVKBdvuTT1FQAAAVE"]
[Fri Dec 26 21:13:14.759305 2025] [:error] [pid 28269:tid 28304] [client 13.75.69.45:13952] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aU6J6p3ZK8bJ-c9-kjOJJwAAAEI"]
[Fri Dec 26 21:13:15.041497 2025] [:error] [pid 34865:tid 34878] [client 13.75.69.45:14009] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aU6J66i4zjVVKBdvuTT1FgAAAUs"]
[Fri Dec 26 21:13:15.503102 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:13976] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aU6J6-w_ihNZR5L8vEWPjwAAAZY"]
[Fri Dec 26 21:13:16.036200 2025] [:error] [pid 28269:tid 28319] [client 13.75.69.45:14099] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aU6J7J3ZK8bJ-c9-kjOJLAAAAFE"]
[Fri Dec 26 21:13:16.731659 2025] [:error] [pid 7160:tid 7174] [client 13.75.69.45:14137] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU6J7Ow_ihNZR5L8vEWPkAAAAYs"]
[Fri Dec 26 21:13:17.390153 2025] [:error] [pid 15063:tid 15084] [client 13.75.69.45:13938] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU6J7eDsf_aL46Jy7z8apwAAARM"]
[Fri Dec 26 21:13:18.152466 2025] [:error] [pid 7160:tid 7170] [client 13.75.69.45:14063] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU6J7uw_ihNZR5L8vEWPkgAAAYc"]
[Fri Dec 26 21:13:18.530118 2025] [:error] [pid 28268:tid 28296] [client 13.75.69.45:14067] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU6J7nc_KuO_55-uPTS7yAAAABU"]
[Fri Dec 26 21:13:19.249213 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:14017] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aU6J753ZK8bJ-c9-kjOJQAAAAE0"]
[Fri Dec 26 21:13:19.772073 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:13974] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aU6J7-w_ihNZR5L8vEWPngAAAZM"]
[Fri Dec 26 21:13:20.059805 2025] [:error] [pid 34865:tid 34868] [client 13.75.69.45:13962] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aU6J8Ki4zjVVKBdvuTT1HgAAAUE"]
[Fri Dec 26 21:13:20.356146 2025] [:error] [pid 28269:tid 28311] [client 13.75.69.45:13980] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aU6J8J3ZK8bJ-c9-kjOJRQAAAEk"]
[Fri Dec 26 21:13:20.892473 2025] [:error] [pid 28270:tid 28331] [client 13.75.69.45:14019] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aU6J8F9Ac79_ckdPN5JgnwAAAII"]
[Fri Dec 26 21:13:21.252847 2025] [:error] [pid 34865:tid 34871] [client 13.75.69.45:13838] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aU6J8ai4zjVVKBdvuTT1IQAAAUQ"]
[Fri Dec 26 21:13:21.524410 2025] [:error] [pid 28268:tid 28293] [client 13.75.69.45:14004] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aU6J8Xc_KuO_55-uPTS7ygAAABI"]
[Fri Dec 26 21:13:21.772049 2025] [:error] [pid 28270:tid 28338] [client 13.75.69.45:14012] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aU6J8V9Ac79_ckdPN5JgogAAAIk"]
[Fri Dec 26 21:13:22.126278 2025] [:error] [pid 34865:tid 34885] [client 13.75.69.45:14015] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aU6J8qi4zjVVKBdvuTT1IwAAAVI"]
[Fri Dec 26 21:13:22.567284 2025] [:error] [pid 28269:tid 28312] [client 13.75.69.45:13891] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aU6J8p3ZK8bJ-c9-kjOJTAAAAEo"]
[Fri Dec 26 21:13:22.943289 2025] [:error] [pid 34865:tid 34889] [client 13.75.69.45:14008] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aU6J8qi4zjVVKBdvuTT1JAAAAVY"]
[Fri Dec 26 21:13:23.395597 2025] [:error] [pid 34865:tid 34879] [client 13.75.69.45:13988] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aU6J86i4zjVVKBdvuTT1JQAAAUw"]
[Fri Dec 26 21:13:23.739265 2025] [:error] [pid 28270:tid 28351] [client 13.75.69.45:14002] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aU6J819Ac79_ckdPN5JgpQAAAJY"]
[Fri Dec 26 21:13:24.078771 2025] [:error] [pid 34865:tid 34876] [client 13.75.69.45:13919] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aU6J9Ki4zjVVKBdvuTT1JgAAAUk"]
[Fri Dec 26 21:13:24.326960 2025] [:error] [pid 28355:tid 28358] [client 13.75.69.45:13996] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aU6J9LsFqKXf7ADZcTYjWAAAAME"]
[Fri Dec 26 21:13:24.602502 2025] [:error] [pid 15063:tid 15075] [client 13.75.69.45:14048] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aU6J9ODsf_aL46Jy7z8avQAAAQo"]
[Fri Dec 26 21:13:24.841519 2025] [:error] [pid 15063:tid 15080] [client 13.75.69.45:14045] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU6J9ODsf_aL46Jy7z8avwAAAQ8"]
[Fri Dec 26 21:13:25.155669 2025] [:error] [pid 7160:tid 7179] [client 13.75.69.45:14064] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU6J9ew_ihNZR5L8vEWPywAAAZA"]
[Fri Dec 26 21:13:25.530841 2025] [:error] [pid 15063:tid 15073] [client 13.75.69.45:14051] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU6J9eDsf_aL46Jy7z8awAAAAQg"]
[Fri Dec 26 21:13:25.791283 2025] [:error] [pid 28270:tid 28331] [client 13.75.69.45:13949] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU6J9V9Ac79_ckdPN5JgpgAAAII"]
[Fri Dec 26 21:13:26.191709 2025] [:error] [pid 28269:tid 28312] [client 13.75.69.45:13893] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aU6J9p3ZK8bJ-c9-kjOJUwAAAEo"]
[Fri Dec 26 21:13:26.503139 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14056] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aU6J9p3ZK8bJ-c9-kjOJVAAAAEw"]
[Fri Dec 26 21:13:26.776951 2025] [:error] [pid 7160:tid 7184] [client 13.75.69.45:14170] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aU6J9uw_ihNZR5L8vEWPzAAAAZU"]
[Fri Dec 26 21:13:27.045593 2025] [:error] [pid 34865:tid 34868] [client 13.75.69.45:14039] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aU6J96i4zjVVKBdvuTT1JwAAAUE"]
[Fri Dec 26 21:13:27.325755 2025] [:error] [pid 28269:tid 28310] [client 13.75.69.45:13826] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aU6J953ZK8bJ-c9-kjOJVQAAAEg"]
[Fri Dec 26 21:13:27.612664 2025] [:error] [pid 15063:tid 15074] [client 13.75.69.45:13978] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aU6J9-Dsf_aL46Jy7z8axQAAAQk"]
[Fri Dec 26 21:13:28.060184 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:13990] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aU6J-Ow_ihNZR5L8vEWPzwAAAZY"]
[Fri Dec 26 21:13:28.450721 2025] [:error] [pid 28269:tid 28320] [client 13.75.69.45:13939] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aU6J-J3ZK8bJ-c9-kjOJVwAAAFI"]
[Fri Dec 26 21:13:28.817340 2025] [:error] [pid 28269:tid 28321] [client 13.75.69.45:13994] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aU6J-J3ZK8bJ-c9-kjOJWAAAAFM"]
[Fri Dec 26 21:13:29.170160 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:13969] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aU6J-ew_ihNZR5L8vEWP0QAAAZM"]
[Fri Dec 26 21:13:29.517154 2025] [:error] [pid 7160:tid 7166] [client 13.75.69.45:14011] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aU6J-ew_ihNZR5L8vEWP0wAAAYM"]
[Fri Dec 26 21:13:29.908703 2025] [:error] [pid 28270:tid 28338] [client 13.75.69.45:13973] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aU6J-V9Ac79_ckdPN5JgqgAAAIk"]
[Fri Dec 26 21:13:30.182427 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:14014] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aU6J-p3ZK8bJ-c9-kjOJXQAAAEw"]
[Fri Dec 26 21:13:30.541502 2025] [:error] [pid 28269:tid 28306] [client 13.75.69.45:13904] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aU6J-p3ZK8bJ-c9-kjOJXgAAAEQ"]
[Fri Dec 26 21:13:30.841938 2025] [:error] [pid 28269:tid 28319] [client 13.75.69.45:13981] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aU6J-p3ZK8bJ-c9-kjOJYgAAAFE"]
[Fri Dec 26 21:13:31.098226 2025] [:error] [pid 34865:tid 34871] [client 13.75.69.45:13899] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aU6J-6i4zjVVKBdvuTT1LAAAAUQ"]
[Fri Dec 26 21:13:31.393011 2025] [:error] [pid 28355:tid 28380] [client 13.75.69.45:13933] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU6J-7sFqKXf7ADZcTYjZQAAANc"]
[Fri Dec 26 21:13:31.757275 2025] [:error] [pid 28269:tid 28322] [client 13.75.69.45:13931] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU6J-53ZK8bJ-c9-kjOJZAAAAFQ"]
[Fri Dec 26 21:13:32.062177 2025] [:error] [pid 28269:tid 28324] [client 13.75.69.45:13901] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU6J_J3ZK8bJ-c9-kjOJZQAAAFY"]
[Fri Dec 26 21:13:32.379303 2025] [:error] [pid 28269:tid 28326] [client 13.75.69.45:13835] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aU6J_J3ZK8bJ-c9-kjOJZwAAAFg"]
[Fri Dec 26 21:13:32.841443 2025] [:error] [pid 7160:tid 7173] [client 13.75.69.45:13896] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aU6J_Ow_ihNZR5L8vEWP1QAAAYo"]
[Fri Dec 26 21:13:33.175643 2025] [:error] [pid 34865:tid 34886] [client 13.75.69.45:14032] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aU6J_ai4zjVVKBdvuTT1LwAAAVM"]
[Fri Dec 26 21:13:33.459767 2025] [:error] [pid 28269:tid 28308] [client 13.75.69.45:13944] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aU6J_Z3ZK8bJ-c9-kjOJaAAAAEY"]
[Fri Dec 26 21:13:33.858070 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:14059] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aU6J_Z3ZK8bJ-c9-kjOJagAAAE0"]
[Fri Dec 26 21:13:34.373109 2025] [:error] [pid 28355:tid 28358] [client 13.75.69.45:13929] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aU6J_rsFqKXf7ADZcTYjaAAAAME"]
[Fri Dec 26 21:13:34.740644 2025] [:error] [pid 34865:tid 34883] [client 13.75.69.45:13911] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aU6J_qi4zjVVKBdvuTT1MQAAAVA"]
[Fri Dec 26 21:13:35.152177 2025] [:error] [pid 34865:tid 34887] [client 13.75.69.45:14060] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aU6J_6i4zjVVKBdvuTT1NAAAAVQ"]
[Fri Dec 26 21:13:35.428960 2025] [:error] [pid 7160:tid 7185] [client 13.75.69.45:13961] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aU6J_-w_ihNZR5L8vEWP2AAAAZY"]
[Fri Dec 26 21:13:35.920307 2025] [:error] [pid 7160:tid 7175] [client 13.75.69.45:14055] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aU6J_-w_ihNZR5L8vEWP2QAAAYw"]
[Fri Dec 26 21:13:36.346163 2025] [:error] [pid 7160:tid 7167] [client 13.75.69.45:13902] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aU6KAOw_ihNZR5L8vEWP2wAAAYQ"]
[Fri Dec 26 21:13:36.621315 2025] [:error] [pid 15063:tid 15089] [client 13.75.69.45:13920] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aU6KAODsf_aL46Jy7z8axgAAARg"]
[Fri Dec 26 21:13:36.860854 2025] [:error] [pid 15063:tid 15088] [client 13.75.69.45:14066] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aU6KAODsf_aL46Jy7z8axwAAARc"]
[Fri Dec 26 21:13:37.270054 2025] [:error] [pid 7160:tid 7182] [client 13.75.69.45:13953] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aU6KAew_ihNZR5L8vEWP4wAAAZM"]
[Fri Dec 26 21:13:37.523763 2025] [:error] [pid 28268:tid 28285] [client 13.75.69.45:13903] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aU6KAXc_KuO_55-uPTS71QAAAAo"]
[Fri Dec 26 21:13:37.844021 2025] [:error] [pid 7160:tid 7179] [client 13.75.69.45:13866] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aU6KAew_ihNZR5L8vEWP5QAAAZA"]
[Fri Dec 26 21:13:38.214443 2025] [:error] [pid 28270:tid 28345] [client 13.75.69.45:13942] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aU6KAl9Ac79_ckdPN5JgrAAAAJA"]
[Fri Dec 26 21:13:38.666963 2025] [:error] [pid 28270:tid 28337] [client 13.75.69.45:14101] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aU6KAl9Ac79_ckdPN5JgrQAAAIg"]
[Fri Dec 26 21:13:39.328021 2025] [:error] [pid 15063:tid 15082] [client 13.75.69.45:13966] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aU6KA-Dsf_aL46Jy7z8ayQAAARE"]
[Fri Dec 26 21:13:39.641022 2025] [:error] [pid 28269:tid 28326] [client 13.75.69.45:13924] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aU6KA53ZK8bJ-c9-kjOJdAAAAFg"]
[Fri Dec 26 21:13:40.011930 2025] [:error] [pid 28269:tid 28315] [client 13.75.69.45:13829] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aU6KBJ3ZK8bJ-c9-kjOJdgAAAE0"]
[Fri Dec 26 21:13:40.338986 2025] [:error] [pid 34865:tid 34880] [client 13.75.69.45:14006] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6KBKi4zjVVKBdvuTT1OwAAAU0"]
[Fri Dec 26 21:13:40.664654 2025] [:error] [pid 34865:tid 34877] [client 13.75.69.45:14003] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6KBKi4zjVVKBdvuTT1PQAAAUo"]
[Fri Dec 26 21:13:40.973733 2025] [:error] [pid 34865:tid 34884] [client 13.75.69.45:13945] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6KBKi4zjVVKBdvuTT1PwAAAVE"]
[Fri Dec 26 21:13:41.350150 2025] [:error] [pid 28269:tid 28321] [client 13.75.69.45:14141] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aU6KBZ3ZK8bJ-c9-kjOJdwAAAFM"]
[Fri Dec 26 21:13:41.676855 2025] [:error] [pid 34865:tid 34881] [client 13.75.69.45:13935] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aU6KBai4zjVVKBdvuTT1QgAAAU4"]
[Fri Dec 26 21:13:42.021374 2025] [:error] [pid 28269:tid 28314] [client 13.75.69.45:13987] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aU6KBp3ZK8bJ-c9-kjOJegAAAEw"]
[Fri Dec 26 21:13:42.403120 2025] [:error] [pid 28269:tid 28310] [client 13.75.69.45:13947] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aU6KBp3ZK8bJ-c9-kjOJfQAAAEg"]
[Fri Dec 26 21:13:42.771893 2025] [:error] [pid 34865:tid 34887] [client 13.75.69.45:13888] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aU6KBqi4zjVVKBdvuTT1RAAAAVQ"]
[Fri Dec 26 21:13:43.189561 2025] [:error] [pid 34865:tid 34873] [client 13.75.69.45:13932] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aU6KB6i4zjVVKBdvuTT1RwAAAUY"]
[Fri Dec 26 21:13:43.603402 2025] [:error] [pid 28269:tid 28322] [client 13.75.69.45:13906] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aU6KB53ZK8bJ-c9-kjOJfwAAAFQ"]
[Fri Dec 26 21:13:43.943286 2025] [:error] [pid 28269:tid 28313] [client 13.75.69.45:13900] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aU6KB53ZK8bJ-c9-kjOJgAAAAEs"]
[Fri Dec 26 21:13:44.580405 2025] [:error] [pid 28270:tid 28342] [client 13.75.69.45:13934] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aU6KCF9Ac79_ckdPN5JgsgAAAI0"]
[Fri Dec 26 21:13:44.973264 2025] [:error] [pid 28355:tid 28370] [client 13.75.69.45:13907] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aU6KCLsFqKXf7ADZcTYjawAAAM0"]
[Fri Dec 26 21:13:45.320219 2025] [:error] [pid 28269:tid 28304] [client 13.75.69.45:13887] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aU6KCZ3ZK8bJ-c9-kjOJggAAAEI"]
[Fri Dec 26 21:13:45.667872 2025] [:error] [pid 34865:tid 34891] [client 13.75.69.45:13995] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aU6KCai4zjVVKBdvuTT1SQAAAVg"]
[Fri Dec 26 21:13:46.083980 2025] [:error] [pid 28355:tid 28378] [client 13.75.69.45:13997] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aU6KCrsFqKXf7ADZcTYjbQAAANU"]
[Fri Dec 26 21:13:46.430398 2025] [:error] [pid 34865:tid 34869] [client 13.75.69.45:13830] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aU6KCqi4zjVVKBdvuTT1SwAAAUI"]
[Fri Dec 26 21:13:46.814377 2025] [:error] [pid 7160:tid 7170] [client 13.75.69.45:13855] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aU6KCuw_ihNZR5L8vEWP7QAAAYc"]
[Fri Dec 26 21:13:47.143432 2025] [:error] [pid 28355:tid 28357] [client 13.75.69.45:13989] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aU6KC7sFqKXf7ADZcTYjcAAAAMA"]
[Fri Dec 26 21:13:47.554478 2025] [:error] [pid 28355:tid 28377] [client 13.75.69.45:13905] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aU6KC7sFqKXf7ADZcTYjcQAAANQ"]
[Fri Dec 26 21:13:47.906719 2025] [:error] [pid 15063:tid 15071] [client 13.75.69.45:13845] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aU6KC-Dsf_aL46Jy7z8a0AAAAQY"]
[Fri Dec 26 21:13:48.266061 2025] [:error] [pid 28269:tid 28305] [client 13.75.69.45:14013] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aU6KDJ3ZK8bJ-c9-kjOJjAAAAEM"]
[Fri Dec 26 21:13:48.577632 2025] [:error] [pid 7160:tid 7168] [client 13.75.69.45:14251] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aU6KDOw_ihNZR5L8vEWP7wAAAYU"]
[Fri Dec 26 21:13:48.839066 2025] [:error] [pid 28268:tid 28279] [client 13.75.69.45:13895] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aU6KDHc_KuO_55-uPTS72QAAAAQ"]
[Fri Dec 26 21:13:49.210467 2025] [:error] [pid 7160:tid 7166] [client 13.75.69.45:13842] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aU6KDew_ihNZR5L8vEWP8QAAAYM"]
[Fri Dec 26 21:13:49.703699 2025] [:error] [pid 34865:tid 34886] [client 13.75.69.45:13992] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aU6KDai4zjVVKBdvuTT1UAAAAVM"]
[Fri Dec 26 21:13:50.293145 2025] [:error] [pid 34865:tid 34878] [client 13.75.69.45:13840] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aU6KDqi4zjVVKBdvuTT1UQAAAUs"]
[Fri Dec 26 21:13:50.620636 2025] [:error] [pid 28269:tid 28303] [client 13.75.69.45:13872] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aU6KDp3ZK8bJ-c9-kjOJkwAAAEE"]
[Fri Dec 26 21:13:50.976711 2025] [:error] [pid 7160:tid 7171] [client 13.75.69.45:13928] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aU6KDuw_ihNZR5L8vEWP9QAAAYg"]
[Fri Dec 26 21:13:51.402250 2025] [:error] [pid 15063:tid 15074] [client 13.75.69.45:13892] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aU6KD-Dsf_aL46Jy7z8a0wAAAQk"]
[Fri Dec 26 21:13:51.761410 2025] [:error] [pid 34865:tid 34873] [client 13.75.69.45:13957] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aU6KD6i4zjVVKBdvuTT1VAAAAUY"]
[Fri Dec 26 21:13:52.187922 2025] [:error] [pid 28268:tid 28299] [client 13.75.69.45:13922] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aU6KEHc_KuO_55-uPTS73QAAABg"]
[Fri Dec 26 21:13:52.605339 2025] [:error] [pid 15063:tid 15088] [client 13.75.69.45:13841] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aU6KEODsf_aL46Jy7z8a1wAAARc"]
[Fri Dec 26 21:13:53.077790 2025] [:error] [pid 28355:tid 28361] [client 13.75.69.45:13985] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aU6KEbsFqKXf7ADZcTYjdQAAAMQ"]
[Fri Dec 26 21:13:53.727255 2025] [:error] [pid 28268:tid 28290] [client 13.75.69.45:13999] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aU6KEXc_KuO_55-uPTS73wAAAA8"]
[Fri Dec 26 21:13:54.075365 2025] [:error] [pid 28268:tid 28298] [client 13.75.69.45:13765] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aU6KEnc_KuO_55-uPTS74AAAABc"]
[Fri Dec 26 21:13:54.376377 2025] [:error] [pid 15063:tid 15087] [client 13.75.69.45:13832] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU6KEuDsf_aL46Jy7z8a2QAAARY"]
[Fri Dec 26 21:13:54.717888 2025] [:error] [pid 15063:tid 15075] [client 13.75.69.45:13898] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU6KEuDsf_aL46Jy7z8a2gAAAQo"]
[Fri Dec 26 21:13:55.103213 2025] [:error] [pid 28268:tid 28283] [client 13.75.69.45:13786] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU6KE3c_KuO_55-uPTS74gAAAAg"]
[Fri Dec 26 21:13:55.447677 2025] [:error] [pid 28270:tid 28341] [client 13.75.69.45:13914] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU6KE19Ac79_ckdPN5JgvwAAAIw"]
[Fri Dec 26 21:13:55.827452 2025] [:error] [pid 28355:tid 28372] [client 13.75.69.45:13881] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aU6KE7sFqKXf7ADZcTYjeQAAAM8"]
[Fri Dec 26 21:13:56.169847 2025] [:error] [pid 28270:tid 28343] [client 13.75.69.45:13777] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aU6KFF9Ac79_ckdPN5JgwAAAAI4"]
[Fri Dec 26 21:13:56.474564 2025] [:error] [pid 28270:tid 28342] [client 13.75.69.45:13910] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aU6KFF9Ac79_ckdPN5JgwQAAAI0"]
[Fri Dec 26 21:13:56.779660 2025] [:error] [pid 28268:tid 28293] [client 13.75.69.45:13858] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aU6KFHc_KuO_55-uPTS75gAAABI"]
[Fri Dec 26 21:13:57.089626 2025] [:error] [pid 28270:tid 28340] [client 13.75.69.45:13937] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aU6KFV9Ac79_ckdPN5JgwwAAAIs"]
[Fri Dec 26 21:13:57.410596 2025] [:error] [pid 28268:tid 28295] [client 13.75.69.45:13927] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aU6KFXc_KuO_55-uPTS75wAAABQ"]
[Fri Dec 26 21:13:57.720459 2025] [:error] [pid 7160:tid 7179] [client 13.75.69.45:13950] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aU6KFew_ihNZR5L8vEWP_gAAAZA"]
[Fri Dec 26 21:13:58.058337 2025] [:error] [pid 28355:tid 28374] [client 13.75.69.45:13925] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aU6KFrsFqKXf7ADZcTYjfQAAANE"]
[Fri Dec 26 21:13:58.317500 2025] [:error] [pid 28355:tid 28362] [client 13.75.69.45:14000] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aU6KFrsFqKXf7ADZcTYjfgAAAMU"]
[Fri Dec 26 21:13:58.607420 2025] [:error] [pid 28270:tid 28346] [client 13.75.69.45:13824] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aU6KFl9Ac79_ckdPN5JgyQAAAJE"]
[Fri Dec 26 21:13:58.964667 2025] [:error] [pid 28355:tid 28357] [client 13.75.69.45:13827] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aU6KFrsFqKXf7ADZcTYjfwAAAMA"]
[Fri Dec 26 21:13:59.249094 2025] [:error] [pid 28270:tid 28348] [client 13.75.69.45:13857] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aU6KF19Ac79_ckdPN5JgzAAAAJM"]
[Fri Dec 26 21:13:59.583531 2025] [:error] [pid 28269:tid 28307] [client 13.75.69.45:13926] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aU6KF53ZK8bJ-c9-kjOJmQAAAEU"]
[Fri Dec 26 21:13:59.859642 2025] [:error] [pid 28269:tid 28324] [client 13.75.69.45:13825] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aU6KF53ZK8bJ-c9-kjOJmwAAAFY"]
[Fri Dec 26 21:14:00.137854 2025] [:error] [pid 15063:tid 15083] [client 13.75.69.45:13860] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aU6KGODsf_aL46Jy7z8a4AAAARI"]
[Fri Dec 26 21:14:00.431129 2025] [:error] [pid 34865:tid 34874] [client 13.75.69.45:13951] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aU6KGKi4zjVVKBdvuTT1VwAAAUc"]
[Fri Dec 26 21:14:00.708067 2025] [:error] [pid 34865:tid 34875] [client 13.75.69.45:13918] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aU6KGKi4zjVVKBdvuTT1WAAAAUg"]
[Fri Dec 26 21:14:01.046009 2025] [:error] [pid 34865:tid 34886] [client 13.75.69.45:13940] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aU6KGai4zjVVKBdvuTT1WgAAAVM"]
[Fri Dec 26 21:14:01.337662 2025] [:error] [pid 7160:tid 7166] [client 13.75.69.45:13991] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aU6KGew_ihNZR5L8vEWQCAAAAYM"]
[Fri Dec 26 21:14:01.699281 2025] [:error] [pid 7160:tid 7178] [client 13.75.69.45:13831] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aU6KGew_ihNZR5L8vEWQCwAAAY8"]
[Fri Dec 26 21:14:01.982321 2025] [:error] [pid 28270:tid 28352] [client 13.75.69.45:13865] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aU6KGV9Ac79_ckdPN5JgzgAAAJc"]
[Fri Dec 26 21:14:02.291247 2025] [:error] [pid 28270:tid 28341] [client 13.75.69.45:13877] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aU6KGl9Ac79_ckdPN5JgzwAAAIw"]
[Fri Dec 26 21:14:02.632980 2025] [:error] [pid 28355:tid 28381] [client 13.75.69.45:13847] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aU6KGrsFqKXf7ADZcTYjgQAAANg"]
[Fri Dec 26 21:14:02.949945 2025] [:error] [pid 28270:tid 28342] [client 13.75.69.45:13946] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aU6KGl9Ac79_ckdPN5Jg0gAAAI0"]
[Fri Dec 26 21:14:03.242517 2025] [:error] [pid 34865:tid 34885] [client 13.75.69.45:14093] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aU6KG6i4zjVVKBdvuTT1XQAAAVI"]
[Fri Dec 26 21:14:03.540959 2025] [:error] [pid 28269:tid 28317] [client 13.75.69.45:13930] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aU6KG53ZK8bJ-c9-kjOJnQAAAE8"]
[Fri Dec 26 21:14:03.854876 2025] [:error] [pid 28355:tid 28375] [client 13.75.69.45:13769] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aU6KG7sFqKXf7ADZcTYjggAAANI"]
[Fri Dec 26 21:14:04.168262 2025] [:error] [pid 28355:tid 28380] [client 13.75.69.45:13871] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aU6KHLsFqKXf7ADZcTYjhQAAANc"]
[Fri Dec 26 21:14:04.481365 2025] [:error] [pid 15063:tid 15082] [client 13.75.69.45:13917] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aU6KHODsf_aL46Jy7z8a5QAAARE"]
[Fri Dec 26 21:14:04.783446 2025] [:error] [pid 28268:tid 28290] [client 13.75.69.45:13897] [client 13.75.69.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aU6KHHc_KuO_55-uPTS76wAAAA8"]
[Fri Dec 26 21:14:05.136982 2025] [proxy_fcgi:error] [pid 7160:tid 7177] [client 13.75.69.45:13787] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:14:05.303979 2025] [proxy_fcgi:error] [pid 7160:tid 7187] [client 13.75.69.45:13787] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 21:14:05.472839 2025] [proxy_fcgi:error] [pid 7160:tid 7175] [client 13.75.69.45:13787] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:33.557637 2025] [proxy_fcgi:error] [pid 47566:tid 47576] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:33.681954 2025] [proxy_fcgi:error] [pid 47566:tid 47585] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:33.946582 2025] [proxy_fcgi:error] [pid 47566:tid 47577] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:34.070305 2025] [proxy_fcgi:error] [pid 47566:tid 47573] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:34.203697 2025] [proxy_fcgi:error] [pid 47566:tid 47574] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:34.331947 2025] [proxy_fcgi:error] [pid 47566:tid 47586] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:34.455835 2025] [proxy_fcgi:error] [pid 47566:tid 47587] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:34.715812 2025] [proxy_fcgi:error] [pid 47566:tid 47591] [client 20.89.192.52:21273] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:30:34.837621 2025] [:error] [pid 47566:tid 47581] [client 20.89.192.52:21273] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aU7USqyYgLfR4YwO7byXswAAAQw"]
[Sat Dec 27 02:30:36.598345 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:5725] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aU7UTKyYgLfR4YwO7byXtgAAAQM"]
[Sat Dec 27 02:30:39.153015 2025] [:error] [pid 34187:tid 34203] [client 20.89.192.52:47039] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aU7UT6v8srZGEpsIm8AInQAAAAs"]
[Sat Dec 27 02:30:41.833057 2025] [:error] [pid 47566:tid 47579] [client 20.89.192.52:15818] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aU7UUayYgLfR4YwO7byXuwAAAQo"]
[Sat Dec 27 02:30:45.232741 2025] [:error] [pid 34274:tid 34279] [client 20.89.192.52:64447] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aU7UVc6fabpS0mfhiCEgQgAAAMM"]
[Sat Dec 27 02:30:45.696338 2025] [:error] [pid 34189:tid 34266] [client 20.89.192.52:14815] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aU7UVQnn007DnMwSsfc6EAAAAJM"]
[Sat Dec 27 02:30:46.192494 2025] [:error] [pid 34189:tid 34258] [client 20.89.192.52:64394] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aU7UVgnn007DnMwSsfc6EgAAAIs"]
[Sat Dec 27 02:30:47.281242 2025] [:error] [pid 34189:tid 34255] [client 20.89.192.52:17300] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aU7UVwnn007DnMwSsfc6FQAAAIg"]
[Sat Dec 27 02:30:48.732603 2025] [:error] [pid 34274:tid 34281] [client 20.89.192.52:15870] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aU7UWM6fabpS0mfhiCEgRwAAAMU"]
[Sat Dec 27 02:30:50.181679 2025] [:error] [pid 47566:tid 47590] [client 20.89.192.52:18222] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aU7UWqyYgLfR4YwO7byX0QAAARU"]
[Sat Dec 27 02:30:51.543764 2025] [:error] [pid 34274:tid 34287] [client 20.89.192.52:15928] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aU7UW86fabpS0mfhiCEgSQAAAMs"]
[Sat Dec 27 02:30:53.390368 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:15820] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aU7UXayYgLfR4YwO7byX2gAAARE"]
[Sat Dec 27 02:30:56.539239 2025] [:error] [pid 34188:tid 34230] [client 20.89.192.52:17987] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aU7UYA54j0mXgip5BAG7kQAAAEo"]
[Sat Dec 27 02:30:59.318255 2025] [:error] [pid 47566:tid 47591] [client 20.89.192.52:17014] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aU7UY6yYgLfR4YwO7byX6gAAARY"]
[Sat Dec 27 02:31:01.189920 2025] [:error] [pid 34188:tid 34223] [client 20.89.192.52:59759] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aU7UZQ54j0mXgip5BAG7ngAAAEM"]
[Sat Dec 27 02:31:02.415706 2025] [:error] [pid 47566:tid 47588] [client 20.89.192.52:65474] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aU7UZqyYgLfR4YwO7byX8QAAARM"]
[Sat Dec 27 02:31:04.396365 2025] [:error] [pid 34274:tid 34278] [client 20.89.192.52:65499] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU7UaM6fabpS0mfhiCEgXQAAAMI"]
[Sat Dec 27 02:31:05.424829 2025] [:error] [pid 34274:tid 34284] [client 20.89.192.52:20325] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU7Uac6fabpS0mfhiCEgYAAAAMg"]
[Sat Dec 27 02:31:06.683260 2025] [:error] [pid 34188:tid 34225] [client 20.89.192.52:23678] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU7Uag54j0mXgip5BAG7qgAAAEU"]
[Sat Dec 27 02:31:09.462945 2025] [:error] [pid 34189:tid 34262] [client 20.89.192.52:30314] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aU7UbQnn007DnMwSsfc6MAAAAI8"]
[Sat Dec 27 02:31:11.254845 2025] [:error] [pid 34189:tid 34270] [client 20.89.192.52:23664] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aU7Ubwnn007DnMwSsfc6NAAAAJc"]
[Sat Dec 27 02:31:14.186728 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:5623] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aU7UcqyYgLfR4YwO7byYBwAAAQM"]
[Sat Dec 27 02:31:17.190122 2025] [:error] [pid 47566:tid 47577] [client 20.89.192.52:59713] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aU7UdayYgLfR4YwO7byYDwAAAQg"]
[Sat Dec 27 02:31:20.294381 2025] [:error] [pid 34188:tid 34235] [client 20.89.192.52:65510] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aU7UeA54j0mXgip5BAG7sQAAAE8"]
[Sat Dec 27 02:31:21.139543 2025] [:error] [pid 47566:tid 47593] [client 20.89.192.52:5584] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU7UeayYgLfR4YwO7byYGQAAARg"]
[Sat Dec 27 02:31:23.047229 2025] [:error] [pid 34189:tid 34249] [client 20.89.192.52:65508] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU7Uewnn007DnMwSsfc6WgAAAII"]
[Sat Dec 27 02:31:26.124504 2025] [:error] [pid 34187:tid 34197] [client 20.89.192.52:5908] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU7Ufqv8srZGEpsIm8AIxwAAAAU"]
[Sat Dec 27 02:31:28.864390 2025] [:error] [pid 47566:tid 47591] [client 20.89.192.52:17723] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aU7UgKyYgLfR4YwO7byYJwAAARY"]
[Sat Dec 27 02:31:31.331794 2025] [:error] [pid 34274:tid 34294] [client 20.89.192.52:17672] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU7Ug86fabpS0mfhiCEgjgAAANI"]
[Sat Dec 27 02:31:31.952273 2025] [:error] [pid 34274:tid 34284] [client 20.89.192.52:5905] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU7Ug86fabpS0mfhiCEgkgAAAMg"]
[Sat Dec 27 02:31:33.604810 2025] [:error] [pid 47566:tid 47580] [client 20.89.192.52:30286] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aU7UhayYgLfR4YwO7byYMAAAAQs"]
[Sat Dec 27 02:31:35.167129 2025] [proxy_fcgi:error] [pid 47566:tid 47578] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:36.650061 2025] [proxy_fcgi:error] [pid 47566:tid 47584] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:36.780940 2025] [proxy_fcgi:error] [pid 47566:tid 47592] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:36.929052 2025] [proxy_fcgi:error] [pid 47566:tid 47589] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:37.059581 2025] [proxy_fcgi:error] [pid 47566:tid 47582] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:37.195302 2025] [proxy_fcgi:error] [pid 47566:tid 47572] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:37.612013 2025] [proxy_fcgi:error] [pid 47566:tid 47588] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:38.443151 2025] [proxy_fcgi:error] [pid 47566:tid 47570] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:38.576643 2025] [proxy_fcgi:error] [pid 47566:tid 47579] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:38.719413 2025] [proxy_fcgi:error] [pid 47566:tid 47571] [client 20.89.192.52:15321] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:31:38.983924 2025] [:error] [pid 47566:tid 47576] [client 20.89.192.52:15321] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU7UiqyYgLfR4YwO7byYQQAAAQc"]
[Sat Dec 27 02:31:40.606699 2025] [:error] [pid 34187:tid 34204] [client 20.89.192.52:16387] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU7UjKv8srZGEpsIm8AI4QAAAAw"]
[Sat Dec 27 02:31:43.213120 2025] [:error] [pid 34188:tid 34231] [client 20.89.192.52:16114] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU7Ujw54j0mXgip5BAG73AAAAEs"]
[Sat Dec 27 02:31:44.646188 2025] [:error] [pid 34187:tid 34213] [client 20.89.192.52:33300] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU7UkKv8srZGEpsIm8AI6gAAABU"]
[Sat Dec 27 02:31:47.423472 2025] [:error] [pid 47566:tid 47581] [client 20.89.192.52:23594] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU7Uk6yYgLfR4YwO7byYTQAAAQw"]
[Sat Dec 27 02:31:50.720492 2025] [:error] [pid 34188:tid 34228] [client 20.89.192.52:15211] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU7Ulg54j0mXgip5BAG76AAAAEg"]
[Sat Dec 27 02:31:52.214878 2025] [:error] [pid 34188:tid 34236] [client 20.89.192.52:23599] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU7UmA54j0mXgip5BAG76gAAAFA"]
[Sat Dec 27 02:31:54.511224 2025] [:error] [pid 34274:tid 34290] [client 20.89.192.52:23588] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aU7Ums6fabpS0mfhiCEgxgAAAM4"]
[Sat Dec 27 02:31:55.630221 2025] [:error] [pid 34188:tid 34220] [client 20.89.192.52:5723] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aU7Umw54j0mXgip5BAG78wAAAEA"]
[Sat Dec 27 02:31:56.876823 2025] [:error] [pid 34189:tid 34269] [client 20.89.192.52:5730] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aU7UnAnn007DnMwSsfc6kwAAAJY"]
[Sat Dec 27 02:31:57.865490 2025] [:error] [pid 34188:tid 34237] [client 20.89.192.52:62494] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aU7UnQ54j0mXgip5BAG79wAAAFE"]
[Sat Dec 27 02:32:01.040252 2025] [:error] [pid 34187:tid 34196] [client 20.89.192.52:16147] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aU7Uoav8srZGEpsIm8AJBwAAAAQ"]
[Sat Dec 27 02:32:05.079925 2025] [:error] [pid 47566:tid 47570] [client 20.89.192.52:65405] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU7UpayYgLfR4YwO7byYbgAAAQE"]
[Sat Dec 27 02:32:05.840075 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:43695] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU7UpayYgLfR4YwO7byYbwAAARE"]
[Sat Dec 27 02:32:10.209067 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:16185] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU7Uqs6fabpS0mfhiCEg4wAAANM"]
[Sat Dec 27 02:32:13.297499 2025] [:error] [pid 34274:tid 34296] [client 20.89.192.52:16179] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aU7Urc6fabpS0mfhiCEg7gAAANQ"]
[Sat Dec 27 02:32:16.070293 2025] [:error] [pid 34188:tid 34231] [client 20.89.192.52:18620] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU7UsA54j0mXgip5BAG8EQAAAEs"]
[Sat Dec 27 02:32:17.346129 2025] [:error] [pid 34187:tid 34198] [client 20.89.192.52:23986] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU7Usav8srZGEpsIm8AJIwAAAAY"]
[Sat Dec 27 02:32:19.594123 2025] [:error] [pid 34188:tid 34230] [client 20.89.192.52:16790] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU7Usw54j0mXgip5BAG8HgAAAEo"]
[Sat Dec 27 02:32:20.671671 2025] [:error] [pid 34274:tid 34287] [client 20.89.192.52:15599] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aU7UtM6fabpS0mfhiCEhBQAAAMs"]
[Sat Dec 27 02:32:22.629014 2025] [:error] [pid 34187:tid 34205] [client 20.89.192.52:51475] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU7Utqv8srZGEpsIm8AJNwAAAA0"]
[Sat Dec 27 02:32:24.209756 2025] [:error] [pid 47566:tid 47591] [client 20.89.192.52:16802] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU7UuKyYgLfR4YwO7byYiwAAARY"]
[Sat Dec 27 02:32:26.551315 2025] [:error] [pid 34187:tid 34212] [client 20.89.192.52:16780] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU7Uuqv8srZGEpsIm8AJPQAAABQ"]
[Sat Dec 27 02:32:28.441228 2025] [:error] [pid 34188:tid 34242] [client 20.89.192.52:17517] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aU7UvA54j0mXgip5BAG8KgAAAFY"]
[Sat Dec 27 02:32:31.188824 2025] [:error] [pid 47566:tid 47575] [client 20.89.192.52:17518] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU7Uv6yYgLfR4YwO7byYkwAAAQY"]
[Sat Dec 27 02:32:33.013017 2025] [:error] [pid 34189:tid 34259] [client 20.89.192.52:30558] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU7UwQnn007DnMwSsfc67AAAAIw"]
[Sat Dec 27 02:32:35.316886 2025] [:error] [pid 34189:tid 34256] [client 20.89.192.52:50705] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU7Uwwnn007DnMwSsfc68QAAAIk"]
[Sat Dec 27 02:32:37.606309 2025] [:error] [pid 34274:tid 34290] [client 20.89.192.52:16467] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aU7Uxc6fabpS0mfhiCEhLAAAAM4"]
[Sat Dec 27 02:32:40.520273 2025] [:error] [pid 34188:tid 34232] [client 20.89.192.52:53300] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU7UyA54j0mXgip5BAG8SAAAAEw"]
[Sat Dec 27 02:32:42.828610 2025] [proxy_fcgi:error] [pid 34188:tid 34241] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:43.752984 2025] [proxy_fcgi:error] [pid 34188:tid 34238] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:43.895593 2025] [proxy_fcgi:error] [pid 34188:tid 34231] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:44.035247 2025] [proxy_fcgi:error] [pid 34188:tid 34221] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:44.160745 2025] [proxy_fcgi:error] [pid 34188:tid 34220] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:44.294096 2025] [proxy_fcgi:error] [pid 34188:tid 34229] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:44.419242 2025] [proxy_fcgi:error] [pid 34188:tid 34237] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:44.678620 2025] [proxy_fcgi:error] [pid 34188:tid 34225] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:45.342466 2025] [proxy_fcgi:error] [pid 34188:tid 34226] [client 20.89.192.52:16459] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:32:45.672426 2025] [:error] [pid 34188:tid 34242] [client 20.89.192.52:16459] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU7UzQ54j0mXgip5BAG8ZgAAAFY"]
[Sat Dec 27 02:32:50.055372 2025] [:error] [pid 34187:tid 34206] [client 20.89.192.52:16898] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU7U0qv8srZGEpsIm8AJTwAAAA4"]
[Sat Dec 27 02:32:53.242290 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:16021] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU7U1ayYgLfR4YwO7byYtQAAARE"]
[Sat Dec 27 02:32:58.289647 2025] [:error] [pid 34274:tid 34277] [client 20.89.192.52:53267] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aU7U2s6fabpS0mfhiCEhVgAAAME"]
[Sat Dec 27 02:33:01.934088 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:16000] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7U3ayYgLfR4YwO7byYwwAAARE"]
[Sat Dec 27 02:33:03.468856 2025] [:error] [pid 34189:tid 34260] [client 20.89.192.52:16896] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7U3wnn007DnMwSsfc7DAAAAI0"]
[Sat Dec 27 02:33:06.938646 2025] [:error] [pid 34189:tid 34255] [client 20.89.192.52:18438] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7U4gnn007DnMwSsfc7DwAAAIg"]
[Sat Dec 27 02:33:10.921620 2025] [:error] [pid 34189:tid 34269] [client 20.89.192.52:5240] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7U5gnn007DnMwSsfc7HAAAAJY"]
[Sat Dec 27 02:33:16.226478 2025] [:error] [pid 34274:tid 34294] [client 20.89.192.52:19352] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU7U7M6fabpS0mfhiCEhbAAAANI"]
[Sat Dec 27 02:33:22.696460 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:23426] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU7U8qyYgLfR4YwO7byY5gAAARE"]
[Sat Dec 27 02:33:24.893747 2025] [:error] [pid 47566:tid 47581] [client 20.89.192.52:18520] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU7U9KyYgLfR4YwO7byY7AAAAQw"]
[Sat Dec 27 02:33:27.121931 2025] [:error] [pid 47566:tid 47580] [client 20.89.192.52:5291] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aU7U96yYgLfR4YwO7byY8gAAAQs"]
[Sat Dec 27 02:33:28.669951 2025] [:error] [pid 34189:tid 34250] [client 20.89.192.52:18300] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aU7U-Ann007DnMwSsfc7RAAAAIM"]
[Sat Dec 27 02:33:31.768410 2025] [:error] [pid 34188:tid 34237] [client 20.89.192.52:44326] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aU7U-w54j0mXgip5BAG8vAAAAFE"]
[Sat Dec 27 02:33:34.617845 2025] [:error] [pid 34189:tid 34261] [client 20.89.192.52:17279] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aU7U_gnn007DnMwSsfc7TAAAAI4"]
[Sat Dec 27 02:33:37.388116 2025] [:error] [pid 34189:tid 34257] [client 20.89.192.52:45862] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aU7VAQnn007DnMwSsfc7UAAAAIo"]
[Sat Dec 27 02:33:39.100323 2025] [:error] [pid 34188:tid 34242] [client 20.89.192.52:59784] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VAw54j0mXgip5BAG8yQAAAFY"]
[Sat Dec 27 02:33:41.208264 2025] [:error] [pid 34274:tid 34297] [client 20.89.192.52:29903] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VBc6fabpS0mfhiCEhhwAAANU"]
[Sat Dec 27 02:33:42.263086 2025] [:error] [pid 34274:tid 34285] [client 20.89.192.52:59972] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VBs6fabpS0mfhiCEhjAAAAMk"]
[Sat Dec 27 02:33:46.487341 2025] [proxy_fcgi:error] [pid 34187:tid 34214] [client 20.89.192.52:59828] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:33:51.150528 2025] [proxy_fcgi:error] [pid 34187:tid 34209] [client 20.89.192.52:59828] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:33:51.583257 2025] [proxy_fcgi:error] [pid 34187:tid 34198] [client 20.89.192.52:59828] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:33:53.059025 2025] [proxy_fcgi:error] [pid 34187:tid 34194] [client 20.89.192.52:59828] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:33:53.204631 2025] [proxy_fcgi:error] [pid 34187:tid 34207] [client 20.89.192.52:59828] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:33:53.455851 2025] [:error] [pid 34187:tid 34204] [client 20.89.192.52:59828] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU7VEav8srZGEpsIm8AJlwAAAAw"]
[Sat Dec 27 02:33:55.179842 2025] [:error] [pid 47566:tid 47575] [client 20.89.192.52:60030] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU7VE6yYgLfR4YwO7byZHQAAAQY"]
[Sat Dec 27 02:33:57.115204 2025] [:error] [pid 34188:tid 34223] [client 20.89.192.52:45869] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU7VFQ54j0mXgip5BAG82gAAAEM"]
[Sat Dec 27 02:33:58.464514 2025] [:error] [pid 34189:tid 34261] [client 20.89.192.52:5462] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aU7VFgnn007DnMwSsfc7egAAAI4"]
[Sat Dec 27 02:34:00.598813 2025] [:error] [pid 34187:tid 34197] [client 20.89.192.52:20673] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7VGKv8srZGEpsIm8AJmAAAAAU"]
[Sat Dec 27 02:34:02.690351 2025] [:error] [pid 47566:tid 47587] [client 20.89.192.52:5490] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7VGqyYgLfR4YwO7byZMwAAARI"]
[Sat Dec 27 02:34:04.529341 2025] [:error] [pid 34274:tid 34282] [client 20.89.192.52:17804] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7VHM6fabpS0mfhiCEhsAAAAMY"]
[Sat Dec 27 02:34:06.542968 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:45867] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7VHqyYgLfR4YwO7byZQQAAAQM"]
[Sat Dec 27 02:34:08.372808 2025] [:error] [pid 34274:tid 34277] [client 20.89.192.52:20723] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VIM6fabpS0mfhiCEhuwAAAME"]
[Sat Dec 27 02:34:09.883405 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:31004] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VIayYgLfR4YwO7byZTQAAAQM"]
[Sat Dec 27 02:34:10.981640 2025] [:error] [pid 34274:tid 34286] [client 20.89.192.52:17815] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VIs6fabpS0mfhiCEhxwAAAMo"]
[Sat Dec 27 02:34:12.878341 2025] [:error] [pid 34188:tid 34240] [client 20.89.192.52:17033] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aU7VJA54j0mXgip5BAG83wAAAFQ"]
[Sat Dec 27 02:34:14.473352 2025] [:error] [pid 34189:tid 34248] [client 20.89.192.52:5468] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU7VJgnn007DnMwSsfc7gwAAAIE"]
[Sat Dec 27 02:34:17.686119 2025] [:error] [pid 34189:tid 34247] [client 20.89.192.52:17959] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU7VKQnn007DnMwSsfc7iwAAAIA"]
[Sat Dec 27 02:34:19.411524 2025] [:error] [pid 34189:tid 34254] [client 20.89.192.52:17757] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU7VKwnn007DnMwSsfc7jAAAAIc"]
[Sat Dec 27 02:34:21.852423 2025] [:error] [pid 47566:tid 47574] [client 20.89.192.52:16329] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aU7VLayYgLfR4YwO7byZcgAAAQU"]
[Sat Dec 27 02:34:23.172046 2025] [:error] [pid 47566:tid 47577] [client 20.89.192.52:15745] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU7VL6yYgLfR4YwO7byZdwAAAQg"]
[Sat Dec 27 02:34:25.165960 2025] [:error] [pid 34189:tid 34259] [client 20.89.192.52:15131] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU7VMQnn007DnMwSsfc7mwAAAIw"]
[Sat Dec 27 02:34:26.316032 2025] [:error] [pid 34274:tid 34283] [client 20.89.192.52:29119] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU7VMs6fabpS0mfhiCEh3gAAAMc"]
[Sat Dec 27 02:34:27.622143 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:21049] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aU7VM6yYgLfR4YwO7byZeQAAAQM"]
[Sat Dec 27 02:34:28.613342 2025] [:error] [pid 34187:tid 34214] [client 20.89.192.52:5512] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7VNKv8srZGEpsIm8AJmwAAABY"]
[Sat Dec 27 02:34:30.141196 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:5378] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7VNs6fabpS0mfhiCEh6AAAANM"]
[Sat Dec 27 02:34:32.974020 2025] [:error] [pid 34189:tid 34256] [client 20.89.192.52:14901] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7VOAnn007DnMwSsfc7sgAAAIk"]
[Sat Dec 27 02:34:34.137890 2025] [:error] [pid 47566:tid 47579] [client 20.89.192.52:5408] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7VOqyYgLfR4YwO7byZfgAAAQo"]
[Sat Dec 27 02:34:37.474133 2025] [:error] [pid 34188:tid 34226] [client 20.89.192.52:30120] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7VPQ54j0mXgip5BAG86QAAAEY"]
[Sat Dec 27 02:34:39.111596 2025] [:error] [pid 34188:tid 34232] [client 20.89.192.52:21045] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7VPw54j0mXgip5BAG87AAAAEw"]
[Sat Dec 27 02:34:40.491465 2025] [:error] [pid 47566:tid 47588] [client 20.89.192.52:29060] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7VQKyYgLfR4YwO7byZmQAAARM"]
[Sat Dec 27 02:34:42.189183 2025] [:error] [pid 34188:tid 34230] [client 20.89.192.52:29078] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7VQg54j0mXgip5BAG87gAAAEo"]
[Sat Dec 27 02:34:42.895698 2025] [:error] [pid 34274:tid 34289] [client 20.89.192.52:30346] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7VQs6fabpS0mfhiCEiDQAAAM0"]
[Sat Dec 27 02:34:44.726378 2025] [:error] [pid 34187:tid 34198] [client 20.89.192.52:29075] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7VRKv8srZGEpsIm8AJowAAAAY"]
[Sat Dec 27 02:34:45.884269 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:14850] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7VRayYgLfR4YwO7byZ0gAAAQM"]
[Sat Dec 27 02:34:47.230547 2025] [:error] [pid 34188:tid 34229] [client 20.89.192.52:15677] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7VRw54j0mXgip5BAG88wAAAEk"]
[Sat Dec 27 02:34:48.158653 2025] [:error] [pid 47566:tid 47590] [client 20.89.192.52:5839] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU7VSKyYgLfR4YwO7byZ2wAAARU"]
[Sat Dec 27 02:34:49.193676 2025] [:error] [pid 47566:tid 47571] [client 20.89.192.52:30081] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU7VSayYgLfR4YwO7byZ4QAAAQI"]
[Sat Dec 27 02:34:50.834365 2025] [:error] [pid 34274:tid 34300] [client 20.89.192.52:21025] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU7VSs6fabpS0mfhiCEiIQAAANg"]
[Sat Dec 27 02:34:52.145214 2025] [:error] [pid 34189:tid 34247] [client 20.89.192.52:5850] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU7VTAnn007DnMwSsfc7ygAAAIA"]
[Sat Dec 27 02:34:54.262349 2025] [proxy_fcgi:error] [pid 34187:tid 34215] [client 20.89.192.52:15646] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:34:54.383759 2025] [:error] [pid 34187:tid 34210] [client 20.89.192.52:15646] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU7VTqv8srZGEpsIm8AJrwAAABI"]
[Sat Dec 27 02:34:56.636076 2025] [:error] [pid 34274:tid 34284] [client 20.89.192.52:30091] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU7VUM6fabpS0mfhiCEiMAAAAMg"]
[Sat Dec 27 02:34:58.980918 2025] [:error] [pid 34189:tid 34264] [client 20.89.192.52:14839] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU7VUgnn007DnMwSsfc73QAAAJE"]
[Sat Dec 27 02:35:01.710643 2025] [:error] [pid 34189:tid 34250] [client 20.89.192.52:14784] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU7VVQnn007DnMwSsfc74AAAAIM"]
[Sat Dec 27 02:35:04.537443 2025] [proxy_fcgi:error] [pid 47566:tid 47593] [client 20.89.192.52:16990] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:35:04.958843 2025] [proxy_fcgi:error] [pid 47566:tid 47576] [client 20.89.192.52:16990] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:35:05.102640 2025] [:error] [pid 47566:tid 47581] [client 20.89.192.52:16990] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7VWayYgLfR4YwO7byaAwAAAQw"]
[Sat Dec 27 02:35:06.690052 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:15854] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7VWs6fabpS0mfhiCEiPwAAANM"]
[Sat Dec 27 02:35:08.793153 2025] [:error] [pid 47566:tid 47584] [client 20.89.192.52:15861] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7VXKyYgLfR4YwO7byaEAAAAQ8"]
[Sat Dec 27 02:35:11.202736 2025] [:error] [pid 47566:tid 47572] [client 20.89.192.52:15898] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7VX6yYgLfR4YwO7byaHgAAAQM"]
[Sat Dec 27 02:35:13.682587 2025] [:error] [pid 34274:tid 34300] [client 20.89.192.52:17007] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aU7VYc6fabpS0mfhiCEiSgAAANg"]
[Sat Dec 27 02:35:15.199799 2025] [:error] [pid 34274:tid 34297] [client 20.89.192.52:16999] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aU7VY86fabpS0mfhiCEiTwAAANU"]
[Sat Dec 27 02:35:16.834336 2025] [:error] [pid 34188:tid 34234] [client 20.89.192.52:23594] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aU7VZA54j0mXgip5BAG9DQAAAE4"]
[Sat Dec 27 02:35:18.664780 2025] [:error] [pid 34187:tid 34212] [client 20.89.192.52:14797] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aU7VZqv8srZGEpsIm8AJxAAAABQ"]
[Sat Dec 27 02:35:20.462324 2025] [:error] [pid 34189:tid 34266] [client 20.89.192.52:16554] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7VaAnn007DnMwSsfc78wAAAJM"]
[Sat Dec 27 02:35:21.203975 2025] [:error] [pid 34189:tid 34262] [client 20.89.192.52:65326] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7VaQnn007DnMwSsfc79AAAAI8"]
[Sat Dec 27 02:35:24.066802 2025] [:error] [pid 34188:tid 34239] [client 20.89.192.52:64388] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7VbA54j0mXgip5BAG9FAAAAFM"]
[Sat Dec 27 02:35:26.062506 2025] [:error] [pid 34188:tid 34228] [client 20.89.192.52:59755] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7Vbg54j0mXgip5BAG9FgAAAEg"]
[Sat Dec 27 02:35:29.083378 2025] [:error] [pid 47566:tid 47593] [client 20.89.192.52:65295] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU7VcayYgLfR4YwO7byaTwAAARg"]
[Sat Dec 27 02:35:29.612549 2025] [:error] [pid 34188:tid 34223] [client 20.89.192.52:18033] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU7VcQ54j0mXgip5BAG9GgAAAEM"]
[Sat Dec 27 02:35:29.986125 2025] [:error] [pid 34188:tid 34230] [client 20.89.192.52:17001] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU7VcQ54j0mXgip5BAG9HAAAAEo"]
[Sat Dec 27 02:35:30.828651 2025] [:error] [pid 34189:tid 34248] [client 20.89.192.52:16965] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU7Vcgnn007DnMwSsfc8AQAAAIE"]
[Sat Dec 27 02:35:33.864599 2025] [:error] [pid 34188:tid 34229] [client 20.89.192.52:35415] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7VdQ54j0mXgip5BAG9IwAAAEk"]
[Sat Dec 27 02:35:36.208863 2025] [:error] [pid 47566:tid 47580] [client 20.89.192.52:65308] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7VeKyYgLfR4YwO7byaYwAAAQs"]
[Sat Dec 27 02:35:39.847149 2025] [:error] [pid 34188:tid 34223] [client 20.89.192.52:17440] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7Vew54j0mXgip5BAG9KQAAAEM"]
[Sat Dec 27 02:35:40.964670 2025] [:error] [pid 47566:tid 47570] [client 20.89.192.52:64168] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7VfKyYgLfR4YwO7byacAAAAQE"]
[Sat Dec 27 02:35:42.158692 2025] [:error] [pid 34189:tid 34252] [client 20.89.192.52:20328] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU7Vfgnn007DnMwSsfc8GAAAAIU"]
[Sat Dec 27 02:35:43.841408 2025] [:error] [pid 34188:tid 34233] [client 20.89.192.52:5613] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7Vfw54j0mXgip5BAG9OQAAAE0"]
[Sat Dec 27 02:35:44.812103 2025] [:error] [pid 34188:tid 34232] [client 20.89.192.52:16995] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7VgA54j0mXgip5BAG9OwAAAEw"]
[Sat Dec 27 02:35:45.661049 2025] [:error] [pid 34189:tid 34250] [client 20.89.192.52:64393] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7VgQnn007DnMwSsfc8HQAAAIM"]
[Sat Dec 27 02:35:47.172567 2025] [:error] [pid 47566:tid 47575] [client 20.89.192.52:6088] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7Vg6yYgLfR4YwO7byagQAAAQY"]
[Sat Dec 27 02:35:48.156123 2025] [:error] [pid 34188:tid 34220] [client 20.89.192.52:16530] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7VhA54j0mXgip5BAG9RQAAAEA"]
[Sat Dec 27 02:35:49.608454 2025] [:error] [pid 47566:tid 47589] [client 20.89.192.52:65507] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7VhayYgLfR4YwO7byaiAAAARQ"]
[Sat Dec 27 02:35:51.215252 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:23634] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7Vh86fabpS0mfhiCEihgAAANM"]
[Sat Dec 27 02:35:55.098492 2025] [:error] [pid 34274:tid 34279] [client 20.89.192.52:64154] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7Vi86fabpS0mfhiCEilQAAAMM"]
[Sat Dec 27 02:35:57.885346 2025] [:error] [pid 34187:tid 34207] [client 20.89.192.52:14676] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU7Vjav8srZGEpsIm8AJ-AAAAA8"]
[Sat Dec 27 02:36:00.308309 2025] [:error] [pid 34187:tid 34193] [client 20.89.192.52:23672] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU7VkKv8srZGEpsIm8AKAQAAAAE"]
[Sat Dec 27 02:36:01.427791 2025] [:error] [pid 34274:tid 34298] [client 20.89.192.52:14718] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU7Vkc6fabpS0mfhiCEiqQAAANY"]
[Sat Dec 27 02:36:02.467376 2025] [:error] [pid 34187:tid 34199] [client 20.89.192.52:16444] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU7Vkqv8srZGEpsIm8AKDAAAAAc"]
[Sat Dec 27 02:36:05.648962 2025] [proxy_fcgi:error] [pid 34274:tid 34298] [client 20.89.192.52:30314] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:06.852749 2025] [proxy_fcgi:error] [pid 34274:tid 34299] [client 20.89.192.52:30314] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:07.000478 2025] [:error] [pid 34274:tid 34292] [client 20.89.192.52:30314] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU7Vls6fabpS0mfhiCEivAAAANA"]
[Sat Dec 27 02:36:10.335529 2025] [:error] [pid 34189:tid 34256] [client 20.89.192.52:30279] [client 20.89.192.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aU7Vmgnn007DnMwSsfc8TwAAAIk"]
[Sat Dec 27 02:36:11.899474 2025] [proxy_fcgi:error] [pid 34187:tid 34203] [client 20.89.192.52:20318] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:12.040967 2025] [proxy_fcgi:error] [pid 34187:tid 34201] [client 20.89.192.52:20318] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:12.164670 2025] [proxy_fcgi:error] [pid 34187:tid 34205] [client 20.89.192.52:20318] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:12.302827 2025] [proxy_fcgi:error] [pid 34187:tid 34194] [client 20.89.192.52:20318] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:12.430798 2025] [proxy_fcgi:error] [pid 34187:tid 34209] [client 20.89.192.52:20318] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:36:12.576782 2025] [:error] [pid 34187:tid 34210] [client 20.89.192.52:20318] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU7VnKv8srZGEpsIm8AKPgAAABI"]
[Sat Dec 27 02:36:14.364681 2025] [:error] [pid 34187:tid 34212] [client 20.89.192.52:16522] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU7Vnqv8srZGEpsIm8AKQgAAABQ"]
[Sat Dec 27 02:36:15.170911 2025] [:error] [pid 34189:tid 34247] [client 20.89.192.52:5596] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU7Vnwnn007DnMwSsfc8YwAAAIA"]
[Sat Dec 27 02:36:16.275431 2025] [:error] [pid 34187:tid 34213] [client 20.89.192.52:65494] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aU7VoKv8srZGEpsIm8AKSAAAABU"]
[Sat Dec 27 02:36:17.754069 2025] [:error] [pid 34274:tid 34288] [client 20.89.192.52:23666] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU7Voc6fabpS0mfhiCEi2gAAAMw"]
[Sat Dec 27 02:36:18.372455 2025] [:error] [pid 34188:tid 34242] [client 20.89.192.52:5608] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU7Vog54j0mXgip5BAG9gQAAAFY"]
[Sat Dec 27 02:36:19.340899 2025] [:error] [pid 34188:tid 34234] [client 20.89.192.52:5625] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU7Vow54j0mXgip5BAG9hwAAAE4"]
[Sat Dec 27 02:36:19.815511 2025] [:error] [pid 34187:tid 34199] [client 20.89.192.52:64178] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aU7Vo6v8srZGEpsIm8AKWAAAAAc"]
[Sat Dec 27 02:36:20.639673 2025] [:error] [pid 34187:tid 34194] [client 20.89.192.52:20290] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aU7VpKv8srZGEpsIm8AKYgAAAAI"]
[Sat Dec 27 02:36:21.882877 2025] [:error] [pid 34189:tid 34252] [client 20.89.192.52:14817] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aU7VpQnn007DnMwSsfc8bAAAAIU"]
[Sat Dec 27 02:36:23.561228 2025] [:error] [pid 47566:tid 47577] [client 20.89.192.52:17301] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aU7Vp6yYgLfR4YwO7byavwAAAQg"]
[Sat Dec 27 02:36:24.822320 2025] [:error] [pid 34188:tid 34230] [client 20.89.192.52:16517] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aU7VqA54j0mXgip5BAG9kwAAAEo"]
[Sat Dec 27 02:36:26.089310 2025] [:error] [pid 34189:tid 34263] [client 20.89.192.52:5405] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU7Vqgnn007DnMwSsfc8cAAAAJA"]
[Sat Dec 27 02:36:27.007522 2025] [:error] [pid 34189:tid 34256] [client 20.89.192.52:65339] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU7Vqwnn007DnMwSsfc8dAAAAIk"]
[Sat Dec 27 02:36:28.000217 2025] [:error] [pid 34187:tid 34204] [client 20.89.192.52:14792] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU7Vq6v8srZGEpsIm8AKegAAAAw"]
[Sat Dec 27 02:36:30.376859 2025] [:error] [pid 47566:tid 47574] [client 20.89.192.52:5412] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aU7VrqyYgLfR4YwO7bya0AAAAQU"]
[Sat Dec 27 02:36:31.369324 2025] [:error] [pid 34189:tid 34255] [client 20.89.192.52:18182] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aU7Vrwnn007DnMwSsfc8fAAAAIg"]
[Sat Dec 27 02:36:32.265809 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:21374] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aU7VsKyYgLfR4YwO7bya1gAAARE"]
[Sat Dec 27 02:36:33.703218 2025] [:error] [pid 34189:tid 34264] [client 20.89.192.52:15828] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aU7VsQnn007DnMwSsfc8fwAAAJE"]
[Sat Dec 27 02:36:35.011413 2025] [:error] [pid 34187:tid 34209] [client 20.89.192.52:18200] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aU7Vs6v8srZGEpsIm8AKhAAAABE"]
[Sat Dec 27 02:36:36.845451 2025] [:error] [pid 34189:tid 34269] [client 20.89.192.52:5403] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aU7VtAnn007DnMwSsfc8hQAAAJY"]
[Sat Dec 27 02:36:38.927485 2025] [:error] [pid 34188:tid 34231] [client 20.89.192.52:5394] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aU7Vtg54j0mXgip5BAG9oAAAAEs"]
[Sat Dec 27 02:36:40.828607 2025] [:error] [pid 47566:tid 47585] [client 20.89.192.52:30082] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aU7VuKyYgLfR4YwO7bya9AAAARA"]
[Sat Dec 27 02:36:41.843970 2025] [:error] [pid 34189:tid 34265] [client 20.89.192.52:15464] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aU7VuQnn007DnMwSsfc8jgAAAJI"]
[Sat Dec 27 02:36:43.386839 2025] [:error] [pid 47566:tid 47592] [client 20.89.192.52:18207] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aU7Vu6yYgLfR4YwO7bybAAAAARc"]
[Sat Dec 27 02:36:44.838925 2025] [:error] [pid 34274:tid 34293] [client 20.89.192.52:21345] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aU7VvM6fabpS0mfhiCEjDAAAANE"]
[Sat Dec 27 02:36:46.417392 2025] [:error] [pid 34189:tid 34264] [client 20.89.192.52:17297] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aU7Vvgnn007DnMwSsfc8kQAAAJE"]
[Sat Dec 27 02:36:48.503151 2025] [:error] [pid 47566:tid 47588] [client 20.89.192.52:15827] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aU7VwKyYgLfR4YwO7bybCQAAARM"]
[Sat Dec 27 02:36:50.470294 2025] [:error] [pid 47566:tid 47583] [client 20.89.192.52:30131] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU7VwqyYgLfR4YwO7bybEAAAAQ4"]
[Sat Dec 27 02:36:52.702761 2025] [:error] [pid 34188:tid 34222] [client 20.89.192.52:15856] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU7VxA54j0mXgip5BAG9pAAAAEI"]
[Sat Dec 27 02:36:55.488514 2025] [:error] [pid 47566:tid 47586] [client 20.89.192.52:5884] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU7Vx6yYgLfR4YwO7bybGAAAARE"]
[Sat Dec 27 02:36:58.667715 2025] [:error] [pid 34274:tid 34288] [client 20.89.192.52:15855] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aU7Vys6fabpS0mfhiCEjGwAAAMw"]
[Sat Dec 27 02:37:00.419978 2025] [:error] [pid 34274:tid 34290] [client 20.89.192.52:65312] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aU7VzM6fabpS0mfhiCEjIwAAAM4"]
[Sat Dec 27 02:37:03.120634 2025] [:error] [pid 47566:tid 47569] [client 20.89.192.52:17335] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aU7Vz6yYgLfR4YwO7bybKAAAAQA"]
[Sat Dec 27 02:37:03.988818 2025] [:error] [pid 34187:tid 34203] [client 20.89.192.52:21328] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aU7Vz6v8srZGEpsIm8AKrQAAAAs"]
[Sat Dec 27 02:37:04.933188 2025] [:error] [pid 34187:tid 34212] [client 20.89.192.52:21337] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aU7V0Kv8srZGEpsIm8AKsAAAABQ"]
[Sat Dec 27 02:37:05.784378 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:15868] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aU7V0c6fabpS0mfhiCEjKwAAANM"]
[Sat Dec 27 02:37:08.067061 2025] [:error] [pid 47566:tid 47581] [client 20.89.192.52:14823] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aU7V1KyYgLfR4YwO7bybNgAAAQw"]
[Sat Dec 27 02:37:09.931765 2025] [:error] [pid 34188:tid 34222] [client 20.89.192.52:15896] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aU7V1Q54j0mXgip5BAG9swAAAEI"]
[Sat Dec 27 02:37:11.349178 2025] [:error] [pid 34274:tid 34292] [client 20.89.192.52:5920] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aU7V186fabpS0mfhiCEjMQAAANA"]
[Sat Dec 27 02:37:12.516833 2025] [proxy_fcgi:error] [pid 34188:tid 34235] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:12.653335 2025] [proxy_fcgi:error] [pid 34188:tid 34234] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:12.778451 2025] [proxy_fcgi:error] [pid 34188:tid 34220] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:13.154080 2025] [proxy_fcgi:error] [pid 34188:tid 34223] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:13.291534 2025] [proxy_fcgi:error] [pid 34188:tid 34241] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:13.458680 2025] [proxy_fcgi:error] [pid 34188:tid 34243] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:13.599658 2025] [proxy_fcgi:error] [pid 34188:tid 34226] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:14.231151 2025] [proxy_fcgi:error] [pid 34188:tid 34236] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:14.386644 2025] [proxy_fcgi:error] [pid 34188:tid 34244] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:14.529243 2025] [proxy_fcgi:error] [pid 34188:tid 34232] [client 20.89.192.52:14805] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:37:14.694073 2025] [:error] [pid 34188:tid 34242] [client 20.89.192.52:14805] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aU7V2g54j0mXgip5BAG9yAAAAFY"]
[Sat Dec 27 02:37:16.000875 2025] [:error] [pid 34189:tid 34249] [client 20.89.192.52:15851] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aU7V3Ann007DnMwSsfc80gAAAII"]
[Sat Dec 27 02:37:17.840330 2025] [:error] [pid 34188:tid 34233] [client 20.89.192.52:65303] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aU7V3Q54j0mXgip5BAG92gAAAE0"]
[Sat Dec 27 02:37:20.944394 2025] [:error] [pid 34187:tid 34193] [client 20.89.192.52:15928] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aU7V4Kv8srZGEpsIm8AKywAAAAE"]
[Sat Dec 27 02:37:22.528420 2025] [:error] [pid 34189:tid 34248] [client 20.89.192.52:5905] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU7V4gnn007DnMwSsfc83QAAAIE"]
[Sat Dec 27 02:37:24.295030 2025] [:error] [pid 34188:tid 34224] [client 20.89.192.52:15482] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU7V5A54j0mXgip5BAG97gAAAEQ"]
[Sat Dec 27 02:37:26.203868 2025] [:error] [pid 34187:tid 34214] [client 20.89.192.52:17331] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU7V5qv8srZGEpsIm8AK1wAAABY"]
[Sat Dec 27 02:37:28.869037 2025] [:error] [pid 34274:tid 34279] [client 20.89.192.52:14813] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aU7V6M6fabpS0mfhiCEjRQAAAMM"]
[Sat Dec 27 02:37:32.563483 2025] [:error] [pid 34187:tid 34211] [client 20.89.192.52:15891] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aU7V7Kv8srZGEpsIm8AK5QAAABM"]
[Sat Dec 27 02:37:32.881265 2025] [:error] [pid 34189:tid 34256] [client 20.89.192.52:15901] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aU7V7Ann007DnMwSsfc9BgAAAIk"]
[Sat Dec 27 02:37:33.398510 2025] [:error] [pid 34189:tid 34254] [client 20.89.192.52:14799] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aU7V7Qnn007DnMwSsfc9CAAAAIc"]
[Sat Dec 27 02:37:34.667579 2025] [:error] [pid 34187:tid 34201] [client 20.89.192.52:15471] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aU7V7qv8srZGEpsIm8AK6wAAAAk"]
[Sat Dec 27 02:37:35.190447 2025] [:error] [pid 34187:tid 34213] [client 20.89.192.52:17310] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aU7V76v8srZGEpsIm8AK7gAAABU"]
[Sat Dec 27 02:37:36.013945 2025] [:error] [pid 34187:tid 34193] [client 20.89.192.52:15907] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aU7V8Kv8srZGEpsIm8AK7wAAAAE"]
[Sat Dec 27 02:37:37.666469 2025] [:error] [pid 34188:tid 34232] [client 20.89.192.52:5947] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aU7V8Q54j0mXgip5BAG-AQAAAEw"]
[Sat Dec 27 02:37:39.384441 2025] [:error] [pid 34188:tid 34222] [client 20.89.192.52:18207] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aU7V8w54j0mXgip5BAG-CAAAAEI"]
[Sat Dec 27 02:37:41.536254 2025] [:error] [pid 47566:tid 47588] [client 20.89.192.52:14866] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aU7V9ayYgLfR4YwO7bybbwAAARM"]
[Sat Dec 27 02:37:42.652406 2025] [:error] [pid 47566:tid 47571] [client 20.89.192.52:65329] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aU7V9qyYgLfR4YwO7bybdgAAAQI"]
[Sat Dec 27 02:37:43.676894 2025] [:error] [pid 47566:tid 47569] [client 20.89.192.52:5893] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aU7V96yYgLfR4YwO7bybfAAAAQA"]
[Sat Dec 27 02:37:45.055269 2025] [:error] [pid 34274:tid 34298] [client 20.89.192.52:18223] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aU7V-c6fabpS0mfhiCEjUgAAANY"]
[Sat Dec 27 02:37:46.784009 2025] [:error] [pid 47566:tid 47584] [client 20.89.192.52:14845] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aU7V-qyYgLfR4YwO7bybhwAAAQ8"]
[Sat Dec 27 02:37:47.397741 2025] [:error] [pid 34274:tid 34296] [client 20.89.192.52:15880] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aU7V-86fabpS0mfhiCEjVgAAANQ"]
[Sat Dec 27 02:37:49.752912 2025] [:error] [pid 47566:tid 47574] [client 20.89.192.52:5943] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aU7V_ayYgLfR4YwO7bybkgAAAQU"]
[Sat Dec 27 02:37:52.066935 2025] [:error] [pid 47566:tid 47592] [client 20.89.192.52:5896] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aU7WAKyYgLfR4YwO7bybngAAARc"]
[Sat Dec 27 02:37:54.293457 2025] [:error] [pid 34189:tid 34264] [client 20.89.192.52:15479] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU7WAgnn007DnMwSsfc9JwAAAJE"]
[Sat Dec 27 02:37:55.274636 2025] [:error] [pid 47566:tid 47581] [client 20.89.192.52:14834] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU7WA6yYgLfR4YwO7bybpAAAAQw"]
[Sat Dec 27 02:37:56.118453 2025] [:error] [pid 34188:tid 34229] [client 20.89.192.52:18212] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU7WBA54j0mXgip5BAG-IwAAAEk"]
[Sat Dec 27 02:37:57.278059 2025] [:error] [pid 34188:tid 34240] [client 20.89.192.52:17337] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aU7WBQ54j0mXgip5BAG-JQAAAFQ"]
[Sat Dec 27 02:37:59.009962 2025] [:error] [pid 34274:tid 34297] [client 20.89.192.52:17312] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aU7WB86fabpS0mfhiCEjZwAAANU"]
[Sat Dec 27 02:38:00.016502 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:15453] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aU7WCM6fabpS0mfhiCEjaAAAANM"]
[Sat Dec 27 02:38:01.640498 2025] [:error] [pid 47566:tid 47590] [client 20.89.192.52:17298] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aU7WCayYgLfR4YwO7bybsQAAARU"]
[Sat Dec 27 02:38:03.039909 2025] [:error] [pid 34274:tid 34278] [client 20.89.192.52:65298] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aU7WC86fabpS0mfhiCEjcwAAAMI"]
[Sat Dec 27 02:38:04.615706 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:18205] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aU7WDM6fabpS0mfhiCEjegAAANM"]
[Sat Dec 27 02:38:06.016398 2025] [:error] [pid 34189:tid 34248] [client 20.89.192.52:18209] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aU7WDgnn007DnMwSsfc9LwAAAIE"]
[Sat Dec 27 02:38:06.777732 2025] [:error] [pid 34274:tid 34289] [client 20.89.192.52:14859] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aU7WDs6fabpS0mfhiCEjgwAAAM0"]
[Sat Dec 27 02:38:07.468887 2025] [:error] [pid 34189:tid 34256] [client 20.89.192.52:14808] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aU7WDwnn007DnMwSsfc9MQAAAIk"]
[Sat Dec 27 02:38:08.108474 2025] [:error] [pid 34274:tid 34296] [client 20.89.192.52:65310] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aU7WEM6fabpS0mfhiCEjiwAAANQ"]
[Sat Dec 27 02:38:09.034483 2025] [:error] [pid 47566:tid 47590] [client 20.89.192.52:5933] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aU7WEayYgLfR4YwO7bybwAAAARU"]
[Sat Dec 27 02:38:10.851493 2025] [:error] [pid 34274:tid 34300] [client 20.89.192.52:14796] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aU7WEs6fabpS0mfhiCEjjwAAANg"]
[Sat Dec 27 02:38:12.477806 2025] [:error] [pid 47566:tid 47589] [client 20.89.192.52:15810] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aU7WFKyYgLfR4YwO7bybxwAAARQ"]
[Sat Dec 27 02:38:13.895644 2025] [:error] [pid 34274:tid 34295] [client 20.89.192.52:15443] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aU7WFc6fabpS0mfhiCEjlwAAANM"]
[Sat Dec 27 02:38:15.461756 2025] [proxy_fcgi:error] [pid 47566:tid 47571] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:15.607042 2025] [proxy_fcgi:error] [pid 47566:tid 47572] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:15.737617 2025] [proxy_fcgi:error] [pid 47566:tid 47573] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:15.861682 2025] [proxy_fcgi:error] [pid 47566:tid 47592] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:15.990234 2025] [proxy_fcgi:error] [pid 47566:tid 47588] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:16.124443 2025] [proxy_fcgi:error] [pid 47566:tid 47576] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:16.248186 2025] [proxy_fcgi:error] [pid 47566:tid 47574] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:16.375726 2025] [proxy_fcgi:error] [pid 47566:tid 47587] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:16.523127 2025] [proxy_fcgi:error] [pid 47566:tid 47584] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:16.665797 2025] [proxy_fcgi:error] [pid 47566:tid 47586] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 02:38:16.821224 2025] [proxy_fcgi:error] [pid 47566:tid 47593] [client 20.89.192.52:15888] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 03:17:23.999724 2025] [autoindex:error] [pid 34274:tid 34277] [client 141.94.76.134:57838] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 03:17:25.377988 2025] [autoindex:error] [pid 34274:tid 34285] [client 151.80.133.130:54502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 06:26:35.415780 2025] [autoindex:error] [pid 32278:tid 32280] [client 192.36.137.155:59189] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 07:50:00.625211 2025] [:error] [pid 32193:tid 32273] [client 81.56.3.122:8874] [client 81.56.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aU8fKBgw0eCOc2qYqaI0MgAAAJc"]
[Sat Dec 27 09:11:45.588713 2025] [autoindex:error] [pid 15939:tid 15950] [client 192.104.34.34:56009] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 09:11:45.980707 2025] [autoindex:error] [pid 32278:tid 32287] [client 192.104.34.34:56746] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 09:11:47.288718 2025] [autoindex:error] [pid 32192:tid 32223] [client 192.104.34.34:57478] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 09:11:47.729201 2025] [autoindex:error] [pid 45373:tid 45399] [client 192.104.34.34:58104] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 10:43:57.391353 2025] [:error] [pid 45373:tid 45391] [client 175.6.217.4:50879] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aU9H7S7p_wFcbpu46HUNowAAAVA"]
[Sat Dec 27 12:35:53.808204 2025] [:error] [pid 32192:tid 32247] [client 180.191.171.202:26320] [client 180.191.171.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.171.202, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aU9iKS_q0VFe066lbk8XtwAAAFg"]
[Sat Dec 27 12:35:53.819072 2025] [proxy_fcgi:error] [pid 32192:tid 32247] [client 180.191.171.202:26320] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 14:00:54.760584 2025] [autoindex:error] [pid 32193:tid 32254] [client 74.7.227.129:39540] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 14:42:23.523698 2025] [autoindex:error] [pid 45373:tid 45384] [client 47.128.216.56:53314] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 17:30:24.458210 2025] [autoindex:error] [pid 32191:tid 32216] [client 54.174.62.169:15016] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 19:01:42.583357 2025] [:error] [pid 32192:tid 32234] [client 49.51.38.193:48058] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aU-8li_q0VFe066lbk9O_wAAAEs"]
[Sat Dec 27 20:52:02.668620 2025] [:error] [pid 45373:tid 45397] [client 43.157.170.126:46748] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aU_Wci7p_wFcbpu46HWBhQAAAVY"]
[Sat Dec 27 23:48:58.384332 2025] [autoindex:error] [pid 32278:tid 32304] [client 66.249.64.1:55698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 07:14:52.038519 2025] [autoindex:error] [pid 29388:tid 29420] [client 101.198.0.135:5068] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 10:44:31.283449 2025] [autoindex:error] [pid 43789:tid 43806] [client 84.246.85.11:43767] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 10:44:32.441411 2025] [autoindex:error] [pid 42378:tid 42403] [client 84.246.85.11:44355] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 10:44:33.651125 2025] [autoindex:error] [pid 42378:tid 42384] [client 84.246.85.11:41931] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 11:21:34.225966 2025] [:error] [pid 42293:tid 42342] [client 123.187.240.242:57298] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVCiPsvc9B-5cwN385Js9QAAAFM"]
[Sun Dec 28 11:21:39.640113 2025] [autoindex:error] [pid 29388:tid 29417] [client 194.156.224.126:43346] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 12:46:29.200915 2025] [autoindex:error] [pid 43789:tid 43811] [client 74.7.227.178:60316] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 13:43:19.920592 2025] [autoindex:error] [pid 42378:tid 42394] [client 66.249.64.14:52041] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 14:31:05.162112 2025] [proxy_fcgi:error] [pid 29436:tid 29444] [client 172.86.91.124:54801] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 16:41:26.085823 2025] [autoindex:error] [pid 29437:tid 29477] [client 66.249.64.8:53298] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 16:49:40.013661 2025] [autoindex:error] [pid 42292:tid 42298] [client 104.218.55.248:58752] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 17:35:58.546440 2025] [autoindex:error] [pid 42292:tid 42309] [client 44.204.160.41:58578] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 17:35:58.954736 2025] [autoindex:error] [pid 43789:tid 43803] [client 44.204.160.41:36302] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 17:39:38.858353 2025] [:error] [pid 29437:tid 29487] [client 101.91.148.219:46111] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVD62hhDotAbVk6pZLeeGgAAAdU"]
[Sun Dec 28 18:12:25.219595 2025] [autoindex:error] [pid 43789:tid 43806] [client 66.249.64.15:62270] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 18:31:24.822967 2025] [autoindex:error] [pid 29437:tid 29476] [client 34.9.26.218:58304] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 19:22:38.572102 2025] [autoindex:error] [pid 43789:tid 43809] [client 35.223.187.126:56643] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 21:26:37.632805 2025] [proxy_fcgi:error] [pid 42378:tid 42396] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:37.778247 2025] [proxy_fcgi:error] [pid 42378:tid 42404] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:38.155362 2025] [proxy_fcgi:error] [pid 42378:tid 42390] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:38.315763 2025] [proxy_fcgi:error] [pid 42378:tid 42382] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:38.565406 2025] [proxy_fcgi:error] [pid 42378:tid 42402] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:38.724483 2025] [proxy_fcgi:error] [pid 42378:tid 42388] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:38.865333 2025] [proxy_fcgi:error] [pid 42378:tid 42401] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:39.182263 2025] [proxy_fcgi:error] [pid 42378:tid 42389] [client 74.225.206.175:15578] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:26:39.321593 2025] [:error] [pid 42378:tid 42398] [client 74.225.206.175:15578] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVEwDzgtcN-KHAjWrX8wnQAAANI"]
[Sun Dec 28 21:26:39.665878 2025] [:error] [pid 43789:tid 43795] [client 74.225.206.175:15490] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVEwDwa-tUppni4CcCZKfwAAAQQ"]
[Sun Dec 28 21:26:40.119093 2025] [:error] [pid 42292:tid 42299] [client 74.225.206.175:15604] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVEwEJyOrM_vaFx1osZfpQAAAAM"]
[Sun Dec 28 21:26:40.608454 2025] [:error] [pid 42293:tid 42333] [client 74.225.206.175:15582] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVEwEMvc9B-5cwN385IB3wAAAEo"]
[Sun Dec 28 21:26:41.232165 2025] [:error] [pid 29436:tid 29459] [client 74.225.206.175:15586] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVEwEbchzOOtNL9VPNIUaQAAAZQ"]
[Sun Dec 28 21:26:41.638184 2025] [:error] [pid 42293:tid 42323] [client 74.225.206.175:15498] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVEwEcvc9B-5cwN385IB4AAAAEA"]
[Sun Dec 28 21:26:42.013755 2025] [:error] [pid 42293:tid 42339] [client 74.225.206.175:15559] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVEwEsvc9B-5cwN385IB4gAAAFA"]
[Sun Dec 28 21:26:42.404267 2025] [:error] [pid 42293:tid 42342] [client 74.225.206.175:15579] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVEwEsvc9B-5cwN385IB5AAAAFM"]
[Sun Dec 28 21:26:42.852342 2025] [:error] [pid 42292:tid 42315] [client 74.225.206.175:15603] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aVEwEpyOrM_vaFx1osZfqgAAABM"]
[Sun Dec 28 21:26:43.165031 2025] [:error] [pid 42294:tid 42363] [client 74.225.206.175:15512] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aVEwE9TE5kYcYCOzl9HTBAAAAI0"]
[Sun Dec 28 21:26:43.563318 2025] [:error] [pid 42294:tid 42371] [client 74.225.206.175:15590] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aVEwE9TE5kYcYCOzl9HTBgAAAJU"]
[Sun Dec 28 21:26:43.994965 2025] [:error] [pid 42293:tid 42326] [client 74.225.206.175:15520] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aVEwE8vc9B-5cwN385IB5gAAAEM"]
[Sun Dec 28 21:26:44.528326 2025] [:error] [pid 42293:tid 42329] [client 74.225.206.175:15605] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aVEwFMvc9B-5cwN385IB5wAAAEY"]
[Sun Dec 28 21:26:44.922045 2025] [:error] [pid 29388:tid 29398] [client 74.225.206.175:1985] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aVEwFNoLv2L2zI_SpdX5WwAAAUI"]
[Sun Dec 28 21:26:45.460078 2025] [:error] [pid 42294:tid 42372] [client 74.225.206.175:15599] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aVEwFdTE5kYcYCOzl9HTCAAAAJY"]
[Sun Dec 28 21:26:45.987854 2025] [:error] [pid 42293:tid 42331] [client 74.225.206.175:15596] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aVEwFcvc9B-5cwN385IB6wAAAEg"]
[Sun Dec 28 21:26:46.434731 2025] [:error] [pid 43789:tid 43810] [client 74.225.206.175:15598] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aVEwFga-tUppni4CcCZKgwAAARM"]
[Sun Dec 28 21:26:47.347427 2025] [:error] [pid 42294:tid 42374] [client 74.225.206.175:15576] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aVEwF9TE5kYcYCOzl9HTDgAAAJg"]
[Sun Dec 28 21:26:47.938683 2025] [:error] [pid 42294:tid 42373] [client 74.225.206.175:15593] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aVEwF9TE5kYcYCOzl9HTEQAAAJc"]
[Sun Dec 28 21:26:48.498679 2025] [:error] [pid 42378:tid 42399] [client 74.225.206.175:15532] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aVEwGDgtcN-KHAjWrX8wpQAAANM"]
[Sun Dec 28 21:26:49.182796 2025] [:error] [pid 43789:tid 43797] [client 74.225.206.175:15534] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aVEwGQa-tUppni4CcCZKhAAAAQY"]
[Sun Dec 28 21:26:49.762684 2025] [:error] [pid 42293:tid 42343] [client 74.225.206.175:15500] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aVEwGcvc9B-5cwN385IB7QAAAFQ"]
[Sun Dec 28 21:26:50.205316 2025] [:error] [pid 42293:tid 42323] [client 74.225.206.175:15501] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aVEwGsvc9B-5cwN385IB8AAAAEA"]
[Sun Dec 28 21:26:50.821489 2025] [:error] [pid 43789:tid 43808] [client 74.225.206.175:15601] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aVEwGga-tUppni4CcCZKhQAAARE"]
[Sun Dec 28 21:26:51.515988 2025] [:error] [pid 29437:tid 29487] [client 74.225.206.175:15611] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVEwGxhDotAbVk6pZLfdYgAAAdU"]
[Sun Dec 28 21:26:52.005445 2025] [:error] [pid 29388:tid 29404] [client 74.225.206.175:15553] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVEwHNoLv2L2zI_SpdX5XQAAAUg"]
[Sun Dec 28 21:26:52.391273 2025] [:error] [pid 42378:tid 42380] [client 74.225.206.175:15489] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVEwHDgtcN-KHAjWrX8wtAAAAMA"]
[Sun Dec 28 21:26:52.984148 2025] [:error] [pid 42294:tid 42362] [client 74.225.206.175:15587] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVEwHNTE5kYcYCOzl9HTFgAAAIw"]
[Sun Dec 28 21:26:53.618952 2025] [:error] [pid 29388:tid 29412] [client 74.225.206.175:15504] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVEwHdoLv2L2zI_SpdX5XwAAAVA"]
[Sun Dec 28 21:26:54.105907 2025] [:error] [pid 42378:tid 42399] [client 74.225.206.175:15566] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVEwHjgtcN-KHAjWrX8wtgAAANM"]
[Sun Dec 28 21:26:54.544840 2025] [:error] [pid 42378:tid 42384] [client 74.225.206.175:15488] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVEwHjgtcN-KHAjWrX8wtwAAAMQ"]
[Sun Dec 28 21:26:55.035434 2025] [:error] [pid 42293:tid 42325] [client 74.225.206.175:15574] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVEwH8vc9B-5cwN385IB-AAAAEI"]
[Sun Dec 28 21:26:55.633975 2025] [:error] [pid 42292:tid 42320] [client 74.225.206.175:15497] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aVEwH5yOrM_vaFx1osZfrgAAABg"]
[Sun Dec 28 21:26:56.063656 2025] [:error] [pid 42293:tid 42330] [client 74.225.206.175:15519] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aVEwIMvc9B-5cwN385IB-gAAAEc"]
[Sun Dec 28 21:26:56.472148 2025] [:error] [pid 29436:tid 29450] [client 74.225.206.175:15505] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aVEwILchzOOtNL9VPNIUdAAAAYs"]
[Sun Dec 28 21:26:57.095435 2025] [:error] [pid 43789:tid 43810] [client 74.225.206.175:15491] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aVEwIQa-tUppni4CcCZKlgAAARM"]
[Sun Dec 28 21:26:57.468445 2025] [:error] [pid 29436:tid 29439] [client 74.225.206.175:15552] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVEwIbchzOOtNL9VPNIUdQAAAYA"]
[Sun Dec 28 21:26:58.038378 2025] [:error] [pid 42378:tid 42404] [client 74.225.206.175:15614] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVEwIjgtcN-KHAjWrX8wuwAAANg"]
[Sun Dec 28 21:26:58.585075 2025] [:error] [pid 43789:tid 43808] [client 74.225.206.175:15509] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVEwIga-tUppni4CcCZKmAAAARE"]
[Sun Dec 28 21:26:59.043656 2025] [:error] [pid 42293:tid 42328] [client 74.225.206.175:2025] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVEwI8vc9B-5cwN385IB_wAAAEU"]
[Sun Dec 28 21:26:59.396386 2025] [:error] [pid 42294:tid 42374] [client 74.225.206.175:15612] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVEwI9TE5kYcYCOzl9HTGwAAAJg"]
[Sun Dec 28 21:26:59.890641 2025] [:error] [pid 42292:tid 42311] [client 74.225.206.175:15563] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVEwI5yOrM_vaFx1osZfsgAAAA8"]
[Sun Dec 28 21:27:00.832187 2025] [:error] [pid 29388:tid 29415] [client 74.225.206.175:15496] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVEwJNoLv2L2zI_SpdX5YgAAAVM"]
[Sun Dec 28 21:27:01.341603 2025] [:error] [pid 29436:tid 29460] [client 74.225.206.175:15543] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVEwJbchzOOtNL9VPNIUfgAAAZU"]
[Sun Dec 28 21:27:01.841947 2025] [:error] [pid 42378:tid 42391] [client 74.225.206.175:1998] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVEwJTgtcN-KHAjWrX8wwwAAAMs"]
[Sun Dec 28 21:27:02.196935 2025] [:error] [pid 43789:tid 43803] [client 74.225.206.175:15600] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVEwJga-tUppni4CcCZKmgAAAQw"]
[Sun Dec 28 21:27:02.547618 2025] [:error] [pid 29388:tid 29401] [client 74.225.206.175:1984] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVEwJtoLv2L2zI_SpdX5ZQAAAUU"]
[Sun Dec 28 21:27:03.077346 2025] [:error] [pid 29436:tid 29461] [client 74.225.206.175:15555] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVEwJ7chzOOtNL9VPNIUggAAAZY"]
[Sun Dec 28 21:27:03.449265 2025] [:error] [pid 42378:tid 42400] [client 74.225.206.175:15494] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVEwJzgtcN-KHAjWrX8wxQAAANQ"]
[Sun Dec 28 21:27:03.845218 2025] [:error] [pid 42293:tid 42343] [client 74.225.206.175:15615] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVEwJ8vc9B-5cwN385ICAQAAAFQ"]
[Sun Dec 28 21:27:04.159609 2025] [:error] [pid 42378:tid 42387] [client 74.225.206.175:15522] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVEwKDgtcN-KHAjWrX8wxgAAAMc"]
[Sun Dec 28 21:27:04.458910 2025] [:error] [pid 42294:tid 42368] [client 74.225.206.175:2003] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVEwKNTE5kYcYCOzl9HTHwAAAJI"]
[Sun Dec 28 21:27:04.805721 2025] [:error] [pid 42293:tid 42339] [client 74.225.206.175:15571] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVEwKMvc9B-5cwN385ICBAAAAFA"]
[Sun Dec 28 21:27:05.119881 2025] [:error] [pid 42294:tid 42356] [client 74.225.206.175:2008] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVEwKdTE5kYcYCOzl9HTIgAAAIY"]
[Sun Dec 28 21:27:05.446315 2025] [:error] [pid 42293:tid 42342] [client 74.225.206.175:15549] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVEwKcvc9B-5cwN385ICBgAAAFM"]
[Sun Dec 28 21:27:05.779934 2025] [:error] [pid 42294:tid 42369] [client 74.225.206.175:15517] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVEwKdTE5kYcYCOzl9HTJQAAAJM"]
[Sun Dec 28 21:27:06.189078 2025] [:error] [pid 42378:tid 42393] [client 74.225.206.175:15535] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwKjgtcN-KHAjWrX8wyQAAAM0"]
[Sun Dec 28 21:27:06.630506 2025] [:error] [pid 29436:tid 29442] [client 74.225.206.175:15589] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwKrchzOOtNL9VPNIUhAAAAYM"]
[Sun Dec 28 21:27:06.954646 2025] [:error] [pid 42294:tid 42367] [client 74.225.206.175:15499] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwKtTE5kYcYCOzl9HTKAAAAJE"]
[Sun Dec 28 21:27:07.299557 2025] [:error] [pid 42292:tid 42297] [client 74.225.206.175:2001] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwK5yOrM_vaFx1osZfuAAAAAE"]
[Sun Dec 28 21:27:07.715435 2025] [:error] [pid 29388:tid 29409] [client 74.225.206.175:15508] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVEwK9oLv2L2zI_SpdX5aAAAAU0"]
[Sun Dec 28 21:27:08.038208 2025] [:error] [pid 42293:tid 42334] [client 74.225.206.175:15545] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVEwLMvc9B-5cwN385ICCAAAAEs"]
[Sun Dec 28 21:27:08.504267 2025] [:error] [pid 42292:tid 42299] [client 74.225.206.175:1989] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVEwLJyOrM_vaFx1osZfuwAAAAM"]
[Sun Dec 28 21:27:09.005843 2025] [:error] [pid 42293:tid 42331] [client 74.225.206.175:15533] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVEwLcvc9B-5cwN385ICDAAAAEg"]
[Sun Dec 28 21:27:09.308424 2025] [:error] [pid 29388:tid 29405] [client 74.225.206.175:15503] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aVEwLdoLv2L2zI_SpdX5bQAAAUk"]
[Sun Dec 28 21:27:09.626839 2025] [:error] [pid 42292:tid 42298] [client 74.225.206.175:15572] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aVEwLZyOrM_vaFx1osZfvQAAAAI"]
[Sun Dec 28 21:27:09.988684 2025] [:error] [pid 42378:tid 42382] [client 74.225.206.175:1925] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aVEwLTgtcN-KHAjWrX8wzAAAAMI"]
[Sun Dec 28 21:27:10.344453 2025] [:error] [pid 42292:tid 42296] [client 74.225.206.175:2026] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aVEwLpyOrM_vaFx1osZfwAAAAAA"]
[Sun Dec 28 21:27:10.658303 2025] [:error] [pid 42378:tid 42388] [client 74.225.206.175:15530] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEwLjgtcN-KHAjWrX8wzQAAAMg"]
[Sun Dec 28 21:27:11.087242 2025] [:error] [pid 43789:tid 43805] [client 74.225.206.175:15606] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEwLwa-tUppni4CcCZKoAAAAQ4"]
[Sun Dec 28 21:27:11.405881 2025] [:error] [pid 29436:tid 29445] [client 74.225.206.175:15581] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEwL7chzOOtNL9VPNIUhgAAAYY"]
[Sun Dec 28 21:27:11.711712 2025] [:error] [pid 29436:tid 29458] [client 74.225.206.175:15502] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEwL7chzOOtNL9VPNIUiAAAAZM"]
[Sun Dec 28 21:27:12.013285 2025] [:error] [pid 42293:tid 42338] [client 74.225.206.175:15510] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEwMMvc9B-5cwN385ICDgAAAE8"]
[Sun Dec 28 21:27:12.369386 2025] [:error] [pid 42378:tid 42398] [client 74.225.206.175:15577] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEwMDgtcN-KHAjWrX8wzgAAANI"]
[Sun Dec 28 21:27:12.780900 2025] [:error] [pid 42294:tid 42368] [client 74.225.206.175:15550] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEwMNTE5kYcYCOzl9HTLwAAAJI"]
[Sun Dec 28 21:27:13.115134 2025] [:error] [pid 29388:tid 29404] [client 74.225.206.175:15536] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEwMdoLv2L2zI_SpdX5cAAAAUg"]
[Sun Dec 28 21:27:13.387761 2025] [:error] [pid 42293:tid 42328] [client 74.225.206.175:1953] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVEwMcvc9B-5cwN385ICEAAAAEU"]
[Sun Dec 28 21:27:13.734386 2025] [:error] [pid 42294:tid 42356] [client 74.225.206.175:15514] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVEwMdTE5kYcYCOzl9HTMQAAAIY"]
[Sun Dec 28 21:27:14.067244 2025] [:error] [pid 29436:tid 29454] [client 74.225.206.175:15495] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVEwMrchzOOtNL9VPNIUmQAAAY8"]
[Sun Dec 28 21:27:14.387162 2025] [:error] [pid 42294:tid 42358] [client 74.225.206.175:15610] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVEwMtTE5kYcYCOzl9HTMgAAAIg"]
[Sun Dec 28 21:27:14.752752 2025] [:error] [pid 42293:tid 42332] [client 74.225.206.175:1999] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aVEwMsvc9B-5cwN385ICEgAAAEk"]
[Sun Dec 28 21:27:15.040718 2025] [:error] [pid 29436:tid 29445] [client 74.225.206.175:15493] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aVEwM7chzOOtNL9VPNIUnAAAAYY"]
[Sun Dec 28 21:27:15.361862 2025] [:error] [pid 29388:tid 29408] [client 74.225.206.175:15595] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aVEwM9oLv2L2zI_SpdX5dQAAAUw"]
[Sun Dec 28 21:27:15.655951 2025] [:error] [pid 29436:tid 29457] [client 74.225.206.175:15584] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aVEwM7chzOOtNL9VPNIUngAAAZI"]
[Sun Dec 28 21:27:15.991609 2025] [:error] [pid 42294:tid 42369] [client 74.225.206.175:15518] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVEwM9TE5kYcYCOzl9HTNQAAAJM"]
[Sun Dec 28 21:27:16.363931 2025] [:error] [pid 42292:tid 42311] [client 74.225.206.175:15537] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVEwNJyOrM_vaFx1osZfxAAAAA8"]
[Sun Dec 28 21:27:16.798971 2025] [:error] [pid 29436:tid 29447] [client 74.225.206.175:15565] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVEwNLchzOOtNL9VPNIUoAAAAYg"]
[Sun Dec 28 21:27:17.114091 2025] [:error] [pid 42292:tid 42318] [client 74.225.206.175:15516] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVEwNZyOrM_vaFx1osZfxQAAABY"]
[Sun Dec 28 21:27:17.521955 2025] [:error] [pid 42378:tid 42387] [client 74.225.206.175:15538] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVEwNTgtcN-KHAjWrX8w0wAAAMc"]
[Sun Dec 28 21:27:17.824010 2025] [:error] [pid 29388:tid 29416] [client 74.225.206.175:2007] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVEwNdoLv2L2zI_SpdX5eAAAAVQ"]
[Sun Dec 28 21:27:18.146314 2025] [:error] [pid 29436:tid 29443] [client 74.225.206.175:1987] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVEwNrchzOOtNL9VPNIUogAAAYQ"]
[Sun Dec 28 21:27:18.537972 2025] [:error] [pid 42294:tid 42371] [client 74.225.206.175:15507] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVEwNtTE5kYcYCOzl9HTNwAAAJU"]
[Sun Dec 28 21:27:18.859520 2025] [:error] [pid 29388:tid 29405] [client 74.225.206.175:15515] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwNtoLv2L2zI_SpdX5fAAAAUk"]
[Sun Dec 28 21:27:19.170039 2025] [:error] [pid 29437:tid 29486] [client 74.225.206.175:2017] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwNxhDotAbVk6pZLfdaQAAAdQ"]
[Sun Dec 28 21:27:19.503665 2025] [:error] [pid 29436:tid 29463] [client 74.225.206.175:15526] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwN7chzOOtNL9VPNIUpQAAAZg"]
[Sun Dec 28 21:27:19.855949 2025] [:error] [pid 29388:tid 29417] [client 74.225.206.175:15591] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwN9oLv2L2zI_SpdX5gQAAAVU"]
[Sun Dec 28 21:27:20.201902 2025] [:error] [pid 29388:tid 29403] [client 74.225.206.175:2015] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwONoLv2L2zI_SpdX5hAAAAUc"]
[Sun Dec 28 21:27:20.595219 2025] [:error] [pid 29388:tid 29400] [client 74.225.206.175:15529] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwONoLv2L2zI_SpdX5hQAAAUQ"]
[Sun Dec 28 21:27:20.998612 2025] [:error] [pid 29437:tid 29468] [client 74.225.206.175:15575] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwOBhDotAbVk6pZLfdawAAAcI"]
[Sun Dec 28 21:27:21.327519 2025] [:error] [pid 42293:tid 42343] [client 74.225.206.175:2013] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwOcvc9B-5cwN385ICFAAAAFQ"]
[Sun Dec 28 21:27:21.735970 2025] [:error] [pid 29437:tid 29490] [client 74.225.206.175:15568] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVEwORhDotAbVk6pZLfdbQAAAdg"]
[Sun Dec 28 21:27:22.152284 2025] [:error] [pid 29437:tid 29475] [client 74.225.206.175:2030] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwOhhDotAbVk6pZLfdcAAAAck"]
[Sun Dec 28 21:27:22.561629 2025] [:error] [pid 29437:tid 29487] [client 74.225.206.175:15570] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwOhhDotAbVk6pZLfdcwAAAdU"]
[Sun Dec 28 21:27:22.920074 2025] [:error] [pid 29437:tid 29472] [client 74.225.206.175:1921] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwOhhDotAbVk6pZLfddAAAAcY"]
[Sun Dec 28 21:27:23.251791 2025] [:error] [pid 42378:tid 42402] [client 74.225.206.175:1934] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVEwOzgtcN-KHAjWrX8w1QAAANY"]
[Sun Dec 28 21:27:23.630344 2025] [:error] [pid 42378:tid 42395] [client 74.225.206.175:2019] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVEwOzgtcN-KHAjWrX8w1gAAAM8"]
[Sun Dec 28 21:27:23.943706 2025] [:error] [pid 43789:tid 43793] [client 74.225.206.175:15588] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVEwOwa-tUppni4CcCZKqgAAAQI"]
[Sun Dec 28 21:27:24.329972 2025] [:error] [pid 29437:tid 29481] [client 74.225.206.175:15609] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVEwPBhDotAbVk6pZLfdeAAAAc8"]
[Sun Dec 28 21:27:24.641183 2025] [:error] [pid 42378:tid 42394] [client 74.225.206.175:1988] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVEwPDgtcN-KHAjWrX8w1wAAAM4"]
[Sun Dec 28 21:27:24.950968 2025] [:error] [pid 29436:tid 29450] [client 74.225.206.175:15521] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVEwPLchzOOtNL9VPNIUrAAAAYs"]
[Sun Dec 28 21:27:25.249600 2025] [:error] [pid 29436:tid 29442] [client 74.225.206.175:15523] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVEwPbchzOOtNL9VPNIUrQAAAYM"]
[Sun Dec 28 21:27:25.587521 2025] [:error] [pid 29388:tid 29409] [client 74.225.206.175:1964] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVEwPdoLv2L2zI_SpdX5hgAAAU0"]
[Sun Dec 28 21:27:25.936158 2025] [:error] [pid 43789:tid 43805] [client 74.225.206.175:1960] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVEwPQa-tUppni4CcCZKsAAAAQ4"]
[Sun Dec 28 21:27:26.226735 2025] [:error] [pid 29436:tid 29445] [client 74.225.206.175:15567] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEwPrchzOOtNL9VPNIUsAAAAYY"]
[Sun Dec 28 21:27:26.507729 2025] [:error] [pid 29436:tid 29462] [client 74.225.206.175:1926] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEwPrchzOOtNL9VPNIUsQAAAZc"]
[Sun Dec 28 21:27:26.842765 2025] [:error] [pid 43789:tid 43794] [client 74.225.206.175:15544] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEwPga-tUppni4CcCZKtAAAAQM"]
[Sun Dec 28 21:27:27.186689 2025] [:error] [pid 42294:tid 42354] [client 74.225.206.175:1858] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEwP9TE5kYcYCOzl9HTPQAAAIQ"]
[Sun Dec 28 21:27:27.479643 2025] [:error] [pid 42294:tid 42352] [client 74.225.206.175:1995] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aVEwP9TE5kYcYCOzl9HTPgAAAII"]
[Sun Dec 28 21:27:27.776277 2025] [:error] [pid 29388:tid 29420] [client 74.225.206.175:15492] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aVEwP9oLv2L2zI_SpdX5jAAAAVg"]
[Sun Dec 28 21:27:28.050027 2025] [:error] [pid 42293:tid 42340] [client 74.225.206.175:15592] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aVEwQMvc9B-5cwN385ICFwAAAFE"]
[Sun Dec 28 21:27:28.340060 2025] [:error] [pid 29388:tid 29417] [client 74.225.206.175:1907] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aVEwQNoLv2L2zI_SpdX5jgAAAVU"]
[Sun Dec 28 21:27:28.617433 2025] [:error] [pid 29388:tid 29398] [client 74.225.206.175:2028] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwQNoLv2L2zI_SpdX5jwAAAUI"]
[Sun Dec 28 21:27:28.961467 2025] [:error] [pid 29388:tid 29402] [client 74.225.206.175:15546] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwQNoLv2L2zI_SpdX5kgAAAUY"]
[Sun Dec 28 21:27:29.345545 2025] [:error] [pid 42294:tid 42368] [client 74.225.206.175:15564] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwQdTE5kYcYCOzl9HTQAAAAJI"]
[Sun Dec 28 21:27:29.670421 2025] [:error] [pid 43789:tid 43792] [client 74.225.206.175:15539] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVEwQQa-tUppni4CcCZKuAAAAQE"]
[Sun Dec 28 21:27:29.973118 2025] [:error] [pid 42293:tid 42324] [client 74.225.206.175:1994] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVEwQcvc9B-5cwN385ICGgAAAEE"]
[Sun Dec 28 21:27:30.254163 2025] [:error] [pid 29388:tid 29415] [client 74.225.206.175:15524] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVEwQtoLv2L2zI_SpdX5lgAAAVM"]
[Sun Dec 28 21:27:30.621707 2025] [:error] [pid 42294:tid 42370] [client 74.225.206.175:15541] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVEwQtTE5kYcYCOzl9HTQQAAAJQ"]
[Sun Dec 28 21:27:31.051683 2025] [:error] [pid 42294:tid 42365] [client 74.225.206.175:2041] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVEwQ9TE5kYcYCOzl9HTQgAAAI8"]
[Sun Dec 28 21:27:31.393657 2025] [:error] [pid 43789:tid 43814] [client 74.225.206.175:1947] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aVEwQwa-tUppni4CcCZKwAAAARc"]
[Sun Dec 28 21:27:31.690176 2025] [:error] [pid 43789:tid 43800] [client 74.225.206.175:15511] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aVEwQwa-tUppni4CcCZKwwAAAQk"]
[Sun Dec 28 21:27:31.980260 2025] [:error] [pid 29388:tid 29400] [client 74.225.206.175:15525] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aVEwQ9oLv2L2zI_SpdX5lwAAAUQ"]
[Sun Dec 28 21:27:32.316067 2025] [:error] [pid 42293:tid 42326] [client 74.225.206.175:2010] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aVEwRMvc9B-5cwN385ICGwAAAEM"]
[Sun Dec 28 21:27:32.614258 2025] [:error] [pid 43789:tid 43813] [client 74.225.206.175:1923] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVEwRAa-tUppni4CcCZKxwAAARY"]
[Sun Dec 28 21:27:32.930504 2025] [:error] [pid 43789:tid 43809] [client 74.225.206.175:2046] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVEwRAa-tUppni4CcCZKygAAARI"]
[Sun Dec 28 21:27:33.232726 2025] [:error] [pid 43789:tid 43792] [client 74.225.206.175:2042] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVEwRQa-tUppni4CcCZKzAAAAQE"]
[Sun Dec 28 21:27:33.529996 2025] [:error] [pid 43789:tid 43810] [client 74.225.206.175:1965] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVEwRQa-tUppni4CcCZKzwAAARM"]
[Sun Dec 28 21:27:33.837041 2025] [:error] [pid 43789:tid 43811] [client 74.225.206.175:15562] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEwRQa-tUppni4CcCZK0AAAARQ"]
[Sun Dec 28 21:27:34.114007 2025] [:error] [pid 42293:tid 42334] [client 74.225.206.175:15556] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEwRsvc9B-5cwN385ICHgAAAEs"]
[Sun Dec 28 21:27:34.423841 2025] [:error] [pid 29436:tid 29460] [client 74.225.206.175:2024] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEwRrchzOOtNL9VPNIUtAAAAZU"]
[Sun Dec 28 21:27:34.722696 2025] [:error] [pid 43789:tid 43800] [client 74.225.206.175:1924] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEwRga-tUppni4CcCZK1wAAAQk"]
[Sun Dec 28 21:27:35.022803 2025] [:error] [pid 42293:tid 42325] [client 74.225.206.175:2044] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEwR8vc9B-5cwN385ICHwAAAEI"]
[Sun Dec 28 21:27:35.358055 2025] [:error] [pid 29388:tid 29407] [client 74.225.206.175:1992] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEwR9oLv2L2zI_SpdX5mgAAAUs"]
[Sun Dec 28 21:27:35.695249 2025] [:error] [pid 29388:tid 29413] [client 74.225.206.175:2020] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEwR9oLv2L2zI_SpdX5nQAAAVE"]
[Sun Dec 28 21:27:36.014486 2025] [:error] [pid 29388:tid 29398] [client 74.225.206.175:15527] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEwSNoLv2L2zI_SpdX5nwAAAUI"]
[Sun Dec 28 21:27:36.373279 2025] [:error] [pid 29388:tid 29402] [client 74.225.206.175:1885] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVEwSNoLv2L2zI_SpdX5oQAAAUY"]
[Sun Dec 28 21:27:36.648844 2025] [:error] [pid 43789:tid 43798] [client 74.225.206.175:1990] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVEwSAa-tUppni4CcCZK3QAAAQc"]
[Sun Dec 28 21:27:36.983992 2025] [:error] [pid 29436:tid 29449] [client 74.225.206.175:2012] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVEwSLchzOOtNL9VPNIUuAAAAYo"]
[Sun Dec 28 21:27:37.321001 2025] [:error] [pid 29388:tid 29414] [client 74.225.206.175:15548] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVEwSdoLv2L2zI_SpdX5qQAAAVI"]
[Sun Dec 28 21:27:37.623737 2025] [:error] [pid 29436:tid 29451] [client 74.225.206.175:1922] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEwSbchzOOtNL9VPNIUuQAAAYw"]
[Sun Dec 28 21:27:37.898184 2025] [:error] [pid 29436:tid 29454] [client 74.225.206.175:15551] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEwSbchzOOtNL9VPNIUugAAAY8"]
[Sun Dec 28 21:27:38.201885 2025] [:error] [pid 42378:tid 42397] [client 74.225.206.175:15557] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEwSjgtcN-KHAjWrX8w3AAAANE"]
[Sun Dec 28 21:27:38.495499 2025] [:error] [pid 29436:tid 29446] [client 74.225.206.175:2035] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEwSrchzOOtNL9VPNIUuwAAAYc"]
[Sun Dec 28 21:27:38.815120 2025] [:error] [pid 29388:tid 29413] [client 74.225.206.175:2034] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVEwStoLv2L2zI_SpdX5rwAAAVE"]
[Sun Dec 28 21:27:39.104123 2025] [proxy_fcgi:error] [pid 42378:tid 42382] [client 74.225.206.175:2037] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:27:39.242624 2025] [proxy_fcgi:error] [pid 42378:tid 42390] [client 74.225.206.175:2037] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:27:39.384130 2025] [proxy_fcgi:error] [pid 42378:tid 42388] [client 74.225.206.175:2037] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:27:40.083396 2025] [proxy_fcgi:error] [pid 42378:tid 42391] [client 74.225.206.175:2037] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:27:40.229213 2025] [proxy_fcgi:error] [pid 42378:tid 42400] [client 74.225.206.175:2037] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:27:40.522714 2025] [proxy_fcgi:error] [pid 42378:tid 42389] [client 74.225.206.175:2037] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:27:40.660875 2025] [:error] [pid 42378:tid 42387] [client 74.225.206.175:2037] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVEwTDgtcN-KHAjWrX8w6AAAAMc"]
[Sun Dec 28 21:27:40.981446 2025] [:error] [pid 29388:tid 29398] [client 74.225.206.175:15607] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVEwTNoLv2L2zI_SpdX5sgAAAUI"]
[Sun Dec 28 21:27:41.321942 2025] [:error] [pid 29388:tid 29419] [client 74.225.206.175:1932] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVEwTdoLv2L2zI_SpdX5swAAAVc"]
[Sun Dec 28 21:27:41.603784 2025] [:error] [pid 42293:tid 42328] [client 74.225.206.175:1945] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVEwTcvc9B-5cwN385ICJQAAAEU"]
[Sun Dec 28 21:27:41.923631 2025] [:error] [pid 42293:tid 42335] [client 74.225.206.175:1996] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEwTcvc9B-5cwN385ICJgAAAEw"]
[Sun Dec 28 21:27:42.298615 2025] [:error] [pid 29436:tid 29458] [client 74.225.206.175:1993] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEwTrchzOOtNL9VPNIUwgAAAZM"]
[Sun Dec 28 21:27:42.659915 2025] [:error] [pid 43789:tid 43813] [client 74.225.206.175:2027] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEwTga-tUppni4CcCZK8QAAARY"]
[Sun Dec 28 21:27:43.108099 2025] [:error] [pid 42294:tid 42364] [client 74.225.206.175:1991] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEwT9TE5kYcYCOzl9HTUgAAAI4"]
[Sun Dec 28 21:27:43.402607 2025] [:error] [pid 29437:tid 29468] [client 74.225.206.175:2047] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVEwTxhDotAbVk6pZLfdfQAAAcI"]
[Sun Dec 28 21:27:43.790459 2025] [:error] [pid 42293:tid 42343] [client 74.225.206.175:15542] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVEwT8vc9B-5cwN385ICKAAAAFQ"]
[Sun Dec 28 21:27:44.082647 2025] [:error] [pid 29436:tid 29447] [client 74.225.206.175:1976] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVEwULchzOOtNL9VPNIUwwAAAYg"]
[Sun Dec 28 21:27:44.476754 2025] [:error] [pid 42294:tid 42370] [client 74.225.206.175:1980] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVEwUNTE5kYcYCOzl9HTVQAAAJQ"]
[Sun Dec 28 21:27:44.764601 2025] [:error] [pid 43789:tid 43799] [client 74.225.206.175:15558] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEwUAa-tUppni4CcCZK-QAAAQg"]
[Sun Dec 28 21:27:45.197734 2025] [:error] [pid 43789:tid 43806] [client 74.225.206.175:1920] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEwUQa-tUppni4CcCZK_QAAAQ8"]
[Sun Dec 28 21:27:45.511273 2025] [:error] [pid 42378:tid 42384] [client 74.225.206.175:2029] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEwUTgtcN-KHAjWrX8w6gAAAMQ"]
[Sun Dec 28 21:27:45.801784 2025] [:error] [pid 42378:tid 42380] [client 74.225.206.175:15583] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEwUTgtcN-KHAjWrX8w7AAAAMA"]
[Sun Dec 28 21:27:46.119368 2025] [:error] [pid 42378:tid 42395] [client 74.225.206.175:1977] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVEwUjgtcN-KHAjWrX8w7QAAAM8"]
[Sun Dec 28 21:27:46.430783 2025] [:error] [pid 42293:tid 42342] [client 74.225.206.175:2009] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVEwUsvc9B-5cwN385ICLgAAAFM"]
[Sun Dec 28 21:27:46.761314 2025] [:error] [pid 42378:tid 42396] [client 74.225.206.175:2040] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVEwUjgtcN-KHAjWrX8w8QAAANA"]
[Sun Dec 28 21:27:47.070286 2025] [:error] [pid 42294:tid 42369] [client 74.225.206.175:1870] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVEwU9TE5kYcYCOzl9HTVwAAAJM"]
[Sun Dec 28 21:27:47.450982 2025] [:error] [pid 29388:tid 29400] [client 74.225.206.175:1894] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVEwU9oLv2L2zI_SpdX5twAAAUQ"]
[Sun Dec 28 21:27:47.801495 2025] [:error] [pid 29437:tid 29482] [client 74.225.206.175:1873] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVEwUxhDotAbVk6pZLfdfwAAAdA"]
[Sun Dec 28 21:27:48.113810 2025] [:error] [pid 42378:tid 42388] [client 74.225.206.175:1939] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVEwVDgtcN-KHAjWrX8w9QAAAMg"]
[Sun Dec 28 21:27:48.467792 2025] [:error] [pid 29436:tid 29453] [client 74.225.206.175:2023] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVEwVLchzOOtNL9VPNIUxQAAAY4"]
[Sun Dec 28 21:27:48.819298 2025] [:error] [pid 42294:tid 42371] [client 74.225.206.175:1974] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVEwVNTE5kYcYCOzl9HTXAAAAJU"]
[Sun Dec 28 21:27:49.107633 2025] [:error] [pid 42378:tid 42381] [client 74.225.206.175:1986] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVEwVTgtcN-KHAjWrX8w-AAAAME"]
[Sun Dec 28 21:27:49.537050 2025] [:error] [pid 29388:tid 29414] [client 74.225.206.175:2036] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVEwVdoLv2L2zI_SpdX5uQAAAVI"]
[Sun Dec 28 21:27:50.198838 2025] [:error] [pid 29388:tid 29407] [client 74.225.206.175:15513] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVEwVtoLv2L2zI_SpdX5vAAAAUs"]
[Sun Dec 28 21:27:50.510420 2025] [:error] [pid 42378:tid 42400] [client 74.225.206.175:2018] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEwVjgtcN-KHAjWrX8w-wAAANQ"]
[Sun Dec 28 21:27:50.925145 2025] [:error] [pid 29388:tid 29410] [client 74.225.206.175:1927] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEwVtoLv2L2zI_SpdX5vgAAAU4"]
[Sun Dec 28 21:27:51.210156 2025] [:error] [pid 29437:tid 29484] [client 74.225.206.175:1935] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEwVxhDotAbVk6pZLfdgQAAAdI"]
[Sun Dec 28 21:27:51.497378 2025] [:error] [pid 42378:tid 42384] [client 74.225.206.175:15506] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEwVzgtcN-KHAjWrX8w_gAAAMQ"]
[Sun Dec 28 21:27:51.838979 2025] [:error] [pid 29437:tid 29485] [client 74.225.206.175:1875] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEwVxhDotAbVk6pZLfdgwAAAdM"]
[Sun Dec 28 21:27:52.168709 2025] [:error] [pid 42294:tid 42351] [client 74.225.206.175:1967] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEwWNTE5kYcYCOzl9HTXQAAAIE"]
[Sun Dec 28 21:27:52.561379 2025] [:error] [pid 43789:tid 43809] [client 74.225.206.175:2016] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEwWAa-tUppni4CcCZLBgAAARI"]
[Sun Dec 28 21:27:52.931423 2025] [:error] [pid 42292:tid 42309] [client 74.225.206.175:1936] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEwWJyOrM_vaFx1osZf1QAAAA0"]
[Sun Dec 28 21:27:53.405681 2025] [:error] [pid 42293:tid 42346] [client 74.225.206.175:1968] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVEwWcvc9B-5cwN385ICNAAAAFc"]
[Sun Dec 28 21:27:53.704349 2025] [:error] [pid 43789:tid 43791] [client 74.225.206.175:1871] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVEwWQa-tUppni4CcCZLBwAAAQA"]
[Sun Dec 28 21:27:54.060453 2025] [:error] [pid 29388:tid 29417] [client 74.225.206.175:15613] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVEwWtoLv2L2zI_SpdX5xgAAAVU"]
[Sun Dec 28 21:27:54.346755 2025] [:error] [pid 29437:tid 29472] [client 74.225.206.175:1997] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVEwWhhDotAbVk6pZLfdhgAAAcY"]
[Sun Dec 28 21:27:54.635921 2025] [:error] [pid 29437:tid 29469] [client 74.225.206.175:15602] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEwWhhDotAbVk6pZLfdhwAAAcM"]
[Sun Dec 28 21:27:54.995405 2025] [:error] [pid 29436:tid 29455] [client 74.225.206.175:1933] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEwWrchzOOtNL9VPNIUzwAAAZA"]
[Sun Dec 28 21:27:55.324438 2025] [:error] [pid 29436:tid 29442] [client 74.225.206.175:15547] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEwW7chzOOtNL9VPNIU0AAAAYM"]
[Sun Dec 28 21:27:55.639629 2025] [:error] [pid 42293:tid 42335] [client 74.225.206.175:1919] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEwW8vc9B-5cwN385ICNgAAAEw"]
[Sun Dec 28 21:27:55.968720 2025] [:error] [pid 42293:tid 42343] [client 74.225.206.175:1957] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aVEwW8vc9B-5cwN385ICOQAAAFQ"]
[Sun Dec 28 21:27:56.335868 2025] [:error] [pid 29436:tid 29444] [client 74.225.206.175:2038] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aVEwXLchzOOtNL9VPNIU0wAAAYU"]
[Sun Dec 28 21:27:56.702095 2025] [:error] [pid 29436:tid 29457] [client 74.225.206.175:15608] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aVEwXLchzOOtNL9VPNIU1AAAAZI"]
[Sun Dec 28 21:27:57.009246 2025] [:error] [pid 42294:tid 42363] [client 74.225.206.175:15585] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aVEwXdTE5kYcYCOzl9HTYwAAAI0"]
[Sun Dec 28 21:27:57.356389 2025] [:error] [pid 42294:tid 42373] [client 74.225.206.175:1815] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVEwXdTE5kYcYCOzl9HTZAAAAJc"]
[Sun Dec 28 21:27:57.677857 2025] [:error] [pid 43789:tid 43811] [client 74.225.206.175:1949] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aVEwXQa-tUppni4CcCZLCgAAARQ"]
[Sun Dec 28 21:27:58.094892 2025] [:error] [pid 42294:tid 42370] [client 74.225.206.175:1940] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aVEwXtTE5kYcYCOzl9HTZQAAAJQ"]
[Sun Dec 28 21:27:58.509724 2025] [:error] [pid 42294:tid 42365] [client 74.225.206.175:1962] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aVEwXtTE5kYcYCOzl9HTZwAAAI8"]
[Sun Dec 28 21:27:58.858066 2025] [:error] [pid 42293:tid 42342] [client 74.225.206.175:1863] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aVEwXsvc9B-5cwN385ICPQAAAFM"]
[Sun Dec 28 21:27:59.157593 2025] [:error] [pid 29388:tid 29415] [client 74.225.206.175:1955] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVEwX9oLv2L2zI_SpdX5yQAAAVM"]
[Sun Dec 28 21:27:59.542373 2025] [:error] [pid 42292:tid 42318] [client 74.225.206.175:2022] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEwX5yOrM_vaFx1osZf2AAAABY"]
[Sun Dec 28 21:27:59.967199 2025] [:error] [pid 29436:tid 29453] [client 74.225.206.175:2005] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEwX7chzOOtNL9VPNIU2AAAAY4"]
[Sun Dec 28 21:28:00.395739 2025] [:error] [pid 42294:tid 42362] [client 74.225.206.175:1895] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEwYNTE5kYcYCOzl9HTbgAAAIw"]
[Sun Dec 28 21:28:00.692063 2025] [:error] [pid 42293:tid 42325] [client 74.225.206.175:1956] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEwYMvc9B-5cwN385ICQAAAAEI"]
[Sun Dec 28 21:28:01.110649 2025] [:error] [pid 42292:tid 42310] [client 74.225.206.175:1916] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVEwYZyOrM_vaFx1osZf2wAAAA4"]
[Sun Dec 28 21:28:01.512446 2025] [:error] [pid 43789:tid 43810] [client 74.225.206.175:1874] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVEwYQa-tUppni4CcCZLDgAAARM"]
[Sun Dec 28 21:28:01.876175 2025] [:error] [pid 42378:tid 42401] [client 74.225.206.175:1946] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVEwYTgtcN-KHAjWrX8xDQAAANU"]
[Sun Dec 28 21:28:02.175436 2025] [:error] [pid 43789:tid 43807] [client 74.225.206.175:1948] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVEwYga-tUppni4CcCZLDwAAARA"]
[Sun Dec 28 21:28:02.578488 2025] [:error] [pid 43789:tid 43803] [client 74.225.206.175:1942] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEwYga-tUppni4CcCZLEAAAAQw"]
[Sun Dec 28 21:28:02.998127 2025] [:error] [pid 42292:tid 42317] [client 74.225.206.175:1893] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEwYpyOrM_vaFx1osZf3QAAABU"]
[Sun Dec 28 21:28:03.675861 2025] [:error] [pid 29436:tid 29455] [client 74.225.206.175:1869] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEwY7chzOOtNL9VPNIU4QAAAZA"]
[Sun Dec 28 21:28:04.000275 2025] [:error] [pid 42378:tid 42384] [client 74.225.206.175:1890] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEwYzgtcN-KHAjWrX8xEQAAAMQ"]
[Sun Dec 28 21:28:04.352608 2025] [:error] [pid 43789:tid 43801] [client 74.225.206.175:1867] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVEwZAa-tUppni4CcCZLFQAAAQo"]
[Sun Dec 28 21:28:05.128745 2025] [:error] [pid 42292:tid 42300] [client 74.225.206.175:1857] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aVEwZZyOrM_vaFx1osZf4QAAAAQ"]
[Sun Dec 28 21:28:05.503079 2025] [:error] [pid 43789:tid 43809] [client 74.225.206.175:1961] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aVEwZQa-tUppni4CcCZLFwAAARI"]
[Sun Dec 28 21:28:05.932717 2025] [:error] [pid 42292:tid 42308] [client 74.225.206.175:1808] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aVEwZZyOrM_vaFx1osZf4gAAAAw"]
[Sun Dec 28 21:28:06.415838 2025] [:error] [pid 29388:tid 29404] [client 74.225.206.175:1970] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aVEwZtoLv2L2zI_SpdX5ywAAAUg"]
[Sun Dec 28 21:28:06.864525 2025] [:error] [pid 42292:tid 42316] [client 74.225.206.175:2045] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEwZpyOrM_vaFx1osZf4wAAABQ"]
[Sun Dec 28 21:28:07.364546 2025] [:error] [pid 42294:tid 42364] [client 74.225.206.175:2006] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEwZ9TE5kYcYCOzl9HTcwAAAI4"]
[Sun Dec 28 21:28:07.774400 2025] [:error] [pid 29437:tid 29482] [client 74.225.206.175:15560] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEwZxhDotAbVk6pZLfdkQAAAdA"]
[Sun Dec 28 21:28:08.350539 2025] [:error] [pid 42293:tid 42335] [client 74.225.206.175:1856] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEwaMvc9B-5cwN385ICRQAAAEw"]
[Sun Dec 28 21:28:08.820979 2025] [:error] [pid 42378:tid 42383] [client 74.225.206.175:1822] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVEwaDgtcN-KHAjWrX8xFgAAAMM"]
[Sun Dec 28 21:28:09.227353 2025] [:error] [pid 43789:tid 43802] [client 74.225.206.175:1866] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVEwaQa-tUppni4CcCZLGwAAAQs"]
[Sun Dec 28 21:28:09.554160 2025] [:error] [pid 42292:tid 42296] [client 74.225.206.175:2032] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVEwaZyOrM_vaFx1osZf5AAAAAA"]
[Sun Dec 28 21:28:09.882286 2025] [:error] [pid 42292:tid 42307] [client 74.225.206.175:1938] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVEwaZyOrM_vaFx1osZf5QAAAAs"]
[Sun Dec 28 21:28:10.221033 2025] [:error] [pid 42292:tid 42315] [client 74.225.206.175:15569] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVEwapyOrM_vaFx1osZf5wAAABM"]
[Sun Dec 28 21:28:10.607785 2025] [:error] [pid 43789:tid 43815] [client 74.225.206.175:1879] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aVEwaga-tUppni4CcCZLHQAAARg"]
[Sun Dec 28 21:28:10.949406 2025] [:error] [pid 43789:tid 43813] [client 74.225.206.175:2033] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aVEwaga-tUppni4CcCZLHgAAARY"]
[Sun Dec 28 21:28:11.274597 2025] [:error] [pid 29437:tid 29484] [client 74.225.206.175:1889] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aVEwaxhDotAbVk6pZLfdkwAAAdI"]
[Sun Dec 28 21:28:11.574136 2025] [:error] [pid 43789:tid 43796] [client 74.225.206.175:2014] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aVEwawa-tUppni4CcCZLHwAAAQU"]
[Sun Dec 28 21:28:11.954230 2025] [:error] [pid 43789:tid 43794] [client 74.225.206.175:2011] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aVEwawa-tUppni4CcCZLIQAAAQM"]
[Sun Dec 28 21:28:12.366284 2025] [:error] [pid 42378:tid 42392] [client 74.225.206.175:1824] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aVEwbDgtcN-KHAjWrX8xGAAAAMw"]
[Sun Dec 28 21:28:12.684491 2025] [:error] [pid 42378:tid 42397] [client 74.225.206.175:15540] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aVEwbDgtcN-KHAjWrX8xGQAAANE"]
[Sun Dec 28 21:28:12.986083 2025] [:error] [pid 42293:tid 42342] [client 74.225.206.175:1963] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aVEwbMvc9B-5cwN385ICSgAAAFM"]
[Sun Dec 28 21:28:13.407462 2025] [:error] [pid 29437:tid 29473] [client 74.225.206.175:1944] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEwbRhDotAbVk6pZLfdlAAAAcc"]
[Sun Dec 28 21:28:13.708968 2025] [:error] [pid 29437:tid 29485] [client 74.225.206.175:1943] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEwbRhDotAbVk6pZLfdlQAAAdM"]
[Sun Dec 28 21:28:14.144890 2025] [:error] [pid 42292:tid 42319] [client 74.225.206.175:1928] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEwbpyOrM_vaFx1osZf7AAAABc"]
[Sun Dec 28 21:28:14.474800 2025] [:error] [pid 42292:tid 42318] [client 74.225.206.175:15573] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEwbpyOrM_vaFx1osZf7gAAABY"]
[Sun Dec 28 21:28:14.803305 2025] [:error] [pid 29437:tid 29489] [client 74.225.206.175:1929] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEwbhhDotAbVk6pZLfdlgAAAdc"]
[Sun Dec 28 21:28:15.203474 2025] [:error] [pid 43789:tid 43799] [client 74.225.206.175:1818] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEwbwa-tUppni4CcCZLIwAAAQg"]
[Sun Dec 28 21:28:15.485779 2025] [:error] [pid 43789:tid 43810] [client 74.225.206.175:1959] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEwbwa-tUppni4CcCZLJAAAARM"]
[Sun Dec 28 21:28:15.794790 2025] [:error] [pid 43789:tid 43807] [client 74.225.206.175:1859] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEwbwa-tUppni4CcCZLJwAAARA"]
[Sun Dec 28 21:28:16.102340 2025] [:error] [pid 42292:tid 42310] [client 74.225.206.175:2031] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVEwcJyOrM_vaFx1osZf8AAAAA4"]
[Sun Dec 28 21:28:16.484993 2025] [:error] [pid 42292:tid 42317] [client 74.225.206.175:2043] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVEwcJyOrM_vaFx1osZf8QAAABU"]
[Sun Dec 28 21:28:16.775838 2025] [:error] [pid 29437:tid 29483] [client 74.225.206.175:1951] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVEwcBhDotAbVk6pZLfdmAAAAdE"]
[Sun Dec 28 21:28:17.140024 2025] [:error] [pid 29437:tid 29469] [client 74.225.206.175:1981] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVEwcRhDotAbVk6pZLfdmQAAAcM"]
[Sun Dec 28 21:28:17.453852 2025] [:error] [pid 42292:tid 42298] [client 74.225.206.175:1972] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEwcZyOrM_vaFx1osZf8wAAAAI"]
[Sun Dec 28 21:28:17.771764 2025] [:error] [pid 29437:tid 29474] [client 74.225.206.175:1910] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEwcRhDotAbVk6pZLfdnAAAAcg"]
[Sun Dec 28 21:28:18.061007 2025] [:error] [pid 42292:tid 42301] [client 74.225.206.175:1976] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEwcpyOrM_vaFx1osZf9AAAAAU"]
[Sun Dec 28 21:28:18.471635 2025] [:error] [pid 43789:tid 43794] [client 74.225.206.175:2039] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEwcga-tUppni4CcCZLNAAAAQM"]
[Sun Dec 28 21:28:18.832309 2025] [:error] [pid 43789:tid 43791] [client 74.225.206.175:1802] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEwcga-tUppni4CcCZLNQAAAQA"]
[Sun Dec 28 21:28:19.212242 2025] [:error] [pid 29437:tid 29490] [client 74.225.206.175:2021] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEwcxhDotAbVk6pZLfdpAAAAdg"]
[Sun Dec 28 21:28:19.521191 2025] [:error] [pid 43789:tid 43809] [client 74.225.206.175:1892] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEwcwa-tUppni4CcCZLNgAAARI"]
[Sun Dec 28 21:28:19.841388 2025] [:error] [pid 42378:tid 42391] [client 74.225.206.175:2004] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEwczgtcN-KHAjWrX8xIQAAAMs"]
[Sun Dec 28 21:28:20.129522 2025] [:error] [pid 29437:tid 29484] [client 74.225.206.175:15609] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEwdBhDotAbVk6pZLfdqAAAAdI"]
[Sun Dec 28 21:28:20.500482 2025] [:error] [pid 42378:tid 42395] [client 74.225.206.175:1903] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEwdDgtcN-KHAjWrX8xIwAAAM8"]
[Sun Dec 28 21:28:20.802237 2025] [:error] [pid 29437:tid 29483] [client 74.225.206.175:15531] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEwdBhDotAbVk6pZLfdqgAAAdE"]
[Sun Dec 28 21:28:21.095874 2025] [:error] [pid 42292:tid 42315] [client 74.225.206.175:1876] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEwdZyOrM_vaFx1osZf9wAAABM"]
[Sun Dec 28 21:28:21.383846 2025] [:error] [pid 42292:tid 42320] [client 74.225.206.175:1969] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVEwdZyOrM_vaFx1osZf-QAAABg"]
[Sun Dec 28 21:28:21.712233 2025] [:error] [pid 29388:tid 29410] [client 74.225.206.175:1954] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEwddoLv2L2zI_SpdX50AAAAU4"]
[Sun Dec 28 21:28:22.050786 2025] [:error] [pid 29388:tid 29413] [client 74.225.206.175:1799] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEwdtoLv2L2zI_SpdX50QAAAVE"]
[Sun Dec 28 21:28:22.385413 2025] [:error] [pid 43789:tid 43812] [client 74.225.206.175:1911] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEwdga-tUppni4CcCZLOAAAARU"]
[Sun Dec 28 21:28:22.677473 2025] [:error] [pid 29437:tid 29479] [client 74.225.206.175:1918] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEwdhhDotAbVk6pZLfdsgAAAc0"]
[Sun Dec 28 21:28:22.998527 2025] [:error] [pid 29437:tid 29486] [client 74.225.206.175:1796] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEwdhhDotAbVk6pZLfdtAAAAdQ"]
[Sun Dec 28 21:28:23.304504 2025] [:error] [pid 29437:tid 29478] [client 74.225.206.175:1944] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEwdxhDotAbVk6pZLfdtgAAAcw"]
[Sun Dec 28 21:28:23.587127 2025] [:error] [pid 42292:tid 42306] [client 74.225.206.175:1800] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEwd5yOrM_vaFx1osZf-wAAAAo"]
[Sun Dec 28 21:28:23.860900 2025] [:error] [pid 43789:tid 43811] [client 74.225.206.175:1912] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEwdwa-tUppni4CcCZLOQAAARQ"]
[Sun Dec 28 21:28:24.181215 2025] [:error] [pid 42378:tid 42386] [client 74.225.206.175:1862] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEweDgtcN-KHAjWrX8xJgAAAMY"]
[Sun Dec 28 21:28:24.472520 2025] [:error] [pid 42293:tid 42327] [client 74.225.206.175:1899] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEweMvc9B-5cwN385ICTgAAAEQ"]
[Sun Dec 28 21:28:24.774227 2025] [:error] [pid 42292:tid 42312] [client 74.225.206.175:1884] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEweJyOrM_vaFx1osZf_AAAABA"]
[Sun Dec 28 21:28:25.056478 2025] [:error] [pid 43789:tid 43807] [client 74.225.206.175:1821] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEweQa-tUppni4CcCZLPAAAARA"]
[Sun Dec 28 21:28:25.340171 2025] [:error] [pid 43789:tid 43793] [client 74.225.206.175:1882] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEweQa-tUppni4CcCZLPQAAAQI"]
[Sun Dec 28 21:28:25.671481 2025] [:error] [pid 42292:tid 42310] [client 74.225.206.175:1805] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEweZyOrM_vaFx1osZf_QAAAA4"]
[Sun Dec 28 21:28:26.026222 2025] [:error] [pid 29436:tid 29439] [client 74.225.206.175:1896] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEwerchzOOtNL9VPNIU4gAAAYA"]
[Sun Dec 28 21:28:26.324989 2025] [:error] [pid 43789:tid 43806] [client 74.225.206.175:1978] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEwega-tUppni4CcCZLPgAAAQ8"]
[Sun Dec 28 21:28:26.620605 2025] [:error] [pid 42378:tid 42399] [client 74.225.206.175:1966] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEwejgtcN-KHAjWrX8xKQAAANM"]
[Sun Dec 28 21:28:26.924367 2025] [:error] [pid 42292:tid 42317] [client 74.225.206.175:1845] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEwepyOrM_vaFx1osZf_wAAABU"]
[Sun Dec 28 21:28:27.265140 2025] [:error] [pid 43789:tid 43802] [client 74.225.206.175:1809] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEwewa-tUppni4CcCZLPwAAAQs"]
[Sun Dec 28 21:28:27.551109 2025] [:error] [pid 42292:tid 42299] [client 74.225.206.175:1958] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEwe5yOrM_vaFx1osZgAAAAAAM"]
[Sun Dec 28 21:28:27.837524 2025] [:error] [pid 43789:tid 43800] [client 74.225.206.175:1891] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEwewa-tUppni4CcCZLQAAAAQk"]
[Sun Dec 28 21:28:28.200993 2025] [:error] [pid 43789:tid 43801] [client 74.225.206.175:15580] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEwfAa-tUppni4CcCZLQgAAAQo"]
[Sun Dec 28 21:28:28.524596 2025] [:error] [pid 42293:tid 42346] [client 74.225.206.175:1930] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEwfMvc9B-5cwN385ICUwAAAFc"]
[Sun Dec 28 21:28:28.824987 2025] [:error] [pid 42293:tid 42328] [client 74.225.206.175:1813] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEwfMvc9B-5cwN385ICVAAAAEU"]
[Sun Dec 28 21:28:30.165925 2025] [:error] [pid 29436:tid 29462] [client 74.225.206.175:2000] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aVEwfrchzOOtNL9VPNIU4wAAAZc"]
[Sun Dec 28 21:28:30.588664 2025] [:error] [pid 29436:tid 29445] [client 74.225.206.175:1982] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aVEwfrchzOOtNL9VPNIU5AAAAYY"]
[Sun Dec 28 21:28:31.098044 2025] [:error] [pid 29388:tid 29398] [client 74.225.206.175:1835] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aVEwf9oLv2L2zI_SpdX51AAAAUI"]
[Sun Dec 28 21:28:31.642243 2025] [:error] [pid 43789:tid 43815] [client 74.225.206.175:1917] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/log.php"] [unique_id "aVEwfwa-tUppni4CcCZLQwAAARg"]
[Sun Dec 28 21:28:32.058613 2025] [:error] [pid 42378:tid 42392] [client 74.225.206.175:1793] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVEwgDgtcN-KHAjWrX8xLAAAAMw"]
[Sun Dec 28 21:28:32.410830 2025] [:error] [pid 42294:tid 42373] [client 74.225.206.175:15528] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVEwgNTE5kYcYCOzl9HTdQAAAJc"]
[Sun Dec 28 21:28:32.774626 2025] [:error] [pid 42293:tid 42324] [client 74.225.206.175:1952] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVEwgMvc9B-5cwN385ICWQAAAEE"]
[Sun Dec 28 21:28:33.066583 2025] [:error] [pid 42293:tid 42339] [client 74.225.206.175:1950] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVEwgcvc9B-5cwN385ICWgAAAFA"]
[Sun Dec 28 21:28:33.591008 2025] [:error] [pid 42293:tid 42325] [client 74.225.206.175:15597] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVEwgcvc9B-5cwN385ICXAAAAEI"]
[Sun Dec 28 21:28:33.989029 2025] [:error] [pid 42292:tid 42313] [client 74.225.206.175:1761] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVEwgZyOrM_vaFx1osZgAgAAABE"]
[Sun Dec 28 21:28:34.431427 2025] [:error] [pid 43789:tid 43805] [client 74.225.206.175:1878] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVEwgga-tUppni4CcCZLRwAAAQ4"]
[Sun Dec 28 21:28:34.921970 2025] [:error] [pid 42292:tid 42298] [client 74.225.206.175:1827] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVEwgpyOrM_vaFx1osZgAwAAAAI"]
[Sun Dec 28 21:28:35.258221 2025] [:error] [pid 42292:tid 42301] [client 74.225.206.175:1864] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVEwg5yOrM_vaFx1osZgBAAAAAU"]
[Sun Dec 28 21:28:35.722381 2025] [:error] [pid 43789:tid 43797] [client 74.225.206.175:1868] [client 74.225.206.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVEwgwa-tUppni4CcCZLSAAAAQY"]
[Sun Dec 28 21:28:36.020797 2025] [:error] [pid 42292:tid 42300] [client 74.225.206.175:1902] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVEwhJyOrM_vaFx1osZgBQAAAAQ"]
[Sun Dec 28 21:28:36.410980 2025] [:error] [pid 29388:tid 29415] [client 74.225.206.175:1758] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVEwhNoLv2L2zI_SpdX52gAAAVM"]
[Sun Dec 28 21:28:36.730056 2025] [:error] [pid 29436:tid 29453] [client 74.225.206.175:1908] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVEwhLchzOOtNL9VPNIU6AAAAY4"]
[Sun Dec 28 21:28:37.048433 2025] [:error] [pid 42378:tid 42397] [client 74.225.206.175:1825] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVEwhTgtcN-KHAjWrX8xLQAAANE"]
[Sun Dec 28 21:28:37.427914 2025] [:error] [pid 29388:tid 29420] [client 74.225.206.175:1931] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVEwhdoLv2L2zI_SpdX52wAAAVg"]
[Sun Dec 28 21:28:37.761951 2025] [:error] [pid 43789:tid 43791] [client 74.225.206.175:1904] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVEwhQa-tUppni4CcCZLSQAAAQA"]
[Sun Dec 28 21:28:38.101516 2025] [:error] [pid 42293:tid 42326] [client 74.225.206.175:2002] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVEwhsvc9B-5cwN385ICXwAAAEM"]
[Sun Dec 28 21:28:38.401379 2025] [:error] [pid 29388:tid 29400] [client 74.225.206.175:1898] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVEwhtoLv2L2zI_SpdX53AAAAUQ"]
[Sun Dec 28 21:28:38.712615 2025] [:error] [pid 29388:tid 29404] [client 74.225.206.175:1937] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVEwhtoLv2L2zI_SpdX53QAAAUg"]
[Sun Dec 28 21:28:39.014938 2025] [:error] [pid 42293:tid 42341] [client 74.225.206.175:1886] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVEwh8vc9B-5cwN385ICYAAAAFI"]
[Sun Dec 28 21:28:39.398980 2025] [:error] [pid 43789:tid 43799] [client 74.225.206.175:1833] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVEwhwa-tUppni4CcCZLSwAAAQg"]
[Sun Dec 28 21:28:39.729092 2025] [:error] [pid 42293:tid 42347] [client 74.225.206.175:1915] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVEwh8vc9B-5cwN385ICYwAAAFg"]
[Sun Dec 28 21:28:40.023251 2025] [proxy_fcgi:error] [pid 42292:tid 42314] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:40.185895 2025] [proxy_fcgi:error] [pid 42292:tid 42320] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:40.346397 2025] [proxy_fcgi:error] [pid 42292:tid 42309] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:40.512320 2025] [proxy_fcgi:error] [pid 42292:tid 42303] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:40.651883 2025] [proxy_fcgi:error] [pid 42292:tid 42319] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:40.792021 2025] [proxy_fcgi:error] [pid 42292:tid 42308] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:40.934811 2025] [proxy_fcgi:error] [pid 42292:tid 42318] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:41.079498 2025] [proxy_fcgi:error] [pid 42292:tid 42306] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:41.277134 2025] [proxy_fcgi:error] [pid 42292:tid 42312] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:41.418450 2025] [proxy_fcgi:error] [pid 42292:tid 42310] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:41.559280 2025] [proxy_fcgi:error] [pid 42292:tid 42297] [client 74.225.206.175:1792] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:28:41.696480 2025] [:error] [pid 42292:tid 42311] [client 74.225.206.175:1792] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVEwiZyOrM_vaFx1osZgFAAAAA8"]
[Sun Dec 28 21:28:42.045513 2025] [:error] [pid 43789:tid 43811] [client 74.225.206.175:1740] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVEwiga-tUppni4CcCZLTAAAARQ"]
[Sun Dec 28 21:28:42.334048 2025] [:error] [pid 42294:tid 42361] [client 74.225.206.175:1803] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVEwitTE5kYcYCOzl9HTeQAAAIs"]
[Sun Dec 28 21:28:42.704944 2025] [:error] [pid 29436:tid 29443] [client 74.225.206.175:1769] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVEwirchzOOtNL9VPNIU7AAAAYQ"]
[Sun Dec 28 21:28:43.005161 2025] [:error] [pid 29436:tid 29461] [client 74.225.206.175:1814] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ave.php"] [unique_id "aVEwi7chzOOtNL9VPNIU7gAAAZY"]
[Sun Dec 28 21:28:43.328206 2025] [:error] [pid 42293:tid 42343] [client 74.225.206.175:1728] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ave.php"] [unique_id "aVEwi8vc9B-5cwN385ICZgAAAFQ"]
[Sun Dec 28 21:28:43.656382 2025] [:error] [pid 29436:tid 29454] [client 74.225.206.175:1883] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ave.php"] [unique_id "aVEwi7chzOOtNL9VPNIU7wAAAY8"]
[Sun Dec 28 21:28:43.945671 2025] [:error] [pid 42292:tid 42304] [client 74.225.206.175:1847] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ave.php"] [unique_id "aVEwi5yOrM_vaFx1osZgFwAAAAg"]
[Sun Dec 28 21:28:44.305005 2025] [:error] [pid 29388:tid 29419] [client 74.225.206.175:1865] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVEwjNoLv2L2zI_SpdX55wAAAVc"]
[Sun Dec 28 21:28:44.636240 2025] [:error] [pid 42294:tid 42356] [client 74.225.206.175:1705] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVEwjNTE5kYcYCOzl9HTegAAAIY"]
[Sun Dec 28 21:28:44.982301 2025] [:error] [pid 43789:tid 43806] [client 74.225.206.175:1897] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVEwjAa-tUppni4CcCZLTwAAAQ8"]
[Sun Dec 28 21:28:45.288217 2025] [:error] [pid 43789:tid 43802] [client 74.225.206.175:1914] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVEwjQa-tUppni4CcCZLUAAAAQs"]
[Sun Dec 28 21:28:45.621607 2025] [:error] [pid 29436:tid 29455] [client 74.225.206.175:1973] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aVEwjbchzOOtNL9VPNIU8AAAAZA"]
[Sun Dec 28 21:28:45.959296 2025] [:error] [pid 42293:tid 42333] [client 74.225.206.175:1794] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aVEwjcvc9B-5cwN385ICZwAAAEo"]
[Sun Dec 28 21:28:46.272446 2025] [:error] [pid 42378:tid 42389] [client 74.225.206.175:1941] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aVEwjjgtcN-KHAjWrX8xMAAAAMk"]
[Sun Dec 28 21:28:46.643302 2025] [:error] [pid 42378:tid 42401] [client 74.225.206.175:1836] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bibil.php"] [unique_id "aVEwjjgtcN-KHAjWrX8xMQAAANU"]
[Sun Dec 28 21:28:46.973017 2025] [:error] [pid 42378:tid 42381] [client 74.225.206.175:1812] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVEwjjgtcN-KHAjWrX8xMgAAAME"]
[Sun Dec 28 21:28:47.382919 2025] [:error] [pid 42293:tid 42323] [client 74.225.206.175:15561] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVEwj8vc9B-5cwN385ICaAAAAEA"]
[Sun Dec 28 21:28:47.733399 2025] [:error] [pid 42293:tid 42342] [client 74.225.206.175:1819] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVEwj8vc9B-5cwN385ICawAAAFM"]
[Sun Dec 28 21:28:48.036730 2025] [:error] [pid 42293:tid 42324] [client 74.225.206.175:1768] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVEwkMvc9B-5cwN385ICbAAAAEE"]
[Sun Dec 28 21:28:48.371962 2025] [:error] [pid 29436:tid 29462] [client 74.225.206.175:1745] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVEwkLchzOOtNL9VPNIU8gAAAZc"]
[Sun Dec 28 21:28:48.751420 2025] [:error] [pid 29436:tid 29445] [client 74.225.206.175:1820] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVEwkLchzOOtNL9VPNIU8wAAAYY"]
[Sun Dec 28 21:28:49.129366 2025] [:error] [pid 29388:tid 29417] [client 74.225.206.175:1807] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVEwkdoLv2L2zI_SpdX56AAAAVU"]
[Sun Dec 28 21:28:49.471450 2025] [:error] [pid 29437:tid 29485] [client 74.225.206.175:1748] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVEwkRhDotAbVk6pZLfdzQAAAdM"]
[Sun Dec 28 21:28:49.894766 2025] [:error] [pid 29437:tid 29473] [client 74.225.206.175:1775] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aVEwkRhDotAbVk6pZLfdzgAAAcc"]
[Sun Dec 28 21:28:50.236677 2025] [:error] [pid 29436:tid 29457] [client 74.225.206.175:1756] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aVEwkrchzOOtNL9VPNIU9QAAAZI"]
[Sun Dec 28 21:28:50.583255 2025] [:error] [pid 29436:tid 29458] [client 74.225.206.175:1823] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aVEwkrchzOOtNL9VPNIU9gAAAZM"]
[Sun Dec 28 21:28:51.052772 2025] [:error] [pid 29436:tid 29447] [client 74.225.206.175:1846] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aVEwk7chzOOtNL9VPNIU9wAAAYg"]
[Sun Dec 28 21:28:51.425916 2025] [:error] [pid 29436:tid 29459] [client 74.225.206.175:1877] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVEwk7chzOOtNL9VPNIU-AAAAZQ"]
[Sun Dec 28 21:28:51.854902 2025] [:error] [pid 29436:tid 29463] [client 74.225.206.175:15577] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVEwk7chzOOtNL9VPNIU-gAAAZg"]
[Sun Dec 28 21:28:52.200177 2025] [:error] [pid 42293:tid 42334] [client 74.225.206.175:1888] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVEwlMvc9B-5cwN385ICbwAAAEs"]
[Sun Dec 28 21:28:52.718542 2025] [:error] [pid 29436:tid 29443] [client 74.225.206.175:1834] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVEwlLchzOOtNL9VPNIU_AAAAYQ"]
[Sun Dec 28 21:28:53.194492 2025] [:error] [pid 29436:tid 29461] [client 74.225.206.175:1759] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEwlbchzOOtNL9VPNIU_gAAAZY"]
[Sun Dec 28 21:28:53.568139 2025] [:error] [pid 29436:tid 29451] [client 74.225.206.175:15554] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEwlbchzOOtNL9VPNIVAAAAAYw"]
[Sun Dec 28 21:28:53.889783 2025] [:error] [pid 29436:tid 29456] [client 74.225.206.175:1766] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEwlbchzOOtNL9VPNIVAQAAAZE"]
[Sun Dec 28 21:28:54.331514 2025] [:error] [pid 42293:tid 42341] [client 74.225.206.175:1741] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEwlsvc9B-5cwN385ICcQAAAFI"]
[Sun Dec 28 21:28:54.691198 2025] [:error] [pid 42292:tid 42316] [client 74.225.206.175:1842] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVEwlpyOrM_vaFx1osZgGgAAABQ"]
[Sun Dec 28 21:28:55.039493 2025] [:error] [pid 42292:tid 42315] [client 74.225.206.175:1975] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVEwl5yOrM_vaFx1osZgGwAAABM"]
[Sun Dec 28 21:28:55.384332 2025] [:error] [pid 42292:tid 42309] [client 74.225.206.175:1901] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVEwl5yOrM_vaFx1osZgHQAAAA0"]
[Sun Dec 28 21:28:55.787657 2025] [:error] [pid 42292:tid 42308] [client 74.225.206.175:1673] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVEwl5yOrM_vaFx1osZgHwAAAAw"]
[Sun Dec 28 21:28:56.134486 2025] [:error] [pid 29437:tid 29479] [client 74.225.206.175:1880] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVEwmBhDotAbVk6pZLfd0gAAAc0"]
[Sun Dec 28 21:28:56.528023 2025] [:error] [pid 29437:tid 29480] [client 74.225.206.175:1850] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVEwmBhDotAbVk6pZLfd0wAAAc4"]
[Sun Dec 28 21:28:57.214933 2025] [:error] [pid 29437:tid 29486] [client 74.225.206.175:1810] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVEwmRhDotAbVk6pZLfd1QAAAdQ"]
[Sun Dec 28 21:28:57.592447 2025] [:error] [pid 42292:tid 42306] [client 74.225.206.175:1881] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVEwmZyOrM_vaFx1osZgIgAAAAo"]
[Sun Dec 28 21:28:58.135090 2025] [:error] [pid 29436:tid 29442] [client 74.225.206.175:1983] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVEwmrchzOOtNL9VPNIVAwAAAYM"]
[Sun Dec 28 21:28:58.586460 2025] [:error] [pid 42294:tid 42358] [client 74.225.206.175:1762] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVEwmtTE5kYcYCOzl9HTewAAAIg"]
[Sun Dec 28 21:28:59.049298 2025] [:error] [pid 29436:tid 29450] [client 74.225.206.175:1832] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVEwm7chzOOtNL9VPNIVBAAAAYs"]
[Sun Dec 28 21:28:59.484337 2025] [:error] [pid 42293:tid 42331] [client 74.225.206.175:1674] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVEwm8vc9B-5cwN385ICdAAAAEg"]
[Sun Dec 28 21:28:59.841026 2025] [:error] [pid 42293:tid 42346] [client 74.225.206.175:1683] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVEwm8vc9B-5cwN385ICdQAAAFc"]
[Sun Dec 28 21:29:00.412878 2025] [:error] [pid 43789:tid 43800] [client 74.225.206.175:1670] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVEwnAa-tUppni4CcCZLUQAAAQk"]
[Sun Dec 28 21:29:00.800692 2025] [:error] [pid 29388:tid 29399] [client 74.225.206.175:1744] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVEwnNoLv2L2zI_SpdX57AAAAUM"]
[Sun Dec 28 21:29:01.284711 2025] [:error] [pid 42292:tid 42301] [client 74.225.206.175:2039] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVEwnZyOrM_vaFx1osZgKQAAAAU"]
[Sun Dec 28 21:29:01.786231 2025] [:error] [pid 29388:tid 29414] [client 74.225.206.175:1806] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aVEwndoLv2L2zI_SpdX57QAAAVI"]
[Sun Dec 28 21:29:02.195625 2025] [:error] [pid 29388:tid 29416] [client 74.225.206.175:1751] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aVEwntoLv2L2zI_SpdX57wAAAVQ"]
[Sun Dec 28 21:29:02.577410 2025] [:error] [pid 29388:tid 29413] [client 74.225.206.175:1887] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aVEwntoLv2L2zI_SpdX58gAAAVE"]
[Sun Dec 28 21:29:02.899148 2025] [:error] [pid 42378:tid 42403] [client 74.225.206.175:1739] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aVEwnjgtcN-KHAjWrX8xMwAAANc"]
[Sun Dec 28 21:29:03.176338 2025] [:error] [pid 42292:tid 42316] [client 74.225.206.175:1909] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVEwn5yOrM_vaFx1osZgLAAAABQ"]
[Sun Dec 28 21:29:03.484477 2025] [:error] [pid 29437:tid 29468] [client 74.225.206.175:1679] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVEwnxhDotAbVk6pZLfd1wAAAcI"]
[Sun Dec 28 21:29:03.827732 2025] [:error] [pid 29388:tid 29405] [client 74.225.206.175:1828] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVEwn9oLv2L2zI_SpdX58wAAAUk"]
[Sun Dec 28 21:29:04.281537 2025] [:error] [pid 42294:tid 42362] [client 74.225.206.175:1776] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVEwoNTE5kYcYCOzl9HTfgAAAIw"]
[Sun Dec 28 21:29:04.803800 2025] [:error] [pid 42292:tid 42303] [client 74.225.206.175:1841] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aVEwoJyOrM_vaFx1osZgLwAAAAc"]
[Sun Dec 28 21:29:05.294236 2025] [:error] [pid 42378:tid 42385] [client 74.225.206.175:1734] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aVEwoTgtcN-KHAjWrX8xNQAAAMU"]
[Sun Dec 28 21:29:05.736962 2025] [:error] [pid 42378:tid 42393] [client 74.225.206.175:1848] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aVEwoTgtcN-KHAjWrX8xPgAAAM0"]
[Sun Dec 28 21:29:06.069745 2025] [:error] [pid 42378:tid 42397] [client 74.225.206.175:1784] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aVEwojgtcN-KHAjWrX8xPwAAANE"]
[Sun Dec 28 21:29:06.486007 2025] [:error] [pid 42378:tid 42381] [client 74.225.206.175:1685] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aVEwojgtcN-KHAjWrX8xQwAAAME"]
[Sun Dec 28 21:29:06.855430 2025] [:error] [pid 42292:tid 42313] [client 74.225.206.175:1906] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aVEwopyOrM_vaFx1osZgOwAAABE"]
[Sun Dec 28 21:29:07.284460 2025] [:error] [pid 42292:tid 42303] [client 74.225.206.175:1971] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aVEwo5yOrM_vaFx1osZgRwAAAAc"]
[Sun Dec 28 21:29:07.692196 2025] [:error] [pid 42293:tid 42324] [client 74.225.206.175:1830] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ton.php"] [unique_id "aVEwo8vc9B-5cwN385ICegAAAEE"]
[Sun Dec 28 21:29:08.049914 2025] [:error] [pid 42293:tid 42329] [client 74.225.206.175:1729] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwpMvc9B-5cwN385ICewAAAEY"]
[Sun Dec 28 21:29:08.476799 2025] [:error] [pid 29437:tid 29476] [client 74.225.206.175:1671] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwpBhDotAbVk6pZLfd2gAAAco"]
[Sun Dec 28 21:29:08.931474 2025] [:error] [pid 29437:tid 29487] [client 74.225.206.175:1746] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwpBhDotAbVk6pZLfd3QAAAdU"]
[Sun Dec 28 21:29:09.296503 2025] [:error] [pid 42378:tid 42386] [client 74.225.206.175:1851] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVEwpTgtcN-KHAjWrX8xSQAAAMY"]
[Sun Dec 28 21:29:09.595897 2025] [:error] [pid 29437:tid 29473] [client 74.225.206.175:15594] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aVEwpRhDotAbVk6pZLfd4QAAAcc"]
[Sun Dec 28 21:29:09.922998 2025] [:error] [pid 29437:tid 29474] [client 74.225.206.175:1730] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aVEwpRhDotAbVk6pZLfd5AAAAcg"]
[Sun Dec 28 21:29:10.330422 2025] [:error] [pid 43789:tid 43813] [client 74.225.206.175:1733] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aVEwpga-tUppni4CcCZLVwAAARY"]
[Sun Dec 28 21:29:10.667097 2025] [:error] [pid 29436:tid 29454] [client 74.225.206.175:1773] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aVEwprchzOOtNL9VPNIVFQAAAY8"]
[Sun Dec 28 21:29:11.316847 2025] [:error] [pid 43789:tid 43804] [client 74.225.206.175:1854] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVEwpwa-tUppni4CcCZLWAAAAQ0"]
[Sun Dec 28 21:29:11.614760 2025] [:error] [pid 43789:tid 43805] [client 74.225.206.175:1752] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVEwpwa-tUppni4CcCZLWQAAAQ4"]
[Sun Dec 28 21:29:11.967255 2025] [:error] [pid 42378:tid 42389] [client 74.225.206.175:1757] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVEwpzgtcN-KHAjWrX8xSgAAAMk"]
[Sun Dec 28 21:29:12.430213 2025] [:error] [pid 43789:tid 43798] [client 74.225.206.175:1861] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVEwqAa-tUppni4CcCZLWgAAAQc"]
[Sun Dec 28 21:29:12.962460 2025] [:error] [pid 43789:tid 43808] [client 74.225.206.175:1795] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVEwqAa-tUppni4CcCZLWwAAARE"]
[Sun Dec 28 21:29:13.371604 2025] [:error] [pid 43789:tid 43797] [client 74.225.206.175:1831] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVEwqQa-tUppni4CcCZLXAAAAQY"]
[Sun Dec 28 21:29:13.997532 2025] [:error] [pid 43789:tid 43796] [client 74.225.206.175:1754] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVEwqQa-tUppni4CcCZLXwAAAQU"]
[Sun Dec 28 21:29:14.716524 2025] [:error] [pid 42378:tid 42381] [client 74.225.206.175:1844] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVEwqjgtcN-KHAjWrX8xSwAAAME"]
[Sun Dec 28 21:29:15.205768 2025] [:error] [pid 43789:tid 43812] [client 74.225.206.175:1797] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aVEwqwa-tUppni4CcCZLYQAAARU"]
[Sun Dec 28 21:29:15.639081 2025] [:error] [pid 43789:tid 43807] [client 74.225.206.175:1843] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aVEwqwa-tUppni4CcCZLYwAAARA"]
[Sun Dec 28 21:29:16.069174 2025] [:error] [pid 29388:tid 29403] [client 74.225.206.175:1913] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aVEwrNoLv2L2zI_SpdX5_AAAAUc"]
[Sun Dec 28 21:29:16.470122 2025] [:error] [pid 42293:tid 42344] [client 74.225.206.175:1749] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pop.php"] [unique_id "aVEwrMvc9B-5cwN385ICfQAAAFU"]
[Sun Dec 28 21:29:16.867310 2025] [:error] [pid 29436:tid 29457] [client 74.225.206.175:1764] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVEwrLchzOOtNL9VPNIVHQAAAZI"]
[Sun Dec 28 21:29:17.305434 2025] [:error] [pid 29388:tid 29420] [client 74.225.206.175:1852] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVEwrdoLv2L2zI_SpdX5_gAAAVg"]
[Sun Dec 28 21:29:17.728746 2025] [:error] [pid 29436:tid 29447] [client 74.225.206.175:1763] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVEwrbchzOOtNL9VPNIVHgAAAYg"]
[Sun Dec 28 21:29:18.034046 2025] [:error] [pid 29437:tid 29486] [client 74.225.206.175:1828] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVEwrhhDotAbVk6pZLfd6wAAAdQ"]
[Sun Dec 28 21:29:18.385476 2025] [:error] [pid 43789:tid 43800] [client 74.225.206.175:1838] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xaz.php"] [unique_id "aVEwrga-tUppni4CcCZLZAAAAQk"]
[Sun Dec 28 21:29:18.825446 2025] [:error] [pid 42294:tid 42362] [client 74.225.206.175:1725] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xaz.php"] [unique_id "aVEwrtTE5kYcYCOzl9HTjwAAAIw"]
[Sun Dec 28 21:29:19.335241 2025] [:error] [pid 43789:tid 43795] [client 74.225.206.175:1736] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xaz.php"] [unique_id "aVEwrwa-tUppni4CcCZLZQAAAQQ"]
[Sun Dec 28 21:29:19.694158 2025] [:error] [pid 42292:tid 42318] [client 74.225.206.175:1786] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xaz.php"] [unique_id "aVEwr5yOrM_vaFx1osZgZgAAABY"]
[Sun Dec 28 21:29:20.381155 2025] [:error] [pid 42293:tid 42327] [client 74.225.206.175:1872] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aVEwsMvc9B-5cwN385ICgwAAAEQ"]
[Sun Dec 28 21:29:21.162023 2025] [:error] [pid 42293:tid 42347] [client 74.225.206.175:1678] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aVEwscvc9B-5cwN385IChAAAAFg"]
[Sun Dec 28 21:29:21.822282 2025] [:error] [pid 42378:tid 42401] [client 74.225.206.175:1790] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aVEwsTgtcN-KHAjWrX8xTAAAANU"]
[Sun Dec 28 21:29:22.477049 2025] [:error] [pid 43789:tid 43810] [client 74.225.206.175:1900] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up4.php"] [unique_id "aVEwsga-tUppni4CcCZLZwAAARM"]
[Sun Dec 28 21:29:23.186675 2025] [:error] [pid 29388:tid 29401] [client 74.225.206.175:1905] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVEws9oLv2L2zI_SpdX6BAAAAUU"]
[Sun Dec 28 21:29:23.912170 2025] [:error] [pid 29436:tid 29461] [client 74.225.206.175:1849] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVEws7chzOOtNL9VPNIVIQAAAZY"]
[Sun Dec 28 21:29:24.583308 2025] [:error] [pid 29436:tid 29443] [client 74.225.206.175:1853] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVEwtLchzOOtNL9VPNIVIwAAAYQ"]
[Sun Dec 28 21:29:24.999896 2025] [:error] [pid 29436:tid 29449] [client 74.225.206.175:1718] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVEwtLchzOOtNL9VPNIVJAAAAYo"]
[Sun Dec 28 21:29:25.400457 2025] [:error] [pid 29388:tid 29410] [client 74.225.206.175:1755] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVEwtdoLv2L2zI_SpdX6BQAAAU4"]
[Sun Dec 28 21:29:26.402453 2025] [:error] [pid 29436:tid 29448] [client 74.225.206.175:1735] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVEwtrchzOOtNL9VPNIVJgAAAYk"]
[Sun Dec 28 21:29:27.167204 2025] [:error] [pid 29436:tid 29441] [client 74.225.206.175:1829] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVEwt7chzOOtNL9VPNIVKgAAAYI"]
[Sun Dec 28 21:29:27.603613 2025] [:error] [pid 29436:tid 29457] [client 74.225.206.175:1860] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVEwt7chzOOtNL9VPNIVLQAAAZI"]
[Sun Dec 28 21:29:28.066213 2025] [:error] [pid 29436:tid 29439] [client 74.225.206.175:1788] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aVEwuLchzOOtNL9VPNIVLgAAAYA"]
[Sun Dec 28 21:29:28.878143 2025] [:error] [pid 29388:tid 29411] [client 74.225.206.175:15602] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aVEwuNoLv2L2zI_SpdX6BwAAAU8"]
[Sun Dec 28 21:29:29.476543 2025] [:error] [pid 29436:tid 29440] [client 74.225.206.175:1979] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aVEwubchzOOtNL9VPNIVMwAAAYE"]
[Sun Dec 28 21:29:30.039454 2025] [:error] [pid 29436:tid 29453] [client 74.225.206.175:1816] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aVEwurchzOOtNL9VPNIVNQAAAY4"]
[Sun Dec 28 21:29:30.322979 2025] [:error] [pid 42378:tid 42388] [client 74.225.206.175:1719] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVEwujgtcN-KHAjWrX8xTQAAAMg"]
[Sun Dec 28 21:29:30.739462 2025] [:error] [pid 29436:tid 29456] [client 74.225.206.175:1672] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVEwurchzOOtNL9VPNIVOAAAAZE"]
[Sun Dec 28 21:29:32.046620 2025] [:error] [pid 42292:tid 42307] [client 74.225.206.175:1855] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVEwvJyOrM_vaFx1osZgaQAAAAs"]
[Sun Dec 28 21:29:33.368360 2025] [:error] [pid 42293:tid 42346] [client 74.225.206.175:1696] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVEwvcvc9B-5cwN385IChgAAAFc"]
[Sun Dec 28 21:29:33.871447 2025] [:error] [pid 42293:tid 42338] [client 74.225.206.175:1791] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVEwvcvc9B-5cwN385IChwAAAE8"]
[Sun Dec 28 21:29:34.269932 2025] [:error] [pid 29436:tid 29452] [client 74.225.206.175:1666] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVEwvrchzOOtNL9VPNIVOwAAAY0"]
[Sun Dec 28 21:29:34.984897 2025] [:error] [pid 43789:tid 43796] [client 74.225.206.175:1804] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVEwvga-tUppni4CcCZLbAAAAQU"]
[Sun Dec 28 21:29:35.387544 2025] [:error] [pid 43789:tid 43792] [client 74.225.206.175:1840] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVEwvwa-tUppni4CcCZLbwAAAQE"]
[Sun Dec 28 21:29:35.734245 2025] [:error] [pid 29436:tid 29455] [client 74.225.206.175:1720] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aVEwv7chzOOtNL9VPNIVPAAAAZA"]
[Sun Dec 28 21:29:36.384580 2025] [:error] [pid 43789:tid 43807] [client 74.225.206.175:1811] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aVEwwAa-tUppni4CcCZLcAAAARA"]
[Sun Dec 28 21:29:36.749508 2025] [:error] [pid 29436:tid 29445] [client 74.225.206.175:1767] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aVEwwLchzOOtNL9VPNIVQgAAAYY"]
[Sun Dec 28 21:29:37.283377 2025] [:error] [pid 29436:tid 29458] [client 74.225.206.175:1743] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aVEwwbchzOOtNL9VPNIVQwAAAZM"]
[Sun Dec 28 21:29:37.897652 2025] [:error] [pid 29436:tid 29463] [client 74.225.206.175:1738] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVEwwbchzOOtNL9VPNIVRQAAAZg"]
[Sun Dec 28 21:29:38.253358 2025] [:error] [pid 29436:tid 29461] [client 74.225.206.175:1731] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVEwwrchzOOtNL9VPNIVRgAAAZY"]
[Sun Dec 28 21:29:38.603361 2025] [:error] [pid 42378:tid 42386] [client 74.225.206.175:1693] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVEwwjgtcN-KHAjWrX8xVgAAAMY"]
[Sun Dec 28 21:29:39.115614 2025] [:error] [pid 29436:tid 29443] [client 74.225.206.175:1801] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVEww7chzOOtNL9VPNIVSQAAAYQ"]
[Sun Dec 28 21:29:39.429935 2025] [:error] [pid 29436:tid 29449] [client 74.225.206.175:1675] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVEww7chzOOtNL9VPNIVSgAAAYo"]
[Sun Dec 28 21:29:39.900629 2025] [:error] [pid 29388:tid 29417] [client 74.225.206.175:1780] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVEww9oLv2L2zI_SpdX6DQAAAVU"]
[Sun Dec 28 21:29:40.534310 2025] [:error] [pid 29436:tid 29451] [client 74.225.206.175:1771] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVEwxLchzOOtNL9VPNIVTQAAAYw"]
[Sun Dec 28 21:29:40.947610 2025] [:error] [pid 29436:tid 29452] [client 74.225.206.175:1674] [client 74.225.206.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVEwxLchzOOtNL9VPNIVTwAAAY0"]
[Sun Dec 28 22:05:04.949114 2025] [autoindex:error] [pid 42293:tid 42337] [client 35.183.132.49:51430] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 22:08:37.788756 2025] [autoindex:error] [pid 42294:tid 42371] [client 34.14.185.197:46738] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 22:08:38.166241 2025] [autoindex:error] [pid 29436:tid 29446] [client 34.14.185.197:56940] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 23:11:21.939607 2025] [:error] [pid 43789:tid 43806] [client 49.51.72.236:47828] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVFImQa-tUppni4CcCZdwQAAAQ8"]
[Mon Dec 29 00:35:04.967206 2025] [autoindex:error] [pid 62317:tid 62335] [client 34.45.118.160:50899] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 02:29:02.786601 2025] [autoindex:error] [pid 8076:tid 8101] [client 31.171.155.11:46587] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 29 02:29:03.751235 2025] [autoindex:error] [pid 46622:tid 46639] [client 31.171.155.11:46660] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 29 02:29:05.169166 2025] [autoindex:error] [pid 46622:tid 46648] [client 202.55.67.194:59186] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 29 02:29:16.955077 2025] [autoindex:error] [pid 8229:tid 8301] [client 159.65.245.255:59932] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 29 02:29:21.340628 2025] [autoindex:error] [pid 62317:tid 62330] [client 154.16.115.97:49344] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 29 02:29:24.113426 2025] [autoindex:error] [pid 62278:tid 62280] [client 154.16.115.97:49722] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Dec 29 04:34:40.587634 2025] [autoindex:error] [pid 37389:tid 37477] [client 196.51.119.162:35265] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 04:34:41.722125 2025] [autoindex:error] [pid 37389:tid 37462] [client 69.58.2.189:56698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 04:34:42.777844 2025] [autoindex:error] [pid 11540:tid 11561] [client 196.51.119.2:59825] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 04:34:43.793421 2025] [autoindex:error] [pid 11451:tid 11460] [client 196.51.143.82:53210] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 06:02:56.444821 2025] [:error] [pid 11540:tid 11548] [client 14.215.163.132:42665] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVGpEA1izvtkZ6YWaTxb3AAAAMY"]
[Mon Dec 29 06:51:55.023585 2025] [autoindex:error] [pid 11453:tid 11523] [client 213.180.203.200:40154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 07:44:20.986823 2025] [autoindex:error] [pid 37389:tid 37470] [client 198.235.24.34:61488] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 09:06:14.713981 2025] [autoindex:error] [pid 37389:tid 37477] [client 93.158.91.249:60669] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 09:21:05.662215 2025] [:error] [pid 11540:tid 11555] [client 37.205.115.233:26613] [client 37.205.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVHXgQ1izvtkZ6YWaTyWtAAAAM0"]
[Mon Dec 29 09:21:06.420883 2025] [:error] [pid 11453:tid 11522] [client 190.210.32.72:4161] [client 190.210.32.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVHXgry-FXnKT7-6pt53KwAAAI0"]
[Mon Dec 29 12:00:18.849782 2025] [:error] [pid 11451:tid 11476] [client 185.238.231.28:42739] [client 185.238.231.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.28, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aVH80pDUmxySx0Vynm_ozQAAABU"]
[Mon Dec 29 12:00:18.859966 2025] [proxy_fcgi:error] [pid 11451:tid 11476] [client 185.238.231.28:42739] AH01071: Got error 'Primary script unknown'
[Mon Dec 29 12:00:24.535033 2025] [:error] [pid 11453:tid 11510] [client 101.91.148.219:49502] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVH82Ly-FXnKT7-6pt6gRAAAAIE"]
[Mon Dec 29 12:52:22.433146 2025] [autoindex:error] [pid 24343:tid 24362] [client 98.84.122.127:47364] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 12:52:26.851144 2025] [autoindex:error] [pid 11453:tid 11514] [client 98.84.122.127:22284] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 12:52:30.403954 2025] [autoindex:error] [pid 11540:tid 11565] [client 66.249.64.9:56722] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 12:52:30.502381 2025] [autoindex:error] [pid 24344:tid 24381] [client 66.249.64.9:53557] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 13:55:23.032100 2025] [autoindex:error] [pid 24344:tid 24377] [client 101.199.254.204:49384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 15:45:27.049846 2025] [autoindex:error] [pid 24344:tid 24395] [client 198.235.24.24:61116] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 18:45:21.924903 2025] [:error] [pid 11540:tid 11558] [client 162.62.213.165:44570] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVJbwQ1izvtkZ6YWaTztGQAAANA"]
[Mon Dec 29 19:31:50.637528 2025] [:error] [pid 37389:tid 37454] [client 165.227.108.154:38018] [client 165.227.108.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aVJmpsEYrQKI4GZ26QZPZwAAAQA"]
[Mon Dec 29 20:11:10.499131 2025] [:error] [pid 11452:tid 11484] [client 138.197.102.217:43896] [client 138.197.102.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aVJv3qhBUmuWsliUNqRyzwAAAEI"]
[Mon Dec 29 22:29:41.889253 2025] [autoindex:error] [pid 24343:tid 24366] [client 104.253.37.79:41332] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 23:07:11.049506 2025] [autoindex:error] [pid 37389:tid 37472] [client 34.19.102.69:55419] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 23:07:11.255539 2025] [autoindex:error] [pid 37389:tid 37465] [client 34.19.102.69:55419] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 23:07:12.232081 2025] [:error] [pid 37389:tid 37461] [client 34.19.102.69:55419] [client 34.19.102.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.102.69, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVKZIMEYrQKI4GZ26QZtJgAAAQc"]
[Mon Dec 29 23:07:12.242405 2025] [proxy_fcgi:error] [pid 37389:tid 37461] [client 34.19.102.69:55419] AH01071: Got error 'Primary script unknown'
[Mon Dec 29 23:07:12.444031 2025] [autoindex:error] [pid 37389:tid 37471] [client 34.19.102.69:55419] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 23:07:13.435751 2025] [:error] [pid 37389:tid 37470] [client 34.19.102.69:55419] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aVKZIcEYrQKI4GZ26QZtLAAAARA"]
[Mon Dec 29 23:07:13.838207 2025] [:error] [pid 11452:tid 11493] [client 34.19.102.69:60193] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aVKZIahBUmuWsliUNqSEjAAAAEs"]
[Mon Dec 29 23:07:14.243259 2025] [:error] [pid 24344:tid 24391] [client 34.19.102.69:49733] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aVKZIk1cesxuccozvjjiqwAAAk8"]
[Mon Dec 29 23:07:14.716476 2025] [:error] [pid 37389:tid 37464] [client 34.19.102.69:49970] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aVKZIsEYrQKI4GZ26QZtLgAAAQo"]
[Mon Dec 29 23:07:15.166321 2025] [:error] [pid 37389:tid 37460] [client 34.19.102.69:59048] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aVKZI8EYrQKI4GZ26QZtMAAAAQY"]
[Mon Dec 29 23:07:15.596728 2025] [:error] [pid 24344:tid 24389] [client 34.19.102.69:58366] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aVKZI01cesxuccozvjjisgAAAk4"]
[Mon Dec 29 23:07:15.955448 2025] [:error] [pid 37389:tid 37467] [client 34.19.102.69:59314] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aVKZI8EYrQKI4GZ26QZtMQAAAQ0"]
[Mon Dec 29 23:07:16.319304 2025] [:error] [pid 11540:tid 11546] [client 34.19.102.69:52886] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aVKZJA1izvtkZ6YWaTwHnwAAAMQ"]
[Mon Dec 29 23:07:16.694469 2025] [:error] [pid 24344:tid 24385] [client 34.19.102.69:63764] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aVKZJE1cesxuccozvjjitAAAAko"]
[Mon Dec 29 23:07:17.137089 2025] [:error] [pid 37389:tid 37455] [client 34.19.102.69:55976] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aVKZJcEYrQKI4GZ26QZtMwAAAQE"]
[Mon Dec 29 23:07:17.504197 2025] [:error] [pid 11453:tid 11515] [client 34.19.102.69:49757] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aVKZJby-FXnKT7-6pt79lgAAAIY"]
[Mon Dec 29 23:07:17.903516 2025] [:error] [pid 24343:tid 24368] [client 34.19.102.69:57151] [client 34.19.102.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aVKZJcvqvAa0rISAVIR3_gAAAhQ"]
[Tue Dec 30 00:43:16.876062 2025] [:error] [pid 9043:tid 9090] [client 1.15.52.154:50288] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVKvpApScn3s_Xelo-GY6gAAAFE"]
[Tue Dec 30 02:24:14.898158 2025] [autoindex:error] [pid 9043:tid 9082] [client 13.60.43.6:56936] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 02:46:59.554606 2025] [proxy_fcgi:error] [pid 9128:tid 9133] [client 4.190.202.25:14279] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 02:47:02.152052 2025] [proxy_fcgi:error] [pid 9128:tid 9149] [client 4.190.202.25:14279] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 30 02:47:02.272656 2025] [:error] [pid 9128:tid 9133] [client 4.190.202.25:14279] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/4.php"] [unique_id "aVLMpsASbrOSyCr7LVCDJQAAAMM"], referer: https://www.google.co.uk/
[Tue Dec 30 02:47:02.758658 2025] [:error] [pid 9042:tid 9063] [client 4.190.202.25:14332] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVLMpjotupvrX8RtYEJ-owAAABE"], referer: https://duckduckgo.com/
[Tue Dec 30 02:47:03.001472 2025] [:error] [pid 42521:tid 42537] [client 4.190.202.25:13455] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aVLMp8zHehU4LDeKEzo0UAAAAU0"], referer: https://www.google.co.uk/
[Tue Dec 30 02:47:03.243632 2025] [:error] [pid 42335:tid 42390] [client 4.190.202.25:14295] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVLMp5Ts64_nkFDMkPykrgAAAQ4"], referer: https://www.google.fr/
[Tue Dec 30 02:47:03.484887 2025] [:error] [pid 42521:tid 42526] [client 4.190.202.25:14277] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVLMp8zHehU4LDeKEzo0VQAAAUI"], referer: https://www.google.de/
[Tue Dec 30 02:47:03.724287 2025] [:error] [pid 42521:tid 42530] [client 4.190.202.25:13450] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aVLMp8zHehU4LDeKEzo0VwAAAUY"], referer: https://www.bing.com/
[Tue Dec 30 02:47:03.965160 2025] [:error] [pid 57193:tid 57202] [client 4.190.202.25:14292] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aVLMp6EzOljppv-JqIrDYgAAAYc"], referer: https://www.yahoo.com/
[Tue Dec 30 02:47:04.206021 2025] [:error] [pid 42521:tid 42528] [client 4.190.202.25:13452] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVLMqMzHehU4LDeKEzo0WgAAAUQ"], referer: https://www.yahoo.com/
[Tue Dec 30 02:47:04.446753 2025] [:error] [pid 42521:tid 42539] [client 4.190.202.25:14330] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aVLMqMzHehU4LDeKEzo0WwAAAU8"], referer: https://www.google.com/
[Tue Dec 30 02:47:04.688378 2025] [:error] [pid 57193:tid 57207] [client 4.190.202.25:14317] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/gelay.php"] [unique_id "aVLMqKEzOljppv-JqIrDYwAAAYw"], referer: https://www.google.com/
[Tue Dec 30 02:47:04.930445 2025] [:error] [pid 61009:tid 61035] [client 4.190.202.25:13456] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVLMqBC7RSyMuwnpVqVDhgAAAdg"], referer: https://www.yahoo.com/
[Tue Dec 30 02:47:05.415870 2025] [:error] [pid 42521:tid 42534] [client 4.190.202.25:14284] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVLMqczHehU4LDeKEzo0YgAAAUo"], referer: https://www.bing.com/
[Tue Dec 30 02:47:05.656735 2025] [:error] [pid 42521:tid 42539] [client 4.190.202.25:14296] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aVLMqczHehU4LDeKEzo0ZAAAAU8"], referer: https://duckduckgo.com/
[Tue Dec 30 02:47:05.897102 2025] [:error] [pid 9128:tid 9144] [client 4.190.202.25:13440] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/mini.php"] [unique_id "aVLMqcASbrOSyCr7LVCDJwAAAM4"], referer: https://www.yahoo.com/
[Tue Dec 30 02:47:06.138469 2025] [:error] [pid 9044:tid 9102] [client 4.190.202.25:14321] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aVLMquRAXIotPh9gznT_6AAAAII"], referer: https://www.bing.com/
[Tue Dec 30 02:47:06.383961 2025] [:error] [pid 42521:tid 42546] [client 4.190.202.25:13451] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVLMqszHehU4LDeKEzo0aQAAAVY"], referer: https://www.google.com/
[Tue Dec 30 02:47:06.629981 2025] [proxy_fcgi:error] [pid 42521:tid 42529] [client 4.190.202.25:14276] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 30 02:47:06.754995 2025] [proxy_fcgi:error] [pid 42521:tid 42527] [client 4.190.202.25:14276] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 30 02:47:06.881943 2025] [proxy_fcgi:error] [pid 42521:tid 42545] [client 4.190.202.25:14276] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 30 02:47:07.006372 2025] [proxy_fcgi:error] [pid 42521:tid 42528] [client 4.190.202.25:14276] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 02:57:43.153397 2025] [:error] [pid 61009:tid 61021] [client 170.106.193.108:51490] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVLPJxC7RSyMuwnpVqVGQQAAAco"]
[Tue Dec 30 05:10:09.618420 2025] [proxy_fcgi:error] [pid 55724:tid 55805] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:09.743268 2025] [proxy_fcgi:error] [pid 55724:tid 55791] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:09.869775 2025] [proxy_fcgi:error] [pid 55724:tid 55802] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 30 05:10:09.995190 2025] [proxy_fcgi:error] [pid 55724:tid 55788] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 30 05:10:10.118999 2025] [proxy_fcgi:error] [pid 55724:tid 55787] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 30 05:10:10.243490 2025] [proxy_fcgi:error] [pid 55724:tid 55789] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 30 05:10:10.492057 2025] [proxy_fcgi:error] [pid 55724:tid 55794] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 30 05:10:10.616079 2025] [proxy_fcgi:error] [pid 55724:tid 55806] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:10.740980 2025] [proxy_fcgi:error] [pid 55724:tid 55790] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 30 05:10:10.864464 2025] [proxy_fcgi:error] [pid 55724:tid 55797] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 30 05:10:10.988969 2025] [proxy_fcgi:error] [pid 55724:tid 55796] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 30 05:10:12.324942 2025] [proxy_fcgi:error] [pid 55724:tid 55795] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:12.450454 2025] [proxy_fcgi:error] [pid 55724:tid 55798] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:12.574613 2025] [proxy_fcgi:error] [pid 55724:tid 55808] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 30 05:10:12.702231 2025] [proxy_fcgi:error] [pid 55724:tid 55807] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:12.956632 2025] [proxy_fcgi:error] [pid 55724:tid 55800] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 30 05:10:13.096029 2025] [proxy_fcgi:error] [pid 55724:tid 55785] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 30 05:10:13.220301 2025] [proxy_fcgi:error] [pid 55724:tid 55809] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:13.347998 2025] [proxy_fcgi:error] [pid 55724:tid 55792] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:13.473749 2025] [proxy_fcgi:error] [pid 55724:tid 55801] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 30 05:10:13.598458 2025] [proxy_fcgi:error] [pid 55724:tid 55805] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:14.375629 2025] [proxy_fcgi:error] [pid 55724:tid 55793] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:14.510665 2025] [proxy_fcgi:error] [pid 55724:tid 55794] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:14.650649 2025] [proxy_fcgi:error] [pid 55724:tid 55806] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 30 05:10:14.802702 2025] [proxy_fcgi:error] [pid 55724:tid 55790] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 30 05:10:14.927219 2025] [proxy_fcgi:error] [pid 55724:tid 55797] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 30 05:10:15.053223 2025] [proxy_fcgi:error] [pid 55724:tid 55786] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 30 05:10:15.181121 2025] [proxy_fcgi:error] [pid 55724:tid 55799] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 30 05:10:15.306716 2025] [proxy_fcgi:error] [pid 55724:tid 55804] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:15.436135 2025] [proxy_fcgi:error] [pid 55724:tid 55796] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 30 05:10:15.565446 2025] [proxy_fcgi:error] [pid 55724:tid 55795] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 30 05:10:15.693042 2025] [proxy_fcgi:error] [pid 55724:tid 55798] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 30 05:10:15.943726 2025] [proxy_fcgi:error] [pid 55724:tid 55807] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 30 05:10:16.067933 2025] [proxy_fcgi:error] [pid 55724:tid 55803] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 30 05:10:16.194000 2025] [proxy_fcgi:error] [pid 55724:tid 55800] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 30 05:10:16.318182 2025] [proxy_fcgi:error] [pid 55724:tid 55785] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 30 05:10:16.572794 2025] [proxy_fcgi:error] [pid 55724:tid 55792] [client 4.190.202.25:16274] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 30 08:14:07.423421 2025] [autoindex:error] [pid 55722:tid 55781] [client 205.169.39.28:55917] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 08:14:53.840237 2025] [autoindex:error] [pid 55724:tid 55798] [client 205.169.39.14:5478] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 10:27:53.427563 2025] [:error] [pid 28824:tid 28853] [client 188.166.220.97:50333] [client 188.166.220.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVM4qX8FhtgLvBhuCR3a2AAAAIg"]
[Tue Dec 30 11:00:44.751973 2025] [autoindex:error] [pid 28826:tid 28921] [client 87.249.133.207:39479] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 11:28:53.410806 2025] [:error] [pid 38777:tid 38802] [client 68.183.217.198:62800] [client 68.183.217.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.217.198, incrementing brute counter"] [hostname "www.cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aVNG9WLn9GPxJXPhnHaEpgAAAFY"]
[Tue Dec 30 11:28:53.420688 2025] [proxy_fcgi:error] [pid 38777:tid 38802] [client 68.183.217.198:62800] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 11:53:20.113637 2025] [autoindex:error] [pid 28826:tid 28917] [client 142.93.230.253:39000] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 11:53:21.716537 2025] [autoindex:error] [pid 28826:tid 28908] [client 142.93.230.253:35324] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 13:07:04.284457 2025] [:error] [pid 28826:tid 28927] [client 103.77.107.57:58173] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVNd-POyQggePm1Ed9tG3wAAARQ"]
[Tue Dec 30 13:07:04.892116 2025] [:error] [pid 28824:tid 28862] [client 103.77.107.57:58590] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVNd-H8FhtgLvBhuCR0BtgAAAJE"]
[Tue Dec 30 15:35:35.630687 2025] [:error] [pid 47441:tid 47457] [client 103.65.236.149:52236] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVOAxy6d2esGSN6Ne3MUygAAAU0"]
[Tue Dec 30 15:35:36.231930 2025] [:error] [pid 47441:tid 47447] [client 103.65.236.149:52280] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVOAyC6d2esGSN6Ne3MUzAAAAUM"]
[Tue Dec 30 15:42:56.148862 2025] [autoindex:error] [pid 28824:tid 28868] [client 93.158.91.247:41253] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 16:55:18.142574 2025] [autoindex:error] [pid 28824:tid 28851] [client 66.249.64.8:37421] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:49.562067 2025] [autoindex:error] [pid 28826:tid 28926] [client 103.76.238.89:54656] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:51.263891 2025] [autoindex:error] [pid 28954:tid 28975] [client 103.76.238.205:58946] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:53.263559 2025] [autoindex:error] [pid 47553:tid 47568] [client 103.76.236.144:55870] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:53.947645 2025] [autoindex:error] [pid 47553:tid 47561] [client 103.76.237.41:63146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:55.958956 2025] [autoindex:error] [pid 47553:tid 47572] [client 103.76.236.139:17266] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:57.966104 2025] [autoindex:error] [pid 28826:tid 28922] [client 103.76.236.127:41968] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:58:59.984812 2025] [autoindex:error] [pid 28954:tid 28976] [client 103.76.236.189:26822] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com.au/
[Tue Dec 30 18:59:00.995399 2025] [autoindex:error] [pid 47553:tid 47571] [client 103.76.238.252:47154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:59:01.711458 2025] [autoindex:error] [pid 47553:tid 47556] [client 103.76.236.49:25860] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:59:03.453150 2025] [autoindex:error] [pid 28954:tid 28957] [client 103.76.237.160:52538] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:59:04.083204 2025] [autoindex:error] [pid 28954:tid 28971] [client 103.76.237.160:52538] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 30 18:59:04.773452 2025] [autoindex:error] [pid 47441:tid 47462] [client 103.76.236.74:48262] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 18:59:06.782956 2025] [autoindex:error] [pid 47441:tid 47450] [client 103.76.239.173:28852] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 20:42:18.166998 2025] [autoindex:error] [pid 28825:tid 28894] [client 34.229.59.52:37322] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 20:54:46.306462 2025] [:error] [pid 47441:tid 47458] [client 103.77.106.57:59842] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/postnews.php"] [unique_id "aVPLli6d2esGSN6Ne3NZ9wAAAU4"]
[Tue Dec 30 20:54:50.114141 2025] [:error] [pid 28826:tid 28915] [client 103.77.106.57:60559] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLmvOyQggePm1Ed9ubpAAAAQk"]
[Tue Dec 30 20:54:52.906547 2025] [:error] [pid 28824:tid 28866] [client 103.77.106.57:61433] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLnH8FhtgLvBhuCR1NGAAAAJU"]
[Tue Dec 30 21:12:02.769367 2025] [autoindex:error] [pid 28824:tid 28855] [client 103.76.239.83:54634] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:06.286773 2025] [autoindex:error] [pid 38777:tid 38784] [client 103.76.238.94:12470] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:08.369889 2025] [autoindex:error] [pid 28825:tid 28885] [client 103.76.239.229:20518] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:10.473490 2025] [autoindex:error] [pid 28954:tid 28980] [client 103.76.237.36:45824] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:12.620653 2025] [autoindex:error] [pid 47553:tid 47566] [client 103.76.238.237:54258] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:15.024007 2025] [autoindex:error] [pid 47553:tid 47558] [client 103.76.236.39:6424] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:17.149745 2025] [autoindex:error] [pid 47441:tid 47449] [client 103.76.236.69:64294] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:20.703131 2025] [autoindex:error] [pid 47441:tid 47464] [client 103.76.237.208:49952] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:24.222090 2025] [autoindex:error] [pid 47441:tid 47465] [client 107.174.177.85:7826] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:12:26.063130 2025] [autoindex:error] [pid 47553:tid 47562] [client 103.76.239.77:59550] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.baidu.com.au/
[Tue Dec 30 21:12:26.734720 2025] [autoindex:error] [pid 47553:tid 47558] [client 103.76.239.77:59550] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 30 21:12:28.796890 2025] [autoindex:error] [pid 28824:tid 28855] [client 103.76.238.26:63990] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com.au/
[Tue Dec 30 21:12:30.870628 2025] [autoindex:error] [pid 38777:tid 38784] [client 103.76.237.225:36154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 21:33:00.814753 2025] [:error] [pid 28825:tid 28879] [client 104.248.147.104:52499] [client 104.248.147.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVPUjD6dbc1G2hX-KfRiIwAAAMA"]
[Tue Dec 30 22:16:05.395772 2025] [autoindex:error] [pid 28825:tid 28893] [client 103.76.239.70:50340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com.au/
[Tue Dec 30 22:16:06.151153 2025] [autoindex:error] [pid 28824:tid 28849] [client 103.76.239.155:3800] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:06.836791 2025] [autoindex:error] [pid 47441:tid 47446] [client 103.76.236.20:39566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:07.523631 2025] [autoindex:error] [pid 47553:tid 47576] [client 103.76.236.241:51126] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:09.541806 2025] [autoindex:error] [pid 47553:tid 47567] [client 103.76.237.47:2758] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:10.967296 2025] [autoindex:error] [pid 28826:tid 28927] [client 103.76.238.246:40750] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:12.874572 2025] [autoindex:error] [pid 28954:tid 28956] [client 103.76.236.2:64850] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:14.128463 2025] [autoindex:error] [pid 28825:tid 28884] [client 103.76.236.36:29112] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:17.328882 2025] [autoindex:error] [pid 47553:tid 47566] [client 103.76.238.91:48890] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:19.639146 2025] [autoindex:error] [pid 38777:tid 38801] [client 103.76.237.192:17584] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:23.369313 2025] [autoindex:error] [pid 28825:tid 28879] [client 110.32.236.186:49030] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 22:16:28.012338 2025] [autoindex:error] [pid 28824:tid 28852] [client 152.174.184.32:39446] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Tue Dec 30 23:41:51.063692 2025] [autoindex:error] [pid 28954:tid 28968] [client 100.24.208.151:25885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 30 23:41:51.747274 2025] [autoindex:error] [pid 28954:tid 28963] [client 100.24.208.151:34524] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 00:53:22.825792 2025] [autoindex:error] [pid 1651:tid 1714] [client 34.229.59.52:53024] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 02:23:46.017182 2025] [:error] [pid 1651:tid 1715] [client 195.178.110.190:32838] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aVQYsnAnYt-Xi20L7fAOlwAAAVg"]
[Wed Dec 31 02:44:32.071109 2025] [proxy_fcgi:error] [pid 50068:tid 50090] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 02:44:32.161686 2025] [proxy_fcgi:error] [pid 50068:tid 50079] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 02:44:32.253064 2025] [proxy_fcgi:error] [pid 50068:tid 50080] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 02:44:32.344037 2025] [proxy_fcgi:error] [pid 50068:tid 50076] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 02:44:32.434776 2025] [proxy_fcgi:error] [pid 50068:tid 50089] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 02:44:32.525408 2025] [proxy_fcgi:error] [pid 50068:tid 50088] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 02:44:32.615405 2025] [proxy_fcgi:error] [pid 50068:tid 50086] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:32.796324 2025] [proxy_fcgi:error] [pid 50068:tid 50093] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:32.886462 2025] [proxy_fcgi:error] [pid 50068:tid 50072] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:32.978277 2025] [proxy_fcgi:error] [pid 50068:tid 50087] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 02:44:33.070403 2025] [proxy_fcgi:error] [pid 50068:tid 50083] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 02:44:33.161452 2025] [proxy_fcgi:error] [pid 50068:tid 50074] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 02:44:33.252034 2025] [proxy_fcgi:error] [pid 50068:tid 50078] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 02:44:33.343132 2025] [proxy_fcgi:error] [pid 50068:tid 50071] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 02:44:33.436200 2025] [proxy_fcgi:error] [pid 50068:tid 50075] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:33.527541 2025] [proxy_fcgi:error] [pid 50068:tid 50094] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 02:44:33.619769 2025] [proxy_fcgi:error] [pid 50068:tid 50073] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:33.803221 2025] [proxy_fcgi:error] [pid 50068:tid 50090] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:33.894089 2025] [proxy_fcgi:error] [pid 50068:tid 50079] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:33.985073 2025] [proxy_fcgi:error] [pid 50068:tid 50080] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:34.076344 2025] [proxy_fcgi:error] [pid 50068:tid 50089] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 02:44:34.620524 2025] [proxy_fcgi:error] [pid 50068:tid 50087] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:34.712169 2025] [proxy_fcgi:error] [pid 50068:tid 50083] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 02:44:34.803091 2025] [proxy_fcgi:error] [pid 50068:tid 50074] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 02:44:34.894129 2025] [proxy_fcgi:error] [pid 50068:tid 50078] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 02:44:34.984676 2025] [proxy_fcgi:error] [pid 50068:tid 50071] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 02:44:35.077280 2025] [proxy_fcgi:error] [pid 50068:tid 50092] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 02:44:35.167820 2025] [proxy_fcgi:error] [pid 50068:tid 50075] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 02:44:35.258086 2025] [proxy_fcgi:error] [pid 50068:tid 50094] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 02:44:35.348716 2025] [proxy_fcgi:error] [pid 50068:tid 50073] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 02:44:36.756726 2025] [proxy_fcgi:error] [pid 50068:tid 50076] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 02:44:36.849161 2025] [proxy_fcgi:error] [pid 50068:tid 50088] [client 4.194.133.126:36667] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 04:32:07.085752 2025] [autoindex:error] [pid 33004:tid 33081] [client 52.38.97.170:25512] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 04:32:08.069972 2025] [autoindex:error] [pid 33002:tid 33017] [client 52.38.97.170:62742] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 04:32:08.464787 2025] [autoindex:error] [pid 33003:tid 33061] [client 52.38.97.170:18275] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 04:32:08.858461 2025] [autoindex:error] [pid 33109:tid 33112] [client 52.38.97.170:19746] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 05:06:25.911318 2025] [:error] [pid 33003:tid 33041] [client 43.133.187.11:36890] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVQ-0bOkdrCgTt0MxWLWmQAAAEM"]
[Wed Dec 31 05:13:55.315271 2025] [proxy_fcgi:error] [pid 33003:tid 33042] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 05:13:55.405967 2025] [proxy_fcgi:error] [pid 33003:tid 33061] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 05:13:55.497158 2025] [proxy_fcgi:error] [pid 33003:tid 33050] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:55.588676 2025] [proxy_fcgi:error] [pid 33003:tid 33044] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 05:13:55.679417 2025] [proxy_fcgi:error] [pid 33003:tid 33060] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 05:13:55.770235 2025] [proxy_fcgi:error] [pid 33003:tid 33054] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 05:13:55.861171 2025] [proxy_fcgi:error] [pid 33003:tid 33058] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 05:13:56.047592 2025] [proxy_fcgi:error] [pid 33003:tid 33041] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 05:13:56.137978 2025] [proxy_fcgi:error] [pid 33003:tid 33053] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:56.247771 2025] [proxy_fcgi:error] [pid 33003:tid 33057] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 05:13:56.343079 2025] [proxy_fcgi:error] [pid 33003:tid 33045] [client 4.194.133.126:18415] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 05:13:56.429912 2025] [:error] [pid 33003:tid 33049] [client 4.194.133.126:18415] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRAlLOkdrCgTt0MxWLZwQAAAEs"], referer: https://www.google.fr/
[Wed Dec 31 05:13:56.616420 2025] [:error] [pid 33002:tid 33031] [client 4.194.133.126:18411] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRAlPnsZEcORmTFnrihaQAAABQ"], referer: https://www.yahoo.com/
[Wed Dec 31 05:13:56.894838 2025] [proxy_fcgi:error] [pid 33002:tid 33023] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 05:13:56.985754 2025] [proxy_fcgi:error] [pid 33002:tid 33015] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 05:13:57.076389 2025] [proxy_fcgi:error] [pid 33002:tid 33014] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 05:13:57.167423 2025] [proxy_fcgi:error] [pid 33002:tid 33030] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 05:13:57.260007 2025] [proxy_fcgi:error] [pid 33002:tid 33021] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 05:13:57.351507 2025] [proxy_fcgi:error] [pid 33002:tid 33032] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:57.546504 2025] [proxy_fcgi:error] [pid 33002:tid 33017] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:57.637692 2025] [proxy_fcgi:error] [pid 33002:tid 33019] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 05:13:57.729855 2025] [proxy_fcgi:error] [pid 33002:tid 33033] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 05:13:58.272218 2025] [proxy_fcgi:error] [pid 33002:tid 33012] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 05:13:58.364179 2025] [proxy_fcgi:error] [pid 33002:tid 33011] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:58.454413 2025] [proxy_fcgi:error] [pid 33002:tid 33022] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:58.545406 2025] [proxy_fcgi:error] [pid 33002:tid 33031] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 05:13:58.636689 2025] [proxy_fcgi:error] [pid 33002:tid 33034] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 05:13:58.727778 2025] [proxy_fcgi:error] [pid 33002:tid 33035] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 05:13:58.818712 2025] [proxy_fcgi:error] [pid 33002:tid 33024] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 05:13:58.911083 2025] [proxy_fcgi:error] [pid 33002:tid 33026] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 05:13:59.002425 2025] [proxy_fcgi:error] [pid 33002:tid 33023] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 05:13:59.093747 2025] [proxy_fcgi:error] [pid 33002:tid 33015] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 05:13:59.185063 2025] [proxy_fcgi:error] [pid 33002:tid 33014] [client 4.194.133.126:18318] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:23:45.516688 2025] [proxy_fcgi:error] [pid 33109:tid 33118] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:23:45.656666 2025] [proxy_fcgi:error] [pid 33109:tid 33125] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:23:45.796855 2025] [proxy_fcgi:error] [pid 33109:tid 33120] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:23:45.935648 2025] [proxy_fcgi:error] [pid 33109:tid 33117] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:23:46.074562 2025] [proxy_fcgi:error] [pid 33109:tid 33115] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:23:46.213866 2025] [proxy_fcgi:error] [pid 33109:tid 33123] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:23:46.356139 2025] [proxy_fcgi:error] [pid 33109:tid 33121] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:23:46.657386 2025] [proxy_fcgi:error] [pid 33109:tid 33135] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:23:46.795980 2025] [proxy_fcgi:error] [pid 33109:tid 33114] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:23:48.240266 2025] [proxy_fcgi:error] [pid 33109:tid 33133] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:23:48.385928 2025] [proxy_fcgi:error] [pid 33109:tid 33128] [client 52.141.42.203:60824] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:23:48.520613 2025] [:error] [pid 33109:tid 33134] [client 52.141.42.203:60824] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRQ9MYN9k_fnLM-n479UQAAANc"], referer: https://www.yahoo.com/
[Wed Dec 31 06:23:48.793560 2025] [:error] [pid 26113:tid 26128] [client 52.141.42.203:60833] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRQ9CU0NRJ9y9rL1aXLhAAAAQ0"], referer: https://duckduckgo.com/
[Wed Dec 31 06:23:49.222622 2025] [proxy_fcgi:error] [pid 26113:tid 26127] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:23:49.361196 2025] [proxy_fcgi:error] [pid 26113:tid 26139] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:23:49.500918 2025] [proxy_fcgi:error] [pid 26113:tid 26115] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:23:49.638344 2025] [proxy_fcgi:error] [pid 26113:tid 26135] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:23:49.776838 2025] [proxy_fcgi:error] [pid 26113:tid 26130] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:23:49.917665 2025] [proxy_fcgi:error] [pid 26113:tid 26132] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:23:50.193564 2025] [proxy_fcgi:error] [pid 26113:tid 26121] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:23:50.332300 2025] [proxy_fcgi:error] [pid 26113:tid 26123] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:23:50.493833 2025] [proxy_fcgi:error] [pid 26113:tid 26133] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:23:51.322185 2025] [proxy_fcgi:error] [pid 26113:tid 26138] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:23:51.459565 2025] [proxy_fcgi:error] [pid 26113:tid 26116] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:23:51.600699 2025] [proxy_fcgi:error] [pid 26113:tid 26125] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:23:51.740193 2025] [proxy_fcgi:error] [pid 26113:tid 26124] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:23:51.878393 2025] [proxy_fcgi:error] [pid 26113:tid 26139] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:23:52.017284 2025] [proxy_fcgi:error] [pid 26113:tid 26115] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:23:52.155152 2025] [proxy_fcgi:error] [pid 26113:tid 26135] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:23:52.295601 2025] [proxy_fcgi:error] [pid 26113:tid 26130] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:23:52.433734 2025] [proxy_fcgi:error] [pid 26113:tid 26119] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:23:52.571925 2025] [proxy_fcgi:error] [pid 26113:tid 26121] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:23:52.711277 2025] [proxy_fcgi:error] [pid 26113:tid 26123] [client 52.141.42.203:60754] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:59:25.880223 2025] [proxy_fcgi:error] [pid 42409:tid 42417] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:59:25.997513 2025] [proxy_fcgi:error] [pid 42409:tid 42429] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:59:26.116947 2025] [proxy_fcgi:error] [pid 42409:tid 42421] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:59:26.233453 2025] [proxy_fcgi:error] [pid 42409:tid 42418] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:59:26.350708 2025] [proxy_fcgi:error] [pid 42409:tid 42419] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:59:26.467564 2025] [proxy_fcgi:error] [pid 42409:tid 42434] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:59:26.584503 2025] [proxy_fcgi:error] [pid 42409:tid 42425] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:59:26.701326 2025] [proxy_fcgi:error] [pid 42409:tid 42413] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:59:26.819896 2025] [proxy_fcgi:error] [pid 42409:tid 42426] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:59:26.937196 2025] [proxy_fcgi:error] [pid 42409:tid 42428] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:59:27.056483 2025] [proxy_fcgi:error] [pid 42409:tid 42430] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:59:27.176833 2025] [proxy_fcgi:error] [pid 42409:tid 42420] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:59:27.296826 2025] [proxy_fcgi:error] [pid 42409:tid 42412] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:59:27.414309 2025] [proxy_fcgi:error] [pid 42409:tid 42417] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:59:27.528466 2025] [:error] [pid 42409:tid 42421] [client 74.176.56.30:52258] [client 74.176.56.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.176.56.30, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVRZT51RyrsdhRzKCqGYAwAAAEk"], referer: https://duckduckgo.com/
[Wed Dec 31 06:59:27.532741 2025] [proxy_fcgi:error] [pid 42409:tid 42421] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:59:27.649578 2025] [proxy_fcgi:error] [pid 42409:tid 42419] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:59:27.766692 2025] [proxy_fcgi:error] [pid 42409:tid 42434] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:59:27.883644 2025] [proxy_fcgi:error] [pid 42409:tid 42433] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:59:28.001392 2025] [proxy_fcgi:error] [pid 42409:tid 42413] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:59:28.117753 2025] [proxy_fcgi:error] [pid 42409:tid 42435] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:59:28.234734 2025] [proxy_fcgi:error] [pid 42409:tid 42415] [client 74.176.56.30:52258] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:59:29.636764 2025] [:error] [pid 42409:tid 42423] [client 74.176.56.30:52258] [client 74.176.56.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVRZUZ1RyrsdhRzKCqGYGwAAAEs"], referer: https://www.google.fr/
[Wed Dec 31 07:35:29.803993 2025] [autoindex:error] [pid 57144:tid 57188] [client 104.198.28.70:35842] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 12:21:13.601058 2025] [:error] [pid 64406:tid 64415] [client 43.153.58.28:52442] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVSkuSLRcJYP7e7OhBabvwAAAQc"]
[Wed Dec 31 13:27:19.514225 2025] [:error] [pid 64406:tid 64430] [client 223.244.35.77:51587] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVS0NyLRcJYP7e7OhBa0EAAAARY"]
[Wed Dec 31 14:11:42.786280 2025] [:error] [pid 48713:tid 48726] [client 101.33.66.34:49386] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVS-nkyNMVAGtWvMliOu4AAAAMg"]
[Wed Dec 31 15:10:52.777610 2025] [autoindex:error] [pid 48715:tid 48795] [client 113.199.198.4:55164] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 16:31:15.128319 2025] [:error] [pid 48714:tid 48757] [client 122.129.68.151:21374] [client 122.129.68.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.129.68.151, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVTfU79PcChEHWa6VittpwAAAAw"]
[Wed Dec 31 16:31:15.140925 2025] [proxy_fcgi:error] [pid 48714:tid 48757] [client 122.129.68.151:21374] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 16:38:57.458479 2025] [proxy_fcgi:error] [pid 64406:tid 64425] [client 13.236.95.230:59440] AH01071: Got error 'Primary script unknown', referer: https://cientifica.com.au
[Wed Dec 31 19:04:21.899232 2025] [autoindex:error] [pid 8068:tid 8092] [client 93.158.91.11:50911] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 31 19:06:08.029666 2025] [:error] [pid 48833:tid 48835] [client 94.247.172.129:16803] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVUDoGPnRNOqqZ1OQg_rOAAAAEA"]
[Wed Dec 31 19:39:02.891005 2025] [:error] [pid 8068:tid 8084] [client 43.130.102.223:50714] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVULViSVtzoWnijCxFZbLwAAAc4"]
[Thu Jan 01 02:35:55.727214 2026] [autoindex:error] [pid 7800:tid 7820] [client 207.230.121.224:33473] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 02:55:29.011689 2026] [:error] [pid 7800:tid 7815] [client 43.131.243.61:58864] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVVxoSN6RFoECeReAPWiGgAAAYw"]
[Thu Jan 01 04:46:04.647394 2026] [autoindex:error] [pid 58819:tid 58893] [client 66.249.64.15:58486] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 05:03:23.351919 2026] [:error] [pid 58818:tid 58860] [client 43.133.253.253:48570] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVWPm2r6b3Nsqkrqu83DJAAAAEc"]
[Thu Jan 01 05:22:38.340059 2026] [autoindex:error] [pid 58819:tid 58895] [client 100.25.198.201:22248] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 08:02:12.779103 2026] [:error] [pid 58817:tid 58836] [client 182.44.9.147:48355] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVW5hFebWGLeUWiwYf_yZQAAAAo"]
[Thu Jan 01 10:35:37.072624 2026] [autoindex:error] [pid 58370:tid 58387] [client 109.70.67.241:38375] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 11:02:40.205383 2026] [:error] [pid 58818:tid 58853] [client 43.135.142.7:48152] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVXj0Gr6b3Nsqkrqu80auwAAAEA"]
[Thu Jan 01 11:29:29.236742 2026] [autoindex:error] [pid 58817:tid 58835] [client 44.246.37.33:38180] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 11:29:34.592949 2026] [autoindex:error] [pid 58370:tid 58381] [client 44.246.37.33:38190] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 12:40:28.631814 2026] [autoindex:error] [pid 58819:tid 58895] [client 66.249.64.2:40270] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 12:42:18.613453 2026] [:error] [pid 58817:tid 58849] [client 43.167.157.80:54242] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVX7KlebWGLeUWiwYf8xXwAAABc"]
[Thu Jan 01 13:34:08.504082 2026] [autoindex:error] [pid 58370:tid 58378] [client 157.230.99.27:55056] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 13:34:10.124697 2026] [autoindex:error] [pid 54016:tid 54023] [client 157.230.99.27:55560] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 16:08:49.707732 2026] [autoindex:error] [pid 26613:tid 26637] [client 51.68.111.205:36381] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 17:44:11.352541 2026] [autoindex:error] [pid 26613:tid 26639] [client 54.167.192.157:53404] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 17:44:11.758007 2026] [autoindex:error] [pid 26613:tid 26623] [client 54.167.192.157:58250] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 18:13:44.998213 2026] [:error] [pid 26614:tid 26673] [client 43.155.195.141:42022] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVZI2Bdl23_Mbe-Eo9hLSQAAAJU"]
[Thu Jan 01 19:55:37.728911 2026] [:error] [pid 63887:tid 63894] [client 170.106.113.235:52208] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVZguTYeTZeQR8aqQeVgIwAAAEM"]
[Thu Jan 01 20:11:01.736926 2026] [autoindex:error] [pid 995:tid 1015] [client 74.7.227.166:53502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 20:20:34.466267 2026] [autoindex:error] [pid 63889:tid 63969] [client 134.199.93.156:43121] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 20:21:29.808144 2026] [autoindex:error] [pid 995:tid 1018] [client 66.249.64.7:42943] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 20:25:14.796457 2026] [:error] [pid 995:tid 1004] [client 208.115.224.167:50715] [client 208.115.224.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.167, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aVZnqmJVFefxwdkvFzjm1gAAAQY"]
[Thu Jan 01 20:25:14.806968 2026] [proxy_fcgi:error] [pid 995:tid 1004] [client 208.115.224.167:50715] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 20:30:37.850080 2026] [:error] [pid 63888:tid 63931] [client 122.171.23.23:26692] [client 122.171.23.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.171.23.23, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVZo7doJ3YkVCYrOT1wMygAAAIw"]
[Thu Jan 01 20:30:37.862342 2026] [proxy_fcgi:error] [pid 63888:tid 63931] [client 122.171.23.23:26692] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 20:37:55.334837 2026] [autoindex:error] [pid 63887:tid 63905] [client 192.36.53.210:44021] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 20:40:37.884429 2026] [autoindex:error] [pid 995:tid 1019] [client 74.7.227.178:49358] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 21:12:48.799188 2026] [autoindex:error] [pid 63981:tid 63997] [client 35.94.208.217:52636] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 21:12:53.976162 2026] [autoindex:error] [pid 995:tid 1018] [client 35.94.208.217:35800] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 23:56:15.723749 2026] [autoindex:error] [pid 63888:tid 63927] [client 34.211.55.192:49592] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 01 23:56:32.934184 2026] [autoindex:error] [pid 63887:tid 63896] [client 121.127.34.106:56173] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 00:52:36.076343 2026] [:error] [pid 51579:tid 51597] [client 154.26.129.117:58367] [client 154.26.129.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVamVEQ-wUxlj5k_dbmdbQAAABA"]
[Fri Jan 02 01:42:57.455018 2026] [autoindex:error] [pid 19495:tid 19520] [client 34.78.36.141:56498] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 01:43:18.223038 2026] [autoindex:error] [pid 19495:tid 19507] [client 34.78.36.141:56812] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 03:04:47.344000 2026] [:error] [pid 19496:tid 19535] [client 43.155.162.41:51752] [client 43.155.162.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVbFT2M9BBPu2JyEzYsiTgAAAIc"]
[Fri Jan 02 03:51:57.600665 2026] [autoindex:error] [pid 63100:tid 63182] [client 192.3.138.29:53494] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 04:48:09.035459 2026] [autoindex:error] [pid 63099:tid 63154] [client 100.25.198.201:7473] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 05:03:42.119305 2026] [proxy_fcgi:error] [pid 63100:tid 63168] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.140232 2026] [proxy_fcgi:error] [pid 63100:tid 63162] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 05:03:42.158851 2026] [proxy_fcgi:error] [pid 63100:tid 63173] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.177119 2026] [proxy_fcgi:error] [pid 63100:tid 63165] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 05:03:42.196093 2026] [proxy_fcgi:error] [pid 63100:tid 63167] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Jan 02 05:03:42.214838 2026] [proxy_fcgi:error] [pid 63100:tid 63161] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.310971 2026] [proxy_fcgi:error] [pid 63100:tid 63178] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 05:03:42.328788 2026] [proxy_fcgi:error] [pid 63100:tid 63180] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 05:03:42.348381 2026] [proxy_fcgi:error] [pid 63100:tid 63172] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.367364 2026] [proxy_fcgi:error] [pid 63100:tid 63174] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 05:03:42.386192 2026] [proxy_fcgi:error] [pid 63100:tid 63171] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.405182 2026] [proxy_fcgi:error] [pid 63100:tid 63177] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Fri Jan 02 05:03:42.423103 2026] [proxy_fcgi:error] [pid 63100:tid 63182] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Jan 02 05:03:42.441750 2026] [proxy_fcgi:error] [pid 63100:tid 63166] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 05:03:42.459948 2026] [proxy_fcgi:error] [pid 63100:tid 63184] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.478737 2026] [proxy_fcgi:error] [pid 63100:tid 63176] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Jan 02 05:03:42.497147 2026] [proxy_fcgi:error] [pid 63100:tid 63183] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 05:03:42.515214 2026] [proxy_fcgi:error] [pid 63100:tid 63163] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.534731 2026] [proxy_fcgi:error] [pid 63100:tid 63170] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 05:03:42.554587 2026] [proxy_fcgi:error] [pid 63100:tid 63185] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 05:03:42.573638 2026] [proxy_fcgi:error] [pid 63100:tid 63168] [client 4.197.176.45:10212] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Fri Jan 02 05:03:42.735446 2026] [:error] [pid 63100:tid 63181] [client 4.197.176.45:10212] [client 4.197.176.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVbhLjuUXUKd3KTnKl-DswAAAJQ"], referer: https://duckduckgo.com/
[Fri Jan 02 05:03:42.769385 2026] [:error] [pid 63100:tid 63172] [client 4.197.176.45:10219] [client 4.197.176.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVbhLjuUXUKd3KTnKl-DtAAAAIs"], referer: https://www.google.co.uk/
[Fri Jan 02 05:03:42.802150 2026] [:error] [pid 63100:tid 63177] [client 4.197.176.45:10225] [client 4.197.176.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVbhLjuUXUKd3KTnKl-DtQAAAJA"], referer: https://www.bing.com/
[Fri Jan 02 05:03:42.832456 2026] [:error] [pid 63099:tid 63141] [client 4.197.176.45:10190] [client 4.197.176.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVbhLsmCZokRPYUhzvgFLAAAAEc"], referer: https://www.google.com/
[Fri Jan 02 05:03:42.887124 2026] [:error] [pid 63100:tid 63176] [client 4.197.176.45:10129] [client 4.197.176.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVbhLjuUXUKd3KTnKl-DtwAAAI8"], referer: https://duckduckgo.com/
[Fri Jan 02 05:03:42.922161 2026] [proxy_fcgi:error] [pid 63100:tid 63170] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 05:03:42.959222 2026] [proxy_fcgi:error] [pid 63100:tid 63168] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 05:03:42.977644 2026] [proxy_fcgi:error] [pid 63100:tid 63162] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 05:03:42.996414 2026] [proxy_fcgi:error] [pid 63100:tid 63173] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Jan 02 05:03:43.015311 2026] [proxy_fcgi:error] [pid 63100:tid 63165] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 05:03:43.032487 2026] [proxy_fcgi:error] [pid 63100:tid 63167] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 05:03:43.051132 2026] [proxy_fcgi:error] [pid 63100:tid 63161] [client 4.197.176.45:10126] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 05:06:10.652823 2026] [autoindex:error] [pid 63099:tid 63142] [client 100.24.208.151:21053] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 05:06:11.139046 2026] [autoindex:error] [pid 63099:tid 63140] [client 100.24.208.151:24377] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 06:09:59.806473 2026] [autoindex:error] [pid 63100:tid 63168] [client 54.149.211.69:60476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 06:10:06.838472 2026] [autoindex:error] [pid 63098:tid 63121] [client 54.149.211.69:60488] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 08:22:16.780514 2026] [proxy_fcgi:error] [pid 63098:tid 63127] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 08:22:16.871702 2026] [proxy_fcgi:error] [pid 63098:tid 63122] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 08:22:16.962905 2026] [proxy_fcgi:error] [pid 63098:tid 63115] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:17.054950 2026] [proxy_fcgi:error] [pid 63098:tid 63123] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 08:22:17.146942 2026] [proxy_fcgi:error] [pid 63098:tid 63125] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Jan 02 08:22:17.238211 2026] [proxy_fcgi:error] [pid 63098:tid 63109] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Jan 02 08:22:18.702911 2026] [proxy_fcgi:error] [pid 63098:tid 63120] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Jan 02 08:22:18.794295 2026] [proxy_fcgi:error] [pid 63098:tid 63124] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 08:22:18.885469 2026] [proxy_fcgi:error] [pid 63098:tid 63108] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 08:22:18.979120 2026] [proxy_fcgi:error] [pid 63098:tid 63130] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:19.075946 2026] [proxy_fcgi:error] [pid 63098:tid 63119] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Jan 02 08:22:19.166473 2026] [proxy_fcgi:error] [pid 63098:tid 63131] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:19.257662 2026] [proxy_fcgi:error] [pid 63098:tid 63128] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:19.348802 2026] [proxy_fcgi:error] [pid 63098:tid 63127] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Jan 02 08:22:19.439928 2026] [proxy_fcgi:error] [pid 63098:tid 63122] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 08:22:19.532053 2026] [proxy_fcgi:error] [pid 63098:tid 63126] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 08:22:19.623244 2026] [proxy_fcgi:error] [pid 63098:tid 63115] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:19.716483 2026] [proxy_fcgi:error] [pid 63098:tid 63123] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Fri Jan 02 08:22:19.810904 2026] [proxy_fcgi:error] [pid 63098:tid 63110] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:19.902831 2026] [proxy_fcgi:error] [pid 63098:tid 63116] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 08:22:19.995540 2026] [proxy_fcgi:error] [pid 63098:tid 63125] [client 4.193.190.39:19240] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Jan 02 08:22:20.811218 2026] [:error] [pid 63098:tid 63113] [client 4.193.190.39:19240] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVcPvMez9k78gUs48krI9QAAAAY"], referer: https://www.google.co.uk/
[Fri Jan 02 08:22:20.986272 2026] [:error] [pid 63099:tid 63157] [client 4.193.190.39:19214] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVcPvMmCZokRPYUhzvhMewAAAFc"], referer: https://www.google.com/
[Fri Jan 02 08:22:21.161382 2026] [:error] [pid 63100:tid 63179] [client 4.193.190.39:19075] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVcPvTuUXUKd3KTnKl_V-AAAAJI"], referer: https://www.google.com/
[Fri Jan 02 08:22:21.336491 2026] [:error] [pid 63100:tid 63161] [client 4.193.190.39:19078] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVcPvTuUXUKd3KTnKl_V-QAAAIA"], referer: https://www.google.fr/
[Fri Jan 02 08:22:21.602389 2026] [:error] [pid 63099:tid 63145] [client 4.193.190.39:19247] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVcPvcmCZokRPYUhzvhMfgAAAEs"], referer: https://www.google.co.uk/
[Fri Jan 02 08:22:21.781141 2026] [proxy_fcgi:error] [pid 63098:tid 63124] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 08:22:21.961767 2026] [proxy_fcgi:error] [pid 63098:tid 63119] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Jan 02 08:22:22.053163 2026] [proxy_fcgi:error] [pid 63098:tid 63131] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Jan 02 08:22:22.144378 2026] [proxy_fcgi:error] [pid 63098:tid 63128] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Jan 02 08:22:22.236013 2026] [proxy_fcgi:error] [pid 63098:tid 63127] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Jan 02 08:22:22.328715 2026] [proxy_fcgi:error] [pid 63098:tid 63122] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Jan 02 08:22:22.419765 2026] [proxy_fcgi:error] [pid 63098:tid 63126] [client 4.193.190.39:19213] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Fri Jan 02 13:14:39.255100 2026] [autoindex:error] [pid 43358:tid 43369] [client 44.244.238.97:56080] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 13:15:09.401787 2026] [autoindex:error] [pid 29316:tid 29326] [client 44.244.238.97:60306] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 14:14:52.576192 2026] [autoindex:error] [pid 43358:tid 43379] [client 44.211.61.224:38162] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 15:11:18.169272 2026] [:error] [pid 29316:tid 29327] [client 49.234.192.248:51180] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVdvltfT9ty-7jZmgf9vrQAAAQk"]
[Fri Jan 02 16:56:19.001658 2026] [autoindex:error] [pid 29316:tid 29337] [client 35.224.164.48:15360] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 21:42:34.175072 2026] [:error] [pid 29316:tid 29322] [client 182.42.111.156:37935] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVfLStfT9ty-7jZmgf-34gAAAQQ"]
[Fri Jan 02 21:56:35.297044 2026] [autoindex:error] [pid 29316:tid 29320] [client 62.141.44.236:44510] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 23:01:04.377156 2026] [autoindex:error] [pid 50186:tid 50193] [client 51.68.236.87:17029] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:00:14.265787 2026] [autoindex:error] [pid 24749:tid 24759] [client 23.95.96.140:37666] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:20:48.945734 2026] [autoindex:error] [pid 24749:tid 24758] [client 66.249.64.7:61611] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:20:49.034939 2026] [autoindex:error] [pid 24749:tid 24753] [client 66.249.64.8:37826] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 02:35:29.574918 2026] [autoindex:error] [pid 24749:tid 24765] [client 181.214.218.150:4724] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 03 02:35:30.325336 2026] [autoindex:error] [pid 47234:tid 47246] [client 181.214.218.150:4816] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 03 02:35:31.280027 2026] [autoindex:error] [pid 24659:tid 24678] [client 192.73.244.36:60978] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 03 02:35:32.887595 2026] [autoindex:error] [pid 24661:tid 24724] [client 195.158.8.123:54706] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 03 02:35:34.128674 2026] [autoindex:error] [pid 24661:tid 24722] [client 195.158.8.123:37865] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 03 02:35:35.334610 2026] [autoindex:error] [pid 24661:tid 24733] [client 195.158.8.123:58708] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 03 02:37:43.523033 2026] [autoindex:error] [pid 24659:tid 24665] [client 192.36.109.94:41061] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 03:45:21.234086 2026] [proxy_fcgi:error] [pid 1929:tid 1950] [client 4.190.155.45:20716] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Jan 03 03:45:21.245050 2026] [autoindex:error] [pid 1929:tid 1945] [client 4.190.155.45:20678] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 03:45:21.362661 2026] [proxy_fcgi:error] [pid 1929:tid 1953] [client 4.190.155.45:20716] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Jan 03 03:45:23.837793 2026] [proxy_fcgi:error] [pid 1930:tid 1978] [client 4.190.155.45:18243] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Jan 03 03:45:23.964926 2026] [proxy_fcgi:error] [pid 1930:tid 1981] [client 4.190.155.45:18243] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Jan 03 09:07:58.722419 2026] [autoindex:error] [pid 1930:tid 1976] [client 80.76.49.105:51043] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 09:37:13.830470 2026] [autoindex:error] [pid 34260:tid 34267] [client 35.208.73.44:60022] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 14:09:37.396116 2026] [:error] [pid 1930:tid 1980] [client 43.159.135.203:55922] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aViyoZP-6mqhfUDa89x_QgAAAE4"]
[Sat Jan 03 20:14:08.170252 2026] [autoindex:error] [pid 1930:tid 1972] [client 66.249.64.9:49645] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 22:05:09.020645 2026] [proxy_fcgi:error] [pid 31222:tid 31231] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.146736 2026] [proxy_fcgi:error] [pid 31222:tid 31229] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.283825 2026] [proxy_fcgi:error] [pid 31222:tid 31226] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.401436 2026] [proxy_fcgi:error] [pid 31222:tid 31234] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.518949 2026] [proxy_fcgi:error] [pid 31222:tid 31239] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.646534 2026] [proxy_fcgi:error] [pid 31222:tid 31245] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.806134 2026] [proxy_fcgi:error] [pid 31222:tid 31241] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:09.922715 2026] [proxy_fcgi:error] [pid 31222:tid 31233] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:10.043139 2026] [proxy_fcgi:error] [pid 31222:tid 31224] [client 4.241.233.134:65516] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:05:10.156130 2026] [:error] [pid 31222:tid 31237] [client 4.241.233.134:65516] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVkiFqHw6nASHXAc2v_wdgAAAc0"]
[Sat Jan 03 22:05:10.484121 2026] [:error] [pid 34260:tid 34279] [client 4.241.233.134:65500] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVkiFkWWhyvZ0O9KNVQsigAAARE"]
[Sat Jan 03 22:05:10.816729 2026] [:error] [pid 1929:tid 1962] [client 4.241.233.134:65480] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVkiFucFqdpu6TNsuWr2tAAAABg"]
[Sat Jan 03 22:05:11.090521 2026] [:error] [pid 2083:tid 2101] [client 4.241.233.134:65419] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVkiFzVlR_BmlMPnhV4h0wAAANA"]
[Sat Jan 03 22:05:11.324232 2026] [:error] [pid 1931:tid 2037] [client 4.241.233.134:65491] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aVkiFx8Tyw7ZoIdXlcYLSwAAAI0"]
[Sat Jan 03 22:05:11.551028 2026] [:error] [pid 1931:tid 2048] [client 4.241.233.134:65442] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aVkiFx8Tyw7ZoIdXlcYLTAAAAJg"]
[Sat Jan 03 22:05:11.817052 2026] [:error] [pid 1930:tid 1974] [client 4.241.233.134:65517] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aVkiF5P-6mqhfUDa89ztNQAAAEg"]
[Sat Jan 03 22:05:12.162475 2026] [:error] [pid 1929:tid 1949] [client 4.241.233.134:65506] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aVkiGOcFqdpu6TNsuWr2tQAAAAs"]
[Sat Jan 03 22:05:12.405313 2026] [:error] [pid 34260:tid 34281] [client 4.241.233.134:65505] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aVkiGEWWhyvZ0O9KNVQsjQAAARM"]
[Sat Jan 03 22:05:12.658986 2026] [:error] [pid 1929:tid 1961] [client 4.241.233.134:65504] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aVkiGOcFqdpu6TNsuWr2tgAAABc"]
[Sat Jan 03 22:05:12.935310 2026] [:error] [pid 34260:tid 34275] [client 4.241.233.134:65411] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aVkiGEWWhyvZ0O9KNVQsjwAAAQ0"]
[Sat Jan 03 22:05:13.322783 2026] [:error] [pid 1929:tid 1951] [client 4.241.233.134:65499] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aVkiGecFqdpu6TNsuWr2uAAAAA0"]
[Sat Jan 03 22:05:13.600014 2026] [:error] [pid 1929:tid 1960] [client 4.241.233.134:65475] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVkiGecFqdpu6TNsuWr2uQAAABY"]
[Sat Jan 03 22:05:13.872591 2026] [:error] [pid 1931:tid 2036] [client 4.241.233.134:65422] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVkiGR8Tyw7ZoIdXlcYLTgAAAIw"]
[Sat Jan 03 22:05:14.192242 2026] [:error] [pid 1931:tid 2027] [client 4.241.233.134:65435] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVkiGh8Tyw7ZoIdXlcYLUAAAAIQ"]
[Sat Jan 03 22:05:14.485082 2026] [:error] [pid 1931:tid 2045] [client 4.241.233.134:65453] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVkiGh8Tyw7ZoIdXlcYLUQAAAJU"]
[Sat Jan 03 22:05:14.770503 2026] [:error] [pid 1931:tid 2033] [client 4.241.233.134:65523] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiGh8Tyw7ZoIdXlcYLUwAAAIk"]
[Sat Jan 03 22:05:15.114048 2026] [:error] [pid 1931:tid 2042] [client 4.241.233.134:65508] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiGx8Tyw7ZoIdXlcYLVQAAAJI"]
[Sat Jan 03 22:05:15.473819 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:65498] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiGx8Tyw7ZoIdXlcYLVgAAAIE"]
[Sat Jan 03 22:05:15.733074 2026] [:error] [pid 1931:tid 2044] [client 4.241.233.134:65473] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiGx8Tyw7ZoIdXlcYLVwAAAJQ"]
[Sat Jan 03 22:05:16.002670 2026] [:error] [pid 1931:tid 2041] [client 4.241.233.134:65514] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aVkiHB8Tyw7ZoIdXlcYLWAAAAJE"]
[Sat Jan 03 22:05:16.235109 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:65437] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aVkiHB8Tyw7ZoIdXlcYLWQAAAJM"]
[Sat Jan 03 22:05:16.486627 2026] [:error] [pid 19639:tid 19643] [client 4.241.233.134:65487] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aVkiHCQ7fWZUytnlHEwFwwAAAUI"]
[Sat Jan 03 22:05:16.764280 2026] [:error] [pid 2083:tid 2106] [client 4.241.233.134:65460] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs.php"] [unique_id "aVkiHDVlR_BmlMPnhV4h1QAAANU"]
[Sat Jan 03 22:05:17.059024 2026] [:error] [pid 2083:tid 2088] [client 4.241.233.134:65486] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aVkiHTVlR_BmlMPnhV4h1gAAAMM"]
[Sat Jan 03 22:05:17.319051 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:65444] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aVkiHR8Tyw7ZoIdXlcYLWwAAAII"]
[Sat Jan 03 22:05:17.585448 2026] [:error] [pid 1931:tid 2034] [client 4.241.233.134:65409] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aVkiHR8Tyw7ZoIdXlcYLXAAAAIo"]
[Sat Jan 03 22:05:17.830458 2026] [:error] [pid 2083:tid 2096] [client 4.241.233.134:65501] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cord.php"] [unique_id "aVkiHTVlR_BmlMPnhV4h1wAAAMs"]
[Sat Jan 03 22:05:18.099161 2026] [:error] [pid 2083:tid 2098] [client 4.241.233.134:65492] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aVkiHjVlR_BmlMPnhV4h2AAAAM0"]
[Sat Jan 03 22:05:18.414268 2026] [:error] [pid 1931:tid 2032] [client 4.241.233.134:65414] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aVkiHh8Tyw7ZoIdXlcYLXQAAAIg"]
[Sat Jan 03 22:05:18.797741 2026] [:error] [pid 31630:tid 31646] [client 4.241.233.134:65510] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aVkiHvUV_PU2SWgLPuhowwAAAY4"]
[Sat Jan 03 22:05:19.102364 2026] [:error] [pid 1929:tid 1946] [client 4.241.233.134:65527] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aVkiH-cFqdpu6TNsuWr2vAAAAAg"]
[Sat Jan 03 22:05:19.418812 2026] [:error] [pid 34260:tid 34282] [client 4.241.233.134:65502] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aVkiH0WWhyvZ0O9KNVQskgAAARQ"]
[Sat Jan 03 22:05:19.721974 2026] [:error] [pid 2083:tid 2102] [client 4.241.233.134:65503] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aVkiHzVlR_BmlMPnhV4h2QAAANE"]
[Sat Jan 03 22:05:20.107993 2026] [:error] [pid 34260:tid 34285] [client 4.241.233.134:11217] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aVkiIEWWhyvZ0O9KNVQskwAAARc"]
[Sat Jan 03 22:05:20.353993 2026] [:error] [pid 2083:tid 2100] [client 4.241.233.134:65513] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mail.php"] [unique_id "aVkiIDVlR_BmlMPnhV4h2gAAAM8"]
[Sat Jan 03 22:05:20.702237 2026] [:error] [pid 1929:tid 1939] [client 4.241.233.134:65424] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aVkiIOcFqdpu6TNsuWr2vQAAAAE"]
[Sat Jan 03 22:05:20.980839 2026] [:error] [pid 1929:tid 1955] [client 4.241.233.134:65420] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aVkiIOcFqdpu6TNsuWr2vgAAABE"]
[Sat Jan 03 22:05:21.267511 2026] [:error] [pid 2083:tid 2109] [client 4.241.233.134:65412] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aVkiITVlR_BmlMPnhV4h2wAAANg"]
[Sat Jan 03 22:05:21.541540 2026] [:error] [pid 1929:tid 1947] [client 4.241.233.134:65524] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/minik.php"] [unique_id "aVkiIecFqdpu6TNsuWr2wAAAAAk"]
[Sat Jan 03 22:05:21.794374 2026] [:error] [pid 31222:tid 31236] [client 4.241.233.134:11207] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aVkiIaHw6nASHXAc2v_weAAAAcw"]
[Sat Jan 03 22:05:22.123127 2026] [:error] [pid 2083:tid 2103] [client 4.241.233.134:65520] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aVkiIjVlR_BmlMPnhV4h3AAAANI"]
[Sat Jan 03 22:05:22.487222 2026] [:error] [pid 2083:tid 2085] [client 4.241.233.134:11260] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aVkiIjVlR_BmlMPnhV4h3QAAAMA"]
[Sat Jan 03 22:05:22.818630 2026] [:error] [pid 34260:tid 34274] [client 4.241.233.134:65429] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/OK.php"] [unique_id "aVkiIkWWhyvZ0O9KNVQslAAAAQw"]
[Sat Jan 03 22:05:23.086981 2026] [:error] [pid 2083:tid 2091] [client 4.241.233.134:65449] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aVkiIzVlR_BmlMPnhV4h3gAAAMY"]
[Sat Jan 03 22:05:23.399998 2026] [:error] [pid 1929:tid 1944] [client 4.241.233.134:65463] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aVkiI-cFqdpu6TNsuWr2wgAAAAY"]
[Sat Jan 03 22:05:23.670223 2026] [:error] [pid 1929:tid 1954] [client 4.241.233.134:65428] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aVkiI-cFqdpu6TNsuWr2wwAAABA"]
[Sat Jan 03 22:05:24.031250 2026] [:error] [pid 2083:tid 2108] [client 4.241.233.134:65416] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php"] [unique_id "aVkiJDVlR_BmlMPnhV4h3wAAANc"]
[Sat Jan 03 22:05:24.598034 2026] [:error] [pid 1929:tid 1941] [client 4.241.233.134:65413] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aVkiJOcFqdpu6TNsuWr2xQAAAAM"]
[Sat Jan 03 22:05:24.913599 2026] [:error] [pid 34260:tid 34277] [client 4.241.233.134:65509] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aVkiJEWWhyvZ0O9KNVQslgAAAQ8"]
[Sat Jan 03 22:05:25.307828 2026] [:error] [pid 34260:tid 34272] [client 4.241.233.134:65432] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aVkiJUWWhyvZ0O9KNVQslwAAAQo"]
[Sat Jan 03 22:05:25.611759 2026] [:error] [pid 1929:tid 1958] [client 4.241.233.134:65496] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zsec.php"] [unique_id "aVkiJecFqdpu6TNsuWr2xgAAABQ"]
[Sat Jan 03 22:05:26.014471 2026] [:error] [pid 34260:tid 34284] [client 4.241.233.134:11220] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aVkiJkWWhyvZ0O9KNVQsmAAAARY"]
[Sat Jan 03 22:05:26.395221 2026] [:error] [pid 2083:tid 2097] [client 4.241.233.134:65526] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aVkiJjVlR_BmlMPnhV4h4QAAAMw"]
[Sat Jan 03 22:05:26.641219 2026] [:error] [pid 2083:tid 2104] [client 4.241.233.134:65462] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aVkiJjVlR_BmlMPnhV4h4gAAANM"]
[Sat Jan 03 22:05:26.976986 2026] [:error] [pid 2083:tid 2099] [client 4.241.233.134:65469] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/arig.php"] [unique_id "aVkiJjVlR_BmlMPnhV4h4wAAAM4"]
[Sat Jan 03 22:05:27.399774 2026] [:error] [pid 2083:tid 2090] [client 4.241.233.134:65408] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aVkiJzVlR_BmlMPnhV4h5AAAAMU"]
[Sat Jan 03 22:05:27.735346 2026] [:error] [pid 2083:tid 2095] [client 4.241.233.134:11221] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aVkiJzVlR_BmlMPnhV4h5QAAAMo"]
[Sat Jan 03 22:05:28.034708 2026] [:error] [pid 34260:tid 34273] [client 4.241.233.134:11241] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aVkiKEWWhyvZ0O9KNVQsmQAAAQs"]
[Sat Jan 03 22:05:28.411263 2026] [:error] [pid 2083:tid 2087] [client 4.241.233.134:65479] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin1.php"] [unique_id "aVkiKDVlR_BmlMPnhV4h5gAAAMI"]
[Sat Jan 03 22:05:28.742432 2026] [:error] [pid 31222:tid 31232] [client 4.241.233.134:65415] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aVkiKKHw6nASHXAc2v_wegAAAcg"]
[Sat Jan 03 22:05:29.095761 2026] [:error] [pid 1930:tid 1979] [client 4.241.233.134:65485] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aVkiKZP-6mqhfUDa89ztNgAAAE0"]
[Sat Jan 03 22:05:29.360739 2026] [:error] [pid 1929:tid 1962] [client 4.241.233.134:65447] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aVkiKecFqdpu6TNsuWr2yQAAABg"]
[Sat Jan 03 22:05:29.604016 2026] [:error] [pid 2083:tid 2092] [client 4.241.233.134:11208] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aVkiKTVlR_BmlMPnhV4h6AAAAMc"]
[Sat Jan 03 22:05:29.866380 2026] [:error] [pid 2083:tid 2094] [client 4.241.233.134:65477] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aVkiKTVlR_BmlMPnhV4h6QAAAMk"]
[Sat Jan 03 22:05:30.106639 2026] [:error] [pid 2083:tid 2101] [client 4.241.233.134:11232] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aVkiKjVlR_BmlMPnhV4h6gAAANA"]
[Sat Jan 03 22:05:30.415986 2026] [:error] [pid 1929:tid 1949] [client 4.241.233.134:65476] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aVkiKucFqdpu6TNsuWr2ywAAAAs"]
[Sat Jan 03 22:05:30.679214 2026] [:error] [pid 2083:tid 2086] [client 4.241.233.134:65472] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/af32.php"] [unique_id "aVkiKjVlR_BmlMPnhV4h6wAAAME"]
[Sat Jan 03 22:05:30.942515 2026] [:error] [pid 31222:tid 31244] [client 4.241.233.134:11212] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aVkiKqHw6nASHXAc2v_wfAAAAdQ"]
[Sat Jan 03 22:05:31.215905 2026] [:error] [pid 1930:tid 1978] [client 4.241.233.134:65483] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aVkiK5P-6mqhfUDa89ztNwAAAEw"]
[Sat Jan 03 22:05:31.497339 2026] [:error] [pid 2083:tid 2106] [client 4.241.233.134:65518] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aVkiKzVlR_BmlMPnhV4h7QAAANU"]
[Sat Jan 03 22:05:31.851494 2026] [:error] [pid 2083:tid 2088] [client 4.241.233.134:65417] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rz.php"] [unique_id "aVkiKzVlR_BmlMPnhV4h7gAAAMM"]
[Sat Jan 03 22:05:32.138434 2026] [:error] [pid 2083:tid 2096] [client 4.241.233.134:11239] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aVkiLDVlR_BmlMPnhV4h7wAAAMs"]
[Sat Jan 03 22:05:32.426142 2026] [:error] [pid 2083:tid 2098] [client 4.241.233.134:65519] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aVkiLDVlR_BmlMPnhV4h8AAAAM0"]
[Sat Jan 03 22:05:32.843049 2026] [:error] [pid 2083:tid 2105] [client 4.241.233.134:65459] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aVkiLDVlR_BmlMPnhV4h8QAAANQ"]
[Sat Jan 03 22:05:33.214779 2026] [:error] [pid 2083:tid 2103] [client 4.241.233.134:65468] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hugo.php"] [unique_id "aVkiLTVlR_BmlMPnhV4h9AAAANI"]
[Sat Jan 03 22:05:33.549452 2026] [:error] [pid 19639:tid 19658] [client 4.241.233.134:65436] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aVkiLSQ7fWZUytnlHEwFxQAAAVE"]
[Sat Jan 03 22:05:33.918386 2026] [:error] [pid 31222:tid 31231] [client 4.241.233.134:65446] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aVkiLaHw6nASHXAc2v_wfgAAAcc"]
[Sat Jan 03 22:05:34.169975 2026] [:error] [pid 1931:tid 2048] [client 4.241.233.134:11253] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aVkiLh8Tyw7ZoIdXlcYLXwAAAJg"]
[Sat Jan 03 22:05:34.541184 2026] [:error] [pid 1931:tid 2029] [client 4.241.233.134:65489] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aVkiLh8Tyw7ZoIdXlcYLYAAAAIU"]
[Sat Jan 03 22:05:34.947532 2026] [:error] [pid 31222:tid 31226] [client 4.241.233.134:11143] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aVkiLqHw6nASHXAc2v_wfwAAAcI"]
[Sat Jan 03 22:05:35.279752 2026] [:error] [pid 1929:tid 1951] [client 4.241.233.134:65431] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aVkiL-cFqdpu6TNsuWr2zQAAAA0"]
[Sat Jan 03 22:05:35.545452 2026] [:error] [pid 1931:tid 2030] [client 4.241.233.134:11226] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aVkiLx8Tyw7ZoIdXlcYLYQAAAIY"]
[Sat Jan 03 22:05:35.784130 2026] [:error] [pid 34260:tid 34281] [client 4.241.233.134:65522] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lzyrj.php"] [unique_id "aVkiL0WWhyvZ0O9KNVQsmwAAARM"]
[Sat Jan 03 22:05:36.053939 2026] [:error] [pid 31222:tid 31246] [client 4.241.233.134:65484] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aVkiMKHw6nASHXAc2v_wgQAAAdY"]
[Sat Jan 03 22:05:36.336632 2026] [:error] [pid 31222:tid 31241] [client 4.241.233.134:11206] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aVkiMKHw6nASHXAc2v_wgwAAAdE"]
[Sat Jan 03 22:05:36.598482 2026] [:error] [pid 1931:tid 2038] [client 4.241.233.134:65474] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aVkiMB8Tyw7ZoIdXlcYLYgAAAI4"]
[Sat Jan 03 22:05:36.886854 2026] [:error] [pid 2083:tid 2104] [client 4.241.233.134:11230] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/laudq.php"] [unique_id "aVkiMDVlR_BmlMPnhV4h9wAAANM"]
[Sat Jan 03 22:05:37.249245 2026] [:error] [pid 2083:tid 2090] [client 4.241.233.134:11214] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aVkiMTVlR_BmlMPnhV4h-AAAAMU"]
[Sat Jan 03 22:05:37.502208 2026] [:error] [pid 34260:tid 34276] [client 4.241.233.134:11148] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aVkiMUWWhyvZ0O9KNVQsnQAAAQ4"]
[Sat Jan 03 22:05:37.747349 2026] [:error] [pid 1929:tid 1955] [client 4.241.233.134:65423] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aVkiMecFqdpu6TNsuWr2zwAAABE"]
[Sat Jan 03 22:05:38.166701 2026] [:error] [pid 34260:tid 34264] [client 4.241.233.134:11202] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/anjay.php"] [unique_id "aVkiMkWWhyvZ0O9KNVQsnwAAAQI"]
[Sat Jan 03 22:05:38.476084 2026] [:error] [pid 1929:tid 1947] [client 4.241.233.134:65511] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aVkiMucFqdpu6TNsuWr20AAAAAk"]
[Sat Jan 03 22:05:38.748513 2026] [:error] [pid 19639:tid 19665] [client 4.241.233.134:65451] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aVkiMiQ7fWZUytnlHEwFxgAAAVg"]
[Sat Jan 03 22:05:39.010053 2026] [:error] [pid 31222:tid 31224] [client 4.241.233.134:65515] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aVkiM6Hw6nASHXAc2v_whAAAAcA"]
[Sat Jan 03 22:05:39.417242 2026] [:error] [pid 31222:tid 31237] [client 4.241.233.134:11219] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/let.php"] [unique_id "aVkiM6Hw6nASHXAc2v_whQAAAc0"]
[Sat Jan 03 22:05:39.802546 2026] [:error] [pid 31222:tid 31225] [client 4.241.233.134:11229] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkiM6Hw6nASHXAc2v_whgAAAcE"]
[Sat Jan 03 22:05:40.351665 2026] [:error] [pid 2083:tid 2087] [client 4.241.233.134:65445] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkiNDVlR_BmlMPnhV4h-QAAAMI"]
[Sat Jan 03 22:05:40.720082 2026] [:error] [pid 2083:tid 2092] [client 4.241.233.134:65438] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkiNDVlR_BmlMPnhV4h-gAAAMc"]
[Sat Jan 03 22:05:41.027651 2026] [:error] [pid 2083:tid 2094] [client 4.241.233.134:11238] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkiNTVlR_BmlMPnhV4h-wAAAMk"]
[Sat Jan 03 22:05:41.299208 2026] [:error] [pid 31630:tid 31652] [client 4.241.233.134:11209] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkiNfUV_PU2SWgLPuhoyQAAAZQ"]
[Sat Jan 03 22:05:41.832603 2026] [:error] [pid 1929:tid 1956] [client 4.241.233.134:65458] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkiNecFqdpu6TNsuWr20QAAABI"]
[Sat Jan 03 22:05:42.174197 2026] [:error] [pid 1931:tid 2036] [client 4.241.233.134:11211] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkiNh8Tyw7ZoIdXlcYLZgAAAIw"]
[Sat Jan 03 22:05:42.811232 2026] [:error] [pid 1930:tid 1985] [client 4.241.233.134:11250] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkiNpP-6mqhfUDa89ztOQAAAFM"]
[Sat Jan 03 22:05:43.622931 2026] [:error] [pid 31222:tid 31235] [client 4.241.233.134:11215] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkiN6Hw6nASHXAc2v_wiwAAAcs"]
[Sat Jan 03 22:05:44.032760 2026] [:error] [pid 31222:tid 31232] [client 4.241.233.134:11248] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkiOKHw6nASHXAc2v_wjQAAAcg"]
[Sat Jan 03 22:05:44.377484 2026] [:error] [pid 31222:tid 31227] [client 4.241.233.134:11228] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkiOKHw6nASHXAc2v_wjgAAAcM"]
[Sat Jan 03 22:05:44.926424 2026] [:error] [pid 1930:tid 1969] [client 4.241.233.134:11197] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkiOJP-6mqhfUDa89ztOgAAAEM"]
[Sat Jan 03 22:05:45.623995 2026] [:error] [pid 31222:tid 31240] [client 4.241.233.134:65426] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aVkiOaHw6nASHXAc2v_wjwAAAdA"]
[Sat Jan 03 22:05:45.973608 2026] [:error] [pid 31222:tid 31244] [client 4.241.233.134:11244] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aVkiOaHw6nASHXAc2v_wkAAAAdQ"]
[Sat Jan 03 22:05:46.433194 2026] [:error] [pid 31222:tid 31243] [client 4.241.233.134:11201] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aVkiOqHw6nASHXAc2v_wkQAAAdM"]
[Sat Jan 03 22:05:46.818912 2026] [:error] [pid 1931:tid 2044] [client 4.241.233.134:65443] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aVkiOh8Tyw7ZoIdXlcYLZwAAAJQ"]
[Sat Jan 03 22:05:47.240587 2026] [:error] [pid 1929:tid 1953] [client 4.241.233.134:11158] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aVkiO-cFqdpu6TNsuWr21AAAAA8"]
[Sat Jan 03 22:05:47.630279 2026] [:error] [pid 31222:tid 31241] [client 4.241.233.134:65461] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aVkiO6Hw6nASHXAc2v_wkwAAAdE"]
[Sat Jan 03 22:05:48.054122 2026] [:error] [pid 31630:tid 31640] [client 4.241.233.134:11257] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aVkiPPUV_PU2SWgLPuhozwAAAYg"]
[Sat Jan 03 22:05:48.637386 2026] [:error] [pid 31222:tid 31225] [client 4.241.233.134:65450] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aVkiPKHw6nASHXAc2v_wmAAAAcE"]
[Sat Jan 03 22:05:49.091499 2026] [:error] [pid 1929:tid 1958] [client 4.241.233.134:65471] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aVkiPecFqdpu6TNsuWr21QAAABQ"]
[Sat Jan 03 22:05:49.442589 2026] [:error] [pid 1929:tid 1962] [client 4.241.233.134:65430] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aVkiPecFqdpu6TNsuWr21wAAABg"]
[Sat Jan 03 22:05:49.751767 2026] [:error] [pid 1929:tid 1949] [client 4.241.233.134:11245] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aVkiPecFqdpu6TNsuWr22AAAAAs"]
[Sat Jan 03 22:05:50.275980 2026] [:error] [pid 34260:tid 34274] [client 4.241.233.134:65421] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bs1.php"] [unique_id "aVkiPkWWhyvZ0O9KNVQsowAAAQw"]
[Sat Jan 03 22:05:50.565612 2026] [:error] [pid 31630:tid 31646] [client 4.241.233.134:11155] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aVkiPvUV_PU2SWgLPuho0gAAAY4"]
[Sat Jan 03 22:05:50.957374 2026] [:error] [pid 31630:tid 31648] [client 4.241.233.134:65495] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aVkiPvUV_PU2SWgLPuho0wAAAZA"]
[Sat Jan 03 22:05:51.335656 2026] [:error] [pid 31222:tid 31244] [client 4.241.233.134:11240] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aVkiP6Hw6nASHXAc2v_wngAAAdQ"]
[Sat Jan 03 22:05:51.718668 2026] [:error] [pid 31630:tid 31634] [client 4.241.233.134:11231] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cc.php"] [unique_id "aVkiP_UV_PU2SWgLPuho1gAAAYI"]
[Sat Jan 03 22:05:52.106348 2026] [:error] [pid 31630:tid 31638] [client 4.241.233.134:11222] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVkiQPUV_PU2SWgLPuho1wAAAYY"]
[Sat Jan 03 22:05:52.706083 2026] [:error] [pid 1930:tid 1980] [client 4.241.233.134:11233] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVkiQJP-6mqhfUDa89ztPAAAAE4"]
[Sat Jan 03 22:05:53.125711 2026] [:error] [pid 34260:tid 34272] [client 4.241.233.134:65507] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVkiQUWWhyvZ0O9KNVQspQAAAQo"]
[Sat Jan 03 22:05:53.589324 2026] [:error] [pid 34260:tid 34284] [client 4.241.233.134:65465] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aVkiQUWWhyvZ0O9KNVQspgAAARY"]
[Sat Jan 03 22:05:54.235138 2026] [:error] [pid 34260:tid 34279] [client 4.241.233.134:11242] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aVkiQkWWhyvZ0O9KNVQsqQAAARE"]
[Sat Jan 03 22:05:54.709142 2026] [:error] [pid 34260:tid 34266] [client 4.241.233.134:11074] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aVkiQkWWhyvZ0O9KNVQsqgAAAQQ"]
[Sat Jan 03 22:05:55.031969 2026] [:error] [pid 2083:tid 2088] [client 4.241.233.134:11223] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aVkiQzVlR_BmlMPnhV4h_QAAAMM"]
[Sat Jan 03 22:05:55.399435 2026] [:error] [pid 2083:tid 2096] [client 4.241.233.134:11200] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cloud.php"] [unique_id "aVkiQzVlR_BmlMPnhV4h_gAAAMs"]
[Sat Jan 03 22:05:55.741689 2026] [:error] [pid 2083:tid 2098] [client 4.241.233.134:11234] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiQzVlR_BmlMPnhV4h_wAAAM0"]
[Sat Jan 03 22:05:56.081436 2026] [:error] [pid 34260:tid 34283] [client 4.241.233.134:11137] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiREWWhyvZ0O9KNVQsqwAAARU"]
[Sat Jan 03 22:05:56.398578 2026] [:error] [pid 31222:tid 31245] [client 4.241.233.134:11243] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiRKHw6nASHXAc2v_wpAAAAdU"]
[Sat Jan 03 22:05:56.719485 2026] [:error] [pid 31222:tid 31224] [client 4.241.233.134:65456] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiRKHw6nASHXAc2v_wpQAAAcA"]
[Sat Jan 03 22:05:57.140388 2026] [:error] [pid 1930:tid 1987] [client 4.241.233.134:65470] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkiRZP-6mqhfUDa89ztPgAAAFU"]
[Sat Jan 03 22:05:57.536326 2026] [:error] [pid 19639:tid 19648] [client 4.241.233.134:11083] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkiRSQ7fWZUytnlHEwF0QAAAUc"]
[Sat Jan 03 22:05:57.841856 2026] [:error] [pid 19639:tid 19644] [client 4.241.233.134:65525] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkiRSQ7fWZUytnlHEwF0wAAAUM"]
[Sat Jan 03 22:05:58.107421 2026] [:error] [pid 19639:tid 19649] [client 4.241.233.134:65478] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkiRiQ7fWZUytnlHEwF1AAAAUg"]
[Sat Jan 03 22:05:58.347104 2026] [:error] [pid 1931:tid 2033] [client 4.241.233.134:65512] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVkiRh8Tyw7ZoIdXlcYLdgAAAIk"]
[Sat Jan 03 22:05:58.671958 2026] [:error] [pid 34260:tid 34276] [client 4.241.233.134:65427] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVkiRkWWhyvZ0O9KNVQsrQAAAQ4"]
[Sat Jan 03 22:05:58.992806 2026] [:error] [pid 34260:tid 34275] [client 4.241.233.134:11218] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVkiRkWWhyvZ0O9KNVQsrgAAAQ0"]
[Sat Jan 03 22:05:59.506408 2026] [:error] [pid 19639:tid 19660] [client 4.241.233.134:65441] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aVkiRyQ7fWZUytnlHEwF1gAAAVM"]
[Sat Jan 03 22:05:59.741441 2026] [:error] [pid 31222:tid 31227] [client 4.241.233.134:65439] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aVkiR6Hw6nASHXAc2v_wqQAAAcM"]
[Sat Jan 03 22:05:59.988016 2026] [:error] [pid 34260:tid 34265] [client 4.241.233.134:11167] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aVkiR0WWhyvZ0O9KNVQssAAAAQM"]
[Sat Jan 03 22:06:00.318837 2026] [:error] [pid 34260:tid 34268] [client 4.241.233.134:11213] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aVkiSEWWhyvZ0O9KNVQssQAAAQY"]
[Sat Jan 03 22:06:00.575625 2026] [:error] [pid 34260:tid 34286] [client 4.241.233.134:11166] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aVkiSEWWhyvZ0O9KNVQssgAAARg"]
[Sat Jan 03 22:06:00.921376 2026] [:error] [pid 31222:tid 31226] [client 4.241.233.134:11262] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkiSKHw6nASHXAc2v_wrQAAAcI"]
[Sat Jan 03 22:06:01.358054 2026] [:error] [pid 1931:tid 2047] [client 4.241.233.134:11149] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkiSR8Tyw7ZoIdXlcYLeQAAAJc"]
[Sat Jan 03 22:06:01.686370 2026] [:error] [pid 2083:tid 2102] [client 4.241.233.134:65452] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkiSTVlR_BmlMPnhV4iAQAAANE"]
[Sat Jan 03 22:06:01.970228 2026] [:error] [pid 1931:tid 1993] [client 4.241.233.134:65423] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkiSR8Tyw7ZoIdXlcYLewAAAIA"]
[Sat Jan 03 22:06:02.310633 2026] [:error] [pid 31222:tid 31229] [client 4.241.233.134:65488] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkiSqHw6nASHXAc2v_wrgAAAcU"]
[Sat Jan 03 22:06:02.750364 2026] [:error] [pid 1929:tid 1946] [client 4.241.233.134:11162] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkiSucFqdpu6TNsuWr23AAAAAg"]
[Sat Jan 03 22:06:03.079895 2026] [:error] [pid 1931:tid 2032] [client 4.241.233.134:11259] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkiSx8Tyw7ZoIdXlcYLgAAAAIg"]
[Sat Jan 03 22:06:03.731491 2026] [:error] [pid 34260:tid 34280] [client 4.241.233.134:11138] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkiS0WWhyvZ0O9KNVQstQAAARI"]
[Sat Jan 03 22:06:04.051484 2026] [:error] [pid 1930:tid 1971] [client 4.241.233.134:65448] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aVkiTJP-6mqhfUDa89ztPwAAAEU"]
[Sat Jan 03 22:06:04.390338 2026] [:error] [pid 2083:tid 2085] [client 4.241.233.134:65434] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aVkiTDVlR_BmlMPnhV4iBAAAAMA"]
[Sat Jan 03 22:06:04.759448 2026] [:error] [pid 34260:tid 34262] [client 4.241.233.134:65454] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aVkiTEWWhyvZ0O9KNVQsuAAAAQA"]
[Sat Jan 03 22:06:05.084323 2026] [:error] [pid 2083:tid 2091] [client 4.241.233.134:11258] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aVkiTTVlR_BmlMPnhV4iBQAAAMY"]
[Sat Jan 03 22:06:05.355194 2026] [:error] [pid 34260:tid 34263] [client 4.241.233.134:65418] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aVkiTUWWhyvZ0O9KNVQsugAAAQE"]
[Sat Jan 03 22:06:05.715809 2026] [:error] [pid 2083:tid 2108] [client 4.241.233.134:11144] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aVkiTTVlR_BmlMPnhV4iBwAAANc"]
[Sat Jan 03 22:06:06.034364 2026] [:error] [pid 34260:tid 34272] [client 4.241.233.134:65497] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aVkiTkWWhyvZ0O9KNVQsvAAAAQo"]
[Sat Jan 03 22:06:06.552312 2026] [:error] [pid 1931:tid 2048] [client 4.241.233.134:11153] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aVkiTh8Tyw7ZoIdXlcYLgQAAAJg"]
[Sat Jan 03 22:06:06.977230 2026] [:error] [pid 2083:tid 2097] [client 4.241.233.134:65455] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVkiTjVlR_BmlMPnhV4iCAAAAMw"]
[Sat Jan 03 22:06:07.324244 2026] [:error] [pid 34260:tid 34267] [client 4.241.233.134:11193] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVkiT0WWhyvZ0O9KNVQsvQAAAQU"]
[Sat Jan 03 22:06:07.615429 2026] [:error] [pid 1931:tid 2034] [client 4.241.233.134:11145] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVkiTx8Tyw7ZoIdXlcYLhAAAAIo"]
[Sat Jan 03 22:06:07.903200 2026] [:error] [pid 1931:tid 1999] [client 4.241.233.134:65494] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVkiTx8Tyw7ZoIdXlcYLhQAAAIM"]
[Sat Jan 03 22:06:08.446845 2026] [:error] [pid 2083:tid 2104] [client 4.241.233.134:65490] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkiUDVlR_BmlMPnhV4iCQAAANM"]
[Sat Jan 03 22:06:08.853861 2026] [:error] [pid 34260:tid 34273] [client 4.241.233.134:11081] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkiUEWWhyvZ0O9KNVQsvwAAAQs"]
[Sat Jan 03 22:06:09.122861 2026] [:error] [pid 19639:tid 19655] [client 4.241.233.134:11247] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkiUSQ7fWZUytnlHEwF1wAAAU4"]
[Sat Jan 03 22:06:09.435452 2026] [:error] [pid 31630:tid 31656] [client 4.241.233.134:11204] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkiUfUV_PU2SWgLPuho2wAAAZg"]
[Sat Jan 03 22:06:09.825292 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:11010] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aVkiUR8Tyw7ZoIdXlcYLiQAAAIE"]
[Sat Jan 03 22:06:10.276360 2026] [proxy_fcgi:error] [pid 1931:tid 2040] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:10.525081 2026] [proxy_fcgi:error] [pid 1931:tid 1996] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:10.642176 2026] [proxy_fcgi:error] [pid 1931:tid 2032] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:10.770888 2026] [proxy_fcgi:error] [pid 1931:tid 2039] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:10.887702 2026] [proxy_fcgi:error] [pid 1931:tid 2031] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:11.006990 2026] [proxy_fcgi:error] [pid 1931:tid 2043] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:11.165998 2026] [proxy_fcgi:error] [pid 1931:tid 2030] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:11.411902 2026] [proxy_fcgi:error] [pid 1931:tid 2027] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:11.537890 2026] [proxy_fcgi:error] [pid 1931:tid 1999] [client 4.241.233.134:11205] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:06:11.857590 2026] [:error] [pid 1931:tid 2047] [client 4.241.233.134:11205] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aVkiUx8Tyw7ZoIdXlcYLnAAAAJc"]
[Sat Jan 03 22:06:12.150794 2026] [:error] [pid 1931:tid 2035] [client 4.241.233.134:11261] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aVkiVB8Tyw7ZoIdXlcYLnQAAAIs"]
[Sat Jan 03 22:06:12.668891 2026] [:error] [pid 34260:tid 34275] [client 4.241.233.134:65433] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aVkiVEWWhyvZ0O9KNVQswwAAAQ0"]
[Sat Jan 03 22:06:13.158369 2026] [:error] [pid 34260:tid 34265] [client 4.241.233.134:65466] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aVkiVUWWhyvZ0O9KNVQsxQAAAQM"]
[Sat Jan 03 22:06:13.539476 2026] [:error] [pid 34260:tid 34268] [client 4.241.233.134:65425] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aVkiVUWWhyvZ0O9KNVQsxgAAAQY"]
[Sat Jan 03 22:06:13.882664 2026] [:error] [pid 1931:tid 2046] [client 4.241.233.134:11237] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aVkiVR8Tyw7ZoIdXlcYLnwAAAJY"]
[Sat Jan 03 22:06:14.235609 2026] [:error] [pid 19639:tid 19650] [client 4.241.233.134:11255] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aVkiViQ7fWZUytnlHEwF2gAAAUk"]
[Sat Jan 03 22:06:14.591440 2026] [:error] [pid 31222:tid 31246] [client 4.241.233.134:65440] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rss.php"] [unique_id "aVkiVqHw6nASHXAc2v_wsQAAAdY"]
[Sat Jan 03 22:06:15.001796 2026] [:error] [pid 31222:tid 31228] [client 4.241.233.134:11174] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aVkiV6Hw6nASHXAc2v_wswAAAcQ"]
[Sat Jan 03 22:06:15.693712 2026] [:error] [pid 2083:tid 2093] [client 4.241.233.134:11246] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aVkiVzVlR_BmlMPnhV4iDAAAAMg"]
[Sat Jan 03 22:06:16.033648 2026] [:error] [pid 1931:tid 2032] [client 4.241.233.134:11210] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aVkiWB8Tyw7ZoIdXlcYLoAAAAIg"]
[Sat Jan 03 22:06:16.350907 2026] [:error] [pid 34260:tid 34285] [client 4.241.233.134:11251] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pekok.php"] [unique_id "aVkiWEWWhyvZ0O9KNVQsygAAARc"]
[Sat Jan 03 22:06:16.598874 2026] [:error] [pid 2083:tid 2087] [client 4.241.233.134:11136] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVkiWDVlR_BmlMPnhV4iDQAAAMI"]
[Sat Jan 03 22:06:16.924075 2026] [:error] [pid 31222:tid 31233] [client 4.241.233.134:11159] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVkiWKHw6nASHXAc2v_wtgAAAck"]
[Sat Jan 03 22:06:17.297273 2026] [:error] [pid 1931:tid 2039] [client 4.241.233.134:11177] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVkiWR8Tyw7ZoIdXlcYLoQAAAI8"]
[Sat Jan 03 22:06:17.597639 2026] [:error] [pid 19639:tid 19657] [client 4.241.233.134:11249] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aVkiWSQ7fWZUytnlHEwF3AAAAVA"]
[Sat Jan 03 22:06:17.930054 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:11176] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aVkiWR8Tyw7ZoIdXlcYLowAAAJM"]
[Sat Jan 03 22:06:18.326584 2026] [:error] [pid 19639:tid 19659] [client 4.241.233.134:11225] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aVkiWiQ7fWZUytnlHEwF3QAAAVI"]
[Sat Jan 03 22:06:18.829192 2026] [:error] [pid 31630:tid 31644] [client 4.241.233.134:65482] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aVkiWvUV_PU2SWgLPuho3gAAAYw"]
[Sat Jan 03 22:06:19.400723 2026] [:error] [pid 31222:tid 31227] [client 4.241.233.134:11224] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aa.php"] [unique_id "aVkiW6Hw6nASHXAc2v_wuAAAAcM"]
[Sat Jan 03 22:06:19.713041 2026] [:error] [pid 34260:tid 34263] [client 4.241.233.134:11094] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aVkiW0WWhyvZ0O9KNVQszAAAAQE"]
[Sat Jan 03 22:06:20.081117 2026] [:error] [pid 19639:tid 19648] [client 4.241.233.134:11235] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aVkiXCQ7fWZUytnlHEwF4AAAAUc"]
[Sat Jan 03 22:06:20.423703 2026] [:error] [pid 1929:tid 1960] [client 4.241.233.134:11168] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aVkiXOcFqdpu6TNsuWr27QAAABY"]
[Sat Jan 03 22:06:20.687167 2026] [:error] [pid 31630:tid 31632] [client 4.241.233.134:65457] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cart.php"] [unique_id "aVkiXPUV_PU2SWgLPuho4gAAAYA"]
[Sat Jan 03 22:06:21.058189 2026] [:error] [pid 1931:tid 2029] [client 4.241.233.134:11045] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aVkiXR8Tyw7ZoIdXlcYLpQAAAIU"]
[Sat Jan 03 22:06:21.322230 2026] [:error] [pid 31630:tid 31648] [client 4.241.233.134:11109] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aVkiXfUV_PU2SWgLPuho5QAAAZA"]
[Sat Jan 03 22:06:21.596518 2026] [:error] [pid 31222:tid 31226] [client 4.241.233.134:11079] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aVkiXaHw6nASHXAc2v_wuQAAAcI"]
[Sat Jan 03 22:06:22.208045 2026] [:error] [pid 34260:tid 34277] [client 4.241.233.134:11196] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/compare.php"] [unique_id "aVkiXkWWhyvZ0O9KNVQszgAAAQ8"]
[Sat Jan 03 22:06:22.622637 2026] [:error] [pid 1931:tid 2041] [client 4.241.233.134:11227] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aVkiXh8Tyw7ZoIdXlcYLpwAAAJE"]
[Sat Jan 03 22:06:22.976826 2026] [:error] [pid 34260:tid 34282] [client 4.241.233.134:11185] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aVkiXkWWhyvZ0O9KNVQs0QAAARQ"]
[Sat Jan 03 22:06:23.265154 2026] [:error] [pid 34260:tid 34279] [client 4.241.233.134:11216] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aVkiX0WWhyvZ0O9KNVQs0gAAARE"]
[Sat Jan 03 22:06:23.539781 2026] [:error] [pid 34260:tid 34273] [client 4.241.233.134:11146] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop.php"] [unique_id "aVkiX0WWhyvZ0O9KNVQs0wAAAQs"]
[Sat Jan 03 22:06:23.888187 2026] [:error] [pid 1930:tid 1966] [client 4.241.233.134:11096] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aVkiX5P-6mqhfUDa89ztQgAAAEA"]
[Sat Jan 03 22:06:24.158835 2026] [:error] [pid 1930:tid 1975] [client 4.241.233.134:11099] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aVkiYJP-6mqhfUDa89ztQwAAAEk"]
[Sat Jan 03 22:06:24.434390 2026] [:error] [pid 34260:tid 34278] [client 4.241.233.134:65493] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aVkiYEWWhyvZ0O9KNVQs1AAAARA"]
[Sat Jan 03 22:06:24.711671 2026] [:error] [pid 1931:tid 2036] [client 4.241.233.134:11198] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aVkiYB8Tyw7ZoIdXlcYLqQAAAIw"]
[Sat Jan 03 22:06:25.030631 2026] [:error] [pid 31222:tid 31231] [client 4.241.233.134:11139] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVkiYaHw6nASHXAc2v_wuwAAAcc"]
[Sat Jan 03 22:06:25.508423 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:11150] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVkiYR8Tyw7ZoIdXlcYLrgAAAIE"]
[Sat Jan 03 22:06:25.806181 2026] [:error] [pid 34260:tid 34281] [client 4.241.233.134:11169] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVkiYUWWhyvZ0O9KNVQs1QAAARM"]
[Sat Jan 03 22:06:26.152206 2026] [:error] [pid 1931:tid 2032] [client 4.241.233.134:11171] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVkiYh8Tyw7ZoIdXlcYLswAAAIg"]
[Sat Jan 03 22:06:26.642447 2026] [:error] [pid 1930:tid 1970] [client 4.241.233.134:11024] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aVkiYpP-6mqhfUDa89ztRgAAAEQ"]
[Sat Jan 03 22:06:26.976926 2026] [:error] [pid 1930:tid 1967] [client 4.241.233.134:11184] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aVkiYpP-6mqhfUDa89ztRwAAAEE"]
[Sat Jan 03 22:06:27.391855 2026] [:error] [pid 31630:tid 31638] [client 4.241.233.134:11160] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aVkiY_UV_PU2SWgLPuho6AAAAYY"]
[Sat Jan 03 22:06:27.674210 2026] [:error] [pid 31222:tid 31229] [client 4.241.233.134:11075] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atom.php"] [unique_id "aVkiY6Hw6nASHXAc2v_wvAAAAcU"]
[Sat Jan 03 22:06:28.420084 2026] [:error] [pid 1929:tid 1938] [client 4.241.233.134:11154] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aVkiZOcFqdpu6TNsuWr27gAAAAA"]
[Sat Jan 03 22:06:28.680773 2026] [:error] [pid 1930:tid 1982] [client 4.241.233.134:11161] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aVkiZJP-6mqhfUDa89ztSgAAAFA"]
[Sat Jan 03 22:06:29.119204 2026] [:error] [pid 31630:tid 31639] [client 4.241.233.134:65414] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aVkiZfUV_PU2SWgLPuho6gAAAYc"]
[Sat Jan 03 22:06:29.531294 2026] [:error] [pid 31222:tid 31238] [client 4.241.233.134:11085] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/case.php"] [unique_id "aVkiZaHw6nASHXAc2v_wvQAAAc4"]
[Sat Jan 03 22:06:29.958941 2026] [:error] [pid 31222:tid 31242] [client 4.241.233.134:11236] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aVkiZaHw6nASHXAc2v_wvwAAAdI"]
[Sat Jan 03 22:06:30.282463 2026] [:error] [pid 1929:tid 1950] [client 4.241.233.134:11179] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aVkiZucFqdpu6TNsuWr28AAAAAw"]
[Sat Jan 03 22:06:30.788322 2026] [:error] [pid 31222:tid 31239] [client 4.241.233.134:11078] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aVkiZqHw6nASHXAc2v_wwQAAAc8"]
[Sat Jan 03 22:06:31.139944 2026] [:error] [pid 1931:tid 2044] [client 4.241.233.134:11072] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/docs.php"] [unique_id "aVkiZx8Tyw7ZoIdXlcYLuwAAAJQ"]
[Sat Jan 03 22:06:31.552218 2026] [:error] [pid 1929:tid 1956] [client 4.241.233.134:11102] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aVkiZ-cFqdpu6TNsuWr28QAAABI"]
[Sat Jan 03 22:06:32.007954 2026] [:error] [pid 1929:tid 1948] [client 4.241.233.134:11256] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aVkiaOcFqdpu6TNsuWr28wAAAAo"]
[Sat Jan 03 22:06:32.819318 2026] [:error] [pid 1929:tid 1947] [client 4.241.233.134:11031] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aVkiaOcFqdpu6TNsuWr29AAAAAk"]
[Sat Jan 03 22:06:33.212346 2026] [:error] [pid 1929:tid 1954] [client 4.241.233.134:11156] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ios.php"] [unique_id "aVkiaecFqdpu6TNsuWr29QAAABA"]
[Sat Jan 03 22:06:33.585453 2026] [:error] [pid 1931:tid 2031] [client 4.241.233.134:11152] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVkiaR8Tyw7ZoIdXlcYLvwAAAIc"]
[Sat Jan 03 22:06:33.963366 2026] [:error] [pid 2083:tid 2094] [client 4.241.233.134:11090] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVkiaTVlR_BmlMPnhV4iDwAAAMk"]
[Sat Jan 03 22:06:34.278090 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:11114] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVkiah8Tyw7ZoIdXlcYLwQAAAJM"]
[Sat Jan 03 22:06:34.849036 2026] [:error] [pid 1930:tid 1988] [client 4.241.233.134:11175] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aVkiapP-6mqhfUDa89ztSwAAAFY"]
[Sat Jan 03 22:06:35.223833 2026] [:error] [pid 1931:tid 2038] [client 4.241.233.134:11073] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVkiax8Tyw7ZoIdXlcYLxAAAAI4"]
[Sat Jan 03 22:06:35.529828 2026] [:error] [pid 1931:tid 2030] [client 4.241.233.134:11088] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVkiax8Tyw7ZoIdXlcYLxgAAAIY"]
[Sat Jan 03 22:06:35.844877 2026] [:error] [pid 1931:tid 2029] [client 4.241.233.134:65521] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVkiax8Tyw7ZoIdXlcYLxwAAAIU"]
[Sat Jan 03 22:06:36.331130 2026] [:error] [pid 1931:tid 2047] [client 4.241.233.134:11189] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aVkibB8Tyw7ZoIdXlcYLyQAAAJc"]
[Sat Jan 03 22:06:36.714166 2026] [:error] [pid 1931:tid 2045] [client 4.241.233.134:11126] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkibB8Tyw7ZoIdXlcYLywAAAJU"]
[Sat Jan 03 22:06:37.196179 2026] [:error] [pid 1929:tid 1952] [client 4.241.233.134:11122] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkibecFqdpu6TNsuWr29wAAAA4"]
[Sat Jan 03 22:06:37.664711 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:11018] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkibR8Tyw7ZoIdXlcYLzwAAAIE"]
[Sat Jan 03 22:06:38.066611 2026] [:error] [pid 2083:tid 2105] [client 4.241.233.134:11173] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkibjVlR_BmlMPnhV4iFAAAANQ"]
[Sat Jan 03 22:06:38.498657 2026] [:error] [pid 34260:tid 34263] [client 4.241.233.134:65485] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkibkWWhyvZ0O9KNVQs3AAAAQE"]
[Sat Jan 03 22:06:38.915842 2026] [:error] [pid 2083:tid 2109] [client 4.241.233.134:11037] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkibjVlR_BmlMPnhV4iFQAAANg"]
[Sat Jan 03 22:06:39.251072 2026] [:error] [pid 31222:tid 31246] [client 4.241.233.134:65410] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkib6Hw6nASHXAc2v_wwwAAAdY"]
[Sat Jan 03 22:06:39.906530 2026] [:error] [pid 34260:tid 34277] [client 4.241.233.134:11254] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkib0WWhyvZ0O9KNVQs3QAAAQ8"]
[Sat Jan 03 22:06:40.347883 2026] [:error] [pid 31222:tid 31228] [client 4.241.233.134:11183] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVkicKHw6nASHXAc2v_wxAAAAcQ"]
[Sat Jan 03 22:06:40.712389 2026] [:error] [pid 31222:tid 31237] [client 4.241.233.134:11191] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVkicKHw6nASHXAc2v_wxQAAAc0"]
[Sat Jan 03 22:06:41.042506 2026] [:error] [pid 34260:tid 34282] [client 4.241.233.134:11199] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVkicUWWhyvZ0O9KNVQs3wAAARQ"]
[Sat Jan 03 22:06:41.453347 2026] [:error] [pid 34260:tid 34279] [client 4.241.233.134:11190] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aVkicUWWhyvZ0O9KNVQs4QAAARE"]
[Sat Jan 03 22:06:41.956666 2026] [:error] [pid 31222:tid 31232] [client 4.241.233.134:11187] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aVkicaHw6nASHXAc2v_wyAAAAcg"]
[Sat Jan 03 22:06:42.307531 2026] [:error] [pid 2083:tid 2097] [client 4.241.233.134:11182] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aVkicjVlR_BmlMPnhV4iGgAAAMw"]
[Sat Jan 03 22:06:42.705110 2026] [:error] [pid 1930:tid 1980] [client 4.241.233.134:65464] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aVkicpP-6mqhfUDa89ztTAAAAE4"]
[Sat Jan 03 22:06:42.968324 2026] [:error] [pid 2083:tid 2104] [client 4.241.233.134:11011] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat1.php"] [unique_id "aVkicjVlR_BmlMPnhV4iGwAAANM"]
[Sat Jan 03 22:06:43.430786 2026] [:error] [pid 31222:tid 31235] [client 4.241.233.134:11014] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aVkic6Hw6nASHXAc2v_wyQAAAcs"]
[Sat Jan 03 22:06:43.809865 2026] [:error] [pid 1930:tid 1977] [client 4.241.233.134:11186] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aVkic5P-6mqhfUDa89ztTwAAAEs"]
[Sat Jan 03 22:06:44.270325 2026] [:error] [pid 34260:tid 34276] [client 4.241.233.134:11110] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aVkidEWWhyvZ0O9KNVQs5AAAAQ4"]
[Sat Jan 03 22:06:44.693415 2026] [:error] [pid 34260:tid 34275] [client 4.241.233.134:11097] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f.php"] [unique_id "aVkidEWWhyvZ0O9KNVQs5QAAAQ0"]
[Sat Jan 03 22:06:45.072688 2026] [:error] [pid 1930:tid 1970] [client 4.241.233.134:11147] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aVkidZP-6mqhfUDa89ztUwAAAEQ"]
[Sat Jan 03 22:06:45.316627 2026] [:error] [pid 1931:tid 2029] [client 4.241.233.134:11105] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aVkidR8Tyw7ZoIdXlcYL1AAAAIU"]
[Sat Jan 03 22:06:45.650802 2026] [:error] [pid 1931:tid 1999] [client 4.241.233.134:11130] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aVkidR8Tyw7ZoIdXlcYL1gAAAIM"]
[Sat Jan 03 22:06:46.283653 2026] [:error] [pid 34260:tid 34270] [client 4.241.233.134:11165] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/max.php"] [unique_id "aVkidkWWhyvZ0O9KNVQs5gAAAQg"]
[Sat Jan 03 22:06:46.681393 2026] [:error] [pid 19639:tid 19642] [client 4.241.233.134:11263] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVkidiQ7fWZUytnlHEwF5AAAAUE"]
[Sat Jan 03 22:06:46.978534 2026] [:error] [pid 34260:tid 34264] [client 4.241.233.134:11119] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVkidkWWhyvZ0O9KNVQs5wAAAQI"]
[Sat Jan 03 22:06:47.275405 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:11108] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVkidx8Tyw7ZoIdXlcYL2AAAAIE"]
[Sat Jan 03 22:06:47.620891 2026] [:error] [pid 31222:tid 31242] [client 4.241.233.134:11131] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVkid6Hw6nASHXAc2v_w0AAAAdI"]
[Sat Jan 03 22:06:47.882587 2026] [:error] [pid 1930:tid 1974] [client 4.241.233.134:11123] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkid5P-6mqhfUDa89ztVQAAAEg"]
[Sat Jan 03 22:06:48.164087 2026] [:error] [pid 1929:tid 1958] [client 4.241.233.134:11087] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkieOcFqdpu6TNsuWr2-QAAABQ"]
[Sat Jan 03 22:06:48.493754 2026] [:error] [pid 31630:tid 31644] [client 4.241.233.134:11084] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkiePUV_PU2SWgLPuho7wAAAYw"]
[Sat Jan 03 22:06:48.898189 2026] [:error] [pid 34260:tid 34269] [client 4.241.233.134:11135] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkieEWWhyvZ0O9KNVQs6gAAAQc"]
[Sat Jan 03 22:06:49.169187 2026] [:error] [pid 1930:tid 1968] [client 4.241.233.134:11125] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aVkieZP-6mqhfUDa89ztVgAAAEI"]
[Sat Jan 03 22:06:49.538300 2026] [:error] [pid 34260:tid 34285] [client 4.241.233.134:65481] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aVkieUWWhyvZ0O9KNVQs6wAAARc"]
[Sat Jan 03 22:06:49.840732 2026] [:error] [pid 1931:tid 2037] [client 4.241.233.134:11040] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aVkieR8Tyw7ZoIdXlcYL2QAAAI0"]
[Sat Jan 03 22:06:50.188506 2026] [:error] [pid 1930:tid 1982] [client 4.241.233.134:11194] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v.php"] [unique_id "aVkiepP-6mqhfUDa89ztWQAAAFA"]
[Sat Jan 03 22:06:50.524960 2026] [:error] [pid 1930:tid 1973] [client 4.241.233.134:11036] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiepP-6mqhfUDa89ztWgAAAEc"]
[Sat Jan 03 22:06:50.849149 2026] [:error] [pid 1929:tid 1943] [client 4.241.233.134:11065] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkieucFqdpu6TNsuWr2-gAAAAU"]
[Sat Jan 03 22:06:51.144950 2026] [:error] [pid 1931:tid 1993] [client 4.241.233.134:11089] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiex8Tyw7ZoIdXlcYL2gAAAIA"]
[Sat Jan 03 22:06:51.450251 2026] [:error] [pid 1931:tid 2036] [client 4.241.233.134:11082] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkiex8Tyw7ZoIdXlcYL2wAAAIw"]
[Sat Jan 03 22:06:51.853701 2026] [:error] [pid 1929:tid 1957] [client 4.241.233.134:11038] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aVkie-cFqdpu6TNsuWr2-wAAABM"]
[Sat Jan 03 22:06:52.361426 2026] [:error] [pid 31222:tid 31239] [client 4.241.233.134:11170] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aVkifKHw6nASHXAc2v_w0gAAAc8"]
[Sat Jan 03 22:06:52.698766 2026] [:error] [pid 31222:tid 31224] [client 4.241.233.134:11080] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aVkifKHw6nASHXAc2v_w1AAAAcA"]
[Sat Jan 03 22:06:53.182386 2026] [:error] [pid 34260:tid 34262] [client 4.241.233.134:10947] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vv.php"] [unique_id "aVkifUWWhyvZ0O9KNVQs7QAAAQA"]
[Sat Jan 03 22:06:53.470804 2026] [:error] [pid 1931:tid 2027] [client 4.241.233.134:11092] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVkifR8Tyw7ZoIdXlcYL3AAAAIQ"]
[Sat Jan 03 22:06:53.788545 2026] [:error] [pid 31630:tid 31632] [client 4.241.233.134:10950] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVkiffUV_PU2SWgLPuho8QAAAYA"]
[Sat Jan 03 22:06:54.105721 2026] [:error] [pid 19639:tid 19658] [client 4.241.233.134:11046] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVkifiQ7fWZUytnlHEwF5gAAAVE"]
[Sat Jan 03 22:06:54.590410 2026] [:error] [pid 1931:tid 2035] [client 4.241.233.134:11059] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVkifh8Tyw7ZoIdXlcYL3QAAAIs"]
[Sat Jan 03 22:06:54.898978 2026] [:error] [pid 1931:tid 2031] [client 4.241.233.134:11022] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aVkifh8Tyw7ZoIdXlcYL3gAAAIc"]
[Sat Jan 03 22:06:55.222473 2026] [:error] [pid 2083:tid 2087] [client 4.241.233.134:11252] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aVkifzVlR_BmlMPnhV4iHQAAAMI"]
[Sat Jan 03 22:06:55.596352 2026] [:error] [pid 31222:tid 31245] [client 4.241.233.134:11103] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aVkif6Hw6nASHXAc2v_w1QAAAdU"]
[Sat Jan 03 22:06:55.938637 2026] [:error] [pid 2083:tid 2092] [client 4.241.233.134:11029] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jp.php"] [unique_id "aVkifzVlR_BmlMPnhV4iHgAAAMc"]
[Sat Jan 03 22:06:56.224116 2026] [:error] [pid 1931:tid 2048] [client 4.241.233.134:11164] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aVkigB8Tyw7ZoIdXlcYL4QAAAJg"]
[Sat Jan 03 22:06:56.512429 2026] [:error] [pid 19639:tid 19665] [client 4.241.233.134:11032] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aVkigCQ7fWZUytnlHEwF5wAAAVg"]
[Sat Jan 03 22:06:56.909040 2026] [:error] [pid 31222:tid 31246] [client 4.241.233.134:11101] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aVkigKHw6nASHXAc2v_w1wAAAdY"]
[Sat Jan 03 22:06:57.258015 2026] [:error] [pid 31222:tid 31230] [client 4.241.233.134:11027] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aVkigaHw6nASHXAc2v_w2gAAAcY"]
[Sat Jan 03 22:06:57.502187 2026] [:error] [pid 19639:tid 19655] [client 4.241.233.134:11093] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aVkigSQ7fWZUytnlHEwF6QAAAU4"]
[Sat Jan 03 22:06:57.759365 2026] [:error] [pid 1930:tid 1989] [client 4.241.233.134:11116] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aVkigZP-6mqhfUDa89ztWwAAAFc"]
[Sat Jan 03 22:06:58.006097 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:11086] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aVkigh8Tyw7ZoIdXlcYL4gAAAJM"]
[Sat Jan 03 22:06:58.290875 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:11021] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aVkigh8Tyw7ZoIdXlcYL5QAAAII"]
[Sat Jan 03 22:06:58.579936 2026] [:error] [pid 1931:tid 2038] [client 4.241.233.134:11163] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkigh8Tyw7ZoIdXlcYL5gAAAI4"]
[Sat Jan 03 22:06:58.906042 2026] [:error] [pid 1931:tid 2029] [client 4.241.233.134:11117] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkigh8Tyw7ZoIdXlcYL5wAAAIU"]
[Sat Jan 03 22:06:59.217907 2026] [:error] [pid 1931:tid 2041] [client 4.241.233.134:11157] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkigx8Tyw7ZoIdXlcYL6AAAAJE"]
[Sat Jan 03 22:06:59.569517 2026] [:error] [pid 1930:tid 1988] [client 4.241.233.134:11050] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkig5P-6mqhfUDa89ztXAAAAFY"]
[Sat Jan 03 22:06:59.990632 2026] [:error] [pid 31630:tid 31646] [client 4.241.233.134:11009] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aVkig_UV_PU2SWgLPuho8gAAAY4"]
[Sat Jan 03 22:07:00.265108 2026] [:error] [pid 19639:tid 19651] [client 4.241.233.134:11142] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aVkihCQ7fWZUytnlHEwF7wAAAUo"]
[Sat Jan 03 22:07:00.585820 2026] [:error] [pid 1930:tid 1984] [client 4.241.233.134:10954] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aVkihJP-6mqhfUDa89ztXgAAAFI"]
[Sat Jan 03 22:07:00.829486 2026] [:error] [pid 1929:tid 1945] [client 4.241.233.134:11129] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aVkihOcFqdpu6TNsuWr2_QAAAAc"]
[Sat Jan 03 22:07:01.222361 2026] [:error] [pid 1930:tid 1971] [client 4.241.233.134:11048] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkihZP-6mqhfUDa89ztYQAAAEU"]
[Sat Jan 03 22:07:01.700511 2026] [:error] [pid 31630:tid 31648] [client 4.241.233.134:11012] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkihfUV_PU2SWgLPuho8wAAAZA"]
[Sat Jan 03 22:07:01.950169 2026] [:error] [pid 34260:tid 34272] [client 4.241.233.134:10960] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkihUWWhyvZ0O9KNVQs8QAAAQo"]
[Sat Jan 03 22:07:02.360542 2026] [:error] [pid 34260:tid 34267] [client 4.241.233.134:11181] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkihkWWhyvZ0O9KNVQs8gAAAQU"]
[Sat Jan 03 22:07:02.787277 2026] [:error] [pid 1929:tid 1959] [client 4.241.233.134:11056] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aVkihucFqdpu6TNsuWr2_gAAABU"]
[Sat Jan 03 22:07:03.086827 2026] [:error] [pid 1930:tid 1976] [client 4.241.233.134:11180] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aVkih5P-6mqhfUDa89ztYwAAAEo"]
[Sat Jan 03 22:07:03.444617 2026] [:error] [pid 1929:tid 1961] [client 4.241.233.134:11058] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aVkih-cFqdpu6TNsuWr2_wAAABc"]
[Sat Jan 03 22:07:03.835502 2026] [:error] [pid 1930:tid 1987] [client 4.241.233.134:10975] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aVkih5P-6mqhfUDa89ztZgAAAFU"]
[Sat Jan 03 22:07:04.151227 2026] [:error] [pid 34260:tid 34284] [client 4.241.233.134:65459] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aVkiiEWWhyvZ0O9KNVQs8wAAARY"]
[Sat Jan 03 22:07:04.565486 2026] [:error] [pid 1930:tid 1974] [client 4.241.233.134:11151] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aVkiiJP-6mqhfUDa89ztZwAAAEg"]
[Sat Jan 03 22:07:04.952118 2026] [:error] [pid 2083:tid 2107] [client 4.241.233.134:11076] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aVkiiDVlR_BmlMPnhV4iHwAAANY"]
[Sat Jan 03 22:07:05.391555 2026] [:error] [pid 31222:tid 31227] [client 4.241.233.134:11035] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/go.php"] [unique_id "aVkiiaHw6nASHXAc2v_w3AAAAcM"]
[Sat Jan 03 22:07:05.832699 2026] [:error] [pid 1930:tid 1983] [client 4.241.233.134:11141] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVkiiZP-6mqhfUDa89ztaAAAAFE"]
[Sat Jan 03 22:07:06.090674 2026] [:error] [pid 34260:tid 34282] [client 4.241.233.134:11121] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVkiikWWhyvZ0O9KNVQs9AAAARQ"]
[Sat Jan 03 22:07:06.500374 2026] [:error] [pid 1929:tid 1951] [client 4.241.233.134:11132] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVkiiucFqdpu6TNsuWr3AAAAAA0"]
[Sat Jan 03 22:07:06.914827 2026] [:error] [pid 34260:tid 34279] [client 4.241.233.134:11060] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVkiikWWhyvZ0O9KNVQs9gAAARE"]
[Sat Jan 03 22:07:07.163638 2026] [:error] [pid 1929:tid 1942] [client 4.241.233.134:11192] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aVkii-cFqdpu6TNsuWr3AQAAAAQ"]
[Sat Jan 03 22:07:07.487875 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:11124] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aVkiix8Tyw7ZoIdXlcYL8QAAAII"]
[Sat Jan 03 22:07:07.866445 2026] [:error] [pid 1930:tid 1981] [client 4.241.233.134:11039] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aVkii5P-6mqhfUDa89ztbAAAAE8"]
[Sat Jan 03 22:07:08.240428 2026] [:error] [pid 1930:tid 1985] [client 4.241.233.134:11034] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11.php"] [unique_id "aVkijJP-6mqhfUDa89ztbQAAAFM"]
[Sat Jan 03 22:07:08.648912 2026] [:error] [pid 1930:tid 1988] [client 4.241.233.134:11053] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aVkijJP-6mqhfUDa89ztbgAAAFY"]
[Sat Jan 03 22:07:09.209454 2026] [:error] [pid 31222:tid 31235] [client 4.241.233.134:11106] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aVkijaHw6nASHXAc2v_w3QAAAcs"]
[Sat Jan 03 22:07:09.547388 2026] [:error] [pid 1930:tid 1971] [client 4.241.233.134:11054] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aVkijZP-6mqhfUDa89ztcQAAAEU"]
[Sat Jan 03 22:07:09.921659 2026] [:error] [pid 31222:tid 31244] [client 4.241.233.134:11013] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conflg.php"] [unique_id "aVkijaHw6nASHXAc2v_w3wAAAdQ"]
[Sat Jan 03 22:07:10.544969 2026] [:error] [pid 31222:tid 31226] [client 4.241.233.134:11015] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmrlpc.php"] [unique_id "aVkijqHw6nASHXAc2v_w4AAAAcI"]
[Sat Jan 03 22:07:11.249018 2026] [proxy_fcgi:error] [pid 1929:tid 1941] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:11.419331 2026] [proxy_fcgi:error] [pid 1929:tid 1958] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:11.572599 2026] [proxy_fcgi:error] [pid 1929:tid 1943] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:11.689795 2026] [proxy_fcgi:error] [pid 1929:tid 1957] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:11.808408 2026] [proxy_fcgi:error] [pid 1929:tid 1962] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:11.927160 2026] [proxy_fcgi:error] [pid 1929:tid 1949] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:12.045794 2026] [proxy_fcgi:error] [pid 1929:tid 1945] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:12.184001 2026] [proxy_fcgi:error] [pid 1929:tid 1959] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:13.518611 2026] [proxy_fcgi:error] [pid 1929:tid 1961] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:13.676448 2026] [proxy_fcgi:error] [pid 1929:tid 1942] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:13.794016 2026] [proxy_fcgi:error] [pid 1929:tid 1938] [client 4.241.233.134:11178] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:07:13.912704 2026] [:error] [pid 1929:tid 1960] [client 4.241.233.134:11178] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aVkikecFqdpu6TNsuWr3GgAAABY"]
[Sat Jan 03 22:07:14.172124 2026] [:error] [pid 1930:tid 1968] [client 4.241.233.134:11042] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aVkikpP-6mqhfUDa89ztdQAAAEI"]
[Sat Jan 03 22:07:14.638150 2026] [:error] [pid 1930:tid 1973] [client 4.241.233.134:11188] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aVkikpP-6mqhfUDa89ztdwAAAEc"]
[Sat Jan 03 22:07:15.214079 2026] [:error] [pid 2083:tid 2094] [client 4.241.233.134:10983] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aVkikzVlR_BmlMPnhV4iIAAAAMk"]
[Sat Jan 03 22:07:15.584375 2026] [:error] [pid 2083:tid 2106] [client 4.241.233.134:11118] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aVkikzVlR_BmlMPnhV4iIQAAANU"]
[Sat Jan 03 22:07:15.910235 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:11172] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aVkikx8Tyw7ZoIdXlcYL-QAAAIE"]
[Sat Jan 03 22:07:16.255242 2026] [:error] [pid 1931:tid 2037] [client 4.241.233.134:11100] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aVkilB8Tyw7ZoIdXlcYL-gAAAI0"]
[Sat Jan 03 22:07:16.785647 2026] [:error] [pid 1931:tid 2046] [client 4.241.233.134:11063] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/321.php"] [unique_id "aVkilB8Tyw7ZoIdXlcYL-wAAAJY"]
[Sat Jan 03 22:07:17.166160 2026] [:error] [pid 1931:tid 2035] [client 4.241.233.134:10945] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVkilR8Tyw7ZoIdXlcYL_QAAAIs"]
[Sat Jan 03 22:07:18.045867 2026] [:error] [pid 1931:tid 2031] [client 4.241.233.134:10944] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVkilh8Tyw7ZoIdXlcYL_wAAAIc"]
[Sat Jan 03 22:07:18.789151 2026] [:error] [pid 1931:tid 2032] [client 4.241.233.134:10967] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVkilh8Tyw7ZoIdXlcYMAQAAAIg"]
[Sat Jan 03 22:07:19.305061 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:11257] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVkilx8Tyw7ZoIdXlcYMAgAAAJM"]
[Sat Jan 03 22:07:19.962856 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:11044] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkilx8Tyw7ZoIdXlcYMBAAAAII"]
[Sat Jan 03 22:07:20.375524 2026] [:error] [pid 1931:tid 2030] [client 4.241.233.134:11019] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkimB8Tyw7ZoIdXlcYMBQAAAIY"]
[Sat Jan 03 22:07:20.948883 2026] [:error] [pid 31630:tid 31639] [client 4.241.233.134:11016] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkimPUV_PU2SWgLPuho-gAAAYc"]
[Sat Jan 03 22:07:22.046899 2026] [:error] [pid 2083:tid 2085] [client 4.241.233.134:65467] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkimjVlR_BmlMPnhV4iJwAAAMA"]
[Sat Jan 03 22:07:22.618505 2026] [:error] [pid 2083:tid 2091] [client 4.241.233.134:11025] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aVkimjVlR_BmlMPnhV4iKQAAAMY"]
[Sat Jan 03 22:07:22.927834 2026] [:error] [pid 1930:tid 1988] [client 4.241.233.134:10982] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aVkimpP-6mqhfUDa89ztegAAAFY"]
[Sat Jan 03 22:07:23.322854 2026] [:error] [pid 1930:tid 1969] [client 4.241.233.134:11041] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aVkim5P-6mqhfUDa89ztewAAAEM"]
[Sat Jan 03 22:07:23.808656 2026] [:error] [pid 1929:tid 1950] [client 4.241.233.134:11047] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/al.php"] [unique_id "aVkim-cFqdpu6TNsuWr3HAAAAAw"]
[Sat Jan 03 22:07:24.221475 2026] [:error] [pid 34260:tid 34283] [client 4.241.233.134:65479] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkinEWWhyvZ0O9KNVQs9wAAARU"]
[Sat Jan 03 22:07:24.598680 2026] [:error] [pid 1930:tid 1976] [client 4.241.233.134:11007] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkinJP-6mqhfUDa89ztfQAAAEo"]
[Sat Jan 03 22:07:25.148794 2026] [:error] [pid 34260:tid 34264] [client 4.241.233.134:10974] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkinUWWhyvZ0O9KNVQs-gAAAQI"]
[Sat Jan 03 22:07:25.600096 2026] [:error] [pid 34260:tid 34271] [client 4.241.233.134:10961] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkinUWWhyvZ0O9KNVQs-wAAAQk"]
[Sat Jan 03 22:07:26.186523 2026] [:error] [pid 1929:tid 1944] [client 4.241.233.134:11120] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVkinucFqdpu6TNsuWr3HgAAAAY"]
[Sat Jan 03 22:07:26.700124 2026] [:error] [pid 1929:tid 1954] [client 4.241.233.134:11127] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVkinucFqdpu6TNsuWr3HwAAABA"]
[Sat Jan 03 22:07:26.983620 2026] [:error] [pid 1930:tid 1975] [client 4.241.233.134:11095] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVkinpP-6mqhfUDa89ztfgAAAEk"]
[Sat Jan 03 22:07:27.363349 2026] [:error] [pid 1930:tid 1978] [client 4.241.233.134:10822] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVkin5P-6mqhfUDa89ztfwAAAEw"]
[Sat Jan 03 22:07:27.687985 2026] [:error] [pid 2083:tid 2097] [client 4.241.233.134:11113] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aVkinzVlR_BmlMPnhV4iKgAAAMw"]
[Sat Jan 03 22:07:28.115633 2026] [:error] [pid 31630:tid 31642] [client 4.241.233.134:10978] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aVkioPUV_PU2SWgLPuho_QAAAYo"]
[Sat Jan 03 22:07:28.390313 2026] [:error] [pid 1931:tid 1994] [client 4.241.233.134:11077] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aVkioB8Tyw7ZoIdXlcYMCQAAAIE"]
[Sat Jan 03 22:07:28.693527 2026] [:error] [pid 1931:tid 2037] [client 4.241.233.134:10971] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aVkioB8Tyw7ZoIdXlcYMCgAAAI0"]
[Sat Jan 03 22:07:29.002868 2026] [:error] [pid 2083:tid 2099] [client 4.241.233.134:10946] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aVkioTVlR_BmlMPnhV4iKwAAAM4"]
[Sat Jan 03 22:07:29.237918 2026] [:error] [pid 31630:tid 31650] [client 4.241.233.134:10949] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aVkiofUV_PU2SWgLPuho_gAAAZI"]
[Sat Jan 03 22:07:29.527728 2026] [:error] [pid 2083:tid 2090] [client 4.241.233.134:11107] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aVkioTVlR_BmlMPnhV4iLAAAAMU"]
[Sat Jan 03 22:07:29.817919 2026] [:error] [pid 1931:tid 2046] [client 4.241.233.134:11115] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aVkioR8Tyw7ZoIdXlcYMCwAAAJY"]
[Sat Jan 03 22:07:30.171429 2026] [:error] [pid 19639:tid 19658] [client 4.241.233.134:11067] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aVkioiQ7fWZUytnlHEwF-gAAAVE"]
[Sat Jan 03 22:07:30.437686 2026] [:error] [pid 31222:tid 31229] [client 4.241.233.134:11051] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aVkioqHw6nASHXAc2v_w4wAAAcU"]
[Sat Jan 03 22:07:30.679903 2026] [:error] [pid 31222:tid 31234] [client 4.241.233.134:11226] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aVkioqHw6nASHXAc2v_w5QAAAco"]
[Sat Jan 03 22:07:31.070799 2026] [:error] [pid 1931:tid 2031] [client 4.241.233.134:11111] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aVkiox8Tyw7ZoIdXlcYMDQAAAIc"]
[Sat Jan 03 22:07:31.375635 2026] [:error] [pid 34260:tid 34277] [client 4.241.233.134:10990] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkio0WWhyvZ0O9KNVQtAAAAAQ8"]
[Sat Jan 03 22:07:31.642412 2026] [:error] [pid 1929:tid 1957] [client 4.241.233.134:11096] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkio-cFqdpu6TNsuWr3JQAAABM"]
[Sat Jan 03 22:07:31.981644 2026] [:error] [pid 34260:tid 34267] [client 4.241.233.134:10962] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkio0WWhyvZ0O9KNVQtAQAAAQU"]
[Sat Jan 03 22:07:32.381644 2026] [:error] [pid 1929:tid 1962] [client 4.241.233.134:11026] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkipOcFqdpu6TNsuWr3JgAAABg"]
[Sat Jan 03 22:07:32.692428 2026] [:error] [pid 1929:tid 1949] [client 4.241.233.134:11128] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aVkipOcFqdpu6TNsuWr3JwAAAAs"]
[Sat Jan 03 22:07:33.007755 2026] [:error] [pid 34260:tid 34273] [client 4.241.233.134:10979] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aVkipUWWhyvZ0O9KNVQtAgAAAQs"]
[Sat Jan 03 22:07:33.291395 2026] [:error] [pid 1931:tid 2048] [client 4.241.233.134:10931] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aVkipR8Tyw7ZoIdXlcYMDwAAAJg"]
[Sat Jan 03 22:07:33.553448 2026] [:error] [pid 31222:tid 31242] [client 4.241.233.134:10965] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aVkipaHw6nASHXAc2v_w5gAAAdI"]
[Sat Jan 03 22:07:33.871104 2026] [:error] [pid 31222:tid 31225] [client 4.241.233.134:10933] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aVkipaHw6nASHXAc2v_w5wAAAcE"]
[Sat Jan 03 22:07:34.324494 2026] [:error] [pid 1930:tid 1974] [client 4.241.233.134:11043] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aVkippP-6mqhfUDa89ztggAAAEg"]
[Sat Jan 03 22:07:34.616534 2026] [:error] [pid 34260:tid 34266] [client 4.241.233.134:11006] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aVkipkWWhyvZ0O9KNVQtBAAAAQQ"]
[Sat Jan 03 22:07:35.062706 2026] [:error] [pid 2083:tid 2107] [client 4.241.233.134:10976] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xo.php"] [unique_id "aVkipzVlR_BmlMPnhV4iLgAAANY"]
[Sat Jan 03 22:07:35.388012 2026] [:error] [pid 34260:tid 34283] [client 4.241.233.134:10968] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aVkip0WWhyvZ0O9KNVQtBQAAARU"]
[Sat Jan 03 22:07:35.683097 2026] [:error] [pid 19639:tid 19655] [client 4.241.233.134:10964] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aVkipyQ7fWZUytnlHEwF_AAAAU4"]
[Sat Jan 03 22:07:36.072157 2026] [:error] [pid 31630:tid 31632] [client 4.241.233.134:11195] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aVkiqPUV_PU2SWgLPuhpAwAAAYA"]
[Sat Jan 03 22:07:36.502725 2026] [:error] [pid 1929:tid 1938] [client 4.241.233.134:10994] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dlu.php"] [unique_id "aVkiqOcFqdpu6TNsuWr3KQAAAAA"]
[Sat Jan 03 22:07:36.749869 2026] [:error] [pid 34260:tid 34276] [client 4.241.233.134:10923] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aVkiqEWWhyvZ0O9KNVQtBwAAAQ4"]
[Sat Jan 03 22:07:37.009182 2026] [:error] [pid 1930:tid 1967] [client 4.241.233.134:11064] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aVkiqZP-6mqhfUDa89zthAAAAEE"]
[Sat Jan 03 22:07:37.422021 2026] [:error] [pid 34260:tid 34270] [client 4.241.233.134:11068] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aVkiqUWWhyvZ0O9KNVQtCAAAAQg"]
[Sat Jan 03 22:07:37.754191 2026] [:error] [pid 1929:tid 1946] [client 4.241.233.134:11062] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rk2.php"] [unique_id "aVkiqecFqdpu6TNsuWr3KwAAAAg"]
[Sat Jan 03 22:07:38.139157 2026] [:error] [pid 1931:tid 2032] [client 4.241.233.134:10900] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aVkiqh8Tyw7ZoIdXlcYMEgAAAIg"]
[Sat Jan 03 22:07:38.573846 2026] [:error] [pid 1930:tid 1968] [client 4.241.233.134:11008] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aVkiqpP-6mqhfUDa89zthQAAAEI"]
[Sat Jan 03 22:07:38.807511 2026] [:error] [pid 2083:tid 2086] [client 4.241.233.134:11052] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aVkiqjVlR_BmlMPnhV4iMAAAAME"]
[Sat Jan 03 22:07:39.137233 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:11049] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aVkiqx8Tyw7ZoIdXlcYMFAAAAII"]
[Sat Jan 03 22:07:39.399918 2026] [:error] [pid 1930:tid 1979] [client 4.241.233.134:10906] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aVkiq5P-6mqhfUDa89zthgAAAE0"]
[Sat Jan 03 22:07:39.662751 2026] [:error] [pid 31630:tid 31646] [client 4.241.233.134:11133] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aVkiq_UV_PU2SWgLPuhpBAAAAY4"]
[Sat Jan 03 22:07:39.931732 2026] [:error] [pid 1930:tid 1985] [client 4.241.233.134:10913] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aVkiq5P-6mqhfUDa89ztiQAAAFM"]
[Sat Jan 03 22:07:40.233579 2026] [:error] [pid 31630:tid 31648] [client 4.241.233.134:11071] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aVkirPUV_PU2SWgLPuhpBQAAAZA"]
[Sat Jan 03 22:07:40.543708 2026] [:error] [pid 31630:tid 31641] [client 4.241.233.134:11030] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aVkirPUV_PU2SWgLPuhpBwAAAYk"]
[Sat Jan 03 22:07:40.920890 2026] [:error] [pid 19639:tid 19661] [client 4.241.233.134:10922] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aVkirCQ7fWZUytnlHEwF_wAAAVQ"]
[Sat Jan 03 22:07:41.341286 2026] [:error] [pid 19639:tid 19654] [client 4.241.233.134:10823] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aVkirSQ7fWZUytnlHEwGAAAAAU0"]
[Sat Jan 03 22:07:41.572896 2026] [:error] [pid 34260:tid 34286] [client 4.241.233.134:10981] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/karak.php"] [unique_id "aVkirUWWhyvZ0O9KNVQtDAAAARg"]
[Sat Jan 03 22:07:41.867887 2026] [:error] [pid 1929:tid 1956] [client 4.241.233.134:11017] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aVkirecFqdpu6TNsuWr3LAAAABI"]
[Sat Jan 03 22:07:42.145620 2026] [:error] [pid 1929:tid 1955] [client 4.241.233.134:11203] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aVkirucFqdpu6TNsuWr3LQAAABE"]
[Sat Jan 03 22:07:42.381904 2026] [:error] [pid 31630:tid 31634] [client 4.241.233.134:10932] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aVkirvUV_PU2SWgLPuhpCAAAAYI"]
[Sat Jan 03 22:07:42.614397 2026] [:error] [pid 34260:tid 34262] [client 4.241.233.134:10925] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aVkirkWWhyvZ0O9KNVQtDwAAAQA"]
[Sat Jan 03 22:07:42.857524 2026] [:error] [pid 1929:tid 1944] [client 4.241.233.134:10826] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aVkirucFqdpu6TNsuWr3LgAAAAY"]
[Sat Jan 03 22:07:43.150221 2026] [:error] [pid 2083:tid 2091] [client 4.241.233.134:10953] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aVkirzVlR_BmlMPnhV4iNAAAAMY"]
[Sat Jan 03 22:07:43.543878 2026] [:error] [pid 2083:tid 2109] [client 4.241.233.134:11112] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aVkirzVlR_BmlMPnhV4iNQAAANg"]
[Sat Jan 03 22:07:43.775127 2026] [:error] [pid 31630:tid 31645] [client 4.241.233.134:10930] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/406.php"] [unique_id "aVkir_UV_PU2SWgLPuhpCQAAAY0"]
[Sat Jan 03 22:07:44.061664 2026] [:error] [pid 2083:tid 2103] [client 4.241.233.134:11000] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aVkisDVlR_BmlMPnhV4iNwAAANI"]
[Sat Jan 03 22:07:44.369989 2026] [:error] [pid 31222:tid 31224] [client 4.241.233.134:10941] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aVkisKHw6nASHXAc2v_w6QAAAcA"]
[Sat Jan 03 22:07:44.671023 2026] [:error] [pid 34260:tid 34267] [client 4.241.233.134:10891] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aVkisEWWhyvZ0O9KNVQtFQAAAQU"]
[Sat Jan 03 22:07:45.001702 2026] [:error] [pid 1930:tid 1989] [client 4.241.233.134:10951] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mariju.php"] [unique_id "aVkisZP-6mqhfUDa89ztiwAAAFc"]
[Sat Jan 03 22:07:45.235874 2026] [:error] [pid 2083:tid 2108] [client 4.241.233.134:10898] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkisTVlR_BmlMPnhV4iOAAAANc"]
[Sat Jan 03 22:07:45.513757 2026] [:error] [pid 19639:tid 19659] [client 4.241.233.134:10986] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkisSQ7fWZUytnlHEwGAgAAAVI"]
[Sat Jan 03 22:07:45.876904 2026] [:error] [pid 31630:tid 31638] [client 4.241.233.134:10903] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkisfUV_PU2SWgLPuhpCgAAAYY"]
[Sat Jan 03 22:07:46.162182 2026] [:error] [pid 34260:tid 34266] [client 4.241.233.134:10889] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVkiskWWhyvZ0O9KNVQtGwAAAQQ"]
[Sat Jan 03 22:07:46.544863 2026] [:error] [pid 34260:tid 34275] [client 4.241.233.134:11020] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aVkiskWWhyvZ0O9KNVQtHAAAAQ0"]
[Sat Jan 03 22:07:46.866840 2026] [:error] [pid 2083:tid 2100] [client 4.241.233.134:10996] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aVkisjVlR_BmlMPnhV4iOgAAAM8"]
[Sat Jan 03 22:07:47.096658 2026] [:error] [pid 34260:tid 34264] [client 4.241.233.134:10929] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aVkis0WWhyvZ0O9KNVQtHwAAAQI"]
[Sat Jan 03 22:07:47.334546 2026] [:error] [pid 34260:tid 34271] [client 4.241.233.134:10987] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aVkis0WWhyvZ0O9KNVQtIAAAAQk"]
[Sat Jan 03 22:07:47.587492 2026] [:error] [pid 34260:tid 34269] [client 4.241.233.134:11113] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aVkis0WWhyvZ0O9KNVQtIQAAAQc"]
[Sat Jan 03 22:07:47.842254 2026] [:error] [pid 34260:tid 34285] [client 4.241.233.134:10999] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aVkis0WWhyvZ0O9KNVQtIwAAARc"]
[Sat Jan 03 22:07:48.069478 2026] [:error] [pid 1931:tid 2047] [client 4.241.233.134:10885] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aVkitB8Tyw7ZoIdXlcYMFgAAAJc"]
[Sat Jan 03 22:07:48.512857 2026] [:error] [pid 1931:tid 2045] [client 4.241.233.134:10948] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zfile.php"] [unique_id "aVkitB8Tyw7ZoIdXlcYMFwAAAJU"]
[Sat Jan 03 22:07:48.743628 2026] [:error] [pid 19639:tid 19651] [client 4.241.233.134:10905] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aVkitCQ7fWZUytnlHEwGAwAAAUo"]
[Sat Jan 03 22:07:49.057485 2026] [:error] [pid 34260:tid 34262] [client 4.241.233.134:10977] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aVkitUWWhyvZ0O9KNVQtJQAAAQA"]
[Sat Jan 03 22:07:49.339647 2026] [:error] [pid 1931:tid 2039] [client 4.241.233.134:11055] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aVkitR8Tyw7ZoIdXlcYMGAAAAI8"]
[Sat Jan 03 22:07:49.683649 2026] [:error] [pid 34260:tid 34277] [client 4.241.233.134:10995] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/NewFile.php"] [unique_id "aVkitUWWhyvZ0O9KNVQtJgAAAQ8"]
[Sat Jan 03 22:07:49.947361 2026] [:error] [pid 34260:tid 34268] [client 4.241.233.134:10883] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVkitUWWhyvZ0O9KNVQtJwAAAQY"]
[Sat Jan 03 22:07:50.192595 2026] [:error] [pid 1931:tid 2037] [client 4.241.233.134:10969] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVkith8Tyw7ZoIdXlcYMGQAAAI0"]
[Sat Jan 03 22:07:50.437087 2026] [:error] [pid 1931:tid 2035] [client 4.241.233.134:10952] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVkith8Tyw7ZoIdXlcYMHQAAAIs"]
[Sat Jan 03 22:07:50.687658 2026] [:error] [pid 34260:tid 34267] [client 4.241.233.134:11134] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVkitkWWhyvZ0O9KNVQtKAAAAQU"]
[Sat Jan 03 22:07:50.931565 2026] [:error] [pid 1931:tid 2031] [client 4.241.233.134:10856] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aVkith8Tyw7ZoIdXlcYMHgAAAIc"]
[Sat Jan 03 22:07:51.190874 2026] [:error] [pid 31222:tid 31245] [client 4.241.233.134:10887] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aVkit6Hw6nASHXAc2v_w6gAAAdU"]
[Sat Jan 03 22:07:51.456262 2026] [:error] [pid 1931:tid 1993] [client 4.241.233.134:11023] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aVkitx8Tyw7ZoIdXlcYMHwAAAIA"]
[Sat Jan 03 22:07:51.752008 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:11140] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ant.php"] [unique_id "aVkitx8Tyw7ZoIdXlcYMIAAAAJM"]
[Sat Jan 03 22:07:52.013319 2026] [:error] [pid 34260:tid 34282] [client 4.241.233.134:10886] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aVkiuEWWhyvZ0O9KNVQtKgAAARQ"]
[Sat Jan 03 22:07:52.308004 2026] [:error] [pid 31630:tid 31642] [client 4.241.233.134:11033] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aVkiuPUV_PU2SWgLPuhpDgAAAYo"]
[Sat Jan 03 22:07:52.622640 2026] [:error] [pid 1929:tid 1948] [client 4.241.233.134:10816] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aVkiuOcFqdpu6TNsuWr3MgAAAAo"]
[Sat Jan 03 22:07:52.875767 2026] [:error] [pid 31630:tid 31656] [client 4.241.233.134:11001] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlex.php"] [unique_id "aVkiuPUV_PU2SWgLPuhpDwAAAZg"]
[Sat Jan 03 22:07:53.126704 2026] [:error] [pid 2083:tid 2101] [client 4.241.233.134:10888] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkiuTVlR_BmlMPnhV4iQwAAANA"]
[Sat Jan 03 22:07:53.380672 2026] [:error] [pid 31630:tid 31649] [client 4.241.233.134:10909] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkiufUV_PU2SWgLPuhpEAAAAZE"]
[Sat Jan 03 22:07:53.693404 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:10989] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkiuR8Tyw7ZoIdXlcYMIQAAAII"]
[Sat Jan 03 22:07:53.995266 2026] [:error] [pid 1931:tid 2036] [client 4.241.233.134:10917] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkiuR8Tyw7ZoIdXlcYMIgAAAIw"]
[Sat Jan 03 22:07:54.230623 2026] [:error] [pid 1931:tid 2030] [client 4.241.233.134:10902] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aVkiuh8Tyw7ZoIdXlcYMJAAAAIY"]
[Sat Jan 03 22:07:54.462142 2026] [:error] [pid 1929:tid 1943] [client 4.241.233.134:10993] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aVkiuucFqdpu6TNsuWr3MwAAAAU"]
[Sat Jan 03 22:07:54.727493 2026] [:error] [pid 1929:tid 1962] [client 4.241.233.134:10928] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aVkiuucFqdpu6TNsuWr3NQAAABg"]
[Sat Jan 03 22:07:54.992462 2026] [:error] [pid 1929:tid 1949] [client 4.241.233.134:10919] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aVkiuucFqdpu6TNsuWr3NgAAAAs"]
[Sat Jan 03 22:07:55.266889 2026] [:error] [pid 1929:tid 1959] [client 4.241.233.134:10980] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVkiu-cFqdpu6TNsuWr3OAAAABU"]
[Sat Jan 03 22:07:55.494206 2026] [:error] [pid 1931:tid 1999] [client 4.241.233.134:10936] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVkiux8Tyw7ZoIdXlcYMJwAAAIM"]
[Sat Jan 03 22:07:55.738538 2026] [:error] [pid 1929:tid 1940] [client 4.241.233.134:10983] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVkiu-cFqdpu6TNsuWr3OwAAAAI"]
[Sat Jan 03 22:07:56.004127 2026] [:error] [pid 34260:tid 34278] [client 4.241.233.134:10896] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVkivEWWhyvZ0O9KNVQtKwAAARA"]
[Sat Jan 03 22:07:56.253846 2026] [:error] [pid 34260:tid 34266] [client 4.241.233.134:10992] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aVkivEWWhyvZ0O9KNVQtLQAAAQQ"]
[Sat Jan 03 22:07:56.501770 2026] [:error] [pid 1931:tid 2047] [client 4.241.233.134:10985] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aVkivB8Tyw7ZoIdXlcYMKAAAAJc"]
[Sat Jan 03 22:07:56.740500 2026] [:error] [pid 1930:tid 1972] [client 4.241.233.134:10890] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aVkivJP-6mqhfUDa89ztjQAAAEY"]
[Sat Jan 03 22:07:56.981791 2026] [:error] [pid 1930:tid 1977] [client 4.241.233.134:11070] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc.php"] [unique_id "aVkivJP-6mqhfUDa89ztjgAAAEs"]
[Sat Jan 03 22:07:57.257624 2026] [:error] [pid 19639:tid 19642] [client 4.241.233.134:11057] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aVkivSQ7fWZUytnlHEwGCQAAAUE"]
[Sat Jan 03 22:07:57.513446 2026] [:error] [pid 1930:tid 1980] [client 4.241.233.134:10916] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aVkivZP-6mqhfUDa89ztjwAAAE4"]
[Sat Jan 03 22:07:57.764856 2026] [:error] [pid 1930:tid 1976] [client 4.241.233.134:10893] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aVkivZP-6mqhfUDa89ztkAAAAEo"]
[Sat Jan 03 22:07:58.050503 2026] [:error] [pid 1929:tid 1950] [client 4.241.233.134:10881] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lc.php"] [unique_id "aVkivucFqdpu6TNsuWr3PQAAAAw"]
[Sat Jan 03 22:07:58.311899 2026] [:error] [pid 31630:tid 31636] [client 4.241.233.134:10832] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aVkivvUV_PU2SWgLPuhpEgAAAYQ"]
[Sat Jan 03 22:07:58.587589 2026] [:error] [pid 1929:tid 1952] [client 4.241.233.134:11028] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aVkivucFqdpu6TNsuWr3PgAAAA4"]
[Sat Jan 03 22:07:58.850080 2026] [:error] [pid 34260:tid 34270] [client 4.241.233.134:10819] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aVkivkWWhyvZ0O9KNVQtMAAAAQg"]
[Sat Jan 03 22:07:59.165454 2026] [:error] [pid 19639:tid 19658] [client 4.241.233.134:11104] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mlex.php"] [unique_id "aVkivyQ7fWZUytnlHEwGDAAAAVE"]
[Sat Jan 03 22:07:59.395688 2026] [:error] [pid 1929:tid 1955] [client 4.241.233.134:11002] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVkiv-cFqdpu6TNsuWr3PwAAABE"]
[Sat Jan 03 22:07:59.638651 2026] [:error] [pid 19639:tid 19655] [client 4.241.233.134:11098] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVkivyQ7fWZUytnlHEwGDQAAAU4"]
[Sat Jan 03 22:07:59.932760 2026] [:error] [pid 1929:tid 1954] [client 4.241.233.134:11066] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVkiv-cFqdpu6TNsuWr3QQAAABA"]
[Sat Jan 03 22:08:00.197773 2026] [:error] [pid 34260:tid 34286] [client 4.241.233.134:10797] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVkiwEWWhyvZ0O9KNVQtMQAAARg"]
[Sat Jan 03 22:08:00.484622 2026] [:error] [pid 34260:tid 34285] [client 4.241.233.134:10956] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkiwEWWhyvZ0O9KNVQtNAAAARc"]
[Sat Jan 03 22:08:00.785106 2026] [:error] [pid 31630:tid 31655] [client 4.241.233.134:10942] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkiwPUV_PU2SWgLPuhpFQAAAZc"]
[Sat Jan 03 22:08:01.073536 2026] [:error] [pid 31630:tid 31644] [client 4.241.233.134:10892] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkiwfUV_PU2SWgLPuhpFwAAAYw"]
[Sat Jan 03 22:08:01.346936 2026] [:error] [pid 19639:tid 19664] [client 4.241.233.134:10963] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkiwSQ7fWZUytnlHEwGDgAAAVc"]
[Sat Jan 03 22:08:01.597129 2026] [:error] [pid 34260:tid 34262] [client 4.241.233.134:11091] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aVkiwUWWhyvZ0O9KNVQtNQAAAQA"]
[Sat Jan 03 22:08:01.931808 2026] [:error] [pid 34260:tid 34265] [client 4.241.233.134:10880] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aVkiwUWWhyvZ0O9KNVQtNwAAAQM"]
[Sat Jan 03 22:08:02.165049 2026] [:error] [pid 34260:tid 34277] [client 4.241.233.134:10957] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aVkiwkWWhyvZ0O9KNVQtOQAAAQ8"]
[Sat Jan 03 22:08:02.406894 2026] [:error] [pid 19639:tid 19665] [client 4.241.233.134:10921] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mpvloi.php"] [unique_id "aVkiwiQ7fWZUytnlHEwGDwAAAVg"]
[Sat Jan 03 22:08:02.751477 2026] [:error] [pid 1930:tid 1968] [client 4.241.233.134:10914] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aVkiwpP-6mqhfUDa89ztlgAAAEI"]
[Sat Jan 03 22:08:03.000457 2026] [:error] [pid 1929:tid 1960] [client 4.241.233.134:10884] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aVkiwucFqdpu6TNsuWr3SwAAABY"]
[Sat Jan 03 22:08:03.240032 2026] [:error] [pid 1929:tid 1938] [client 4.241.233.134:10777] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aVkiw-cFqdpu6TNsuWr3TQAAAAA"]
[Sat Jan 03 22:08:03.476598 2026] [:error] [pid 1931:tid 2046] [client 4.241.233.134:10776] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v1.php"] [unique_id "aVkiwx8Tyw7ZoIdXlcYMKgAAAJY"]
[Sat Jan 03 22:08:03.793195 2026] [:error] [pid 1931:tid 2031] [client 4.241.233.134:10984] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aVkiwx8Tyw7ZoIdXlcYMLAAAAIc"]
[Sat Jan 03 22:08:04.056894 2026] [:error] [pid 1931:tid 2041] [client 4.241.233.134:10904] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aVkixB8Tyw7ZoIdXlcYMMAAAAJE"]
[Sat Jan 03 22:08:04.399515 2026] [:error] [pid 1930:tid 1973] [client 4.241.233.134:10866] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aVkixJP-6mqhfUDa89ztmAAAAEc"]
[Sat Jan 03 22:08:04.639260 2026] [:error] [pid 1931:tid 1993] [client 4.241.233.134:10830] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/v2.php"] [unique_id "aVkixB8Tyw7ZoIdXlcYMMQAAAIA"]
[Sat Jan 03 22:08:04.888118 2026] [:error] [pid 1929:tid 1954] [client 4.241.233.134:10794] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aVkixOcFqdpu6TNsuWr3UgAAABA"]
[Sat Jan 03 22:08:05.148608 2026] [:error] [pid 1929:tid 1941] [client 4.241.233.134:10786] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aVkixecFqdpu6TNsuWr3VQAAAAM"]
[Sat Jan 03 22:08:05.400225 2026] [:error] [pid 1929:tid 1958] [client 4.241.233.134:10869] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aVkixecFqdpu6TNsuWr3VgAAABQ"]
[Sat Jan 03 22:08:05.649397 2026] [:error] [pid 1931:tid 2043] [client 4.241.233.134:11004] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dex.php"] [unique_id "aVkixR8Tyw7ZoIdXlcYMMwAAAJM"]
[Sat Jan 03 22:08:05.903509 2026] [:error] [pid 1931:tid 1996] [client 4.241.233.134:10897] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aVkixR8Tyw7ZoIdXlcYMNAAAAII"]
[Sat Jan 03 22:08:06.193972 2026] [:error] [pid 1931:tid 2036] [client 4.241.233.134:10854] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aVkixh8Tyw7ZoIdXlcYMNQAAAIw"]
[Sat Jan 03 22:08:06.436099 2026] [:error] [pid 31630:tid 31656] [client 4.241.233.134:11186] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aVkixvUV_PU2SWgLPuhpHAAAAZg"]
[Sat Jan 03 22:08:06.671805 2026] [:error] [pid 1929:tid 1948] [client 4.241.233.134:10821] [client 4.241.233.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/angelV2.php"] [unique_id "aVkixucFqdpu6TNsuWr3VwAAAAo"]
[Sat Jan 03 22:18:01.537132 2026] [:error] [pid 1930:tid 1973] [client 43.157.188.74:49206] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVklGZP-6mqhfUDa89zvgAAAAEc"]
[Sat Jan 03 22:31:59.737312 2026] [:error] [pid 34260:tid 34265] [client 182.42.110.255:39571] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVkoX0WWhyvZ0O9KNVQyHgAAAQM"]
[Sat Jan 03 23:02:59.540090 2026] [proxy_fcgi:error] [pid 31630:tid 31656] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:02:59.676813 2026] [proxy_fcgi:error] [pid 31630:tid 31640] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:02:59.822462 2026] [proxy_fcgi:error] [pid 31630:tid 31652] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:00.083085 2026] [proxy_fcgi:error] [pid 31630:tid 31651] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:00.274806 2026] [proxy_fcgi:error] [pid 31630:tid 31632] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:00.416668 2026] [proxy_fcgi:error] [pid 31630:tid 31650] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:00.569222 2026] [proxy_fcgi:error] [pid 31630:tid 31636] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:00.808744 2026] [proxy_fcgi:error] [pid 31630:tid 31643] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:00.947336 2026] [proxy_fcgi:error] [pid 31630:tid 31647] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:01.086226 2026] [proxy_fcgi:error] [pid 31630:tid 31649] [client 20.214.241.50:23655] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:03:01.298455 2026] [:error] [pid 31630:tid 31635] [client 20.214.241.50:23655] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aVkvpfUV_PU2SWgLPuhzzQAAAYM"]
[Sat Jan 03 23:03:01.701087 2026] [:error] [pid 1931:tid 2036] [client 20.214.241.50:2408] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aVkvpR8Tyw7ZoIdXlcYeWwAAAIw"]
[Sat Jan 03 23:03:02.193445 2026] [:error] [pid 19639:tid 19647] [client 20.214.241.50:2691] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aVkvpiQ7fWZUytnlHEwPXQAAAUY"]
[Sat Jan 03 23:03:02.600307 2026] [:error] [pid 1929:tid 1951] [client 20.214.241.50:2371] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aVkvpucFqdpu6TNsuWoE5gAAAA0"]
[Sat Jan 03 23:03:03.023220 2026] [:error] [pid 1930:tid 1981] [client 20.214.241.50:17810] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aVkvp5P-6mqhfUDa89z3AAAAAE8"]
[Sat Jan 03 23:03:03.360667 2026] [:error] [pid 2083:tid 2085] [client 20.214.241.50:25575] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aVkvpzVlR_BmlMPnhV4s9wAAAMA"]
[Sat Jan 03 23:03:03.960781 2026] [:error] [pid 1929:tid 1954] [client 20.214.241.50:25576] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aVkvp-cFqdpu6TNsuWoE5wAAABA"]
[Sat Jan 03 23:03:04.276860 2026] [:error] [pid 2083:tid 2101] [client 20.214.241.50:17836] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aVkvqDVlR_BmlMPnhV4s-QAAANA"]
[Sat Jan 03 23:03:04.711514 2026] [:error] [pid 31222:tid 31232] [client 20.214.241.50:19206] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gettest.php"] [unique_id "aVkvqKHw6nASHXAc2v_7vQAAAcg"]
[Sat Jan 03 23:03:05.123271 2026] [:error] [pid 1930:tid 1990] [client 20.214.241.50:2399] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gettest.php"] [unique_id "aVkvqZP-6mqhfUDa89z3BQAAAFg"]
[Sat Jan 03 23:03:05.435304 2026] [:error] [pid 19639:tid 19654] [client 20.214.241.50:49561] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gettest.php"] [unique_id "aVkvqSQ7fWZUytnlHEwPYQAAAU0"]
[Sat Jan 03 23:03:05.809303 2026] [:error] [pid 2083:tid 2089] [client 20.214.241.50:45297] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gettest.php"] [unique_id "aVkvqTVlR_BmlMPnhV4s-gAAAMQ"]
[Sat Jan 03 23:03:06.300523 2026] [:error] [pid 19639:tid 19656] [client 20.214.241.50:19255] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/51.php"] [unique_id "aVkvqiQ7fWZUytnlHEwPZAAAAU8"]
[Sat Jan 03 23:03:06.802579 2026] [:error] [pid 31222:tid 31226] [client 20.214.241.50:19235] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/51.php"] [unique_id "aVkvqqHw6nASHXAc2v_7vgAAAcI"]
[Sat Jan 03 23:03:07.195883 2026] [:error] [pid 31630:tid 31656] [client 20.214.241.50:17827] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/51.php"] [unique_id "aVkvq_UV_PU2SWgLPuhz1QAAAZg"]
[Sat Jan 03 23:03:07.527047 2026] [:error] [pid 1929:tid 1941] [client 20.214.241.50:17846] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/51.php"] [unique_id "aVkvq-cFqdpu6TNsuWoE7wAAAAM"]
[Sat Jan 03 23:03:07.902945 2026] [:error] [pid 1931:tid 1994] [client 20.214.241.50:54359] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkvqx8Tyw7ZoIdXlcYeYAAAAIE"]
[Sat Jan 03 23:03:08.246984 2026] [:error] [pid 2083:tid 2092] [client 20.214.241.50:49545] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkvrDVlR_BmlMPnhV4s_gAAAMc"]
[Sat Jan 03 23:03:08.589861 2026] [:error] [pid 1929:tid 1961] [client 20.214.241.50:54378] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkvrOcFqdpu6TNsuWoE8gAAABc"]
[Sat Jan 03 23:03:09.235746 2026] [:error] [pid 2083:tid 2107] [client 20.214.241.50:29755] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVkvrTVlR_BmlMPnhV4tAAAAANY"]
[Sat Jan 03 23:03:09.559641 2026] [:error] [pid 1931:tid 1993] [client 20.214.241.50:26757] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aVkvrR8Tyw7ZoIdXlcYeZQAAAIA"]
[Sat Jan 03 23:03:10.064280 2026] [:error] [pid 34260:tid 34266] [client 20.214.241.50:27439] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aVkvrkWWhyvZ0O9KNVQ34gAAAQQ"]
[Sat Jan 03 23:03:10.505868 2026] [:error] [pid 1931:tid 2035] [client 20.214.241.50:44463] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aVkvrh8Tyw7ZoIdXlcYebQAAAIs"]
[Sat Jan 03 23:03:10.814315 2026] [:error] [pid 1931:tid 2038] [client 20.214.241.50:44498] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aVkvrh8Tyw7ZoIdXlcYecAAAAI4"]
[Sat Jan 03 23:03:11.198405 2026] [:error] [pid 1929:tid 1942] [client 20.214.241.50:26473] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f2f.php"] [unique_id "aVkvr-cFqdpu6TNsuWoE9AAAAAQ"]
[Sat Jan 03 23:03:11.593212 2026] [:error] [pid 2083:tid 2087] [client 20.214.241.50:55885] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f2f.php"] [unique_id "aVkvrzVlR_BmlMPnhV4tBAAAAMI"]
[Sat Jan 03 23:03:11.897387 2026] [:error] [pid 2083:tid 2097] [client 20.214.241.50:26789] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f2f.php"] [unique_id "aVkvrzVlR_BmlMPnhV4tBQAAAMw"]
[Sat Jan 03 23:03:12.199005 2026] [:error] [pid 1930:tid 1988] [client 20.214.241.50:29751] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f2f.php"] [unique_id "aVkvsJP-6mqhfUDa89z3CQAAAFY"]
[Sat Jan 03 23:03:12.669254 2026] [:error] [pid 1931:tid 2030] [client 20.214.241.50:26417] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ths.php"] [unique_id "aVkvsB8Tyw7ZoIdXlcYecwAAAIY"]
[Sat Jan 03 23:03:13.119105 2026] [:error] [pid 1930:tid 1987] [client 20.214.241.50:26777] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ths.php"] [unique_id "aVkvsZP-6mqhfUDa89z3CwAAAFU"]
[Sat Jan 03 23:03:13.527206 2026] [:error] [pid 1929:tid 1962] [client 20.214.241.50:29736] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ths.php"] [unique_id "aVkvsecFqdpu6TNsuWoE-gAAABg"]
[Sat Jan 03 23:03:14.191165 2026] [:error] [pid 1929:tid 1954] [client 20.214.241.50:19902] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ths.php"] [unique_id "aVkvsucFqdpu6TNsuWoE_AAAABA"]
[Sat Jan 03 23:03:14.617944 2026] [:error] [pid 1930:tid 1985] [client 20.214.241.50:26433] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xw.php"] [unique_id "aVkvspP-6mqhfUDa89z3DQAAAFM"]
[Sat Jan 03 23:03:15.059583 2026] [:error] [pid 1929:tid 1944] [client 20.214.241.50:26388] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xw.php"] [unique_id "aVkvs-cFqdpu6TNsuWoE_QAAAAY"]
[Sat Jan 03 23:03:15.521401 2026] [:error] [pid 34260:tid 34282] [client 20.214.241.50:44434] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xw.php"] [unique_id "aVkvs0WWhyvZ0O9KNVQ36QAAARQ"]
[Sat Jan 03 23:03:15.996691 2026] [:error] [pid 1929:tid 1945] [client 20.214.241.50:26805] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xw.php"] [unique_id "aVkvs-cFqdpu6TNsuWoFAAAAAAc"]
[Sat Jan 03 23:03:16.407011 2026] [:error] [pid 31630:tid 31650] [client 20.214.241.50:47682] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVkvtPUV_PU2SWgLPuhz3AAAAZI"]
[Sat Jan 03 23:03:16.703072 2026] [:error] [pid 31630:tid 31636] [client 20.214.241.50:44538] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVkvtPUV_PU2SWgLPuhz3QAAAYQ"]
[Sat Jan 03 23:03:16.998485 2026] [:error] [pid 31630:tid 31643] [client 20.214.241.50:44508] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVkvtPUV_PU2SWgLPuhz3gAAAYs"]
[Sat Jan 03 23:03:17.342068 2026] [:error] [pid 1931:tid 2045] [client 20.214.241.50:44497] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVkvtR8Tyw7ZoIdXlcYeeQAAAJU"]
[Sat Jan 03 23:03:17.709402 2026] [:error] [pid 31222:tid 31248] [client 20.214.241.50:44478] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aVkvtaHw6nASHXAc2v_7xQAAAdg"]
[Sat Jan 03 23:03:18.099623 2026] [:error] [pid 1929:tid 1960] [client 20.214.241.50:27444] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aVkvtucFqdpu6TNsuWoFAwAAABY"]
[Sat Jan 03 23:03:18.433362 2026] [:error] [pid 2083:tid 2090] [client 20.214.241.50:13373] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aVkvtjVlR_BmlMPnhV4tDAAAAMU"]
[Sat Jan 03 23:03:18.740343 2026] [:error] [pid 1930:tid 1982] [client 20.214.241.50:55912] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aVkvtpP-6mqhfUDa89z3EQAAAFA"]
[Sat Jan 03 23:03:19.082383 2026] [:error] [pid 31630:tid 31649] [client 20.214.241.50:29710] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVkvt_UV_PU2SWgLPuhz4QAAAZE"]
[Sat Jan 03 23:03:19.370363 2026] [:error] [pid 31630:tid 31635] [client 20.214.241.50:25545] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVkvt_UV_PU2SWgLPuhz4gAAAYM"]
[Sat Jan 03 23:03:19.677283 2026] [:error] [pid 1929:tid 1938] [client 20.214.241.50:26781] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVkvt-cFqdpu6TNsuWoFBgAAAAA"]
[Sat Jan 03 23:03:20.078720 2026] [:error] [pid 31630:tid 31653] [client 20.214.241.50:55892] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVkvuPUV_PU2SWgLPuhz5AAAAZU"]
[Sat Jan 03 23:03:20.399754 2026] [:error] [pid 1929:tid 1946] [client 20.214.241.50:17837] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aVkvuOcFqdpu6TNsuWoFCAAAAAg"]
[Sat Jan 03 23:03:20.699229 2026] [:error] [pid 31630:tid 31642] [client 20.214.241.50:55919] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aVkvuPUV_PU2SWgLPuhz6AAAAYo"]
[Sat Jan 03 23:03:21.052094 2026] [:error] [pid 1930:tid 1981] [client 20.214.241.50:54348] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aVkvuZP-6mqhfUDa89z3FgAAAE8"]
[Sat Jan 03 23:03:21.516304 2026] [:error] [pid 34260:tid 34285] [client 20.214.241.50:19220] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aVkvuUWWhyvZ0O9KNVQ38wAAARc"]
[Sat Jan 03 23:03:21.964706 2026] [:error] [pid 34260:tid 34266] [client 20.214.241.50:19201] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xa.php"] [unique_id "aVkvuUWWhyvZ0O9KNVQ39wAAAQQ"]
[Sat Jan 03 23:03:22.502479 2026] [:error] [pid 1931:tid 2029] [client 20.214.241.50:27417] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xa.php"] [unique_id "aVkvuh8Tyw7ZoIdXlcYegQAAAIU"]
[Sat Jan 03 23:03:22.911800 2026] [:error] [pid 2083:tid 2095] [client 20.214.241.50:19236] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xa.php"] [unique_id "aVkvujVlR_BmlMPnhV4tDQAAAMo"]
[Sat Jan 03 23:03:23.314907 2026] [:error] [pid 1931:tid 2047] [client 20.214.241.50:27416] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xa.php"] [unique_id "aVkvux8Tyw7ZoIdXlcYegwAAAJc"]
[Sat Jan 03 23:03:23.673464 2026] [:error] [pid 1929:tid 1943] [client 20.214.241.50:49581] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asf.php"] [unique_id "aVkvu-cFqdpu6TNsuWoFCwAAAAU"]
[Sat Jan 03 23:03:24.124184 2026] [:error] [pid 34260:tid 34272] [client 20.214.241.50:17817] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asf.php"] [unique_id "aVkvvEWWhyvZ0O9KNVQ3-wAAAQo"]
[Sat Jan 03 23:03:24.619281 2026] [:error] [pid 1931:tid 2032] [client 20.214.241.50:23155] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asf.php"] [unique_id "aVkvvB8Tyw7ZoIdXlcYehwAAAIg"]
[Sat Jan 03 23:03:24.941447 2026] [:error] [pid 2083:tid 2108] [client 20.214.241.50:27443] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/asf.php"] [unique_id "aVkvvDVlR_BmlMPnhV4tEAAAANc"]
[Sat Jan 03 23:03:25.305970 2026] [:error] [pid 34260:tid 34273] [client 20.214.241.50:29716] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f8.php"] [unique_id "aVkvvUWWhyvZ0O9KNVQ3_wAAAQs"]
[Sat Jan 03 23:03:25.758028 2026] [:error] [pid 34260:tid 34280] [client 20.214.241.50:19242] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f8.php"] [unique_id "aVkvvUWWhyvZ0O9KNVQ4AQAAARI"]
[Sat Jan 03 23:03:26.088262 2026] [:error] [pid 31630:tid 31650] [client 20.214.241.50:17851] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f8.php"] [unique_id "aVkvvvUV_PU2SWgLPuhz8gAAAZI"]
[Sat Jan 03 23:03:26.416739 2026] [:error] [pid 31630:tid 31636] [client 20.214.241.50:26756] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f8.php"] [unique_id "aVkvvvUV_PU2SWgLPuhz8wAAAYQ"]
[Sat Jan 03 23:03:26.896058 2026] [:error] [pid 19639:tid 19655] [client 20.214.241.50:26814] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVkvviQ7fWZUytnlHEwPcwAAAU4"]
[Sat Jan 03 23:03:27.363485 2026] [:error] [pid 2083:tid 2107] [client 20.214.241.50:32512] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVkvvzVlR_BmlMPnhV4tEQAAANY"]
[Sat Jan 03 23:03:27.723620 2026] [:error] [pid 31630:tid 31653] [client 20.214.241.50:54347] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVkvv_UV_PU2SWgLPuhz9wAAAZU"]
[Sat Jan 03 23:03:28.092089 2026] [:error] [pid 1929:tid 1951] [client 20.214.241.50:29748] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVkvwOcFqdpu6TNsuWoFEAAAAA0"]
[Sat Jan 03 23:03:28.432398 2026] [:error] [pid 2083:tid 2105] [client 20.214.241.50:27410] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVkvwDVlR_BmlMPnhV4tEwAAANQ"]
[Sat Jan 03 23:03:28.775329 2026] [:error] [pid 1930:tid 1966] [client 20.214.241.50:19252] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVkvwJP-6mqhfUDa89z3GQAAAEA"]
[Sat Jan 03 23:03:29.158742 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:26457] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVkvwR8Tyw7ZoIdXlcYejAAAAJM"]
[Sat Jan 03 23:03:30.254124 2026] [:error] [pid 31630:tid 31645] [client 20.214.241.50:29699] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVkvwvUV_PU2SWgLPuhz-AAAAY0"]
[Sat Jan 03 23:03:30.599484 2026] [:error] [pid 1931:tid 2044] [client 20.214.241.50:27427] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVkvwh8Tyw7ZoIdXlcYejwAAAJQ"]
[Sat Jan 03 23:03:30.986155 2026] [:error] [pid 1931:tid 2040] [client 20.214.241.50:2412] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVkvwh8Tyw7ZoIdXlcYekQAAAJA"]
[Sat Jan 03 23:03:31.433128 2026] [:error] [pid 1931:tid 2038] [client 20.214.241.50:19247] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVkvwx8Tyw7ZoIdXlcYekwAAAI4"]
[Sat Jan 03 23:03:31.856588 2026] [:error] [pid 34260:tid 34285] [client 20.214.241.50:29733] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVkvw0WWhyvZ0O9KNVQ4CgAAARc"]
[Sat Jan 03 23:03:32.354945 2026] [:error] [pid 2083:tid 2087] [client 20.214.241.50:19218] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVkvxDVlR_BmlMPnhV4tFwAAAMI"]
[Sat Jan 03 23:03:32.706647 2026] [:error] [pid 19639:tid 19648] [client 20.214.241.50:45266] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVkvxCQ7fWZUytnlHEwPdwAAAUc"]
[Sat Jan 03 23:03:33.076262 2026] [:error] [pid 1931:tid 2029] [client 20.214.241.50:23118] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVkvxR8Tyw7ZoIdXlcYelQAAAIU"]
[Sat Jan 03 23:03:33.478420 2026] [:error] [pid 34260:tid 34277] [client 20.214.241.50:33087] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVkvxUWWhyvZ0O9KNVQ4DgAAAQ8"]
[Sat Jan 03 23:03:34.142610 2026] [:error] [pid 1931:tid 2041] [client 20.214.241.50:23128] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xe.php"] [unique_id "aVkvxh8Tyw7ZoIdXlcYemQAAAJE"]
[Sat Jan 03 23:03:34.486871 2026] [:error] [pid 19639:tid 19653] [client 20.214.241.50:25560] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xe.php"] [unique_id "aVkvxiQ7fWZUytnlHEwPeAAAAUw"]
[Sat Jan 03 23:03:35.032877 2026] [:error] [pid 1931:tid 1999] [client 20.214.241.50:49546] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xe.php"] [unique_id "aVkvxx8Tyw7ZoIdXlcYenQAAAIM"]
[Sat Jan 03 23:03:35.576969 2026] [:error] [pid 31222:tid 31247] [client 20.214.241.50:54343] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xe.php"] [unique_id "aVkvx6Hw6nASHXAc2v_72gAAAdc"]
[Sat Jan 03 23:03:35.892754 2026] [:error] [pid 1929:tid 1940] [client 20.214.241.50:19250] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVkvx-cFqdpu6TNsuWoFEwAAAAI"]
[Sat Jan 03 23:03:36.355473 2026] [:error] [pid 1931:tid 2038] [client 20.214.241.50:25541] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVkvyB8Tyw7ZoIdXlcYepAAAAI4"]
[Sat Jan 03 23:03:36.720763 2026] [:error] [pid 31222:tid 31243] [client 20.214.241.50:30441] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVkvyKHw6nASHXAc2v_73AAAAdM"]
[Sat Jan 03 23:03:37.064875 2026] [:error] [pid 34260:tid 34282] [client 20.214.241.50:2429] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVkvyUWWhyvZ0O9KNVQ4EwAAARQ"]
[Sat Jan 03 23:03:37.481725 2026] [:error] [pid 1930:tid 1971] [client 20.214.241.50:33791] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVkvyZP-6mqhfUDa89z3IgAAAEU"]
[Sat Jan 03 23:03:37.891130 2026] [:error] [pid 1929:tid 1957] [client 20.214.241.50:25559] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVkvyecFqdpu6TNsuWoFFQAAABM"]
[Sat Jan 03 23:03:38.283465 2026] [:error] [pid 1929:tid 1948] [client 20.214.241.50:31492] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVkvyucFqdpu6TNsuWoFFwAAAAo"]
[Sat Jan 03 23:03:38.627322 2026] [:error] [pid 31222:tid 31233] [client 20.214.241.50:49599] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVkvyqHw6nASHXAc2v_74gAAAck"]
[Sat Jan 03 23:03:38.980176 2026] [:error] [pid 1929:tid 1938] [client 20.214.241.50:35571] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVkvyucFqdpu6TNsuWoFGgAAAAA"]
[Sat Jan 03 23:03:39.434683 2026] [:error] [pid 1929:tid 1961] [client 20.214.241.50:2417] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVkvy-cFqdpu6TNsuWoFGwAAABc"]
[Sat Jan 03 23:03:39.970408 2026] [:error] [pid 31222:tid 31228] [client 20.214.241.50:30450] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVkvy6Hw6nASHXAc2v_75AAAAcQ"]
[Sat Jan 03 23:03:40.345405 2026] [:error] [pid 1929:tid 1946] [client 20.214.241.50:50382] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVkvzOcFqdpu6TNsuWoFHAAAAAg"]
[Sat Jan 03 23:03:40.745943 2026] [:error] [pid 1930:tid 1970] [client 20.214.241.50:31538] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws13.php"] [unique_id "aVkvzJP-6mqhfUDa89z3JgAAAEQ"]
[Sat Jan 03 23:03:41.265329 2026] [:error] [pid 31630:tid 31654] [client 20.214.241.50:35535] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws13.php"] [unique_id "aVkvzfUV_PU2SWgLPuhz_AAAAZY"]
[Sat Jan 03 23:03:41.738016 2026] [:error] [pid 31630:tid 31637] [client 20.214.241.50:35544] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws13.php"] [unique_id "aVkvzfUV_PU2SWgLPuhz_gAAAYU"]
[Sat Jan 03 23:03:42.137633 2026] [:error] [pid 2083:tid 2090] [client 20.214.241.50:49543] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws13.php"] [unique_id "aVkvzjVlR_BmlMPnhV4tIAAAAMU"]
[Sat Jan 03 23:03:42.588285 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:31935] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss1.php"] [unique_id "aVkvzjVlR_BmlMPnhV4tIQAAANU"]
[Sat Jan 03 23:03:42.989454 2026] [:error] [pid 31630:tid 31633] [client 20.214.241.50:35577] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss1.php"] [unique_id "aVkvzvUV_PU2SWgLPuhz_wAAAYE"]
[Sat Jan 03 23:03:43.483502 2026] [:error] [pid 19639:tid 19659] [client 20.214.241.50:17117] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss1.php"] [unique_id "aVkvzyQ7fWZUytnlHEwPgAAAAVI"]
[Sat Jan 03 23:03:43.822862 2026] [:error] [pid 34260:tid 34263] [client 20.214.241.50:2487] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ss1.php"] [unique_id "aVkvz0WWhyvZ0O9KNVQ4JQAAAQE"]
[Sat Jan 03 23:03:44.165691 2026] [:error] [pid 1929:tid 1944] [client 20.214.241.50:2449] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww7.php"] [unique_id "aVkv0OcFqdpu6TNsuWoFJQAAAAY"]
[Sat Jan 03 23:03:44.529625 2026] [:error] [pid 1930:tid 1966] [client 20.214.241.50:30417] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww7.php"] [unique_id "aVkv0JP-6mqhfUDa89z3KgAAAEA"]
[Sat Jan 03 23:03:44.980563 2026] [:error] [pid 31630:tid 31646] [client 20.214.241.50:17112] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww7.php"] [unique_id "aVkv0PUV_PU2SWgLPuh0AAAAAY4"]
[Sat Jan 03 23:03:45.367101 2026] [:error] [pid 31630:tid 31640] [client 20.214.241.50:17150] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww7.php"] [unique_id "aVkv0fUV_PU2SWgLPuh0AgAAAYg"]
[Sat Jan 03 23:03:45.740954 2026] [:error] [pid 1930:tid 1968] [client 20.214.241.50:2495] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aVkv0ZP-6mqhfUDa89z3LAAAAEI"]
[Sat Jan 03 23:03:46.188339 2026] [:error] [pid 1929:tid 1938] [client 20.214.241.50:2441] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aVkv0ucFqdpu6TNsuWoFKwAAAAA"]
[Sat Jan 03 23:03:46.552346 2026] [:error] [pid 1929:tid 1946] [client 20.214.241.50:17149] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aVkv0ucFqdpu6TNsuWoFLQAAAAg"]
[Sat Jan 03 23:03:46.857393 2026] [:error] [pid 31222:tid 31243] [client 20.214.241.50:17113] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aVkv0qHw6nASHXAc2v_76QAAAdM"]
[Sat Jan 03 23:03:47.251230 2026] [:error] [pid 19639:tid 19655] [client 20.214.241.50:17140] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVkv0yQ7fWZUytnlHEwPhQAAAU4"]
[Sat Jan 03 23:03:47.714652 2026] [:error] [pid 31222:tid 31230] [client 20.214.241.50:13591] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVkv06Hw6nASHXAc2v_76gAAAcY"]
[Sat Jan 03 23:03:48.000805 2026] [:error] [pid 34260:tid 34262] [client 20.214.241.50:39670] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVkv00WWhyvZ0O9KNVQ4LAAAAQA"]
[Sat Jan 03 23:03:48.367328 2026] [:error] [pid 34260:tid 34281] [client 20.214.241.50:13581] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVkv1EWWhyvZ0O9KNVQ4LQAAARM"]
[Sat Jan 03 23:03:48.786611 2026] [:error] [pid 2083:tid 2102] [client 20.214.241.50:17094] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVkv1DVlR_BmlMPnhV4tKgAAANE"]
[Sat Jan 03 23:03:49.299589 2026] [:error] [pid 31630:tid 31636] [client 20.214.241.50:35527] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVkv1fUV_PU2SWgLPuh0BwAAAYQ"]
[Sat Jan 03 23:03:49.601331 2026] [:error] [pid 31630:tid 31649] [client 20.214.241.50:49632] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVkv1fUV_PU2SWgLPuh0CgAAAZE"]
[Sat Jan 03 23:03:50.054485 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:51077] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVkv1jVlR_BmlMPnhV4tMQAAANU"]
[Sat Jan 03 23:03:50.562382 2026] [:error] [pid 1931:tid 2041] [client 20.214.241.50:13593] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVkv1h8Tyw7ZoIdXlcYeuQAAAJE"]
[Sat Jan 03 23:03:51.042411 2026] [:error] [pid 1931:tid 2048] [client 20.214.241.50:2476] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVkv1x8Tyw7ZoIdXlcYevAAAAJg"]
[Sat Jan 03 23:03:51.389161 2026] [:error] [pid 1930:tid 1985] [client 20.214.241.50:32586] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVkv15P-6mqhfUDa89z3MgAAAFM"]
[Sat Jan 03 23:03:51.781817 2026] [:error] [pid 1930:tid 1980] [client 20.214.241.50:2439] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVkv15P-6mqhfUDa89z3MwAAAE4"]
[Sat Jan 03 23:03:52.186454 2026] [:error] [pid 1929:tid 1959] [client 20.214.241.50:39644] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVkv2OcFqdpu6TNsuWoFNQAAABU"]
[Sat Jan 03 23:03:52.596799 2026] [:error] [pid 31630:tid 31637] [client 20.214.241.50:30370] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVkv2PUV_PU2SWgLPuh0EwAAAYU"]
[Sat Jan 03 23:03:53.009156 2026] [:error] [pid 1929:tid 1962] [client 20.214.241.50:39652] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVkv2ecFqdpu6TNsuWoFOAAAABg"]
[Sat Jan 03 23:03:53.440796 2026] [:error] [pid 2083:tid 2100] [client 20.214.241.50:39639] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVkv2TVlR_BmlMPnhV4tNgAAAM8"]
[Sat Jan 03 23:03:53.858302 2026] [:error] [pid 19639:tid 19664] [client 20.214.241.50:2543] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkv2SQ7fWZUytnlHEwPiQAAAVc"]
[Sat Jan 03 23:03:54.279945 2026] [:error] [pid 31630:tid 31632] [client 20.214.241.50:2516] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkv2vUV_PU2SWgLPuh0GQAAAYA"]
[Sat Jan 03 23:03:54.695403 2026] [:error] [pid 19639:tid 19653] [client 20.214.241.50:54295] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkv2iQ7fWZUytnlHEwPigAAAUw"]
[Sat Jan 03 23:03:55.104060 2026] [:error] [pid 2083:tid 2102] [client 20.214.241.50:39619] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVkv2zVlR_BmlMPnhV4tOwAAANE"]
[Sat Jan 03 23:03:55.614545 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:49643] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aVkv2x8Tyw7ZoIdXlcYewQAAAJM"]
[Sat Jan 03 23:03:55.966483 2026] [:error] [pid 19639:tid 19643] [client 20.214.241.50:2525] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aVkv2yQ7fWZUytnlHEwPjAAAAUI"]
[Sat Jan 03 23:03:56.362494 2026] [:error] [pid 1931:tid 2027] [client 20.214.241.50:39105] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aVkv3B8Tyw7ZoIdXlcYewgAAAIQ"]
[Sat Jan 03 23:03:56.775975 2026] [:error] [pid 1931:tid 2039] [client 20.214.241.50:13620] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rtx.php"] [unique_id "aVkv3B8Tyw7ZoIdXlcYexwAAAI8"]
[Sat Jan 03 23:03:57.331419 2026] [:error] [pid 1931:tid 2045] [client 20.214.241.50:15004] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aVkv3R8Tyw7ZoIdXlcYeywAAAJU"]
[Sat Jan 03 23:03:57.627240 2026] [:error] [pid 19639:tid 19655] [client 20.214.241.50:30399] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aVkv3SQ7fWZUytnlHEwPmAAAAU4"]
[Sat Jan 03 23:03:57.960462 2026] [:error] [pid 1929:tid 1955] [client 20.214.241.50:29275] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aVkv3ecFqdpu6TNsuWoFSAAAABE"]
[Sat Jan 03 23:03:58.384644 2026] [:error] [pid 1931:tid 2031] [client 20.214.241.50:39106] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bipas.php"] [unique_id "aVkv3h8Tyw7ZoIdXlcYe0AAAAIc"]
[Sat Jan 03 23:03:58.728294 2026] [:error] [pid 19639:tid 19653] [client 20.214.241.50:23052] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aVkv3iQ7fWZUytnlHEwPoAAAAUw"]
[Sat Jan 03 23:03:59.093642 2026] [:error] [pid 34260:tid 34275] [client 20.214.241.50:46092] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aVkv30WWhyvZ0O9KNVQ4PwAAAQ0"]
[Sat Jan 03 23:03:59.432833 2026] [:error] [pid 19639:tid 19658] [client 20.214.241.50:14976] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aVkv3yQ7fWZUytnlHEwPpAAAAVE"]
[Sat Jan 03 23:03:59.790652 2026] [:error] [pid 19639:tid 19661] [client 20.214.241.50:39135] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/conte.php"] [unique_id "aVkv3yQ7fWZUytnlHEwPqQAAAVQ"]
[Sat Jan 03 23:04:00.129946 2026] [:error] [pid 19639:tid 19665] [client 20.214.241.50:49641] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class3.php"] [unique_id "aVkv4CQ7fWZUytnlHEwPqwAAAVg"]
[Sat Jan 03 23:04:00.632498 2026] [:error] [pid 1929:tid 1945] [client 20.214.241.50:25541] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class3.php"] [unique_id "aVkv4OcFqdpu6TNsuWoFVQAAAAc"]
[Sat Jan 03 23:04:01.030605 2026] [proxy_fcgi:error] [pid 1929:tid 1956] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:01.177685 2026] [proxy_fcgi:error] [pid 1929:tid 1952] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:01.315299 2026] [proxy_fcgi:error] [pid 1929:tid 1943] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:01.469360 2026] [proxy_fcgi:error] [pid 1929:tid 1959] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:01.607964 2026] [proxy_fcgi:error] [pid 1929:tid 1951] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:01.759039 2026] [proxy_fcgi:error] [pid 1929:tid 1947] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:01.964949 2026] [proxy_fcgi:error] [pid 1929:tid 1962] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:02.108417 2026] [proxy_fcgi:error] [pid 1929:tid 1953] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:02.246784 2026] [proxy_fcgi:error] [pid 1929:tid 1960] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:02.473969 2026] [proxy_fcgi:error] [pid 1929:tid 1949] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:02.611411 2026] [proxy_fcgi:error] [pid 1929:tid 1938] [client 20.214.241.50:46142] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:04:02.746365 2026] [:error] [pid 1929:tid 1948] [client 20.214.241.50:46142] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVkv4ucFqdpu6TNsuWoFaQAAAAo"]
[Sat Jan 03 23:04:03.073078 2026] [:error] [pid 34260:tid 34274] [client 20.214.241.50:54332] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVkv40WWhyvZ0O9KNVQ4SAAAAQw"]
[Sat Jan 03 23:04:03.403009 2026] [:error] [pid 1931:tid 2046] [client 20.214.241.50:2552] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVkv4x8Tyw7ZoIdXlcYe1wAAAJY"]
[Sat Jan 03 23:04:03.734455 2026] [:error] [pid 1929:tid 1942] [client 20.214.241.50:23549] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aVkv4-cFqdpu6TNsuWoFbgAAAAQ"]
[Sat Jan 03 23:04:04.041439 2026] [:error] [pid 31222:tid 31240] [client 20.214.241.50:39673] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkv5KHw6nASHXAc2v_78QAAAdA"]
[Sat Jan 03 23:04:04.420399 2026] [:error] [pid 19639:tid 19658] [client 20.214.241.50:54326] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkv5CQ7fWZUytnlHEwPtAAAAVE"]
[Sat Jan 03 23:04:04.731779 2026] [:error] [pid 1931:tid 1994] [client 20.214.241.50:2513] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkv5B8Tyw7ZoIdXlcYe3wAAAIE"]
[Sat Jan 03 23:04:05.135274 2026] [:error] [pid 1931:tid 2033] [client 20.214.241.50:2976] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVkv5R8Tyw7ZoIdXlcYe5AAAAIk"]
[Sat Jan 03 23:04:05.658641 2026] [:error] [pid 19639:tid 19651] [client 20.214.241.50:25957] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVkv5SQ7fWZUytnlHEwPtQAAAUo"]
[Sat Jan 03 23:04:06.047694 2026] [:error] [pid 1931:tid 2032] [client 20.214.241.50:25948] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVkv5h8Tyw7ZoIdXlcYe5wAAAIg"]
[Sat Jan 03 23:04:06.485023 2026] [:error] [pid 1931:tid 1993] [client 20.214.241.50:36895] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVkv5h8Tyw7ZoIdXlcYe6gAAAIA"]
[Sat Jan 03 23:04:06.946724 2026] [:error] [pid 19639:tid 19665] [client 20.214.241.50:23072] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aVkv5iQ7fWZUytnlHEwPugAAAVg"]
[Sat Jan 03 23:04:07.296564 2026] [:error] [pid 19639:tid 19655] [client 20.214.241.50:19911] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVkv5yQ7fWZUytnlHEwPuwAAAU4"]
[Sat Jan 03 23:04:07.683464 2026] [:error] [pid 1929:tid 1959] [client 20.214.241.50:28024] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVkv5-cFqdpu6TNsuWoFcgAAABU"]
[Sat Jan 03 23:04:08.091473 2026] [:error] [pid 1931:tid 2044] [client 20.214.241.50:19942] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVkv6B8Tyw7ZoIdXlcYe7AAAAJQ"]
[Sat Jan 03 23:04:08.508375 2026] [:error] [pid 1931:tid 2035] [client 20.214.241.50:39081] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aVkv6B8Tyw7ZoIdXlcYe7gAAAIs"]
[Sat Jan 03 23:04:08.876019 2026] [:error] [pid 34260:tid 34265] [client 20.214.241.50:14533] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVkv6EWWhyvZ0O9KNVQ4UgAAAQM"]
[Sat Jan 03 23:04:09.340294 2026] [:error] [pid 1931:tid 2040] [client 20.214.241.50:39043] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVkv6R8Tyw7ZoIdXlcYe9AAAAJA"]
[Sat Jan 03 23:04:09.848024 2026] [:error] [pid 1929:tid 1950] [client 20.214.241.50:17939] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVkv6ecFqdpu6TNsuWoFdwAAAAw"]
[Sat Jan 03 23:04:10.195813 2026] [:error] [pid 34260:tid 34279] [client 20.214.241.50:14552] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aVkv6kWWhyvZ0O9KNVQ4VAAAARE"]
[Sat Jan 03 23:04:10.577428 2026] [:error] [pid 34260:tid 34280] [client 20.214.241.50:2675] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVkv6kWWhyvZ0O9KNVQ4VQAAARI"]
[Sat Jan 03 23:04:10.886582 2026] [:error] [pid 1930:tid 1981] [client 20.214.241.50:17547] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVkv6pP-6mqhfUDa89z3TgAAAE8"]
[Sat Jan 03 23:04:11.218600 2026] [:error] [pid 1930:tid 1973] [client 20.214.241.50:49641] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVkv65P-6mqhfUDa89z3UAAAAEc"]
[Sat Jan 03 23:04:11.514644 2026] [:error] [pid 34260:tid 34273] [client 20.214.241.50:17542] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ac.php"] [unique_id "aVkv60WWhyvZ0O9KNVQ4VwAAAQs"]
[Sat Jan 03 23:04:11.936066 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:40693] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVkv6x8Tyw7ZoIdXlcYe_gAAAJM"]
[Sat Jan 03 23:04:12.232885 2026] [:error] [pid 1931:tid 1999] [client 20.214.241.50:2655] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVkv7B8Tyw7ZoIdXlcYfAAAAAIM"]
[Sat Jan 03 23:04:12.534873 2026] [:error] [pid 1931:tid 2046] [client 20.214.241.50:40641] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVkv7B8Tyw7ZoIdXlcYfBQAAAJY"]
[Sat Jan 03 23:04:12.830431 2026] [:error] [pid 1931:tid 2039] [client 20.214.241.50:22781] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/az.php"] [unique_id "aVkv7B8Tyw7ZoIdXlcYfBwAAAI8"]
[Sat Jan 03 23:04:13.134383 2026] [:error] [pid 1931:tid 2030] [client 20.214.241.50:22722] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVkv7R8Tyw7ZoIdXlcYfCwAAAIY"]
[Sat Jan 03 23:04:13.468765 2026] [:error] [pid 34260:tid 34281] [client 20.214.241.50:39048] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVkv7UWWhyvZ0O9KNVQ4WQAAARM"]
[Sat Jan 03 23:04:13.781189 2026] [:error] [pid 1931:tid 2031] [client 20.214.241.50:17959] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVkv7R8Tyw7ZoIdXlcYfDwAAAIc"]
[Sat Jan 03 23:04:14.107430 2026] [:error] [pid 1930:tid 1970] [client 20.214.241.50:17548] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aVkv7pP-6mqhfUDa89z3YgAAAEQ"]
[Sat Jan 03 23:04:14.402653 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:27995] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVkv7h8Tyw7ZoIdXlcYfFAAAAJM"]
[Sat Jan 03 23:04:14.752015 2026] [:error] [pid 34260:tid 34269] [client 20.214.241.50:2662] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVkv7kWWhyvZ0O9KNVQ4XAAAAQc"]
[Sat Jan 03 23:04:15.099861 2026] [:error] [pid 1931:tid 1994] [client 20.214.241.50:47649] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVkv7x8Tyw7ZoIdXlcYfHgAAAIE"]
[Sat Jan 03 23:04:15.447916 2026] [:error] [pid 1931:tid 2040] [client 20.214.241.50:25868] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVkv7x8Tyw7ZoIdXlcYfHwAAAJA"]
[Sat Jan 03 23:04:15.770903 2026] [:error] [pid 2083:tid 2108] [client 20.214.241.50:39052] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVkv7zVlR_BmlMPnhV4tRAAAANc"]
[Sat Jan 03 23:04:16.084280 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:2658] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVkv8B8Tyw7ZoIdXlcYfJQAAAJM"]
[Sat Jan 03 23:04:16.457588 2026] [:error] [pid 1931:tid 1999] [client 20.214.241.50:14566] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVkv8B8Tyw7ZoIdXlcYfJwAAAIM"]
[Sat Jan 03 23:04:16.761147 2026] [:error] [pid 1929:tid 1938] [client 20.214.241.50:17932] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aVkv8OcFqdpu6TNsuWoFfAAAAAA"]
[Sat Jan 03 23:04:17.112991 2026] [:error] [pid 2083:tid 2091] [client 20.214.241.50:39056] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkv8TVlR_BmlMPnhV4tRQAAAMY"]
[Sat Jan 03 23:04:17.513493 2026] [:error] [pid 34260:tid 34271] [client 20.214.241.50:27981] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkv8UWWhyvZ0O9KNVQ4ZgAAAQk"]
[Sat Jan 03 23:04:17.862630 2026] [:error] [pid 19639:tid 19660] [client 20.214.241.50:22199] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkv8SQ7fWZUytnlHEwPywAAAVM"]
[Sat Jan 03 23:04:18.195937 2026] [:error] [pid 2083:tid 2100] [client 20.214.241.50:2070] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVkv8jVlR_BmlMPnhV4tRwAAAM8"]
[Sat Jan 03 23:04:18.538418 2026] [:error] [pid 34260:tid 34280] [client 20.214.241.50:22750] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkv8kWWhyvZ0O9KNVQ4aQAAARI"]
[Sat Jan 03 23:04:19.096880 2026] [:error] [pid 34260:tid 34262] [client 20.214.241.50:2050] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkv80WWhyvZ0O9KNVQ4bgAAAQA"]
[Sat Jan 03 23:04:19.412941 2026] [:error] [pid 31630:tid 31637] [client 20.214.241.50:17953] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkv8_UV_PU2SWgLPuh0OQAAAYU"]
[Sat Jan 03 23:04:19.721867 2026] [:error] [pid 34260:tid 34285] [client 20.214.241.50:17947] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aVkv80WWhyvZ0O9KNVQ4cAAAARc"]
[Sat Jan 03 23:04:20.072722 2026] [:error] [pid 31222:tid 31239] [client 20.214.241.50:39077] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVkv9KHw6nASHXAc2v_7_AAAAc8"]
[Sat Jan 03 23:04:20.425499 2026] [:error] [pid 1931:tid 2046] [client 20.214.241.50:22198] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVkv9B8Tyw7ZoIdXlcYfRQAAAJY"]
[Sat Jan 03 23:04:20.759095 2026] [:error] [pid 2083:tid 2107] [client 20.214.241.50:2632] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVkv9DVlR_BmlMPnhV4tSwAAANY"]
[Sat Jan 03 23:04:21.190832 2026] [:error] [pid 31222:tid 31233] [client 20.214.241.50:27416] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aVkv9aHw6nASHXAc2v_8AAAAAck"]
[Sat Jan 03 23:04:21.494448 2026] [:error] [pid 19639:tid 19649] [client 20.214.241.50:17573] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVkv9SQ7fWZUytnlHEwP0AAAAUg"]
[Sat Jan 03 23:04:21.829191 2026] [:error] [pid 1930:tid 1972] [client 20.214.241.50:14577] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVkv9ZP-6mqhfUDa89z3ZQAAAEY"]
[Sat Jan 03 23:04:22.185365 2026] [:error] [pid 34260:tid 34277] [client 20.214.241.50:14530] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVkv9kWWhyvZ0O9KNVQ4dgAAAQ8"]
[Sat Jan 03 23:04:22.607610 2026] [:error] [pid 31630:tid 31632] [client 20.214.241.50:17598] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aVkv9vUV_PU2SWgLPuh0PwAAAYA"]
[Sat Jan 03 23:04:23.049295 2026] [:error] [pid 31222:tid 31227] [client 20.214.241.50:39069] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVkv96Hw6nASHXAc2v_8AwAAAcM"]
[Sat Jan 03 23:04:23.702413 2026] [:error] [pid 34260:tid 34272] [client 20.214.241.50:17551] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVkv90WWhyvZ0O9KNVQ4eQAAAQo"]
[Sat Jan 03 23:04:24.152581 2026] [:error] [pid 1931:tid 2032] [client 20.214.241.50:2073] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVkv-B8Tyw7ZoIdXlcYfWgAAAIg"]
[Sat Jan 03 23:04:24.745003 2026] [:error] [pid 31222:tid 31244] [client 20.214.241.50:25910] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aVkv-KHw6nASHXAc2v_8BwAAAdQ"]
[Sat Jan 03 23:04:25.340414 2026] [:error] [pid 1930:tid 1968] [client 20.214.241.50:14536] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aVkv-ZP-6mqhfUDa89z3agAAAEI"]
[Sat Jan 03 23:04:25.842919 2026] [:error] [pid 1929:tid 1958] [client 20.214.241.50:39096] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aVkv-ecFqdpu6TNsuWoFkQAAABQ"]
[Sat Jan 03 23:04:26.283168 2026] [:error] [pid 1931:tid 2039] [client 20.214.241.50:2647] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aVkv-h8Tyw7ZoIdXlcYfaAAAAI8"]
[Sat Jan 03 23:04:26.760326 2026] [:error] [pid 2083:tid 2093] [client 20.214.241.50:22729] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aVkv-jVlR_BmlMPnhV4tUwAAAMg"]
[Sat Jan 03 23:04:27.148402 2026] [:error] [pid 34260:tid 34281] [client 20.214.241.50:28021] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVkv-0WWhyvZ0O9KNVQ4gwAAARM"]
[Sat Jan 03 23:04:27.800985 2026] [:error] [pid 1929:tid 1945] [client 20.214.241.50:27987] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVkv--cFqdpu6TNsuWoFlgAAAAc"]
[Sat Jan 03 23:04:28.186699 2026] [:error] [pid 19639:tid 19642] [client 20.214.241.50:17933] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVkv_CQ7fWZUytnlHEwP3gAAAUE"]
[Sat Jan 03 23:04:28.522501 2026] [:error] [pid 1931:tid 2048] [client 20.214.241.50:39040] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVkv_B8Tyw7ZoIdXlcYfcQAAAJg"]
[Sat Jan 03 23:04:28.882377 2026] [:error] [pid 2083:tid 2090] [client 20.214.241.50:25893] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVkv_DVlR_BmlMPnhV4tVgAAAMU"]
[Sat Jan 03 23:04:29.245027 2026] [:error] [pid 34260:tid 34269] [client 20.214.241.50:28027] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVkv_UWWhyvZ0O9KNVQ4hgAAAQc"]
[Sat Jan 03 23:04:29.583125 2026] [:error] [pid 1929:tid 1943] [client 20.214.241.50:28030] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVkv_ecFqdpu6TNsuWoFmgAAAAU"]
[Sat Jan 03 23:04:29.904774 2026] [:error] [pid 1931:tid 2031] [client 20.214.241.50:27979] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVkv_R8Tyw7ZoIdXlcYfdgAAAIc"]
[Sat Jan 03 23:04:30.288673 2026] [:error] [pid 1931:tid 1993] [client 20.214.241.50:27973] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aVkv_h8Tyw7ZoIdXlcYfeQAAAIA"]
[Sat Jan 03 23:04:30.652794 2026] [:error] [pid 1931:tid 2035] [client 20.214.241.50:17577] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aVkv_h8Tyw7ZoIdXlcYffwAAAIs"]
[Sat Jan 03 23:04:31.188632 2026] [:error] [pid 1931:tid 2036] [client 20.214.241.50:14573] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aVkv_x8Tyw7ZoIdXlcYfhAAAAIw"]
[Sat Jan 03 23:04:31.556980 2026] [:error] [pid 31222:tid 31239] [client 20.214.241.50:39060] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aVkv_6Hw6nASHXAc2v_8EgAAAc8"]
[Sat Jan 03 23:04:31.899222 2026] [:error] [pid 1931:tid 2044] [client 20.214.241.50:39082] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkv_x8Tyw7ZoIdXlcYfiQAAAJQ"]
[Sat Jan 03 23:04:32.322275 2026] [:error] [pid 34260:tid 34272] [client 20.214.241.50:22186] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkwAEWWhyvZ0O9KNVQ4jgAAAQo"]
[Sat Jan 03 23:04:32.654960 2026] [:error] [pid 1929:tid 1947] [client 20.214.241.50:17597] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkwAOcFqdpu6TNsuWoFnwAAAAk"]
[Sat Jan 03 23:04:32.984241 2026] [:error] [pid 19639:tid 19648] [client 20.214.241.50:14543] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aVkwACQ7fWZUytnlHEwP5AAAAUc"]
[Sat Jan 03 23:04:33.312083 2026] [:error] [pid 1931:tid 1993] [client 20.214.241.50:28019] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aVkwAR8Tyw7ZoIdXlcYfjgAAAIA"]
[Sat Jan 03 23:04:33.682964 2026] [:error] [pid 34260:tid 34270] [client 20.214.241.50:19545] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aVkwAUWWhyvZ0O9KNVQ4lgAAAQg"]
[Sat Jan 03 23:04:33.975341 2026] [:error] [pid 19639:tid 19641] [client 20.214.241.50:22175] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aVkwASQ7fWZUytnlHEwP5gAAAUA"]
[Sat Jan 03 23:04:34.417399 2026] [:error] [pid 34260:tid 34262] [client 20.214.241.50:25918] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aVkwAkWWhyvZ0O9KNVQ4mwAAAQA"]
[Sat Jan 03 23:04:34.732220 2026] [:error] [pid 1929:tid 1960] [client 20.214.241.50:14544] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkwAucFqdpu6TNsuWoFpAAAABY"]
[Sat Jan 03 23:04:35.068536 2026] [:error] [pid 31222:tid 31244] [client 20.214.241.50:19563] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkwA6Hw6nASHXAc2v_8HAAAAdQ"]
[Sat Jan 03 23:04:35.477263 2026] [:error] [pid 19639:tid 19663] [client 20.214.241.50:17970] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkwAyQ7fWZUytnlHEwP6QAAAVY"]
[Sat Jan 03 23:04:35.929701 2026] [:error] [pid 2083:tid 2090] [client 20.214.241.50:39042] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVkwAzVlR_BmlMPnhV4tagAAAMU"]
[Sat Jan 03 23:04:36.387897 2026] [:error] [pid 1930:tid 1983] [client 20.214.241.50:2674] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs15.php"] [unique_id "aVkwBJP-6mqhfUDa89z3fQAAAFE"]
[Sat Jan 03 23:04:36.731729 2026] [:error] [pid 19639:tid 19658] [client 20.214.241.50:39061] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs15.php"] [unique_id "aVkwBCQ7fWZUytnlHEwP7AAAAVE"]
[Sat Jan 03 23:04:37.087603 2026] [:error] [pid 2083:tid 2099] [client 20.214.241.50:2683] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs15.php"] [unique_id "aVkwBTVlR_BmlMPnhV4tcwAAAM4"]
[Sat Jan 03 23:04:37.499765 2026] [:error] [pid 1931:tid 2038] [client 20.214.241.50:19574] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/blurbs15.php"] [unique_id "aVkwBR8Tyw7ZoIdXlcYflwAAAI4"]
[Sat Jan 03 23:04:37.830105 2026] [:error] [pid 34260:tid 34266] [client 20.214.241.50:27996] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVkwBUWWhyvZ0O9KNVQ4owAAAQQ"]
[Sat Jan 03 23:04:38.251958 2026] [:error] [pid 1929:tid 1942] [client 20.214.241.50:33781] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVkwBucFqdpu6TNsuWoFqgAAAAQ"]
[Sat Jan 03 23:04:38.769392 2026] [:error] [pid 1929:tid 1955] [client 20.214.241.50:27997] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVkwBucFqdpu6TNsuWoFrgAAABE"]
[Sat Jan 03 23:04:39.168486 2026] [:error] [pid 2083:tid 2104] [client 20.214.241.50:19571] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aVkwBzVlR_BmlMPnhV4tfQAAANM"]
[Sat Jan 03 23:04:39.544016 2026] [:error] [pid 31630:tid 31642] [client 20.214.241.50:22147] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVkwB_UV_PU2SWgLPuh0WwAAAYo"]
[Sat Jan 03 23:04:39.993209 2026] [:error] [pid 19639:tid 19659] [client 20.214.241.50:2052] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVkwByQ7fWZUytnlHEwP8wAAAVI"]
[Sat Jan 03 23:04:40.355438 2026] [:error] [pid 2083:tid 2089] [client 20.214.241.50:25862] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVkwCDVlR_BmlMPnhV4tfgAAAMQ"]
[Sat Jan 03 23:04:40.720286 2026] [:error] [pid 31222:tid 31242] [client 20.214.241.50:17562] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aVkwCKHw6nASHXAc2v_8JgAAAdI"]
[Sat Jan 03 23:04:41.101094 2026] [:error] [pid 31222:tid 31238] [client 20.214.241.50:14551] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVkwCaHw6nASHXAc2v_8KgAAAc4"]
[Sat Jan 03 23:04:41.472160 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:36199] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVkwCTVlR_BmlMPnhV4tggAAANU"]
[Sat Jan 03 23:04:41.951308 2026] [:error] [pid 19639:tid 19648] [client 20.214.241.50:19541] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVkwCSQ7fWZUytnlHEwP-QAAAUc"]
[Sat Jan 03 23:04:42.310900 2026] [:error] [pid 31630:tid 31633] [client 20.214.241.50:22166] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aVkwCvUV_PU2SWgLPuh0ZQAAAYE"]
[Sat Jan 03 23:04:42.718234 2026] [:error] [pid 19639:tid 19652] [client 20.214.241.50:25907] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkwCiQ7fWZUytnlHEwP_AAAAUs"]
[Sat Jan 03 23:04:43.099770 2026] [:error] [pid 1931:tid 2037] [client 20.214.241.50:14561] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkwCx8Tyw7ZoIdXlcYfoAAAAI0"]
[Sat Jan 03 23:04:43.504282 2026] [:error] [pid 31630:tid 31650] [client 20.214.241.50:33770] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkwC_UV_PU2SWgLPuh0aQAAAZI"]
[Sat Jan 03 23:04:43.930918 2026] [:error] [pid 1930:tid 1979] [client 20.214.241.50:2646] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aVkwC5P-6mqhfUDa89z3jQAAAE0"]
[Sat Jan 03 23:04:44.354317 2026] [:error] [pid 19639:tid 19653] [client 20.214.241.50:22148] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkwDCQ7fWZUytnlHEwQAQAAAUw"]
[Sat Jan 03 23:04:44.717188 2026] [:error] [pid 31630:tid 31640] [client 20.214.241.50:19557] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkwDPUV_PU2SWgLPuh0awAAAYg"]
[Sat Jan 03 23:04:45.068883 2026] [:error] [pid 1931:tid 2044] [client 20.214.241.50:17873] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkwDR8Tyw7ZoIdXlcYfrgAAAJQ"]
[Sat Jan 03 23:04:45.477972 2026] [:error] [pid 2083:tid 2104] [client 20.214.241.50:28003] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVkwDTVlR_BmlMPnhV4tkQAAANM"]
[Sat Jan 03 23:04:45.893256 2026] [:error] [pid 1931:tid 2031] [client 20.214.241.50:47084] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aVkwDR8Tyw7ZoIdXlcYfswAAAIc"]
[Sat Jan 03 23:04:46.254647 2026] [:error] [pid 1930:tid 1977] [client 20.214.241.50:19530] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aVkwDpP-6mqhfUDa89z3lAAAAEs"]
[Sat Jan 03 23:04:46.582312 2026] [:error] [pid 1930:tid 1989] [client 20.214.241.50:14542] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aVkwDpP-6mqhfUDa89z3lgAAAFc"]
[Sat Jan 03 23:04:46.881188 2026] [:error] [pid 2083:tid 2091] [client 20.214.241.50:33750] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aVkwDjVlR_BmlMPnhV4tlgAAAMY"]
[Sat Jan 03 23:04:47.300227 2026] [:error] [pid 1930:tid 1987] [client 20.214.241.50:36219] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVkwD5P-6mqhfUDa89z3mgAAAFU"]
[Sat Jan 03 23:04:47.613131 2026] [:error] [pid 34260:tid 34282] [client 20.214.241.50:17968] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVkwD0WWhyvZ0O9KNVQ4tgAAARQ"]
[Sat Jan 03 23:04:48.044362 2026] [:error] [pid 31630:tid 31641] [client 20.214.241.50:39071] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVkwEPUV_PU2SWgLPuh0dwAAAYk"]
[Sat Jan 03 23:04:48.473887 2026] [:error] [pid 34260:tid 34278] [client 20.214.241.50:28006] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aVkwEEWWhyvZ0O9KNVQ4uQAAARA"]
[Sat Jan 03 23:04:48.996581 2026] [:error] [pid 1931:tid 2032] [client 20.214.241.50:17963] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkwEB8Tyw7ZoIdXlcYfvAAAAIg"]
[Sat Jan 03 23:04:49.498737 2026] [:error] [pid 1929:tid 1959] [client 20.214.241.50:17574] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkwEecFqdpu6TNsuWoFwgAAABU"]
[Sat Jan 03 23:04:49.905876 2026] [:error] [pid 1929:tid 1954] [client 20.214.241.50:17945] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkwEecFqdpu6TNsuWoFxAAAABA"]
[Sat Jan 03 23:04:50.400523 2026] [:error] [pid 2083:tid 2094] [client 20.214.241.50:22196] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVkwEjVlR_BmlMPnhV4toAAAAMk"]
[Sat Jan 03 23:04:50.770320 2026] [:error] [pid 31630:tid 31640] [client 20.214.241.50:17540] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aVkwEvUV_PU2SWgLPuh0fQAAAYg"]
[Sat Jan 03 23:04:51.145344 2026] [:error] [pid 31630:tid 31655] [client 20.214.241.50:17864] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aVkwE_UV_PU2SWgLPuh0fgAAAZc"]
[Sat Jan 03 23:04:51.513742 2026] [:error] [pid 19639:tid 19656] [client 20.214.241.50:33778] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aVkwEyQ7fWZUytnlHEwQEQAAAU8"]
[Sat Jan 03 23:04:51.892755 2026] [:error] [pid 1930:tid 1975] [client 20.214.241.50:19568] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aVkwE5P-6mqhfUDa89z3oQAAAEk"]
[Sat Jan 03 23:04:52.206861 2026] [:error] [pid 34260:tid 34274] [client 20.214.241.50:22153] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkwFEWWhyvZ0O9KNVQ4wQAAAQw"]
[Sat Jan 03 23:04:52.541654 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:14575] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkwFB8Tyw7ZoIdXlcYfyAAAAJM"]
[Sat Jan 03 23:04:53.069646 2026] [:error] [pid 31222:tid 31241] [client 20.214.241.50:14588] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkwFaHw6nASHXAc2v_8QQAAAdE"]
[Sat Jan 03 23:04:53.456866 2026] [:error] [pid 1929:tid 1952] [client 20.214.241.50:33752] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVkwFecFqdpu6TNsuWoFzQAAAA4"]
[Sat Jan 03 23:04:53.966118 2026] [:error] [pid 31630:tid 31641] [client 20.214.241.50:2646] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkwFfUV_PU2SWgLPuh0igAAAYk"]
[Sat Jan 03 23:04:54.305340 2026] [:error] [pid 19639:tid 19645] [client 20.214.241.50:39051] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkwFiQ7fWZUytnlHEwQGwAAAUQ"]
[Sat Jan 03 23:04:54.769463 2026] [:error] [pid 2083:tid 2089] [client 20.214.241.50:47639] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkwFjVlR_BmlMPnhV4tpwAAAMQ"]
[Sat Jan 03 23:04:55.164627 2026] [:error] [pid 31222:tid 31245] [client 20.214.241.50:22195] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVkwF6Hw6nASHXAc2v_8SQAAAdU"]
[Sat Jan 03 23:04:55.512717 2026] [:error] [pid 31222:tid 31247] [client 20.214.241.50:47086] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVkwF6Hw6nASHXAc2v_8SgAAAdc"]
[Sat Jan 03 23:04:55.833176 2026] [:error] [pid 1929:tid 1943] [client 20.214.241.50:14555] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVkwF-cFqdpu6TNsuWoF0gAAAAU"]
[Sat Jan 03 23:04:56.162052 2026] [:error] [pid 1931:tid 2046] [client 20.214.241.50:19551] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVkwGB8Tyw7ZoIdXlcYfzgAAAJY"]
[Sat Jan 03 23:04:56.609580 2026] [:error] [pid 34260:tid 34270] [client 20.214.241.50:14528] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVkwGEWWhyvZ0O9KNVQ40QAAAQg"]
[Sat Jan 03 23:04:56.964443 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:22174] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkwGDVlR_BmlMPnhV4trAAAANU"]
[Sat Jan 03 23:04:57.351676 2026] [:error] [pid 34260:tid 34268] [client 20.214.241.50:17564] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkwGUWWhyvZ0O9KNVQ41wAAAQY"]
[Sat Jan 03 23:04:57.680395 2026] [:error] [pid 1929:tid 1962] [client 20.214.241.50:2687] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkwGecFqdpu6TNsuWoF2AAAABg"]
[Sat Jan 03 23:04:58.075347 2026] [:error] [pid 31222:tid 31242] [client 20.214.241.50:36171] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aVkwGqHw6nASHXAc2v_8TgAAAdI"]
[Sat Jan 03 23:04:58.423080 2026] [:error] [pid 34260:tid 34272] [client 20.214.241.50:17913] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkwGkWWhyvZ0O9KNVQ42gAAAQo"]
[Sat Jan 03 23:04:58.776298 2026] [:error] [pid 1930:tid 1972] [client 20.214.241.50:17569] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkwGpP-6mqhfUDa89z3sQAAAEY"]
[Sat Jan 03 23:04:59.130783 2026] [:error] [pid 31222:tid 31228] [client 20.214.241.50:36191] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkwG6Hw6nASHXAc2v_8VAAAAcQ"]
[Sat Jan 03 23:04:59.481695 2026] [:error] [pid 1931:tid 2034] [client 20.214.241.50:19523] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVkwGx8Tyw7ZoIdXlcYf2gAAAIo"]
[Sat Jan 03 23:04:59.806222 2026] [:error] [pid 19639:tid 19664] [client 20.214.241.50:22732] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVkwGyQ7fWZUytnlHEwQKQAAAVc"]
[Sat Jan 03 23:05:00.362446 2026] [:error] [pid 1931:tid 2045] [client 20.214.241.50:22144] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVkwHB8Tyw7ZoIdXlcYf4AAAAJU"]
[Sat Jan 03 23:05:00.822490 2026] [:error] [pid 2083:tid 2103] [client 20.214.241.50:17977] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVkwHDVlR_BmlMPnhV4ttAAAANI"]
[Sat Jan 03 23:05:01.144685 2026] [:error] [pid 19639:tid 19663] [client 20.214.241.50:2678] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVkwHSQ7fWZUytnlHEwQKwAAAVY"]
[Sat Jan 03 23:05:01.503335 2026] [:error] [pid 31222:tid 31226] [client 20.214.241.50:17898] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aVkwHaHw6nASHXAc2v_8XQAAAcI"]
[Sat Jan 03 23:05:01.870339 2026] [:error] [pid 31222:tid 31243] [client 20.214.241.50:19582] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aVkwHaHw6nASHXAc2v_8YAAAAdM"]
[Sat Jan 03 23:05:02.228996 2026] [proxy_fcgi:error] [pid 1931:tid 2037] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:02.374370 2026] [proxy_fcgi:error] [pid 1931:tid 2047] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:02.520211 2026] [proxy_fcgi:error] [pid 1931:tid 2034] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:02.659455 2026] [proxy_fcgi:error] [pid 1931:tid 1993] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:02.801029 2026] [proxy_fcgi:error] [pid 1931:tid 2035] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:02.941562 2026] [proxy_fcgi:error] [pid 1931:tid 2029] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:03.080105 2026] [proxy_fcgi:error] [pid 1931:tid 2045] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:03.251805 2026] [proxy_fcgi:error] [pid 1931:tid 2039] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:03.390649 2026] [proxy_fcgi:error] [pid 1931:tid 2040] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:03.541977 2026] [proxy_fcgi:error] [pid 1931:tid 2044] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:03.710595 2026] [proxy_fcgi:error] [pid 1931:tid 2031] [client 20.214.241.50:33041] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:05:03.846178 2026] [:error] [pid 1931:tid 1999] [client 20.214.241.50:33041] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aVkwHx8Tyw7ZoIdXlcYf_AAAAIM"]
[Sat Jan 03 23:05:04.132328 2026] [:error] [pid 34260:tid 34278] [client 20.214.241.50:25911] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aVkwIEWWhyvZ0O9KNVQ48gAAARA"]
[Sat Jan 03 23:05:04.436847 2026] [:error] [pid 1930:tid 1990] [client 20.214.241.50:36196] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aVkwIJP-6mqhfUDa89z3yAAAAFg"]
[Sat Jan 03 23:05:04.783063 2026] [:error] [pid 31222:tid 31230] [client 20.214.241.50:38269] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fwe.php"] [unique_id "aVkwIKHw6nASHXAc2v_8agAAAcY"]
[Sat Jan 03 23:05:05.253291 2026] [:error] [pid 31222:tid 31241] [client 20.214.241.50:38260] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aVkwIaHw6nASHXAc2v_8bQAAAdE"]
[Sat Jan 03 23:05:05.627391 2026] [:error] [pid 31222:tid 31240] [client 20.214.241.50:14570] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aVkwIaHw6nASHXAc2v_8cAAAAdA"]
[Sat Jan 03 23:05:05.993820 2026] [:error] [pid 31222:tid 31227] [client 20.214.241.50:19556] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aVkwIaHw6nASHXAc2v_8cwAAAcM"]
[Sat Jan 03 23:05:06.330374 2026] [:error] [pid 1931:tid 2042] [client 20.214.241.50:47048] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/g.php"] [unique_id "aVkwIh8Tyw7ZoIdXlcYgCAAAAJI"]
[Sat Jan 03 23:05:06.621381 2026] [:error] [pid 31222:tid 31247] [client 20.214.241.50:17860] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVkwIqHw6nASHXAc2v_8dAAAAdc"]
[Sat Jan 03 23:05:06.920092 2026] [:error] [pid 19639:tid 19656] [client 20.214.241.50:17863] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVkwIiQ7fWZUytnlHEwQPQAAAU8"]
[Sat Jan 03 23:05:07.232796 2026] [:error] [pid 34260:tid 34277] [client 20.214.241.50:17861] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVkwI0WWhyvZ0O9KNVQ4-gAAAQ8"]
[Sat Jan 03 23:05:07.537571 2026] [:error] [pid 2083:tid 2091] [client 20.214.241.50:17909] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aVkwIzVlR_BmlMPnhV4tvQAAAMY"]
[Sat Jan 03 23:05:07.836210 2026] [:error] [pid 34260:tid 34268] [client 20.214.241.50:19534] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVkwI0WWhyvZ0O9KNVQ4_wAAAQY"]
[Sat Jan 03 23:05:08.216292 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:17877] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVkwJDVlR_BmlMPnhV4tvwAAANU"]
[Sat Jan 03 23:05:08.540443 2026] [:error] [pid 31630:tid 31635] [client 20.214.241.50:47053] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVkwJPUV_PU2SWgLPuh0nAAAAYM"]
[Sat Jan 03 23:05:08.849009 2026] [:error] [pid 19639:tid 19653] [client 20.214.241.50:19520] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aVkwJCQ7fWZUytnlHEwQQAAAAUw"]
[Sat Jan 03 23:05:09.155306 2026] [:error] [pid 19639:tid 19658] [client 20.214.241.50:47074] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVkwJSQ7fWZUytnlHEwQRQAAAVE"]
[Sat Jan 03 23:05:09.452269 2026] [:error] [pid 1931:tid 1996] [client 20.214.241.50:36211] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVkwJR8Tyw7ZoIdXlcYgDQAAAII"]
[Sat Jan 03 23:05:09.763404 2026] [:error] [pid 1929:tid 1950] [client 20.214.241.50:14026] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVkwJecFqdpu6TNsuWoF5gAAAAw"]
[Sat Jan 03 23:05:10.092279 2026] [:error] [pid 1930:tid 1990] [client 20.214.241.50:19570] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aVkwJpP-6mqhfUDa89z32wAAAFg"]
[Sat Jan 03 23:05:10.564229 2026] [:error] [pid 1930:tid 1986] [client 20.214.241.50:33069] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkwJpP-6mqhfUDa89z33QAAAFQ"]
[Sat Jan 03 23:05:10.880850 2026] [:error] [pid 1930:tid 1973] [client 20.214.241.50:38256] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkwJpP-6mqhfUDa89z34gAAAEc"]
[Sat Jan 03 23:05:11.202486 2026] [:error] [pid 2083:tid 2088] [client 20.214.241.50:47089] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkwJzVlR_BmlMPnhV4twwAAAMM"]
[Sat Jan 03 23:05:11.571697 2026] [:error] [pid 31630:tid 31656] [client 20.214.241.50:17562] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVkwJ_UV_PU2SWgLPuh0pQAAAZg"]
[Sat Jan 03 23:05:11.933693 2026] [:error] [pid 31222:tid 31232] [client 20.214.241.50:32622] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVkwJ6Hw6nASHXAc2v_8fAAAAcg"]
[Sat Jan 03 23:05:12.229320 2026] [:error] [pid 31630:tid 31633] [client 20.214.241.50:36218] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVkwKPUV_PU2SWgLPuh0pgAAAYE"]
[Sat Jan 03 23:05:12.657440 2026] [:error] [pid 2083:tid 2098] [client 20.214.241.50:38264] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVkwKDVlR_BmlMPnhV4tywAAAM0"]
[Sat Jan 03 23:05:12.985411 2026] [:error] [pid 2083:tid 2104] [client 20.214.241.50:33063] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aVkwKDVlR_BmlMPnhV4tzwAAANM"]
[Sat Jan 03 23:05:13.365185 2026] [:error] [pid 2083:tid 2090] [client 20.214.241.50:17879] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVkwKTVlR_BmlMPnhV4t0wAAAMU"]
[Sat Jan 03 23:05:13.770713 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:17966] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVkwKTVlR_BmlMPnhV4t1QAAANU"]
[Sat Jan 03 23:05:14.229535 2026] [:error] [pid 19639:tid 19663] [client 20.214.241.50:33062] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVkwKiQ7fWZUytnlHEwQVAAAAVY"]
[Sat Jan 03 23:05:14.562012 2026] [:error] [pid 1929:tid 1948] [client 20.214.241.50:32635] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aVkwKucFqdpu6TNsuWoF7AAAAAo"]
[Sat Jan 03 23:05:14.935107 2026] [:error] [pid 19639:tid 19650] [client 20.214.241.50:22149] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVkwKiQ7fWZUytnlHEwQWQAAAUk"]
[Sat Jan 03 23:05:15.274316 2026] [:error] [pid 2083:tid 2109] [client 20.214.241.50:33735] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVkwKzVlR_BmlMPnhV4t4QAAANg"]
[Sat Jan 03 23:05:15.647844 2026] [:error] [pid 1931:tid 2041] [client 20.214.241.50:17885] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVkwKx8Tyw7ZoIdXlcYgHAAAAJE"]
[Sat Jan 03 23:05:15.978809 2026] [:error] [pid 1931:tid 2047] [client 20.214.241.50:32637] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aVkwKx8Tyw7ZoIdXlcYgIgAAAJc"]
[Sat Jan 03 23:05:16.321935 2026] [:error] [pid 34260:tid 34286] [client 20.214.241.50:13360] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVkwLEWWhyvZ0O9KNVQ5FgAAARg"]
[Sat Jan 03 23:05:16.633873 2026] [:error] [pid 34260:tid 34264] [client 20.214.241.50:33083] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVkwLEWWhyvZ0O9KNVQ5GAAAAQI"]
[Sat Jan 03 23:05:16.979726 2026] [:error] [pid 34260:tid 34282] [client 20.214.241.50:32579] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVkwLEWWhyvZ0O9KNVQ5GgAAARQ"]
[Sat Jan 03 23:05:17.341120 2026] [:error] [pid 1929:tid 1961] [client 20.214.241.50:33743] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aVkwLecFqdpu6TNsuWoF9QAAABc"]
[Sat Jan 03 23:05:17.683470 2026] [:error] [pid 1929:tid 1955] [client 20.214.241.50:32596] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cheka.php"] [unique_id "aVkwLecFqdpu6TNsuWoF-AAAABE"]
[Sat Jan 03 23:05:18.056682 2026] [:error] [pid 34260:tid 34265] [client 20.214.241.50:14067] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cheka.php"] [unique_id "aVkwLkWWhyvZ0O9KNVQ5HAAAAQM"]
[Sat Jan 03 23:05:18.452913 2026] [:error] [pid 2083:tid 2099] [client 20.214.241.50:14045] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cheka.php"] [unique_id "aVkwLjVlR_BmlMPnhV4t7wAAAM4"]
[Sat Jan 03 23:05:18.771388 2026] [:error] [pid 2083:tid 2109] [client 20.214.241.50:33751] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cheka.php"] [unique_id "aVkwLjVlR_BmlMPnhV4t9gAAANg"]
[Sat Jan 03 23:05:19.307007 2026] [:error] [pid 34260:tid 34280] [client 20.214.241.50:32631] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classgoto24.php"] [unique_id "aVkwL0WWhyvZ0O9KNVQ5IQAAARI"]
[Sat Jan 03 23:05:19.642169 2026] [:error] [pid 34260:tid 34277] [client 20.214.241.50:17978] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classgoto24.php"] [unique_id "aVkwL0WWhyvZ0O9KNVQ5JwAAAQ8"]
[Sat Jan 03 23:05:19.968064 2026] [:error] [pid 2083:tid 2093] [client 20.214.241.50:32619] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classgoto24.php"] [unique_id "aVkwLzVlR_BmlMPnhV4t_wAAAMg"]
[Sat Jan 03 23:05:20.357210 2026] [:error] [pid 2083:tid 2105] [client 20.214.241.50:2269] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classgoto24.php"] [unique_id "aVkwMDVlR_BmlMPnhV4uBAAAANQ"]
[Sat Jan 03 23:05:20.651961 2026] [:error] [pid 2083:tid 2085] [client 20.214.241.50:33078] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtride.php"] [unique_id "aVkwMDVlR_BmlMPnhV4uDAAAAMA"]
[Sat Jan 03 23:05:21.154162 2026] [:error] [pid 2083:tid 2090] [client 20.214.241.50:38231] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtride.php"] [unique_id "aVkwMTVlR_BmlMPnhV4uEwAAAMU"]
[Sat Jan 03 23:05:21.435572 2026] [:error] [pid 19639:tid 19656] [client 20.214.241.50:17857] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtride.php"] [unique_id "aVkwMSQ7fWZUytnlHEwQawAAAU8"]
[Sat Jan 03 23:05:21.779184 2026] [:error] [pid 31630:tid 31649] [client 20.214.241.50:23488] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xtride.php"] [unique_id "aVkwMfUV_PU2SWgLPuh0twAAAZE"]
[Sat Jan 03 23:05:22.065792 2026] [:error] [pid 2083:tid 2109] [client 20.214.241.50:32625] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws29.php"] [unique_id "aVkwMjVlR_BmlMPnhV4uGwAAANg"]
[Sat Jan 03 23:05:22.421000 2026] [:error] [pid 31222:tid 31231] [client 20.214.241.50:14062] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws29.php"] [unique_id "aVkwMqHw6nASHXAc2v_8gwAAAcc"]
[Sat Jan 03 23:05:22.827059 2026] [:error] [pid 2083:tid 2092] [client 20.214.241.50:2260] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws29.php"] [unique_id "aVkwMjVlR_BmlMPnhV4uJQAAAMc"]
[Sat Jan 03 23:05:23.134841 2026] [:error] [pid 34260:tid 34280] [client 20.214.241.50:36161] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws29.php"] [unique_id "aVkwM0WWhyvZ0O9KNVQ5NQAAARI"]
[Sat Jan 03 23:05:23.443247 2026] [:error] [pid 2083:tid 2095] [client 20.214.241.50:17871] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVkwMzVlR_BmlMPnhV4uJgAAAMo"]
[Sat Jan 03 23:05:23.752916 2026] [:error] [pid 1930:tid 1985] [client 20.214.241.50:47072] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVkwM5P-6mqhfUDa89z36gAAAFM"]
[Sat Jan 03 23:05:24.050403 2026] [:error] [pid 1930:tid 1989] [client 20.214.241.50:36197] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVkwNJP-6mqhfUDa89z37gAAAFc"]
[Sat Jan 03 23:05:24.347363 2026] [:error] [pid 1931:tid 2048] [client 20.214.241.50:2276] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVkwNB8Tyw7ZoIdXlcYgOwAAAJg"]
[Sat Jan 03 23:05:24.758106 2026] [:error] [pid 2083:tid 2107] [client 20.214.241.50:33728] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s11.php"] [unique_id "aVkwNDVlR_BmlMPnhV4uKQAAANY"]
[Sat Jan 03 23:05:25.095520 2026] [:error] [pid 1930:tid 1971] [client 20.214.241.50:33758] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s11.php"] [unique_id "aVkwNZP-6mqhfUDa89z37wAAAEU"]
[Sat Jan 03 23:05:25.488308 2026] [:error] [pid 1929:tid 1943] [client 20.214.241.50:38255] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s11.php"] [unique_id "aVkwNecFqdpu6TNsuWoGGQAAAAU"]
[Sat Jan 03 23:05:25.795625 2026] [:error] [pid 1929:tid 1944] [client 20.214.241.50:23545] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s11.php"] [unique_id "aVkwNecFqdpu6TNsuWoGIAAAAAY"]
[Sat Jan 03 23:05:26.133742 2026] [:error] [pid 34260:tid 34284] [client 20.214.241.50:2274] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dir.php"] [unique_id "aVkwNkWWhyvZ0O9KNVQ5QwAAARY"]
[Sat Jan 03 23:05:26.421732 2026] [:error] [pid 1929:tid 1939] [client 20.214.241.50:38252] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dir.php"] [unique_id "aVkwNucFqdpu6TNsuWoGJgAAAAE"]
[Sat Jan 03 23:05:26.906958 2026] [:error] [pid 1931:tid 2039] [client 20.214.241.50:14025] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dir.php"] [unique_id "aVkwNh8Tyw7ZoIdXlcYgWgAAAI8"]
[Sat Jan 03 23:05:27.326430 2026] [:error] [pid 1931:tid 2036] [client 20.214.241.50:46980] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dir.php"] [unique_id "aVkwNx8Tyw7ZoIdXlcYgXwAAAIw"]
[Sat Jan 03 23:05:27.612259 2026] [:error] [pid 1931:tid 2040] [client 20.214.241.50:33054] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aqw.php"] [unique_id "aVkwNx8Tyw7ZoIdXlcYgYgAAAJA"]
[Sat Jan 03 23:05:28.010327 2026] [:error] [pid 31630:tid 31656] [client 20.214.241.50:2291] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aqw.php"] [unique_id "aVkwOPUV_PU2SWgLPuh0uwAAAZg"]
[Sat Jan 03 23:05:28.418843 2026] [:error] [pid 1931:tid 2041] [client 20.214.241.50:23526] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aqw.php"] [unique_id "aVkwOB8Tyw7ZoIdXlcYgcQAAAJE"]
[Sat Jan 03 23:05:28.752862 2026] [:error] [pid 1931:tid 2047] [client 20.214.241.50:2278] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aqw.php"] [unique_id "aVkwOB8Tyw7ZoIdXlcYgdgAAAJc"]
[Sat Jan 03 23:05:29.103107 2026] [:error] [pid 31630:tid 31640] [client 20.214.241.50:47087] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca1.php"] [unique_id "aVkwOfUV_PU2SWgLPuh0wQAAAYg"]
[Sat Jan 03 23:05:29.523043 2026] [:error] [pid 2083:tid 2096] [client 20.214.241.50:46996] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca1.php"] [unique_id "aVkwOTVlR_BmlMPnhV4uLgAAAMs"]
[Sat Jan 03 23:05:29.864791 2026] [:error] [pid 31222:tid 31243] [client 20.214.241.50:14028] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca1.php"] [unique_id "aVkwOaHw6nASHXAc2v_8iwAAAdM"]
[Sat Jan 03 23:05:30.259929 2026] [:error] [pid 31630:tid 31634] [client 20.214.241.50:23493] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca1.php"] [unique_id "aVkwOvUV_PU2SWgLPuh0xgAAAYI"]
[Sat Jan 03 23:05:30.702922 2026] [:error] [pid 19639:tid 19663] [client 20.214.241.50:33036] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aVkwOiQ7fWZUytnlHEwQfQAAAVY"]
[Sat Jan 03 23:05:31.028513 2026] [:error] [pid 1931:tid 2042] [client 20.214.241.50:14032] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aVkwOx8Tyw7ZoIdXlcYghAAAAJI"]
[Sat Jan 03 23:05:31.343588 2026] [:error] [pid 1931:tid 2037] [client 20.214.241.50:17881] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aVkwOx8Tyw7ZoIdXlcYghgAAAI0"]
[Sat Jan 03 23:05:31.654398 2026] [:error] [pid 1929:tid 1940] [client 20.214.241.50:13375] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abouta.php"] [unique_id "aVkwO-cFqdpu6TNsuWoGLAAAAAI"]
[Sat Jan 03 23:05:31.955032 2026] [:error] [pid 1929:tid 1962] [client 20.214.241.50:32621] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aVkwO-cFqdpu6TNsuWoGMAAAABg"]
[Sat Jan 03 23:05:32.262950 2026] [:error] [pid 1929:tid 1939] [client 20.214.241.50:14022] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aVkwPOcFqdpu6TNsuWoGNQAAAAE"]
[Sat Jan 03 23:05:32.590798 2026] [:error] [pid 1929:tid 1942] [client 20.214.241.50:32627] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aVkwPOcFqdpu6TNsuWoGNgAAAAQ"]
[Sat Jan 03 23:05:32.957316 2026] [:error] [pid 1929:tid 1945] [client 20.214.241.50:39073] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fclas.php"] [unique_id "aVkwPOcFqdpu6TNsuWoGOAAAAAc"]
[Sat Jan 03 23:05:33.292000 2026] [:error] [pid 1931:tid 2033] [client 20.214.241.50:13330] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aVkwPR8Tyw7ZoIdXlcYgkgAAAIk"]
[Sat Jan 03 23:05:33.610058 2026] [:error] [pid 1931:tid 2038] [client 20.214.241.50:32634] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aVkwPR8Tyw7ZoIdXlcYgkwAAAI4"]
[Sat Jan 03 23:05:33.895456 2026] [:error] [pid 1929:tid 1956] [client 20.214.241.50:13314] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aVkwPecFqdpu6TNsuWoGPQAAABI"]
[Sat Jan 03 23:05:34.252536 2026] [:error] [pid 19639:tid 19658] [client 20.214.241.50:23512] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bbn.php"] [unique_id "aVkwPiQ7fWZUytnlHEwQgwAAAVE"]
[Sat Jan 03 23:05:34.587694 2026] [:error] [pid 1930:tid 1967] [client 20.214.241.50:47044] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aVkwPpP-6mqhfUDa89z3-gAAAEE"]
[Sat Jan 03 23:05:34.959545 2026] [:error] [pid 31222:tid 31224] [client 20.214.241.50:14038] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aVkwPqHw6nASHXAc2v_8pgAAAcA"]
[Sat Jan 03 23:05:35.314760 2026] [:error] [pid 1930:tid 1983] [client 20.214.241.50:17906] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aVkwP5P-6mqhfUDa89z3_gAAAFE"]
[Sat Jan 03 23:05:35.641459 2026] [:error] [pid 1930:tid 1978] [client 20.214.241.50:35571] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aVkwP5P-6mqhfUDa89z4AwAAAEw"]
[Sat Jan 03 23:05:35.957289 2026] [:error] [pid 1931:tid 2043] [client 20.214.241.50:14031] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aVkwPx8Tyw7ZoIdXlcYgmAAAAJM"]
[Sat Jan 03 23:05:36.321752 2026] [:error] [pid 1930:tid 1971] [client 20.214.241.50:13315] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aVkwQJP-6mqhfUDa89z4BgAAAEU"]
[Sat Jan 03 23:05:36.650133 2026] [:error] [pid 2083:tid 2104] [client 20.214.241.50:14534] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aVkwQDVlR_BmlMPnhV4uRwAAANM"]
[Sat Jan 03 23:05:37.107779 2026] [:error] [pid 2083:tid 2106] [client 20.214.241.50:19577] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xz89.php"] [unique_id "aVkwQTVlR_BmlMPnhV4uTgAAANU"]
[Sat Jan 03 23:05:37.501078 2026] [:error] [pid 2083:tid 2100] [client 20.214.241.50:47005] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aVkwQTVlR_BmlMPnhV4uUgAAAM8"]
[Sat Jan 03 23:05:37.824737 2026] [:error] [pid 31222:tid 31231] [client 20.214.241.50:14068] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aVkwQaHw6nASHXAc2v_8rgAAAcc"]
[Sat Jan 03 23:05:38.186389 2026] [:error] [pid 31222:tid 31235] [client 20.214.241.50:23539] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aVkwQqHw6nASHXAc2v_8sQAAAcs"]
[Sat Jan 03 23:05:38.517693 2026] [:error] [pid 31222:tid 31245] [client 20.214.241.50:23510] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wft.php"] [unique_id "aVkwQqHw6nASHXAc2v_8tAAAAdU"]
[Sat Jan 03 23:05:38.832242 2026] [:error] [pid 34260:tid 34279] [client 20.214.241.50:47032] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aVkwQkWWhyvZ0O9KNVQ5UwAAARE"]
[Sat Jan 03 23:05:39.309361 2026] [:error] [pid 1930:tid 1967] [client 20.214.241.50:47076] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aVkwQ5P-6mqhfUDa89z4EQAAAEE"]
[Sat Jan 03 23:05:39.748534 2026] [:error] [pid 34260:tid 34263] [client 20.214.241.50:13365] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aVkwQ0WWhyvZ0O9KNVQ5VwAAAQE"]
[Sat Jan 03 23:05:40.076396 2026] [:error] [pid 34260:tid 34265] [client 20.214.241.50:14075] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws28.php"] [unique_id "aVkwREWWhyvZ0O9KNVQ5WgAAAQM"]
[Sat Jan 03 23:05:40.400309 2026] [:error] [pid 34260:tid 34280] [client 20.214.241.50:51172] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aVkwREWWhyvZ0O9KNVQ5XwAAARI"]
[Sat Jan 03 23:05:40.723467 2026] [:error] [pid 1930:tid 1990] [client 20.214.241.50:47094] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aVkwRJP-6mqhfUDa89z4HwAAAFg"]
[Sat Jan 03 23:05:41.059894 2026] [:error] [pid 1929:tid 1948] [client 20.214.241.50:51137] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aVkwRecFqdpu6TNsuWoGSAAAAAo"]
[Sat Jan 03 23:05:41.531724 2026] [:error] [pid 1930:tid 1984] [client 20.214.241.50:17969] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsvvs.php"] [unique_id "aVkwRZP-6mqhfUDa89z4IwAAAFI"]
[Sat Jan 03 23:05:41.951987 2026] [:error] [pid 1930:tid 1975] [client 20.214.241.50:23524] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkwRZP-6mqhfUDa89z4JQAAAEk"]
[Sat Jan 03 23:05:42.305262 2026] [:error] [pid 1930:tid 1968] [client 20.214.241.50:32608] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkwRpP-6mqhfUDa89z4JwAAAEI"]
[Sat Jan 03 23:05:42.629297 2026] [:error] [pid 1930:tid 1978] [client 20.214.241.50:23523] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkwRpP-6mqhfUDa89z4LgAAAEw"]
[Sat Jan 03 23:05:42.952459 2026] [:error] [pid 1930:tid 1981] [client 20.214.241.50:13316] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVkwRpP-6mqhfUDa89z4MwAAAE8"]
[Sat Jan 03 23:05:43.261244 2026] [:error] [pid 1930:tid 1984] [client 20.214.241.50:51147] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aVkwR5P-6mqhfUDa89z4OwAAAFI"]
[Sat Jan 03 23:05:43.623001 2026] [:error] [pid 31630:tid 31644] [client 20.214.241.50:47083] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aVkwR_UV_PU2SWgLPuh01AAAAYw"]
[Sat Jan 03 23:05:44.037495 2026] [:error] [pid 1930:tid 1976] [client 20.214.241.50:47054] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aVkwSJP-6mqhfUDa89z4QAAAAEo"]
[Sat Jan 03 23:05:44.465851 2026] [:error] [pid 1931:tid 1996] [client 20.214.241.50:14035] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fz.php"] [unique_id "aVkwSB8Tyw7ZoIdXlcYgnQAAAII"]
[Sat Jan 03 23:05:44.767740 2026] [:error] [pid 1931:tid 2047] [client 20.214.241.50:47015] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aVkwSB8Tyw7ZoIdXlcYgoAAAAJc"]
[Sat Jan 03 23:05:45.170029 2026] [:error] [pid 2083:tid 2086] [client 20.214.241.50:14036] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aVkwSTVlR_BmlMPnhV4uZwAAAME"]
[Sat Jan 03 23:05:45.469283 2026] [:error] [pid 1929:tid 1957] [client 20.214.241.50:46986] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aVkwSecFqdpu6TNsuWoGUwAAABM"]
[Sat Jan 03 23:05:45.809575 2026] [:error] [pid 1930:tid 1988] [client 20.214.241.50:32600] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sang.php"] [unique_id "aVkwSZP-6mqhfUDa89z4RgAAAFY"]
[Sat Jan 03 23:05:46.144123 2026] [:error] [pid 1930:tid 1971] [client 20.214.241.50:47000] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aVkwSpP-6mqhfUDa89z4SAAAAEU"]
[Sat Jan 03 23:05:46.473891 2026] [:error] [pid 31630:tid 31645] [client 20.214.241.50:47018] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aVkwSvUV_PU2SWgLPuh04gAAAY0"]
[Sat Jan 03 23:05:46.773257 2026] [:error] [pid 31630:tid 31638] [client 20.214.241.50:14046] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aVkwSvUV_PU2SWgLPuh05AAAAYY"]
[Sat Jan 03 23:05:47.115712 2026] [:error] [pid 31630:tid 31643] [client 20.214.241.50:23528] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0o0.php"] [unique_id "aVkwS_UV_PU2SWgLPuh05wAAAYs"]
[Sat Jan 03 23:05:47.433110 2026] [:error] [pid 2083:tid 2104] [client 20.214.241.50:17901] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aVkwSzVlR_BmlMPnhV4ucgAAANM"]
[Sat Jan 03 23:05:47.766690 2026] [:error] [pid 31630:tid 31640] [client 20.214.241.50:38220] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aVkwS_UV_PU2SWgLPuh07gAAAYg"]
[Sat Jan 03 23:05:48.292730 2026] [:error] [pid 31630:tid 31652] [client 20.214.241.50:32595] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aVkwTPUV_PU2SWgLPuh08wAAAZQ"]
[Sat Jan 03 23:05:48.641469 2026] [:error] [pid 1929:tid 1938] [client 20.214.241.50:13328] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zxl.php"] [unique_id "aVkwTOcFqdpu6TNsuWoGYAAAAAA"]
[Sat Jan 03 23:05:48.965936 2026] [:error] [pid 1929:tid 1956] [client 20.214.241.50:13369] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aVkwTOcFqdpu6TNsuWoGYwAAABI"]
[Sat Jan 03 23:05:49.327771 2026] [:error] [pid 2083:tid 2100] [client 20.214.241.50:47031] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aVkwTTVlR_BmlMPnhV4uegAAAM8"]
[Sat Jan 03 23:05:49.681295 2026] [:error] [pid 1929:tid 1940] [client 20.214.241.50:14060] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aVkwTecFqdpu6TNsuWoGaAAAAAI"]
[Sat Jan 03 23:05:50.106371 2026] [:error] [pid 1929:tid 1958] [client 20.214.241.50:46995] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zwso.php"] [unique_id "aVkwTucFqdpu6TNsuWoGawAAABQ"]
[Sat Jan 03 23:05:50.441494 2026] [:error] [pid 2083:tid 2109] [client 20.214.241.50:2281] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVkwTjVlR_BmlMPnhV4ugAAAANg"]
[Sat Jan 03 23:05:50.811393 2026] [:error] [pid 2083:tid 2098] [client 20.214.241.50:47030] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVkwTjVlR_BmlMPnhV4uggAAAM0"]
[Sat Jan 03 23:05:51.111598 2026] [:error] [pid 2083:tid 2094] [client 20.214.241.50:51178] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVkwTzVlR_BmlMPnhV4uhQAAAMk"]
[Sat Jan 03 23:05:51.487412 2026] [:error] [pid 2083:tid 2086] [client 20.214.241.50:14018] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2clas.php"] [unique_id "aVkwTzVlR_BmlMPnhV4uiAAAAME"]
[Sat Jan 03 23:05:51.839451 2026] [:error] [pid 31630:tid 31647] [client 20.214.241.50:47024] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVkwT_UV_PU2SWgLPuh0-QAAAY8"]
[Sat Jan 03 23:05:52.331493 2026] [:error] [pid 1931:tid 2032] [client 20.214.241.50:33032] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVkwUB8Tyw7ZoIdXlcYgpwAAAIg"]
[Sat Jan 03 23:05:52.668213 2026] [:error] [pid 1930:tid 1970] [client 20.214.241.50:47022] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVkwUJP-6mqhfUDa89z4TAAAAEQ"]
[Sat Jan 03 23:05:53.098618 2026] [:error] [pid 1930:tid 1974] [client 20.214.241.50:13317] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVkwUZP-6mqhfUDa89z4TQAAAEg"]
[Sat Jan 03 23:05:53.404628 2026] [:error] [pid 34260:tid 34262] [client 20.214.241.50:36214] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVkwUUWWhyvZ0O9KNVQ5cgAAAQA"]
[Sat Jan 03 23:05:53.835243 2026] [:error] [pid 34260:tid 34272] [client 20.214.241.50:14055] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVkwUUWWhyvZ0O9KNVQ5dAAAAQo"]
[Sat Jan 03 23:05:54.248356 2026] [:error] [pid 1929:tid 1954] [client 20.214.241.50:47003] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVkwUucFqdpu6TNsuWoGeAAAABA"]
[Sat Jan 03 23:05:54.700954 2026] [:error] [pid 31630:tid 31643] [client 20.214.241.50:46981] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aVkwUvUV_PU2SWgLPuh1CAAAAYs"]
[Sat Jan 03 23:05:55.041224 2026] [:error] [pid 31630:tid 31632] [client 20.214.241.50:51171] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aVkwU_UV_PU2SWgLPuh1CgAAAYA"]
[Sat Jan 03 23:05:55.394275 2026] [:error] [pid 1929:tid 1951] [client 20.214.241.50:47014] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aVkwU-cFqdpu6TNsuWoGfgAAAA0"]
[Sat Jan 03 23:05:55.862929 2026] [:error] [pid 1929:tid 1953] [client 20.214.241.50:13344] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aVkwU-cFqdpu6TNsuWoGgQAAAA8"]
[Sat Jan 03 23:05:56.218202 2026] [:error] [pid 2083:tid 2087] [client 20.214.241.50:32601] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/12.php"] [unique_id "aVkwVDVlR_BmlMPnhV4ulAAAAMI"]
[Sat Jan 03 23:05:56.571159 2026] [:error] [pid 1930:tid 1987] [client 20.214.241.50:2243] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/14.php"] [unique_id "aVkwVJP-6mqhfUDa89z4UQAAAFU"]
[Sat Jan 03 23:05:57.009984 2026] [:error] [pid 31630:tid 31652] [client 20.214.241.50:38267] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/14.php"] [unique_id "aVkwVfUV_PU2SWgLPuh1EAAAAZQ"]
[Sat Jan 03 23:05:57.356972 2026] [:error] [pid 1929:tid 1941] [client 20.214.241.50:33073] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/14.php"] [unique_id "aVkwVecFqdpu6TNsuWoGhwAAAAM"]
[Sat Jan 03 23:05:57.792239 2026] [:error] [pid 31630:tid 31648] [client 20.214.241.50:22158] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/14.php"] [unique_id "aVkwVfUV_PU2SWgLPuh1EgAAAZA"]
[Sat Jan 03 23:05:58.159425 2026] [:error] [pid 1931:tid 2037] [client 20.214.241.50:38211] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVkwVh8Tyw7ZoIdXlcYgqAAAAI0"]
[Sat Jan 03 23:05:58.456773 2026] [:error] [pid 31630:tid 31642] [client 20.214.241.50:33025] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVkwVvUV_PU2SWgLPuh1FwAAAYo"]
[Sat Jan 03 23:05:58.780301 2026] [:error] [pid 31630:tid 31639] [client 20.214.241.50:32614] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVkwVvUV_PU2SWgLPuh1GAAAAYc"]
[Sat Jan 03 23:05:59.116264 2026] [:error] [pid 31630:tid 31641] [client 20.214.241.50:14017] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aVkwV_UV_PU2SWgLPuh1GQAAAYk"]
[Sat Jan 03 23:05:59.429171 2026] [:error] [pid 1931:tid 2047] [client 20.214.241.50:47067] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/enclas.php"] [unique_id "aVkwVx8Tyw7ZoIdXlcYgqwAAAJc"]
[Sat Jan 03 23:05:59.726677 2026] [:error] [pid 2083:tid 2093] [client 20.214.241.50:51170] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/enclas.php"] [unique_id "aVkwVzVlR_BmlMPnhV4ulgAAAMg"]
[Sat Jan 03 23:06:00.063559 2026] [:error] [pid 2083:tid 2101] [client 20.214.241.50:19555] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/enclas.php"] [unique_id "aVkwWDVlR_BmlMPnhV4umAAAANA"]
[Sat Jan 03 23:06:00.460918 2026] [:error] [pid 1931:tid 1993] [client 20.214.241.50:2268] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/enclas.php"] [unique_id "aVkwWB8Tyw7ZoIdXlcYgrAAAAIA"]
[Sat Jan 03 23:06:00.761753 2026] [:error] [pid 34260:tid 34278] [client 20.214.241.50:38230] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/he.php"] [unique_id "aVkwWEWWhyvZ0O9KNVQ5hQAAARA"]
[Sat Jan 03 23:06:01.111720 2026] [:error] [pid 1931:tid 2031] [client 20.214.241.50:36201] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/he.php"] [unique_id "aVkwWR8Tyw7ZoIdXlcYgrwAAAIc"]
[Sat Jan 03 23:06:01.525176 2026] [:error] [pid 1929:tid 1944] [client 20.214.241.50:14042] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/he.php"] [unique_id "aVkwWecFqdpu6TNsuWoGjgAAAAY"]
[Sat Jan 03 23:06:01.847444 2026] [:error] [pid 1931:tid 2046] [client 20.214.241.50:23546] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/he.php"] [unique_id "aVkwWR8Tyw7ZoIdXlcYgswAAAJY"]
[Sat Jan 03 23:06:02.156879 2026] [:error] [pid 1931:tid 2045] [client 20.214.241.50:14061] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid.php"] [unique_id "aVkwWh8Tyw7ZoIdXlcYgtwAAAJU"]
[Sat Jan 03 23:06:02.489980 2026] [:error] [pid 1931:tid 2033] [client 20.214.241.50:23513] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid.php"] [unique_id "aVkwWh8Tyw7ZoIdXlcYguAAAAIk"]
[Sat Jan 03 23:06:02.783527 2026] [:error] [pid 2083:tid 2108] [client 20.214.241.50:51187] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sid.php"] [unique_id "aVkwWjVlR_BmlMPnhV4ungAAANc"]
[Sat Jan 03 23:06:03.085022 2026] [proxy_fcgi:error] [pid 1929:tid 1959] [client 20.214.241.50:33053] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:06:03.223349 2026] [proxy_fcgi:error] [pid 1929:tid 1962] [client 20.214.241.50:33053] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:06:03.361844 2026] [proxy_fcgi:error] [pid 1929:tid 1941] [client 20.214.241.50:33053] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 23:06:04.499473 2026] [:error] [pid 1929:tid 1961] [client 20.214.241.50:33053] [client 20.214.241.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVkwXOcFqdpu6TNsuWoGnQAAABc"]
[Sat Jan 03 23:06:06.437143 2026] [:error] [pid 1931:tid 2047] [client 20.214.241.50:46983] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVkwXh8Tyw7ZoIdXlcYgvgAAAJc"]
[Sat Jan 03 23:06:06.773910 2026] [:error] [pid 31630:tid 31632] [client 20.214.241.50:13343] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVkwXvUV_PU2SWgLPuh1LAAAAYA"]
[Sat Jan 03 23:06:07.123479 2026] [:error] [pid 31630:tid 31637] [client 20.214.241.50:13329] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVkwX_UV_PU2SWgLPuh1LQAAAYU"]
[Sat Jan 03 23:06:07.470684 2026] [:error] [pid 31630:tid 31640] [client 20.214.241.50:51167] [client 20.214.241.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVkwX_UV_PU2SWgLPuh1MAAAAYg"]
[Sun Jan 04 00:30:39.330204 2026] [:error] [pid 49228:tid 49244] [client 223.177.136.176:9014] [client 223.177.136.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.177.136.176, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVlEL3CPk2c4rRZq2JTefgAAAAs"]
[Sun Jan 04 00:30:39.343151 2026] [proxy_fcgi:error] [pid 49228:tid 49244] [client 223.177.136.176:9014] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 00:36:38.454404 2026] [:error] [pid 49228:tid 49242] [client 106.215.149.74:16372] [client 106.215.149.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.149.74, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVlFlnCPk2c4rRZq2JThTQAAAAk"]
[Sun Jan 04 00:36:38.468991 2026] [proxy_fcgi:error] [pid 49228:tid 49242] [client 106.215.149.74:16372] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 01:09:21.672008 2026] [autoindex:error] [pid 49228:tid 49241] [client 51.68.236.73:24359] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 02:15:19.952253 2026] [:error] [pid 49228:tid 49246] [client 103.77.106.81:64604] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVlct3CPk2c4rRZq2JQRfAAAAA0"]
[Sun Jan 04 02:15:59.560247 2026] [:error] [pid 49319:tid 49328] [client 104.28.246.116:46671] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aVlc37cNXYLFZOiX4cReUgAAAMc"]
[Sun Jan 04 02:16:00.977282 2026] [:error] [pid 49319:tid 49343] [client 104.28.246.116:21938] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/style.php"] [unique_id "aVlc4LcNXYLFZOiX4cReWQAAANY"]
[Sun Jan 04 02:16:01.396658 2026] [:error] [pid 49228:tid 49238] [client 104.28.246.116:54334] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aVlc4XCPk2c4rRZq2JQR4wAAAAU"]
[Sun Jan 04 02:16:04.843387 2026] [:error] [pid 49229:tid 49264] [client 104.28.246.116:22795] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/style.php"] [unique_id "aVlc5FCM4R1akb8JNI7KCQAAAEM"]
[Sun Jan 04 02:16:12.280082 2026] [:error] [pid 49229:tid 49284] [client 104.28.246.116:44860] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style.php"] [unique_id "aVlc7FCM4R1akb8JNI7KKQAAAFc"]
[Sun Jan 04 02:16:13.707431 2026] [:error] [pid 49319:tid 49334] [client 104.28.246.116:41080] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVlc7bcNXYLFZOiX4cRehAAAAM0"]
[Sun Jan 04 02:16:14.122217 2026] [:error] [pid 49230:tid 49297] [client 104.28.246.116:41074] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVlc7n2klmw7JRfgM3jaowAAAIk"]
[Sun Jan 04 04:34:42.119491 2026] [autoindex:error] [pid 37636:tid 37641] [client 37.120.217.148:58110] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 05:20:52.902837 2026] [:error] [pid 37536:tid 37563] [client 103.77.107.178:50748] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aVmING-iKLialy_3rkvwKwAAABc"]
[Sun Jan 04 05:20:54.460376 2026] [:error] [pid 37538:tid 37616] [client 103.77.107.178:57011] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVmINozU2j98LiSLQvRK5wAAAJA"]
[Sun Jan 04 06:28:50.007808 2026] [proxy_fcgi:error] [pid 37537:tid 37584] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:50.262416 2026] [proxy_fcgi:error] [pid 37537:tid 37582] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:50.515096 2026] [proxy_fcgi:error] [pid 37537:tid 37586] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:50.767321 2026] [proxy_fcgi:error] [pid 37537:tid 37592] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:51.020842 2026] [proxy_fcgi:error] [pid 37537:tid 37596] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:51.274454 2026] [proxy_fcgi:error] [pid 37537:tid 37585] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:51.526824 2026] [proxy_fcgi:error] [pid 37537:tid 37594] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:51.779757 2026] [proxy_fcgi:error] [pid 37537:tid 37575] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:52.032809 2026] [proxy_fcgi:error] [pid 37537:tid 37573] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:52.285936 2026] [proxy_fcgi:error] [pid 37537:tid 37593] [client 52.169.217.234:7641] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 06:28:52.537297 2026] [:error] [pid 37537:tid 37588] [client 52.169.217.234:7641] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVmYJAjHz7EQ5p_4u2pxbgAAAE8"]
[Sun Jan 04 06:28:53.039506 2026] [:error] [pid 37636:tid 37642] [client 52.169.217.234:15661] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVmYJS3kmZpEf9yy2b1VMQAAAMI"]
[Sun Jan 04 06:28:53.537323 2026] [:error] [pid 37536:tid 37561] [client 52.169.217.234:1539] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVmYJW-iKLialy_3rksCPAAAABU"]
[Sun Jan 04 06:28:54.035326 2026] [:error] [pid 37538:tid 37622] [client 52.169.217.234:5378] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVmYJozU2j98LiSLQvRfxgAAAJY"]
[Sun Jan 04 06:28:54.535159 2026] [:error] [pid 37536:tid 37543] [client 52.169.217.234:3584] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kure.php"] [unique_id "aVmYJm-iKLialy_3rksCPgAAAAM"]
[Sun Jan 04 06:28:55.032012 2026] [:error] [pid 33650:tid 33668] [client 52.169.217.234:7307] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kure.php"] [unique_id "aVmYJ0zDhphKhMjzf1IbKgAAARA"]
[Sun Jan 04 06:28:55.529265 2026] [:error] [pid 33650:tid 33667] [client 52.169.217.234:9611] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kure.php"] [unique_id "aVmYJ0zDhphKhMjzf1IbKwAAAQ8"]
[Sun Jan 04 06:28:56.026248 2026] [:error] [pid 33650:tid 33660] [client 52.169.217.234:3610] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kure.php"] [unique_id "aVmYKEzDhphKhMjzf1IbLQAAAQg"]
[Sun Jan 04 06:28:56.525810 2026] [:error] [pid 33650:tid 33670] [client 52.169.217.234:5162] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gaje.php"] [unique_id "aVmYKEzDhphKhMjzf1IbLgAAARI"]
[Sun Jan 04 06:28:57.031878 2026] [:error] [pid 37636:tid 37655] [client 52.169.217.234:15811] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gaje.php"] [unique_id "aVmYKS3kmZpEf9yy2b1VNQAAAM8"]
[Sun Jan 04 06:28:57.531232 2026] [:error] [pid 37636:tid 37643] [client 52.169.217.234:15824] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alog.php"] [unique_id "aVmYKS3kmZpEf9yy2b1VNwAAAMM"]
[Sun Jan 04 06:28:58.029178 2026] [:error] [pid 37636:tid 37651] [client 52.169.217.234:9659] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alog.php"] [unique_id "aVmYKi3kmZpEf9yy2b1VOAAAAMs"]
[Sun Jan 04 06:28:58.526306 2026] [:error] [pid 33650:tid 33664] [client 52.169.217.234:7297] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alog.php"] [unique_id "aVmYKkzDhphKhMjzf1IbMgAAAQw"]
[Sun Jan 04 06:28:59.028637 2026] [:error] [pid 37537:tid 37579] [client 52.169.217.234:7628] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alog.php"] [unique_id "aVmYKwjHz7EQ5p_4u2pxcQAAAEY"]
[Sun Jan 04 06:28:59.529281 2026] [:error] [pid 37537:tid 37575] [client 52.169.217.234:15850] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7T6.php"] [unique_id "aVmYKwjHz7EQ5p_4u2pxcwAAAEI"]
[Sun Jan 04 06:29:00.027362 2026] [:error] [pid 37636:tid 37664] [client 52.169.217.234:3631] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7T6.php"] [unique_id "aVmYLC3kmZpEf9yy2b1VOgAAANg"]
[Sun Jan 04 06:29:00.525374 2026] [:error] [pid 37636:tid 37648] [client 52.169.217.234:10982] [client 52.169.217.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xwpg.php"] [unique_id "aVmYLC3kmZpEf9yy2b1VPQAAAMg"]
[Sun Jan 04 07:54:27.298760 2026] [:error] [pid 37636:tid 37641] [client 43.155.157.239:39284] [client 43.155.157.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVmsMy3kmZpEf9yy2b1yjgAAAME"]
[Sun Jan 04 08:09:06.679369 2026] [autoindex:error] [pid 37536:tid 37558] [client 37.120.217.148:55566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 10:43:17.500641 2026] [:error] [pid 46824:tid 46845] [client 119.96.24.54:58068] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVnTxTlcZWfOQmSFQyTKiAAAApI"]
[Sun Jan 04 10:54:41.874702 2026] [:error] [pid 15480:tid 15499] [client 43.157.168.43:44194] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVnWcRBWKIu3SdvwTFhbSwAAAJE"]
[Sun Jan 04 11:30:09.090370 2026] [autoindex:error] [pid 15480:tid 15499] [client 157.230.15.188:43022] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 12:23:06.421140 2026] [autoindex:error] [pid 59250:tid 59264] [client 205.210.31.33:60182] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 13:07:25.247365 2026] [autoindex:error] [pid 4365:tid 4418] [client 51.89.38.21:59764] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 14:51:21.645692 2026] [autoindex:error] [pid 4365:tid 4403] [client 52.53.201.8:36878] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 16:15:24.225118 2026] [:error] [pid 64248:tid 64264] [client 85.203.23.42:58175] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-confiq.php"] [unique_id "aVohnMZZ_5Iet2g0ae3jCQAAAE4"]
[Sun Jan 04 16:15:24.726462 2026] [:error] [pid 15480:tid 15500] [client 85.203.23.36:63729] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aVohnBBWKIu3SdvwTFiMxgAAAJI"]
[Sun Jan 04 16:15:25.229174 2026] [:error] [pid 4427:tid 4458] [client 85.203.23.12:43567] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aVohnT-T5ydE4nJe9Dc4WgAAA0E"]
[Sun Jan 04 16:15:25.725979 2026] [:error] [pid 4427:tid 4466] [client 85.203.23.30:65313] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aVohnT-T5ydE4nJe9Dc4WwAAA0k"]
[Sun Jan 04 16:15:26.224769 2026] [:error] [pid 4365:tid 4397] [client 85.203.23.10:45879] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVohnsMi25XHOoMs4mdTsQAAAYI"]
[Sun Jan 04 16:15:26.715539 2026] [:error] [pid 59250:tid 59271] [client 85.203.23.28:26459] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/form.php"] [unique_id "aVohnvPJ-KGeNWdqpudHMAAAANA"]
[Sun Jan 04 16:15:27.206545 2026] [:error] [pid 59250:tid 59261] [client 85.203.23.33:25275] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aVohn_PJ-KGeNWdqpudHMwAAAMY"]
[Sun Jan 04 16:15:27.697472 2026] [:error] [pid 15480:tid 15496] [client 85.203.23.49:47841] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVohnxBWKIu3SdvwTFiMywAAAI4"]
[Sun Jan 04 16:15:28.194398 2026] [:error] [pid 64248:tid 64269] [client 85.203.23.53:32699] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVohoMZZ_5Iet2g0ae3jEwAAAFM"]
[Sun Jan 04 16:15:28.684935 2026] [:error] [pid 15480:tid 15501] [client 85.203.23.11:26743] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aVohoBBWKIu3SdvwTFiMzQAAAJM"]
[Sun Jan 04 16:15:29.181208 2026] [:error] [pid 64248:tid 64258] [client 85.203.23.12:50267] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aVohocZZ_5Iet2g0ae3jFwAAAEg"]
[Sun Jan 04 16:15:29.679090 2026] [:error] [pid 4365:tid 4398] [client 85.203.23.18:46645] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aVohocMi25XHOoMs4mdTtAAAAYM"]
[Sun Jan 04 16:15:30.175639 2026] [:error] [pid 4426:tid 4449] [client 85.203.23.37:20377] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/shell.php"] [unique_id "aVohopAfkrNbrfBUY5Uy2QAAAlM"]
[Sun Jan 04 16:15:30.666126 2026] [:error] [pid 1080:tid 1140] [client 85.203.23.43:58423] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aVohoiu2Hm9AcIiqg0qkxwAAA8E"]
[Sun Jan 04 16:15:31.160794 2026] [:error] [pid 59250:tid 59260] [client 85.203.23.6:42647] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aVoho_PJ-KGeNWdqpudHOgAAAMU"]
[Sun Jan 04 16:15:31.651740 2026] [:error] [pid 59250:tid 59257] [client 85.203.23.14:51157] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aVoho_PJ-KGeNWdqpudHPAAAAMI"]
[Sun Jan 04 16:15:32.143643 2026] [:error] [pid 4333:tid 4349] [client 85.203.23.18:52591] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVohpDAH-zZWAfquimDq-gAAAA0"]
[Sun Jan 04 16:15:32.640539 2026] [:error] [pid 1020:tid 1040] [client 85.203.23.20:42345] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aVohpFzz6-t0R3_Ito0mfQAAAVE"]
[Sun Jan 04 16:15:33.136616 2026] [:error] [pid 1080:tid 1161] [client 85.203.23.9:30055] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aVohpSu2Hm9AcIiqg0qkygAAA9Y"]
[Sun Jan 04 16:15:33.625816 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.20:57531] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aVohpcZZ_5Iet2g0ae3jHAAAAFc"]
[Sun Jan 04 16:15:34.122734 2026] [:error] [pid 4333:tid 4341] [client 85.203.23.12:26039] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aVohpjAH-zZWAfquimDq_AAAAAU"]
[Sun Jan 04 16:15:34.619485 2026] [:error] [pid 15480:tid 15490] [client 85.203.23.12:59489] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVohphBWKIu3SdvwTFiM0wAAAIg"]
[Sun Jan 04 16:15:35.110596 2026] [:error] [pid 15480:tid 15485] [client 85.203.23.18:41719] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aVohpxBWKIu3SdvwTFiM1QAAAIM"]
[Sun Jan 04 16:15:35.608322 2026] [:error] [pid 15480:tid 15496] [client 85.203.23.13:61983] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "aVohpxBWKIu3SdvwTFiM1wAAAI4"]
[Sun Jan 04 16:15:36.099052 2026] [:error] [pid 1080:tid 1155] [client 85.203.23.48:63169] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aVohqCu2Hm9AcIiqg0qkywAAA9A"]
[Sun Jan 04 16:15:36.590409 2026] [:error] [pid 4365:tid 4410] [client 85.203.23.9:24547] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aVohqMMi25XHOoMs4mdTxQAAAY8"]
[Sun Jan 04 16:15:37.087212 2026] [:error] [pid 64248:tid 64264] [client 85.203.23.7:58913] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aVohqcZZ_5Iet2g0ae3jHgAAAE4"]
[Sun Jan 04 16:15:37.578479 2026] [:error] [pid 4333:tid 4348] [client 85.203.23.46:60747] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aVohqTAH-zZWAfquimDrAAAAAAw"]
[Sun Jan 04 16:15:38.069304 2026] [:error] [pid 4426:tid 4452] [client 85.203.23.13:60447] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aVohqpAfkrNbrfBUY5Uy4gAAAlY"]
[Sun Jan 04 16:15:38.566111 2026] [:error] [pid 64248:tid 64261] [client 85.203.23.45:62159] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVohqsZZ_5Iet2g0ae3jIQAAAEs"]
[Sun Jan 04 16:15:39.057605 2026] [:error] [pid 4333:tid 4357] [client 85.203.23.41:59615] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aVohqzAH-zZWAfquimDrAgAAABU"]
[Sun Jan 04 16:15:39.555168 2026] [:error] [pid 4426:tid 4438] [client 85.203.23.32:52367] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aVohq5AfkrNbrfBUY5Uy4wAAAkg"]
[Sun Jan 04 16:15:40.052070 2026] [:error] [pid 1080:tid 1143] [client 85.203.23.5:52989] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aVohrCu2Hm9AcIiqg0qkzgAAA8Q"]
[Sun Jan 04 16:15:40.548431 2026] [:error] [pid 4426:tid 4430] [client 85.203.23.13:39759] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aVohrJAfkrNbrfBUY5Uy5gAAAkA"]
[Sun Jan 04 16:15:41.038250 2026] [:error] [pid 1020:tid 1032] [client 85.203.23.34:34241] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aVohrVzz6-t0R3_Ito0mhQAAAUk"]
[Sun Jan 04 16:15:41.530837 2026] [:error] [pid 1080:tid 1152] [client 85.203.23.34:62439] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css.php"] [unique_id "aVohrSu2Hm9AcIiqg0qk0AAAA80"]
[Sun Jan 04 16:15:42.028384 2026] [:error] [pid 64248:tid 64257] [client 85.203.23.39:26269] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aVohrsZZ_5Iet2g0ae3jJQAAAEc"]
[Sun Jan 04 16:15:42.524975 2026] [:error] [pid 4426:tid 4437] [client 85.203.23.13:40667] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/lock360.php"] [unique_id "aVohrpAfkrNbrfBUY5Uy6wAAAkc"]
[Sun Jan 04 16:15:43.016458 2026] [:error] [pid 1080:tid 1161] [client 85.203.23.48:38489] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aVohryu2Hm9AcIiqg0qk0wAAA9Y"]
[Sun Jan 04 16:15:43.509832 2026] [:error] [pid 56796:tid 56819] [client 85.203.23.43:24879] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/updates.php"] [unique_id "aVohr4Xa4dVs9ML_oAbzfwAAAdQ"]
[Sun Jan 04 16:15:44.005807 2026] [:error] [pid 15480:tid 15502] [client 85.203.23.32:60335] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aVohsBBWKIu3SdvwTFiM2QAAAJQ"]
[Sun Jan 04 16:15:44.496396 2026] [:error] [pid 4333:tid 4338] [client 85.203.23.34:25265] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aVohsDAH-zZWAfquimDrBgAAAAI"]
[Sun Jan 04 16:15:44.988722 2026] [:error] [pid 15480:tid 15490] [client 85.203.23.20:49791] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aVohsBBWKIu3SdvwTFiM3AAAAIg"]
[Sun Jan 04 16:15:45.486777 2026] [:error] [pid 4333:tid 4342] [client 85.203.23.23:36127] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aVohsTAH-zZWAfquimDrCAAAAAY"]
[Sun Jan 04 16:15:45.980374 2026] [:error] [pid 59250:tid 59269] [client 85.203.23.5:60057] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/"] [unique_id "aVohsfPJ-KGeNWdqpudHUAAAAM4"]
[Sun Jan 04 16:15:46.476688 2026] [:error] [pid 1020:tid 1044] [client 85.203.23.47:61481] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/class.api.php"] [unique_id "aVohslzz6-t0R3_Ito0miwAAAVU"]
[Sun Jan 04 16:15:46.969280 2026] [:error] [pid 64248:tid 64266] [client 85.203.23.33:50183] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aVohssZZ_5Iet2g0ae3jKgAAAFA"]
[Sun Jan 04 16:15:47.467022 2026] [:error] [pid 1020:tid 1047] [client 85.203.23.5:65447] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aVohs1zz6-t0R3_Ito0mjAAAAVg"]
[Sun Jan 04 16:15:47.965089 2026] [:error] [pid 15480:tid 15506] [client 85.203.23.27:62961] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/"] [unique_id "aVohsxBWKIu3SdvwTFiM3wAAAJg"]
[Sun Jan 04 16:15:48.461938 2026] [:error] [pid 4333:tid 4340] [client 85.203.23.23:29967] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aVohtDAH-zZWAfquimDrDwAAAAQ"]
[Sun Jan 04 16:15:48.952378 2026] [:error] [pid 64248:tid 64255] [client 85.203.23.53:29661] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-config-sample.php"] [unique_id "aVohtMZZ_5Iet2g0ae3jLgAAAEU"]
[Sun Jan 04 16:15:49.443300 2026] [:error] [pid 59250:tid 59274] [client 85.203.23.13:59609] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aVohtfPJ-KGeNWdqpudHVAAAANM"]
[Sun Jan 04 16:15:49.934705 2026] [:error] [pid 1080:tid 1152] [client 85.203.23.22:51151] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVohtSu2Hm9AcIiqg0qk2gAAA80"]
[Sun Jan 04 16:15:50.438661 2026] [:error] [pid 15480:tid 15491] [client 85.203.23.12:36097] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aVohthBWKIu3SdvwTFiM4QAAAIk"]
[Sun Jan 04 16:15:50.937210 2026] [:error] [pid 15480:tid 15500] [client 85.203.23.33:24561] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aVohthBWKIu3SdvwTFiM4gAAAJI"]
[Sun Jan 04 16:15:51.434389 2026] [:error] [pid 56796:tid 56802] [client 85.203.23.42:27477] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aVoht4Xa4dVs9ML_oAbzggAAAcM"]
[Sun Jan 04 16:15:51.927178 2026] [:error] [pid 4426:tid 4448] [client 85.203.23.19:39971] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aVoht5AfkrNbrfBUY5Uy8QAAAlI"]
[Sun Jan 04 16:15:52.417562 2026] [:error] [pid 56796:tid 56810] [client 85.203.23.13:46683] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aVohuIXa4dVs9ML_oAbzgwAAAcs"]
[Sun Jan 04 16:15:52.907564 2026] [:error] [pid 59250:tid 59261] [client 85.203.23.36:59903] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aVohuPPJ-KGeNWdqpudHWAAAAMY"]
[Sun Jan 04 16:15:53.398283 2026] [:error] [pid 4426:tid 4440] [client 85.203.23.15:29579] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aVohuZAfkrNbrfBUY5Uy8wAAAko"]
[Sun Jan 04 16:15:53.895154 2026] [:error] [pid 4365:tid 4401] [client 85.203.23.29:30117] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aVohucMi25XHOoMs4mdT5QAAAYY"]
[Sun Jan 04 16:15:54.386581 2026] [:error] [pid 64248:tid 64269] [client 85.203.23.9:36993] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aVohusZZ_5Iet2g0ae3jQAAAAFM"]
[Sun Jan 04 16:15:54.883957 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.43:63849] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aVohusZZ_5Iet2g0ae3jQQAAAFc"]
[Sun Jan 04 16:15:55.373653 2026] [:error] [pid 59250:tid 59279] [client 85.203.23.15:45619] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aVohu_PJ-KGeNWdqpudHWQAAANg"]
[Sun Jan 04 16:15:55.873136 2026] [:error] [pid 15480:tid 15492] [client 85.203.23.49:64069] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aVohuxBWKIu3SdvwTFiM4wAAAIo"]
[Sun Jan 04 16:15:56.370112 2026] [:error] [pid 4333:tid 4356] [client 85.203.23.48:43993] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aVohvDAH-zZWAfquimDrwwAAABQ"]
[Sun Jan 04 16:15:56.866583 2026] [:error] [pid 64248:tid 64274] [client 85.203.23.23:59113] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aVohvMZZ_5Iet2g0ae3jRQAAAFg"]
[Sun Jan 04 16:15:57.365961 2026] [:error] [pid 59250:tid 59274] [client 85.203.23.8:27623] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aVohvfPJ-KGeNWdqpudHXAAAANM"]
[Sun Jan 04 16:15:57.857125 2026] [:error] [pid 4333:tid 4348] [client 85.203.23.40:25025] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aVohvTAH-zZWAfquimDr0AAAAAw"]
[Sun Jan 04 16:15:58.357485 2026] [:error] [pid 1020:tid 1043] [client 85.203.23.13:61139] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/system.php"] [unique_id "aVohvlzz6-t0R3_Ito0mkgAAAVQ"]
[Sun Jan 04 16:15:58.854635 2026] [:error] [pid 4365:tid 4418] [client 85.203.23.7:47051] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aVohvsMi25XHOoMs4mdT6gAAAZc"]
[Sun Jan 04 16:15:59.346220 2026] [:error] [pid 4427:tid 4466] [client 85.203.23.7:34495] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aVohvz-T5ydE4nJe9Dc4cwAAA0k"]
[Sun Jan 04 16:15:59.844121 2026] [:error] [pid 15480:tid 15497] [client 85.203.23.6:60325] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/network_xo.php"] [unique_id "aVohvxBWKIu3SdvwTFiM5AAAAI8"]
[Sun Jan 04 16:16:00.342136 2026] [:error] [pid 59250:tid 59266] [client 85.203.23.40:57009] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aVohwPPJ-KGeNWdqpudHXwAAAMs"]
[Sun Jan 04 16:16:00.834308 2026] [:error] [pid 1020:tid 1029] [client 85.203.23.35:46283] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aVohwFzz6-t0R3_Ito0mlAAAAUY"]
[Sun Jan 04 16:16:01.332426 2026] [:error] [pid 1080:tid 1156] [client 85.203.23.34:36113] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aVohwSu2Hm9AcIiqg0qk4AAAA9E"]
[Sun Jan 04 16:16:01.834847 2026] [:error] [pid 4333:tid 4354] [client 85.203.23.20:35509] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aVohwTAH-zZWAfquimDr8QAAABI"]
[Sun Jan 04 16:16:02.327152 2026] [:error] [pid 4333:tid 4356] [client 85.203.23.46:22613] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aVohwjAH-zZWAfquimDr9QAAABQ"]
[Sun Jan 04 16:16:02.819395 2026] [:error] [pid 59250:tid 59279] [client 85.203.23.44:55613] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aVohwvPJ-KGeNWdqpudHYwAAANg"]
[Sun Jan 04 16:16:03.309644 2026] [:error] [pid 15480:tid 15499] [client 85.203.23.41:38147] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/function/function.php"] [unique_id "aVohwxBWKIu3SdvwTFiM5QAAAJE"]
[Sun Jan 04 16:16:03.806830 2026] [:error] [pid 64248:tid 64271] [client 85.203.23.16:61239] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aVohw8ZZ_5Iet2g0ae3jUAAAAFU"]
[Sun Jan 04 16:16:04.299256 2026] [:error] [pid 56796:tid 56806] [client 85.203.23.27:50253] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aVohxIXa4dVs9ML_oAbzigAAAcc"]
[Sun Jan 04 16:16:04.796055 2026] [:error] [pid 64248:tid 64257] [client 85.203.23.8:59947] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/areak1.php"] [unique_id "aVohxMZZ_5Iet2g0ae3jVAAAAEc"]
[Sun Jan 04 16:16:05.293829 2026] [:error] [pid 59250:tid 59278] [client 85.203.23.25:36899] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aVohxfPJ-KGeNWdqpudHZgAAANc"]
[Sun Jan 04 16:16:05.785143 2026] [:error] [pid 1020:tid 1027] [client 85.203.23.50:32239] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ufbngowues/main.php"] [unique_id "aVohxVzz6-t0R3_Ito0mlgAAAUQ"]
[Sun Jan 04 16:16:06.281615 2026] [:error] [pid 4333:tid 4344] [client 85.203.23.4:21687] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shell3.php"] [unique_id "aVohxjAH-zZWAfquimDsCwAAAAg"]
[Sun Jan 04 16:16:06.780026 2026] [:error] [pid 4333:tid 4341] [client 85.203.23.46:53849] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aVohxjAH-zZWAfquimDsDQAAAAU"]
[Sun Jan 04 16:16:07.276949 2026] [:error] [pid 15480:tid 15483] [client 85.203.23.53:51171] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aVohxxBWKIu3SdvwTFiM6AAAAIE"]
[Sun Jan 04 16:16:07.777266 2026] [:error] [pid 4333:tid 4357] [client 85.203.23.19:53593] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVohxzAH-zZWAfquimDsEQAAABU"]
[Sun Jan 04 16:16:08.267684 2026] [:error] [pid 59250:tid 59260] [client 85.203.23.31:29837] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVohyPPJ-KGeNWdqpudHaAAAAMU"]
[Sun Jan 04 16:16:08.764149 2026] [:error] [pid 59250:tid 59256] [client 85.203.23.39:33471] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aVohyPPJ-KGeNWdqpudHaQAAAME"]
[Sun Jan 04 16:16:09.271893 2026] [:error] [pid 56796:tid 56803] [client 85.203.23.45:25651] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/worksec.php"] [unique_id "aVohyYXa4dVs9ML_oAbzjAAAAcQ"]
[Sun Jan 04 16:16:09.761351 2026] [:error] [pid 1080:tid 1155] [client 85.203.23.40:51577] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aVohySu2Hm9AcIiqg0qk6gAAA9A"]
[Sun Jan 04 16:16:10.252097 2026] [:error] [pid 15480:tid 15505] [client 85.203.23.46:50275] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aVohyhBWKIu3SdvwTFiM6wAAAJc"]
[Sun Jan 04 16:16:10.749311 2026] [:error] [pid 4426:tid 4448] [client 85.203.23.37:42989] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aVohypAfkrNbrfBUY5UzFwAAAlI"]
[Sun Jan 04 16:16:11.239596 2026] [:error] [pid 4365:tid 4403] [client 85.203.23.37:64519] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aVohy8Mi25XHOoMs4mdT8QAAAYg"]
[Sun Jan 04 16:16:11.732995 2026] [:error] [pid 1020:tid 1037] [client 85.203.23.12:30261] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aVohy1zz6-t0R3_Ito0mlwAAAU4"]
[Sun Jan 04 16:16:12.229783 2026] [:error] [pid 4333:tid 4336] [client 85.203.23.6:21133] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aVohzDAH-zZWAfquimDsFwAAAAA"]
[Sun Jan 04 16:16:12.720723 2026] [:error] [pid 4333:tid 4353] [client 85.203.23.52:28501] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/"] [unique_id "aVohzDAH-zZWAfquimDsGQAAABE"]
[Sun Jan 04 16:16:13.211474 2026] [:error] [pid 4365:tid 4402] [client 85.203.23.29:31289] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/222.php"] [unique_id "aVohzcMi25XHOoMs4mdT9wAAAYc"]
[Sun Jan 04 16:16:13.702272 2026] [:error] [pid 4333:tid 4359] [client 85.203.23.12:45523] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aVohzTAH-zZWAfquimDsHwAAABc"]
[Sun Jan 04 16:16:14.199852 2026] [:error] [pid 4333:tid 4339] [client 85.203.23.12:37971] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aVohzjAH-zZWAfquimDsIgAAAAM"]
[Sun Jan 04 16:16:14.691478 2026] [:error] [pid 4426:tid 4435] [client 85.203.23.35:31113] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aVohzpAfkrNbrfBUY5UzGAAAAkU"]
[Sun Jan 04 16:16:15.181862 2026] [:error] [pid 1080:tid 1141] [client 85.203.23.42:58979] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aVohzyu2Hm9AcIiqg0qk7AAAA8I"]
[Sun Jan 04 16:16:15.672625 2026] [:error] [pid 4333:tid 4358] [client 85.203.23.4:45173] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aVohzzAH-zZWAfquimDsJAAAABY"]
[Sun Jan 04 16:16:16.168401 2026] [:error] [pid 15480:tid 15492] [client 85.203.23.5:56817] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aVoh0BBWKIu3SdvwTFiM7AAAAIo"]
[Sun Jan 04 16:16:16.665743 2026] [:error] [pid 4427:tid 4476] [client 85.203.23.25:51001] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aVoh0D-T5ydE4nJe9Dc4gAAAA1M"]
[Sun Jan 04 16:16:17.164114 2026] [:error] [pid 4427:tid 4472] [client 85.203.23.27:21751] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aVoh0T-T5ydE4nJe9Dc4ggAAA08"]
[Sun Jan 04 16:16:17.661423 2026] [:error] [pid 1020:tid 1026] [client 85.203.23.11:51757] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aVoh0Vzz6-t0R3_Ito0mnQAAAUM"]
[Sun Jan 04 16:16:18.154064 2026] [:error] [pid 15480:tid 15490] [client 85.203.23.44:27489] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aVoh0hBWKIu3SdvwTFiM7wAAAIg"]
[Sun Jan 04 16:16:18.657374 2026] [:error] [pid 59250:tid 59255] [client 85.203.23.28:24723] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aVoh0vPJ-KGeNWdqpudHbQAAAMA"]
[Sun Jan 04 16:16:19.147757 2026] [:error] [pid 1020:tid 1044] [client 85.203.23.19:48503] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aVoh01zz6-t0R3_Ito0mngAAAVU"]
[Sun Jan 04 16:16:19.640111 2026] [:error] [pid 4426:tid 4445] [client 85.203.23.34:40793] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aVoh05AfkrNbrfBUY5UzHQAAAk8"]
[Sun Jan 04 16:16:20.136615 2026] [:error] [pid 4365:tid 4412] [client 85.203.23.3:26107] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aVoh1MMi25XHOoMs4mdT-gAAAZE"]
[Sun Jan 04 16:16:20.627487 2026] [:error] [pid 15480:tid 15503] [client 85.203.23.36:30089] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aVoh1BBWKIu3SdvwTFiM8wAAAJU"]
[Sun Jan 04 16:16:21.117501 2026] [:error] [pid 4427:tid 4457] [client 85.203.23.5:36617] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aVoh1T-T5ydE4nJe9Dc4hwAAA0A"]
[Sun Jan 04 16:16:21.615668 2026] [:error] [pid 59250:tid 59257] [client 85.203.23.26:53545] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/"] [unique_id "aVoh1fPJ-KGeNWdqpudHdQAAAMI"]
[Sun Jan 04 16:16:22.113405 2026] [:error] [pid 4426:tid 4432] [client 85.203.23.10:23905] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aVoh1pAfkrNbrfBUY5UzHwAAAkI"]
[Sun Jan 04 16:16:22.610777 2026] [:error] [pid 1080:tid 1158] [client 85.203.23.4:42573] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aVoh1iu2Hm9AcIiqg0qk8AAAA9M"]
[Sun Jan 04 16:16:23.101015 2026] [:error] [pid 4426:tid 4439] [client 85.203.23.5:58319] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/"] [unique_id "aVoh15AfkrNbrfBUY5UzIQAAAkk"]
[Sun Jan 04 16:16:23.597641 2026] [:error] [pid 4365:tid 4402] [client 85.203.23.3:47411] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aVoh18Mi25XHOoMs4mdT_AAAAYc"]
[Sun Jan 04 16:16:24.089227 2026] [:error] [pid 59250:tid 59261] [client 85.203.23.9:52871] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aVoh2PPJ-KGeNWdqpudHeAAAAMY"]
[Sun Jan 04 16:16:24.585875 2026] [:error] [pid 1020:tid 1039] [client 85.203.23.12:53947] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aVoh2Fzz6-t0R3_Ito0moQAAAVA"]
[Sun Jan 04 16:16:25.083047 2026] [:error] [pid 4365:tid 4419] [client 85.203.23.47:37709] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aVoh2cMi25XHOoMs4mdT_wAAAZg"]
[Sun Jan 04 16:16:25.575031 2026] [:error] [pid 1080:tid 1142] [client 85.203.23.15:58381] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aVoh2Su2Hm9AcIiqg0qk8gAAA8M"]
[Sun Jan 04 16:16:26.071334 2026] [:error] [pid 1080:tid 1155] [client 85.203.23.48:40635] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aVoh2iu2Hm9AcIiqg0qk8wAAA9A"]
[Sun Jan 04 16:16:26.569163 2026] [:error] [pid 15480:tid 15502] [client 85.203.23.7:64397] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aVoh2hBWKIu3SdvwTFiM-AAAAJQ"]
[Sun Jan 04 16:16:27.065423 2026] [:error] [pid 4426:tid 4453] [client 85.203.23.50:22963] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aVoh25AfkrNbrfBUY5UzJAAAAlc"]
[Sun Jan 04 16:16:27.561739 2026] [:error] [pid 1080:tid 1149] [client 85.203.23.26:35717] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aVoh2yu2Hm9AcIiqg0qk9AAAA8o"]
[Sun Jan 04 16:16:28.057798 2026] [:error] [pid 1020:tid 1041] [client 85.203.23.4:45353] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/"] [unique_id "aVoh3Fzz6-t0R3_Ito0mpAAAAVI"]
[Sun Jan 04 16:16:28.553907 2026] [:error] [pid 4365:tid 4410] [client 85.203.23.39:34893] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/cgi-bin/"] [unique_id "aVoh3MMi25XHOoMs4mdUAwAAAY8"]
[Sun Jan 04 16:16:29.045166 2026] [:error] [pid 4426:tid 4454] [client 85.203.23.41:50113] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aVoh3ZAfkrNbrfBUY5UzJgAAAlg"]
[Sun Jan 04 16:16:29.544306 2026] [:error] [pid 4365:tid 4409] [client 85.203.23.23:62441] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aVoh3cMi25XHOoMs4mdUBgAAAY4"]
[Sun Jan 04 16:16:30.041290 2026] [:error] [pid 59250:tid 59274] [client 85.203.23.34:21287] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aVoh3vPJ-KGeNWdqpudHegAAANM"]
[Sun Jan 04 16:16:30.537757 2026] [:error] [pid 4365:tid 4406] [client 85.203.23.23:57181] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aVoh3sMi25XHOoMs4mdUCAAAAYs"]
[Sun Jan 04 16:16:31.039173 2026] [:error] [pid 1080:tid 1145] [client 85.203.23.6:63991] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aVoh3yu2Hm9AcIiqg0qk-QAAA8Y"]
[Sun Jan 04 16:16:31.529726 2026] [:error] [pid 4333:tid 4342] [client 85.203.23.51:33731] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aVoh3zAH-zZWAfquimDsKQAAAAY"]
[Sun Jan 04 16:16:32.022594 2026] [:error] [pid 59250:tid 59276] [client 85.203.23.7:45977] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aVoh4PPJ-KGeNWdqpudHfgAAANU"]
[Sun Jan 04 16:16:32.513611 2026] [:error] [pid 56796:tid 56823] [client 85.203.23.35:37255] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aVoh4IXa4dVs9ML_oAbzwAAAAdg"]
[Sun Jan 04 16:16:33.011382 2026] [:error] [pid 1020:tid 1039] [client 85.203.23.25:20015] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aVoh4Vzz6-t0R3_Ito0msQAAAVA"]
[Sun Jan 04 16:16:33.502396 2026] [:error] [pid 4333:tid 4352] [client 85.203.23.21:59735] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aVoh4TAH-zZWAfquimDsLgAAABA"]
[Sun Jan 04 16:16:34.000288 2026] [:error] [pid 4426:tid 4435] [client 85.203.23.24:20331] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aVoh4ZAfkrNbrfBUY5UzLwAAAkU"]
[Sun Jan 04 16:16:34.498114 2026] [:error] [pid 4365:tid 4415] [client 85.203.23.53:34403] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aVoh4sMi25XHOoMs4mdUDAAAAZQ"]
[Sun Jan 04 16:16:34.991242 2026] [:error] [pid 4427:tid 4458] [client 85.203.23.34:38005] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVoh4j-T5ydE4nJe9Dc4nAAAA0E"]
[Sun Jan 04 16:16:35.481384 2026] [:error] [pid 64248:tid 64271] [client 85.203.23.4:28175] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/default.php"] [unique_id "aVoh48ZZ_5Iet2g0ae3jvwAAAFU"]
[Sun Jan 04 16:16:35.978607 2026] [:error] [pid 4426:tid 4450] [client 85.203.23.50:38507] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVoh45AfkrNbrfBUY5UzNQAAAlQ"]
[Sun Jan 04 16:16:36.475743 2026] [:error] [pid 4426:tid 4434] [client 85.203.23.5:50297] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aVoh5JAfkrNbrfBUY5UzOwAAAkQ"]
[Sun Jan 04 16:16:36.968225 2026] [:error] [pid 4333:tid 4351] [client 85.203.23.41:24007] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aVoh5DAH-zZWAfquimDsOwAAAA8"]
[Sun Jan 04 16:16:38.891526 2026] [:error] [pid 4365:tid 4412] [client 85.203.23.16:36649] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aVoh5sMi25XHOoMs4mdUEQAAAZE"]
[Sun Jan 04 16:16:39.382276 2026] [:error] [pid 4426:tid 4430] [client 85.203.23.30:45751] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aVoh55AfkrNbrfBUY5UzPwAAAkA"]
[Sun Jan 04 16:16:39.888688 2026] [:error] [pid 4427:tid 4464] [client 85.203.23.5:23587] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content.php"] [unique_id "aVoh5z-T5ydE4nJe9Dc4oAAAA0c"]
[Sun Jan 04 16:16:40.386001 2026] [:error] [pid 4426:tid 4448] [client 85.203.23.2:38051] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aVoh6JAfkrNbrfBUY5UzQQAAAlI"]
[Sun Jan 04 16:16:40.878309 2026] [:error] [pid 4365:tid 4398] [client 85.203.23.5:58075] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVoh6MMi25XHOoMs4mdUFQAAAYM"]
[Sun Jan 04 16:16:41.375528 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.35:20539] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aVoh6cZZ_5Iet2g0ae3jxgAAAFc"]
[Sun Jan 04 16:16:41.867021 2026] [:error] [pid 4333:tid 4337] [client 85.203.23.3:65379] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aVoh6TAH-zZWAfquimDsTAAAAAE"]
[Sun Jan 04 16:16:42.364178 2026] [:error] [pid 64248:tid 64263] [client 85.203.23.3:63769] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aVoh6sZZ_5Iet2g0ae3jywAAAE0"]
[Sun Jan 04 16:16:42.855895 2026] [:error] [pid 59250:tid 59275] [client 85.203.23.51:43549] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aVoh6vPJ-KGeNWdqpudHkgAAANQ"]
[Sun Jan 04 16:16:43.354961 2026] [:error] [pid 4333:tid 4355] [client 85.203.23.11:64645] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aVoh6zAH-zZWAfquimDsUgAAABM"]
[Sun Jan 04 16:16:43.851955 2026] [:error] [pid 4333:tid 4349] [client 85.203.23.50:52549] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVoh6zAH-zZWAfquimDsVQAAAA0"]
[Sun Jan 04 16:16:44.343277 2026] [:error] [pid 4333:tid 4352] [client 85.203.23.18:21083] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aVoh7DAH-zZWAfquimDsWwAAABA"]
[Sun Jan 04 16:16:44.841366 2026] [:error] [pid 4333:tid 4346] [client 85.203.23.17:57081] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aVoh7DAH-zZWAfquimDsXwAAAAo"]
[Sun Jan 04 16:16:45.337886 2026] [:error] [pid 4333:tid 4337] [client 85.203.23.14:34727] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aVoh7TAH-zZWAfquimDsYQAAAAE"]
[Sun Jan 04 16:16:45.828075 2026] [:error] [pid 1080:tid 1147] [client 85.203.23.30:41581] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aVoh7Su2Hm9AcIiqg0qk_QAAA8g"]
[Sun Jan 04 16:16:46.322981 2026] [:error] [pid 4333:tid 4358] [client 85.203.23.43:27865] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-domain.php"] [unique_id "aVoh7jAH-zZWAfquimDsZgAAABY"]
[Sun Jan 04 16:16:46.820706 2026] [:error] [pid 4365:tid 4399] [client 85.203.23.31:28167] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aVoh7sMi25XHOoMs4mdUIQAAAYQ"]
[Sun Jan 04 16:16:47.318467 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.7:45575] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aVoh78ZZ_5Iet2g0ae3j0AAAAFc"]
[Sun Jan 04 16:16:47.814417 2026] [:error] [pid 4426:tid 4432] [client 85.203.23.7:30221] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aVoh75AfkrNbrfBUY5UzTAAAAkI"]
[Sun Jan 04 16:16:48.309425 2026] [:error] [pid 4426:tid 4435] [client 85.203.23.17:47199] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aVoh8JAfkrNbrfBUY5UzTQAAAkU"]
[Sun Jan 04 16:16:48.806450 2026] [:error] [pid 64248:tid 64250] [client 85.203.23.24:32977] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aVoh8MZZ_5Iet2g0ae3j1QAAAEA"]
[Sun Jan 04 16:16:49.296359 2026] [:error] [pid 4365:tid 4417] [client 85.203.23.50:21377] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aVoh8cMi25XHOoMs4mdUJQAAAZY"]
[Sun Jan 04 16:16:49.793600 2026] [:error] [pid 4426:tid 4446] [client 85.203.23.51:25341] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aVoh8ZAfkrNbrfBUY5UzUQAAAlA"]
[Sun Jan 04 16:16:50.304197 2026] [:error] [pid 1020:tid 1033] [client 85.203.23.5:60519] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aVoh8lzz6-t0R3_Ito0muQAAAUo"]
[Sun Jan 04 16:16:50.794386 2026] [:error] [pid 56796:tid 56813] [client 85.203.23.29:30919] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/av.php"] [unique_id "aVoh8oXa4dVs9ML_oAbzwgAAAc4"]
[Sun Jan 04 16:16:51.284742 2026] [:error] [pid 59250:tid 59267] [client 85.203.23.40:30691] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/cache/et/"] [unique_id "aVoh8_PJ-KGeNWdqpudHmwAAAMw"]
[Sun Jan 04 16:16:51.774778 2026] [:error] [pid 4427:tid 4472] [client 85.203.23.44:55103] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aVoh8z-T5ydE4nJe9Dc4qQAAA08"]
[Sun Jan 04 16:16:52.265477 2026] [:error] [pid 59250:tid 59268] [client 85.203.23.8:25861] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aVoh9PPJ-KGeNWdqpudHnQAAAM0"]
[Sun Jan 04 16:16:52.756638 2026] [:error] [pid 59250:tid 59264] [client 85.203.23.46:36395] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aVoh9PPJ-KGeNWdqpudHogAAAMk"]
[Sun Jan 04 16:16:53.259353 2026] [:error] [pid 59250:tid 59274] [client 85.203.23.45:22721] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aVoh9fPJ-KGeNWdqpudHqAAAANM"]
[Sun Jan 04 16:16:53.751067 2026] [:error] [pid 4365:tid 4396] [client 85.203.23.41:42841] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aVoh9cMi25XHOoMs4mdUJwAAAYE"]
[Sun Jan 04 16:16:54.241880 2026] [:error] [pid 56796:tid 56812] [client 85.203.23.25:54101] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/z.php"] [unique_id "aVoh9oXa4dVs9ML_oAbzxAAAAc0"]
[Sun Jan 04 16:16:54.731696 2026] [:error] [pid 4365:tid 4413] [client 85.203.23.36:56905] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aVoh9sMi25XHOoMs4mdUKAAAAZI"]
[Sun Jan 04 16:16:55.222181 2026] [:error] [pid 56796:tid 56811] [client 85.203.23.17:23773] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aVoh94Xa4dVs9ML_oAbzxwAAAcw"]
[Sun Jan 04 16:16:55.718277 2026] [:error] [pid 56796:tid 56804] [client 85.203.23.3:62851] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aVoh94Xa4dVs9ML_oAbzyAAAAcU"]
[Sun Jan 04 16:16:56.216173 2026] [:error] [pid 4333:tid 4356] [client 85.203.23.42:33791] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aVoh-DAH-zZWAfquimDscgAAABQ"]
[Sun Jan 04 16:16:56.712929 2026] [:error] [pid 4333:tid 4343] [client 85.203.23.7:37855] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aVoh-DAH-zZWAfquimDseAAAAAc"]
[Sun Jan 04 16:16:57.204669 2026] [:error] [pid 4333:tid 4355] [client 85.203.23.33:45051] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aVoh-TAH-zZWAfquimDsfQAAABM"]
[Sun Jan 04 16:16:57.695729 2026] [:error] [pid 64248:tid 64271] [client 85.203.23.27:27791] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aVoh-cZZ_5Iet2g0ae3j6AAAAFU"]
[Sun Jan 04 16:16:58.187985 2026] [:error] [pid 4365:tid 4397] [client 85.203.23.26:52729] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aVoh-sMi25XHOoMs4mdUNAAAAYI"]
[Sun Jan 04 16:16:58.684181 2026] [:error] [pid 64248:tid 64256] [client 85.203.23.6:26701] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/m.php"] [unique_id "aVoh-sZZ_5Iet2g0ae3j6gAAAEY"]
[Sun Jan 04 16:16:59.174531 2026] [:error] [pid 64248:tid 64255] [client 85.203.23.44:49331] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/img/fm.php"] [unique_id "aVoh-8ZZ_5Iet2g0ae3j7gAAAEU"]
[Sun Jan 04 16:16:59.678180 2026] [:error] [pid 56796:tid 56823] [client 85.203.23.15:54545] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aVoh-4Xa4dVs9ML_oAbzzQAAAdg"]
[Sun Jan 04 16:17:00.170109 2026] [:error] [pid 4333:tid 4340] [client 85.203.23.14:30593] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aVoh_DAH-zZWAfquimDsgwAAAAQ"]
[Sun Jan 04 16:17:00.667354 2026] [:error] [pid 56796:tid 56806] [client 85.203.23.24:42257] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aVoh_IXa4dVs9ML_oAbz0QAAAcc"]
[Sun Jan 04 16:17:01.160646 2026] [:error] [pid 4333:tid 4359] [client 85.203.23.10:28083] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aVoh_TAH-zZWAfquimDshwAAABc"]
[Sun Jan 04 16:17:01.651250 2026] [:error] [pid 4365:tid 4405] [client 85.203.23.16:60707] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aVoh_cMi25XHOoMs4mdUNwAAAYo"]
[Sun Jan 04 16:17:02.148063 2026] [:error] [pid 15480:tid 15502] [client 85.203.23.44:43241] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aVoh_hBWKIu3SdvwTFiNAQAAAJQ"]
[Sun Jan 04 16:17:02.644284 2026] [:error] [pid 4333:tid 4348] [client 85.203.23.13:53367] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aVoh_jAH-zZWAfquimDsiQAAAAw"]
[Sun Jan 04 16:17:03.135406 2026] [:error] [pid 4365:tid 4395] [client 85.203.23.39:40497] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aVoh_8Mi25XHOoMs4mdUOAAAAYA"]
[Sun Jan 04 16:17:03.632703 2026] [:error] [pid 4333:tid 4337] [client 85.203.23.29:63465] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aVoh_zAH-zZWAfquimDsjwAAAAE"]
[Sun Jan 04 16:17:04.134017 2026] [:error] [pid 15480:tid 15490] [client 85.203.23.21:27549] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVoiABBWKIu3SdvwTFiNBQAAAIg"]
[Sun Jan 04 16:17:04.631764 2026] [:error] [pid 1080:tid 1154] [client 85.203.23.18:43665] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVoiACu2Hm9AcIiqg0qlFwAAA88"]
[Sun Jan 04 16:17:05.122349 2026] [:error] [pid 4365:tid 4396] [client 85.203.23.34:49973] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aVoiAcMi25XHOoMs4mdUPAAAAYE"]
[Sun Jan 04 16:17:05.614328 2026] [:error] [pid 64248:tid 64252] [client 85.203.23.10:37815] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/"] [unique_id "aVoiAcZZ_5Iet2g0ae3kAwAAAEI"]
[Sun Jan 04 16:17:06.112122 2026] [:error] [pid 64248:tid 64253] [client 85.203.23.20:53189] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/database.php"] [unique_id "aVoiAsZZ_5Iet2g0ae3kBAAAAEM"]
[Sun Jan 04 16:17:08.042805 2026] [:error] [pid 4427:tid 4477] [client 85.203.23.12:59725] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/vudel/list.php"] [unique_id "aVoiBD-T5ydE4nJe9Dc4sAAAA1Q"]
[Sun Jan 04 16:17:08.535970 2026] [:error] [pid 15480:tid 15501] [client 85.203.23.46:31651] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aVoiBBBWKIu3SdvwTFiNDAAAAJM"]
[Sun Jan 04 16:17:09.026106 2026] [:error] [pid 59250:tid 59263] [client 85.203.23.10:23669] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/hello-elementor/assets/css/lightbox.php"] [unique_id "aVoiBfPJ-KGeNWdqpudHtgAAAMg"]
[Sun Jan 04 16:17:09.525327 2026] [:error] [pid 15480:tid 15491] [client 85.203.23.6:22801] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-custom-fields/includes/walkers/about.php"] [unique_id "aVoiBRBWKIu3SdvwTFiNDgAAAIk"]
[Sun Jan 04 16:17:10.022124 2026] [:error] [pid 59250:tid 59259] [client 85.203.23.39:55147] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/elementor/includes/controls/about.php"] [unique_id "aVoiBvPJ-KGeNWdqpudHuwAAAMQ"]
[Sun Jan 04 16:17:10.512122 2026] [:error] [pid 15480:tid 15497] [client 85.203.23.31:54135] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aVoiBhBWKIu3SdvwTFiNEAAAAI8"]
[Sun Jan 04 16:17:11.004199 2026] [:error] [pid 15480:tid 15482] [client 85.203.23.16:53943] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/well-known/acme-challenge/c/e/about.php"] [unique_id "aVoiBxBWKIu3SdvwTFiNEwAAAIA"]
[Sun Jan 04 16:17:11.497764 2026] [:error] [pid 4426:tid 4433] [client 85.203.23.16:52225] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aVoiB5AfkrNbrfBUY5UzWQAAAkM"]
[Sun Jan 04 16:17:11.996257 2026] [:error] [pid 4333:tid 4356] [client 85.203.23.7:47657] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aVoiBzAH-zZWAfquimDsmwAAABQ"]
[Sun Jan 04 16:17:12.496305 2026] [:error] [pid 1080:tid 1145] [client 85.203.23.49:30093] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aVoiCCu2Hm9AcIiqg0qlHwAAA8Y"]
[Sun Jan 04 16:17:12.993912 2026] [:error] [pid 1080:tid 1150] [client 85.203.23.45:62359] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/222.php"] [unique_id "aVoiCCu2Hm9AcIiqg0qlJAAAA8s"]
[Sun Jan 04 16:17:13.491813 2026] [:error] [pid 59250:tid 59273] [client 85.203.23.51:26111] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/man.php"] [unique_id "aVoiCfPJ-KGeNWdqpudHxwAAANI"]
[Sun Jan 04 16:17:13.989326 2026] [:error] [pid 4333:tid 4343] [client 85.203.23.26:27691] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/zoom1.php"] [unique_id "aVoiCTAH-zZWAfquimDsngAAAAc"]
[Sun Jan 04 16:17:14.481299 2026] [:error] [pid 1020:tid 1031] [client 85.203.23.44:22987] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/"] [unique_id "aVoiClzz6-t0R3_Ito0mxgAAAUg"]
[Sun Jan 04 16:17:14.971744 2026] [:error] [pid 4365:tid 4396] [client 85.203.23.43:50541] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/"] [unique_id "aVoiCsMi25XHOoMs4mdURQAAAYE"]
[Sun Jan 04 16:17:15.467095 2026] [:error] [pid 4365:tid 4400] [client 85.203.23.5:48767] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/css/minified/"] [unique_id "aVoiC8Mi25XHOoMs4mdURwAAAYU"]
[Sun Jan 04 16:17:15.963774 2026] [:error] [pid 1080:tid 1147] [client 85.203.23.39:41485] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/assets/js/"] [unique_id "aVoiCyu2Hm9AcIiqg0qlMQAAA8g"]
[Sun Jan 04 16:17:16.454458 2026] [:error] [pid 59250:tid 59270] [client 85.203.23.16:40155] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/astra-addon/"] [unique_id "aVoiDPPJ-KGeNWdqpudHzwAAAM8"]
[Sun Jan 04 16:17:16.946162 2026] [:error] [pid 4426:tid 4441] [client 85.203.23.45:46981] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-mails.php"] [unique_id "aVoiDJAfkrNbrfBUY5UzXQAAAks"]
[Sun Jan 04 16:17:17.436294 2026] [:error] [pid 64248:tid 64264] [client 85.203.23.37:55703] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/new.php"] [unique_id "aVoiDcZZ_5Iet2g0ae3kEQAAAE4"]
[Sun Jan 04 16:17:17.932056 2026] [:error] [pid 4426:tid 4430] [client 85.203.23.44:31521] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aVoiDZAfkrNbrfBUY5UzXwAAAkA"]
[Sun Jan 04 16:17:18.423392 2026] [:error] [pid 1080:tid 1152] [client 85.203.23.49:41839] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/plugins/js/crd/admin.php"] [unique_id "aVoiDiu2Hm9AcIiqg0qlOQAAA80"]
[Sun Jan 04 16:17:18.913686 2026] [:error] [pid 4427:tid 4476] [client 85.203.23.8:47997] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/uploads/isc/"] [unique_id "aVoiDj-T5ydE4nJe9Dc4uwAAA1M"]
[Sun Jan 04 16:17:19.407227 2026] [:error] [pid 4426:tid 4448] [client 85.203.23.45:51023] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/"] [unique_id "aVoiD5AfkrNbrfBUY5UzYwAAAlI"]
[Sun Jan 04 16:17:19.905529 2026] [:error] [pid 56796:tid 56815] [client 85.203.23.37:22007] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aVoiD4Xa4dVs9ML_oAbz2gAAAdA"]
[Sun Jan 04 16:17:20.404260 2026] [:error] [pid 4333:tid 4358] [client 85.203.23.25:24845] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aVoiEDAH-zZWAfquimDspwAAABY"]
[Sun Jan 04 16:17:20.901221 2026] [:error] [pid 59250:tid 59262] [client 85.203.23.3:37041] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aVoiEPPJ-KGeNWdqpudH1gAAAMc"]
[Sun Jan 04 16:17:21.393654 2026] [:error] [pid 4333:tid 4336] [client 85.203.23.32:60187] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aVoiETAH-zZWAfquimDsqwAAAAA"]
[Sun Jan 04 16:17:21.884504 2026] [:error] [pid 4333:tid 4338] [client 85.203.23.39:61669] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/list/"] [unique_id "aVoiETAH-zZWAfquimDsrgAAAAI"]
[Sun Jan 04 16:17:22.374367 2026] [:error] [pid 4333:tid 4354] [client 85.203.23.24:56795] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aVoiEjAH-zZWAfquimDssQAAABI"]
[Sun Jan 04 16:17:22.871612 2026] [:error] [pid 4426:tid 4438] [client 85.203.23.28:56047] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/audio/go.php"] [unique_id "aVoiEpAfkrNbrfBUY5UzbQAAAkg"]
[Sun Jan 04 16:17:23.435797 2026] [:error] [pid 4426:tid 4452] [client 85.203.23.43:29397] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/imagess.php"] [unique_id "aVoiE5AfkrNbrfBUY5UzbwAAAlY"]
[Sun Jan 04 16:17:23.938280 2026] [:error] [pid 4365:tid 4396] [client 85.203.23.45:32283] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/imagess.php"] [unique_id "aVoiE8Mi25XHOoMs4mdUUwAAAYE"]
[Sun Jan 04 16:17:24.435108 2026] [:error] [pid 4333:tid 4351] [client 85.203.23.48:47005] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/let.php"] [unique_id "aVoiFDAH-zZWAfquimDsuAAAAA8"]
[Sun Jan 04 16:17:24.926958 2026] [:error] [pid 1020:tid 1034] [client 85.203.23.12:50765] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/go.php"] [unique_id "aVoiFFzz6-t0R3_Ito0mzQAAAUs"]
[Sun Jan 04 16:17:25.425282 2026] [:error] [pid 4426:tid 4435] [client 85.203.23.20:63365] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/huan.php"] [unique_id "aVoiFZAfkrNbrfBUY5UzcwAAAkU"]
[Sun Jan 04 16:17:25.915297 2026] [:error] [pid 4333:tid 4350] [client 85.203.23.18:23083] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aVoiFTAH-zZWAfquimDsvQAAAA4"]
[Sun Jan 04 16:17:26.412344 2026] [:error] [pid 4365:tid 4398] [client 85.203.23.50:43201] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aVoiFsMi25XHOoMs4mdUVwAAAYM"]
[Sun Jan 04 16:17:26.910386 2026] [:error] [pid 4333:tid 4352] [client 85.203.23.45:61741] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aVoiFjAH-zZWAfquimDswwAAABA"]
[Sun Jan 04 16:17:27.407943 2026] [:error] [pid 59250:tid 59268] [client 85.203.23.14:43111] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aVoiF_PJ-KGeNWdqpudH3QAAAM0"]
[Sun Jan 04 16:17:27.898359 2026] [:error] [pid 4333:tid 4344] [client 85.203.23.13:21225] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/loarrfh/"] [unique_id "aVoiFzAH-zZWAfquimDsxgAAAAg"]
[Sun Jan 04 16:17:28.396815 2026] [:error] [pid 4333:tid 4351] [client 85.203.23.7:34097] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/foogallery/foogallery.php"] [unique_id "aVoiGDAH-zZWAfquimDszQAAAA8"]
[Sun Jan 04 16:17:28.886907 2026] [:error] [pid 4333:tid 4344] [client 85.203.23.31:26673] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/404-solution/404-solution.php"] [unique_id "aVoiGDAH-zZWAfquimDszwAAAAg"]
[Sun Jan 04 16:17:29.376366 2026] [:error] [pid 15480:tid 15484] [client 85.203.23.7:56085] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/duplicator/src/moon.php"] [unique_id "aVoiGRBWKIu3SdvwTFiNJAAAAII"]
[Sun Jan 04 16:17:29.873789 2026] [:error] [pid 4333:tid 4343] [client 85.203.23.11:37853] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin-menu-search/admin-menu-search.php"] [unique_id "aVoiGTAH-zZWAfquimDs1QAAAAc"]
[Sun Jan 04 16:17:30.370896 2026] [:error] [pid 4333:tid 4336] [client 85.203.23.31:32373] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php"] [unique_id "aVoiGjAH-zZWAfquimDs2AAAAAA"]
[Sun Jan 04 16:17:30.882808 2026] [:error] [pid 15480:tid 15491] [client 85.203.23.13:23729] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/members/members.php"] [unique_id "aVoiGhBWKIu3SdvwTFiNJQAAAIk"]
[Sun Jan 04 16:17:31.373564 2026] [:error] [pid 15480:tid 15487] [client 85.203.23.46:21783] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/performance-lab/load.php"] [unique_id "aVoiGxBWKIu3SdvwTFiNJgAAAIU"]
[Sun Jan 04 16:17:31.870591 2026] [:error] [pid 59250:tid 59265] [client 85.203.23.26:46435] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/performance-lab/includes/admin/tags.php"] [unique_id "aVoiG_PJ-KGeNWdqpudH6AAAAMo"]
[Sun Jan 04 16:17:32.360873 2026] [:error] [pid 15480:tid 15497] [client 85.203.23.40:31463] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/tinymce-advanced/tinymce-advanced.php"] [unique_id "aVoiHBBWKIu3SdvwTFiNJwAAAI8"]
[Sun Jan 04 16:17:32.851683 2026] [:error] [pid 59250:tid 59267] [client 85.203.23.22:21549] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/fitnessbase/inc/customizer/al.php"] [unique_id "aVoiHPPJ-KGeNWdqpudH8AAAAMw"]
[Sun Jan 04 16:17:33.348593 2026] [:error] [pid 15480:tid 15485] [client 85.203.23.38:55719] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aVoiHRBWKIu3SdvwTFiNKgAAAIM"]
[Sun Jan 04 16:17:33.838490 2026] [:error] [pid 56796:tid 56823] [client 85.203.23.38:63455] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/hello-elementor/new.php"] [unique_id "aVoiHYXa4dVs9ML_oAbz5gAAAdg"]
[Sun Jan 04 16:17:34.336481 2026] [:error] [pid 4333:tid 4360] [client 85.203.23.2:21027] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aVoiHjAH-zZWAfquimDs3wAAABg"]
[Sun Jan 04 16:17:34.834409 2026] [:error] [pid 4427:tid 4464] [client 85.203.23.2:60043] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aVoiHj-T5ydE4nJe9Dc4wAAAA0c"]
[Sun Jan 04 16:17:35.331938 2026] [:error] [pid 4333:tid 4340] [client 85.203.23.5:50177] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aVoiHzAH-zZWAfquimDs5gAAAAQ"]
[Sun Jan 04 16:17:35.822175 2026] [:error] [pid 59250:tid 59257] [client 85.203.23.34:34339] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/zczv.php"] [unique_id "aVoiH_PJ-KGeNWdqpudH9wAAAMI"]
[Sun Jan 04 16:17:36.319465 2026] [:error] [pid 59250:tid 59276] [client 85.203.23.47:51443] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/woocommerce_uploads/about.php"] [unique_id "aVoiIPPJ-KGeNWdqpudH-AAAANU"]
[Sun Jan 04 16:17:36.817363 2026] [:error] [pid 4427:tid 4461] [client 85.203.23.44:39335] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aVoiID-T5ydE4nJe9Dc4wgAAA0Q"]
[Sun Jan 04 16:17:37.307999 2026] [:error] [pid 64248:tid 64261] [client 85.203.23.41:20591] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/adca.php"] [unique_id "aVoiIcZZ_5Iet2g0ae3kHQAAAEs"]
[Sun Jan 04 16:17:37.804323 2026] [:error] [pid 64248:tid 64262] [client 85.203.23.33:29709] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/maintenance/bolt.php"] [unique_id "aVoiIcZZ_5Iet2g0ae3kIgAAAEw"]
[Sun Jan 04 16:17:38.302097 2026] [:error] [pid 15480:tid 15494] [client 85.203.23.50:50635] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/html-api/about.php"] [unique_id "aVoiIhBWKIu3SdvwTFiNNgAAAIw"]
[Sun Jan 04 16:17:38.800608 2026] [:error] [pid 4427:tid 4460] [client 85.203.23.8:34047] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aVoiIj-T5ydE4nJe9Dc4xQAAA0M"]
[Sun Jan 04 16:17:39.291726 2026] [:error] [pid 59250:tid 59267] [client 85.203.23.10:25021] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/siteorigin-panels/"] [unique_id "aVoiI_PJ-KGeNWdqpudH-gAAAMw"]
[Sun Jan 04 16:17:39.788592 2026] [:error] [pid 1020:tid 1023] [client 85.203.23.5:47607] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/nav-menu-trigger.php"] [unique_id "aVoiI1zz6-t0R3_Ito0m2QAAAUA"]
[Sun Jan 04 16:17:40.286179 2026] [:error] [pid 59250:tid 59273] [client 85.203.23.7:59939] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aVoiJPPJ-KGeNWdqpudH-wAAANI"]
[Sun Jan 04 16:17:40.783681 2026] [:error] [pid 1020:tid 1028] [client 85.203.23.24:55345] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/hello-elementor/assets/"] [unique_id "aVoiJFzz6-t0R3_Ito0m2gAAAUU"]
[Sun Jan 04 16:17:41.281951 2026] [:error] [pid 56796:tid 56816] [client 85.203.23.28:21873] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aVoiJYXa4dVs9ML_oAbz7wAAAdE"]
[Sun Jan 04 16:17:41.775862 2026] [:error] [pid 1020:tid 1027] [client 85.203.23.36:38641] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aVoiJVzz6-t0R3_Ito0m3wAAAUQ"]
[Sun Jan 04 16:17:42.267126 2026] [:error] [pid 59250:tid 59264] [client 85.203.23.19:28739] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aVoiJvPJ-KGeNWdqpudH_wAAAMk"]
[Sun Jan 04 16:17:42.763546 2026] [:error] [pid 4427:tid 4472] [client 85.203.23.19:51833] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-template/lock.php"] [unique_id "aVoiJj-T5ydE4nJe9Dc4ygAAA08"]
[Sun Jan 04 16:17:44.646115 2026] [:error] [pid 15480:tid 15493] [client 85.203.23.43:32613] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/components/style-rtl.min_42.php"] [unique_id "aVoiKBBWKIu3SdvwTFiNPwAAAIs"]
[Sun Jan 04 16:17:45.135691 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.41:25099] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aVoiKcZZ_5Iet2g0ae3kKQAAAFc"]
[Sun Jan 04 16:17:45.633114 2026] [:error] [pid 64248:tid 64263] [client 85.203.23.37:65353] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Credit_74.php"] [unique_id "aVoiKcZZ_5Iet2g0ae3kKwAAAE0"]
[Sun Jan 04 16:17:46.129895 2026] [:error] [pid 4333:tid 4342] [client 85.203.23.44:21143] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/akismet/_40.php"] [unique_id "aVoiKjAH-zZWAfquimDs8gAAAAY"]
[Sun Jan 04 16:17:46.620169 2026] [:error] [pid 4333:tid 4349] [client 85.203.23.49:56929] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aVoiKjAH-zZWAfquimDs9QAAAA0"]
[Sun Jan 04 16:17:47.115245 2026] [:error] [pid 64248:tid 64264] [client 85.203.23.44:25925] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aVoiK8ZZ_5Iet2g0ae3kMwAAAE4"]
[Sun Jan 04 16:17:47.612267 2026] [:error] [pid 4333:tid 4351] [client 85.203.23.33:33611] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aVoiKzAH-zZWAfquimDs9wAAAA8"]
[Sun Jan 04 16:17:48.101973 2026] [:error] [pid 59250:tid 59263] [client 85.203.23.9:47769] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aVoiLPPJ-KGeNWdqpudICwAAAMg"]
[Sun Jan 04 16:17:48.594035 2026] [:error] [pid 59250:tid 59277] [client 85.203.23.3:34381] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "aVoiLPPJ-KGeNWdqpudIDgAAANY"]
[Sun Jan 04 16:17:49.090319 2026] [:error] [pid 64248:tid 64272] [client 85.203.23.38:27327] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aVoiLcZZ_5Iet2g0ae3kOgAAAFY"]
[Sun Jan 04 16:17:49.582593 2026] [:error] [pid 4427:tid 4462] [client 85.203.23.42:27671] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aVoiLT-T5ydE4nJe9Dc4ywAAA0U"]
[Sun Jan 04 16:17:50.080319 2026] [:error] [pid 4333:tid 4359] [client 85.203.23.11:53541] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/classwithtostring.php"] [unique_id "aVoiLjAH-zZWAfquimDs-AAAABc"]
[Sun Jan 04 16:17:50.571204 2026] [:error] [pid 64248:tid 64274] [client 85.203.23.44:27835] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/theme-editor-class.php"] [unique_id "aVoiLsZZ_5Iet2g0ae3kPQAAAFg"]
[Sun Jan 04 16:17:51.061200 2026] [:error] [pid 1020:tid 1047] [client 85.203.23.3:47651] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php"] [unique_id "aVoiL1zz6-t0R3_Ito0m6AAAAVg"]
[Sun Jan 04 16:17:52.908636 2026] [:error] [pid 4427:tid 4464] [client 85.203.23.25:40485] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php"] [unique_id "aVoiMD-T5ydE4nJe9Dc4zQAAA0c"]
[Sun Jan 04 16:17:53.406707 2026] [:error] [pid 56796:tid 56823] [client 85.203.23.39:46955] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fusion-core/css/about.php"] [unique_id "aVoiMYXa4dVs9ML_oAbz-gAAAdg"]
[Sun Jan 04 16:17:53.899587 2026] [:error] [pid 56796:tid 56812] [client 85.203.23.35:40221] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/themely/img/about.php"] [unique_id "aVoiMYXa4dVs9ML_oAbz_AAAAc0"]
[Sun Jan 04 16:17:54.391364 2026] [:error] [pid 4333:tid 4350] [client 85.203.23.27:56321] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/page-list-item/lock.php"] [unique_id "aVoiMjAH-zZWAfquimDs-wAAAA4"]
[Sun Jan 04 16:17:54.888609 2026] [:error] [pid 1080:tid 1158] [client 85.203.23.49:33981] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php"] [unique_id "aVoiMiu2Hm9AcIiqg0qlSAAAA9M"]
[Sun Jan 04 16:17:55.384977 2026] [:error] [pid 4333:tid 4354] [client 85.203.23.24:42795] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/sql.php"] [unique_id "aVoiMzAH-zZWAfquimDs_AAAABI"]
[Sun Jan 04 16:17:55.876009 2026] [:error] [pid 4426:tid 4433] [client 85.203.23.32:43925] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "aVoiM5AfkrNbrfBUY5UziAAAAkM"]
[Sun Jan 04 16:17:56.367229 2026] [:error] [pid 64248:tid 64269] [client 85.203.23.27:59893] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/prayer_intentions.php"] [unique_id "aVoiNMZZ_5Iet2g0ae3kRgAAAFM"]
[Sun Jan 04 16:17:56.868204 2026] [:error] [pid 4365:tid 4400] [client 85.203.23.35:23315] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/data.php"] [unique_id "aVoiNMMi25XHOoMs4mdUXAAAAYU"]
[Sun Jan 04 16:17:57.367181 2026] [:error] [pid 15480:tid 15500] [client 85.203.23.47:65077] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aVoiNRBWKIu3SdvwTFiNSgAAAJI"]
[Sun Jan 04 16:17:57.866958 2026] [:error] [pid 4426:tid 4439] [client 85.203.23.41:33587] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aVoiNZAfkrNbrfBUY5UzkAAAAkk"]
[Sun Jan 04 16:17:58.365115 2026] [:error] [pid 56796:tid 56820] [client 85.203.23.31:59811] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php"] [unique_id "aVoiNoXa4dVs9ML_oAb0CAAAAdU"]
[Sun Jan 04 16:17:58.862320 2026] [:error] [pid 56796:tid 56813] [client 85.203.23.25:24999] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/post-views-counter/"] [unique_id "aVoiNoXa4dVs9ML_oAb0CwAAAc4"]
[Sun Jan 04 16:17:59.354690 2026] [:error] [pid 1080:tid 1150] [client 85.203.23.18:62795] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/media/dwv/admin.php"] [unique_id "aVoiNyu2Hm9AcIiqg0qlTgAAA8s"]
[Sun Jan 04 16:17:59.851387 2026] [:error] [pid 4426:tid 4440] [client 85.203.23.45:45509] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/zoom1.php"] [unique_id "aVoiN5AfkrNbrfBUY5UzlgAAAko"]
[Sun Jan 04 16:18:00.349200 2026] [:error] [pid 64248:tid 64258] [client 85.203.23.52:54689] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/fonts/roboto/wp-admins.php"] [unique_id "aVoiOMZZ_5Iet2g0ae3kRwAAAEg"]
[Sun Jan 04 16:18:00.846691 2026] [:error] [pid 64248:tid 64256] [client 85.203.23.15:40391] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/flatsome/wp-kgg.php"] [unique_id "aVoiOMZZ_5Iet2g0ae3kSwAAAEY"]
[Sun Jan 04 16:18:01.335950 2026] [:error] [pid 56796:tid 56802] [client 85.203.23.24:65063] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aVoiOYXa4dVs9ML_oAb0EAAAAcM"]
[Sun Jan 04 16:18:01.832674 2026] [:error] [pid 1080:tid 1155] [client 85.203.23.48:51373] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aVoiOSu2Hm9AcIiqg0qlUwAAA9A"]
[Sun Jan 04 16:18:02.325507 2026] [:error] [pid 64248:tid 64269] [client 85.203.23.8:46595] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aVoiOsZZ_5Iet2g0ae3kUAAAAFM"]
[Sun Jan 04 16:18:02.823367 2026] [:error] [pid 1080:tid 1139] [client 85.203.23.16:58815] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/buy.php"] [unique_id "aVoiOiu2Hm9AcIiqg0qlWAAAA8A"]
[Sun Jan 04 16:18:03.313318 2026] [:error] [pid 4365:tid 4398] [client 85.203.23.47:37015] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/spacious-pro/js/theia-sticky-sidebar/"] [unique_id "aVoiO8Mi25XHOoMs4mdUYAAAAYM"]
[Sun Jan 04 16:18:03.804942 2026] [:error] [pid 4365:tid 4404] [client 85.203.23.45:31551] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/zxasd.php"] [unique_id "aVoiO8Mi25XHOoMs4mdUYQAAAYk"]
[Sun Jan 04 16:18:04.295115 2026] [:error] [pid 4426:tid 4450] [client 85.203.23.25:38317] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/database.php"] [unique_id "aVoiPJAfkrNbrfBUY5UzmgAAAlQ"]
[Sun Jan 04 16:18:04.784979 2026] [:error] [pid 1080:tid 1151] [client 85.203.23.12:21953] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/sql.php"] [unique_id "aVoiPCu2Hm9AcIiqg0qlXgAAA8w"]
[Sun Jan 04 16:18:05.280364 2026] [:error] [pid 1080:tid 1153] [client 85.203.23.24:63473] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/ty.php"] [unique_id "aVoiPSu2Hm9AcIiqg0qlYQAAA84"]
[Sun Jan 04 16:18:05.770712 2026] [:error] [pid 4333:tid 4338] [client 85.203.23.6:46647] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/ty.php"] [unique_id "aVoiPTAH-zZWAfquimDtAQAAAAI"]
[Sun Jan 04 16:18:06.262618 2026] [:error] [pid 4365:tid 4395] [client 85.203.23.4:60915] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/ty.php"] [unique_id "aVoiPsMi25XHOoMs4mdUZAAAAYA"]
[Sun Jan 04 16:18:06.755820 2026] [:error] [pid 1080:tid 1160] [client 85.203.23.18:63775] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/a1cord.php"] [unique_id "aVoiPiu2Hm9AcIiqg0qlZQAAA9U"]
[Sun Jan 04 16:18:07.246496 2026] [:error] [pid 1080:tid 1145] [client 85.203.23.36:51409] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aVoiPyu2Hm9AcIiqg0qlZwAAA8Y"]
[Sun Jan 04 16:18:07.737754 2026] [:error] [pid 4365:tid 4412] [client 85.203.23.12:44631] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xex.php"] [unique_id "aVoiP8Mi25XHOoMs4mdUaAAAAZE"]
[Sun Jan 04 16:18:08.228853 2026] [:error] [pid 4427:tid 4469] [client 85.203.23.18:60293] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aVoiQD-T5ydE4nJe9Dc40QAAA0w"]
[Sun Jan 04 16:18:08.719044 2026] [:error] [pid 4427:tid 4459] [client 85.203.23.18:31579] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp_helper_bimfl/shell.php"] [unique_id "aVoiQD-T5ydE4nJe9Dc40gAAA0I"]
[Sun Jan 04 16:18:09.209423 2026] [:error] [pid 4365:tid 4415] [client 85.203.23.30:31739] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp_helper_avcdl/shell.php"] [unique_id "aVoiQcMi25XHOoMs4mdUawAAAZQ"]
[Sun Jan 04 16:18:09.699577 2026] [:error] [pid 4426:tid 4454] [client 85.203.23.32:41727] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp_helper_rrvvo/shell.php"] [unique_id "aVoiQZAfkrNbrfBUY5UzpAAAAlg"]
[Sun Jan 04 16:18:10.189341 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.53:53219] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aVoiQsZZ_5Iet2g0ae3kWQAAAFc"]
[Sun Jan 04 16:18:10.678547 2026] [:error] [pid 4426:tid 4452] [client 85.203.23.31:42341] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp_theme_ahewl/shell.php"] [unique_id "aVoiQpAfkrNbrfBUY5UzpQAAAlY"]
[Sun Jan 04 16:18:11.178148 2026] [:error] [pid 4426:tid 4447] [client 85.203.23.44:47227] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aVoiQ5AfkrNbrfBUY5UzpwAAAlE"]
[Sun Jan 04 16:18:11.667149 2026] [:error] [pid 4426:tid 4453] [client 85.203.23.43:41231] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aVoiQ5AfkrNbrfBUY5UzqAAAAlc"]
[Sun Jan 04 16:18:12.159609 2026] [:error] [pid 1080:tid 1139] [client 85.203.23.9:34217] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/tx20.php"] [unique_id "aVoiRCu2Hm9AcIiqg0qlcgAAA8A"]
[Sun Jan 04 16:18:12.656389 2026] [:error] [pid 1020:tid 1040] [client 85.203.23.33:48551] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ah22.php"] [unique_id "aVoiRFzz6-t0R3_Ito0m-wAAAVE"]
[Sun Jan 04 16:18:13.156595 2026] [:error] [pid 4426:tid 4445] [client 85.203.23.34:28073] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/ooo.php"] [unique_id "aVoiRZAfkrNbrfBUY5UzqgAAAk8"]
[Sun Jan 04 16:18:13.647916 2026] [:error] [pid 1080:tid 1152] [client 85.203.23.20:22881] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php"] [unique_id "aVoiRSu2Hm9AcIiqg0qlcwAAA80"]
[Sun Jan 04 16:18:14.145865 2026] [:error] [pid 1080:tid 1154] [client 85.203.23.7:38553] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/resources/dist/includes/img/alw/"] [unique_id "aVoiRiu2Hm9AcIiqg0qldwAAA88"]
[Sun Jan 04 16:18:14.636507 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.19:27363] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php"] [unique_id "aVoiRsZZ_5Iet2g0ae3kaAAAAFc"]
[Sun Jan 04 16:18:15.130535 2026] [:error] [pid 64248:tid 64272] [client 85.203.23.30:27063] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/datate.php"] [unique_id "aVoiR8ZZ_5Iet2g0ae3kawAAAFY"]
[Sun Jan 04 16:18:15.627147 2026] [:error] [pid 64248:tid 64253] [client 85.203.23.20:34521] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aVoiR8ZZ_5Iet2g0ae3kbQAAAEM"]
[Sun Jan 04 16:18:16.125846 2026] [:error] [pid 56796:tid 56817] [client 85.203.23.3:57387] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aVoiSIXa4dVs9ML_oAb0EwAAAdI"]
[Sun Jan 04 16:18:16.615906 2026] [:error] [pid 56796:tid 56807] [client 85.203.23.19:55543] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/call-now-button/admin.php"] [unique_id "aVoiSIXa4dVs9ML_oAb0FQAAAcg"]
[Sun Jan 04 16:18:17.114148 2026] [:error] [pid 4333:tid 4347] [client 85.203.23.11:33125] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/rank-math/mmm.php"] [unique_id "aVoiSTAH-zZWAfquimDtDgAAAAs"]
[Sun Jan 04 16:18:17.611295 2026] [:error] [pid 59250:tid 59259] [client 85.203.23.20:36955] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/maintenance/assets/mmm.php"] [unique_id "aVoiSfPJ-KGeNWdqpudIHAAAAMQ"]
[Sun Jan 04 16:18:18.102115 2026] [:error] [pid 64248:tid 64273] [client 85.203.23.23:65483] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/menu.php"] [unique_id "aVoiSsZZ_5Iet2g0ae3keQAAAFc"]
[Sun Jan 04 16:18:18.592604 2026] [:error] [pid 59250:tid 59256] [client 85.203.23.38:34611] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/menu.php"] [unique_id "aVoiSvPJ-KGeNWdqpudIIgAAAME"]
[Sun Jan 04 16:18:19.089349 2026] [:error] [pid 4333:tid 4336] [client 85.203.23.18:38855] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/todpIbcm.php"] [unique_id "aVoiSzAH-zZWAfquimDtFgAAAAA"]
[Sun Jan 04 16:18:19.586761 2026] [:error] [pid 4333:tid 4359] [client 85.203.23.38:48331] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah/function.php"] [unique_id "aVoiSzAH-zZWAfquimDtHAAAABc"]
[Sun Jan 04 16:18:20.084303 2026] [:error] [pid 64248:tid 64268] [client 85.203.23.39:38607] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aVoiTMZZ_5Iet2g0ae3khgAAAFI"]
[Sun Jan 04 16:18:20.584893 2026] [:error] [pid 4333:tid 4348] [client 85.203.23.10:37889] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about/autoload_classmap.php"] [unique_id "aVoiTDAH-zZWAfquimDtIQAAAAw"]
[Sun Jan 04 16:18:21.082025 2026] [:error] [pid 15480:tid 15505] [client 85.203.23.40:35305] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/new/update/chosen.php"] [unique_id "aVoiTRBWKIu3SdvwTFiNTwAAAJc"]
[Sun Jan 04 16:18:21.578154 2026] [:error] [pid 1020:tid 1038] [client 85.203.23.4:28585] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/new/wp-2019.php"] [unique_id "aVoiTVzz6-t0R3_Ito0nBwAAAU8"]
[Sun Jan 04 16:18:22.079341 2026] [:error] [pid 4333:tid 4340] [client 85.203.23.31:47971] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-2019.php"] [unique_id "aVoiTjAH-zZWAfquimDtLgAAAAQ"]
[Sun Jan 04 16:18:22.575246 2026] [:error] [pid 4426:tid 4444] [client 85.203.23.34:63875] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/zczv.php"] [unique_id "aVoiTpAfkrNbrfBUY5UzyAAAAk4"]
[Sun Jan 04 16:18:23.071721 2026] [:error] [pid 4333:tid 4348] [client 85.203.23.32:55897] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/as/classwithtostring.php"] [unique_id "aVoiTzAH-zZWAfquimDtNQAAAAw"]
[Sun Jan 04 16:18:23.569519 2026] [:error] [pid 4365:tid 4399] [client 85.203.23.5:63545] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-rocket-config/V.php"] [unique_id "aVoiT8Mi25XHOoMs4mdUbwAAAYQ"]
[Sun Jan 04 16:18:24.060976 2026] [:error] [pid 64248:tid 64267] [client 85.203.23.18:23853] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/wp-conflg.php"] [unique_id "aVoiUMZZ_5Iet2g0ae3ksAAAAFE"]
[Sun Jan 04 16:18:24.566829 2026] [:error] [pid 15480:tid 15483] [client 85.203.23.52:40743] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aVoiUBBWKIu3SdvwTFiNUQAAAIE"]
[Sun Jan 04 16:18:25.064398 2026] [:error] [pid 59250:tid 59261] [client 85.203.23.6:32025] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aVoiUfPJ-KGeNWdqpudILAAAAMY"]
[Sun Jan 04 16:18:25.554940 2026] [:error] [pid 64248:tid 64274] [client 85.203.23.39:45151] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/v.php"] [unique_id "aVoiUcZZ_5Iet2g0ae3ktQAAAFg"]
[Sun Jan 04 16:18:26.055408 2026] [:error] [pid 4426:tid 4432] [client 85.203.23.51:48523] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/chosen.php"] [unique_id "aVoiUpAfkrNbrfBUY5UzzwAAAkI"]
[Sun Jan 04 16:18:26.552935 2026] [:error] [pid 4333:tid 4345] [client 85.203.23.24:60431] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aVoiUjAH-zZWAfquimDtQAAAAAk"]
[Sun Jan 04 16:18:27.044655 2026] [:error] [pid 1080:tid 1158] [client 85.203.23.36:35097] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/fonts/page.php"] [unique_id "aVoiUyu2Hm9AcIiqg0qlkQAAA9M"]
[Sun Jan 04 16:18:27.542055 2026] [:error] [pid 1080:tid 1159] [client 85.203.23.10:30775] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "aVoiUyu2Hm9AcIiqg0qlkgAAA9Q"]
[Sun Jan 04 16:18:28.038929 2026] [:error] [pid 1080:tid 1140] [client 85.203.23.36:39661] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/webix.php"] [unique_id "aVoiVCu2Hm9AcIiqg0qlkwAAA8E"]
[Sun Jan 04 16:18:28.530082 2026] [:error] [pid 4365:tid 4411] [client 85.203.23.32:65195] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aVoiVMMi25XHOoMs4mdUdQAAAZA"]
[Sun Jan 04 16:18:29.026781 2026] [:error] [pid 1080:tid 1160] [client 85.203.23.3:41537] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aVoiVSu2Hm9AcIiqg0qllwAAA9U"]
[Sun Jan 04 16:18:29.533485 2026] [:error] [pid 56796:tid 56810] [client 85.203.23.40:27173] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aVoiVYXa4dVs9ML_oAb0KwAAAcs"]
[Sun Jan 04 16:18:30.031671 2026] [:error] [pid 59250:tid 59278] [client 85.203.23.22:52375] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/info.php"] [unique_id "aVoiVvPJ-KGeNWdqpudILQAAANc"]
[Sun Jan 04 16:18:30.521044 2026] [:error] [pid 4427:tid 4458] [client 85.203.23.27:56871] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-style.php"] [unique_id "aVoiVj-T5ydE4nJe9Dc43QAAA0E"]
[Sun Jan 04 16:18:31.078675 2026] [:error] [pid 15480:tid 15492] [client 85.203.23.6:43873] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/xp.php"] [unique_id "aVoiVxBWKIu3SdvwTFiNVwAAAIo"]
[Sun Jan 04 16:18:31.568956 2026] [:error] [pid 1080:tid 1150] [client 85.203.23.45:26871] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/admin/skin/base/mixins/about.php"] [unique_id "aVoiVyu2Hm9AcIiqg0qloAAAA8s"]
[Sun Jan 04 16:18:32.066685 2026] [:error] [pid 59250:tid 59274] [client 85.203.23.37:22597] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Content/"] [unique_id "aVoiWPPJ-KGeNWdqpudIMQAAANM"]
[Sun Jan 04 16:18:32.581462 2026] [:error] [pid 64248:tid 64256] [client 85.203.23.24:54199] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aVoiWMZZ_5Iet2g0ae3kvAAAAEY"]
[Sun Jan 04 16:18:33.078594 2026] [:error] [pid 59250:tid 59269] [client 85.203.23.33:47503] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/min.php"] [unique_id "aVoiWfPJ-KGeNWdqpudIMwAAAM4"]
[Sun Jan 04 16:18:33.568735 2026] [:error] [pid 4427:tid 4473] [client 85.203.23.50:27617] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aVoiWT-T5ydE4nJe9Dc44wAAA1A"]
[Sun Jan 04 16:18:34.059834 2026] [:error] [pid 4333:tid 4346] [client 85.203.23.48:44835] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aVoiWjAH-zZWAfquimDtRwAAAAo"]
[Sun Jan 04 16:18:34.557762 2026] [:error] [pid 59250:tid 59261] [client 85.203.23.50:33233] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aVoiWvPJ-KGeNWdqpudIOgAAAMY"]
[Sun Jan 04 16:18:35.058620 2026] [:error] [pid 64248:tid 64272] [client 85.203.23.45:36075] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aVoiW8ZZ_5Iet2g0ae3kvwAAAFY"]
[Sun Jan 04 16:18:35.548191 2026] [:error] [pid 59250:tid 59256] [client 85.203.23.5:52359] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/"] [unique_id "aVoiW_PJ-KGeNWdqpudIPQAAAME"]
[Sun Jan 04 16:18:36.044621 2026] [:error] [pid 56796:tid 56817] [client 85.203.23.30:54057] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/datate.php"] [unique_id "aVoiXIXa4dVs9ML_oAb0LQAAAdI"]
[Sun Jan 04 16:18:36.544846 2026] [:error] [pid 56796:tid 56815] [client 85.203.23.12:57537] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/lock360.php"] [unique_id "aVoiXIXa4dVs9ML_oAb0LgAAAdA"]
[Sun Jan 04 16:18:37.037431 2026] [:error] [pid 4333:tid 4344] [client 85.203.23.42:38043] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/wp-work.php"] [unique_id "aVoiXTAH-zZWAfquimDtUwAAAAg"]
[Sun Jan 04 16:18:37.529356 2026] [:error] [pid 4333:tid 4353] [client 85.203.23.53:65149] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/search/admin.php"] [unique_id "aVoiXTAH-zZWAfquimDtVgAAABE"]
[Sun Jan 04 16:18:38.019756 2026] [:error] [pid 4365:tid 4408] [client 85.203.23.47:38211] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/lifeempore/content-"] [unique_id "aVoiXsMi25XHOoMs4mdUfAAAAY0"]
[Sun Jan 04 16:18:38.511292 2026] [:error] [pid 4333:tid 4348] [client 85.203.23.8:23473] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/lifeempore-v1/content-"] [unique_id "aVoiXjAH-zZWAfquimDtWQAAAAw"]
[Sun Jan 04 16:18:39.008490 2026] [:error] [pid 4333:tid 4341] [client 85.203.23.40:35445] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/lifeempore-v2/content-"] [unique_id "aVoiXzAH-zZWAfquimDtXgAAAAU"]
[Sun Jan 04 16:18:39.505866 2026] [:error] [pid 64248:tid 64271] [client 85.203.23.39:41347] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "aVoiX8ZZ_5Iet2g0ae3kyQAAAFU"]
[Sun Jan 04 16:18:40.018981 2026] [:error] [pid 56796:tid 56800] [client 85.203.23.34:45449] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-excerpt-constructor.php"] [unique_id "aVoiYIXa4dVs9ML_oAb0MQAAAcE"]
[Sun Jan 04 16:18:40.516069 2026] [:error] [pid 4333:tid 4351] [client 85.203.23.53:58019] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aVoiYDAH-zZWAfquimDtYAAAAA8"]
[Sun Jan 04 16:18:41.006539 2026] [:error] [pid 64248:tid 64258] [client 85.203.23.37:54379] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/class-ftp-sockets-more.php"] [unique_id "aVoiYcZZ_5Iet2g0ae3kzwAAAEg"]
[Sun Jan 04 16:18:41.506712 2026] [:error] [pid 56796:tid 56820] [client 85.203.23.51:28587] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/options-privacy-pic.php"] [unique_id "aVoiYYXa4dVs9ML_oAb0NwAAAdU"]
[Sun Jan 04 16:18:41.997676 2026] [:error] [pid 64248:tid 64259] [client 85.203.23.41:55073] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/post-template-soap.php"] [unique_id "aVoiYcZZ_5Iet2g0ae3k2QAAAEk"]
[Sun Jan 04 16:18:42.496524 2026] [:error] [pid 59250:tid 59277] [client 85.203.23.43:27047] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aVoiYvPJ-KGeNWdqpudIQAAAANY"]
[Sun Jan 04 16:18:42.986113 2026] [:error] [pid 15480:tid 15494] [client 85.203.23.51:27645] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/privacy-beta.php"] [unique_id "aVoiYhBWKIu3SdvwTFiNbQAAAIw"]
[Sun Jan 04 16:18:43.483195 2026] [:error] [pid 4365:tid 4413] [client 85.203.23.15:52255] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/revslider/templates/particle-effect-three/"] [unique_id "aVoiY8Mi25XHOoMs4mdUgwAAAZI"]
[Sun Jan 04 16:18:43.978663 2026] [:error] [pid 15480:tid 15485] [client 85.203.23.2:37201] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aVoiYxBWKIu3SdvwTFiNbwAAAIM"]
[Sun Jan 04 16:18:44.468506 2026] [:error] [pid 4365:tid 4410] [client 85.203.23.29:57159] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/revslider/templates/landing-page-hero/"] [unique_id "aVoiZMMi25XHOoMs4mdUhAAAAY8"]
[Sun Jan 04 16:18:44.967853 2026] [:error] [pid 4333:tid 4355] [client 85.203.23.11:54009] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/revslider/templates/le-chef-la-carte/"] [unique_id "aVoiZDAH-zZWAfquimDtZAAAABM"]
[Sun Jan 04 16:18:45.458448 2026] [:error] [pid 1020:tid 1043] [client 85.203.23.23:20993] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aVoiZVzz6-t0R3_Ito0nFQAAAVQ"]
[Sun Jan 04 16:18:45.949515 2026] [:error] [pid 59250:tid 59255] [client 85.203.23.6:54247] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/flatco/framework/"] [unique_id "aVoiZfPJ-KGeNWdqpudIRwAAAMA"]
[Sun Jan 04 16:18:46.439883 2026] [:error] [pid 1080:tid 1160] [client 85.203.23.50:40349] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aVoiZiu2Hm9AcIiqg0qloQAAA9U"]
[Sun Jan 04 16:18:46.937806 2026] [:error] [pid 56796:tid 56810] [client 85.203.23.52:64711] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/"] [unique_id "aVoiZoXa4dVs9ML_oAb0QgAAAcs"]
[Sun Jan 04 16:18:47.427792 2026] [:error] [pid 4426:tid 4436] [client 85.203.23.49:27399] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/target/admin/"] [unique_id "aVoiZ5AfkrNbrfBUY5Uz1QAAAkY"]
[Sun Jan 04 16:18:47.918221 2026] [:error] [pid 4426:tid 4440] [client 85.203.23.7:38573] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/dt-the7/inc/extensions/options-framework/js/"] [unique_id "aVoiZ5AfkrNbrfBUY5Uz1wAAAko"]
[Sun Jan 04 16:18:48.416472 2026] [:error] [pid 1080:tid 1139] [client 85.203.23.14:31375] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aVoiaCu2Hm9AcIiqg0qlogAAA8A"]
[Sun Jan 04 16:18:48.906423 2026] [:error] [pid 59250:tid 59267] [client 85.203.23.44:54701] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aVoiaPPJ-KGeNWdqpudISwAAAMw"]
[Sun Jan 04 16:18:49.400889 2026] [:error] [pid 64248:tid 64269] [client 85.203.23.12:29185] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aVoiacZZ_5Iet2g0ae3k6wAAAFM"]
[Sun Jan 04 16:18:51.256131 2026] [:error] [pid 4427:tid 4464] [client 85.203.23.52:40797] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aVoiaz-T5ydE4nJe9Dc47QAAA0c"]
[Sun Jan 04 16:18:51.753132 2026] [:error] [pid 1020:tid 1026] [client 85.203.23.36:50931] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-includes.php"] [unique_id "aVoia1zz6-t0R3_Ito0nFwAAAUM"]
[Sun Jan 04 16:18:52.252051 2026] [:error] [pid 15480:tid 15502] [client 85.203.23.21:27549] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-rocket-config/wp-login.php"] [unique_id "aVoibBBWKIu3SdvwTFiNcwAAAJQ"]
[Sun Jan 04 16:18:52.749604 2026] [:error] [pid 15480:tid 15487] [client 85.203.23.5:41347] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/moon.php"] [unique_id "aVoibBBWKIu3SdvwTFiNdAAAAIU"]
[Sun Jan 04 16:18:53.240909 2026] [:error] [pid 4427:tid 4460] [client 85.203.23.12:43645] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/cloud.php"] [unique_id "aVoibT-T5ydE4nJe9Dc47wAAA0M"]
[Sun Jan 04 16:18:53.731083 2026] [:error] [pid 1020:tid 1030] [client 85.203.23.45:39245] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/termps.php"] [unique_id "aVoibVzz6-t0R3_Ito0nGgAAAUc"]
[Sun Jan 04 16:18:54.221741 2026] [:error] [pid 4427:tid 4457] [client 85.203.23.24:64419] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/404.php"] [unique_id "aVoibj-T5ydE4nJe9Dc48AAAA0A"]
[Sun Jan 04 16:18:54.711902 2026] [:error] [pid 1020:tid 1031] [client 85.203.23.26:38013] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/social-links/atomlib.php"] [unique_id "aVoiblzz6-t0R3_Ito0nGwAAAUg"]
[Sun Jan 04 16:18:55.201588 2026] [:error] [pid 1020:tid 1042] [client 85.203.23.20:33335] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/man.php"] [unique_id "aVoib1zz6-t0R3_Ito0nHAAAAVM"]
[Sun Jan 04 16:18:55.692385 2026] [:error] [pid 59250:tid 59259] [client 85.203.23.43:42109] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/1.php"] [unique_id "aVoib_PJ-KGeNWdqpudITgAAAMQ"]
[Sun Jan 04 16:18:56.190162 2026] [:error] [pid 59250:tid 59260] [client 85.203.23.38:43641] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php"] [unique_id "aVoicPPJ-KGeNWdqpudITwAAAMU"]
[Sun Jan 04 16:18:56.686268 2026] [:error] [pid 64248:tid 64251] [client 85.203.23.8:56367] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aVoicMZZ_5Iet2g0ae3k8AAAAEE"]
[Sun Jan 04 16:18:57.176870 2026] [:error] [pid 59250:tid 59262] [client 85.203.23.45:20223] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aVoicfPJ-KGeNWdqpudIUQAAAMc"]
[Sun Jan 04 16:18:57.673461 2026] [:error] [pid 1080:tid 1151] [client 85.203.23.36:52315] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aVoicSu2Hm9AcIiqg0qlqAAAA8w"]
[Sun Jan 04 16:18:58.163602 2026] [:error] [pid 15480:tid 15499] [client 85.203.23.5:56459] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aVoichBWKIu3SdvwTFiNeAAAAJE"]
[Sun Jan 04 16:18:58.656125 2026] [:error] [pid 56796:tid 56814] [client 85.203.23.49:51407] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aVoicoXa4dVs9ML_oAb0SQAAAc8"]
[Sun Jan 04 16:18:59.154009 2026] [:error] [pid 4365:tid 4407] [client 85.203.23.9:57017] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aVoic8Mi25XHOoMs4mdUiAAAAYw"]
[Sun Jan 04 16:18:59.651370 2026] [:error] [pid 59250:tid 59263] [client 85.203.23.3:39117] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aVoic_PJ-KGeNWdqpudIVwAAAMg"]
[Sun Jan 04 16:19:00.143875 2026] [:error] [pid 4426:tid 4449] [client 85.203.23.20:21399] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aVoidJAfkrNbrfBUY5Uz3gAAAlM"]
[Sun Jan 04 16:19:00.641007 2026] [:error] [pid 1080:tid 1157] [client 85.203.23.46:56257] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-maiI.php"] [unique_id "aVoidCu2Hm9AcIiqg0qlqQAAA9I"]
[Sun Jan 04 16:19:01.131614 2026] [:error] [pid 4333:tid 4350] [client 85.203.23.42:64787] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aVoidTAH-zZWAfquimDtnAAAAA4"]
[Sun Jan 04 16:19:01.628448 2026] [:error] [pid 4333:tid 4359] [client 85.203.23.13:46689] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wophq/"] [unique_id "aVoidTAH-zZWAfquimDtnwAAABc"]
[Sun Jan 04 16:19:02.118425 2026] [:error] [pid 4333:tid 4347] [client 85.203.23.50:46891] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wadd-wp-bookls.php"] [unique_id "aVoidjAH-zZWAfquimDtowAAAAs"]
[Sun Jan 04 16:19:02.609284 2026] [:error] [pid 4426:tid 4436] [client 85.203.23.44:38761] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wordpress-seo-extended/admin/views/admin.php"] [unique_id "aVoidpAfkrNbrfBUY5Uz3wAAAkY"]
[Sun Jan 04 16:19:03.105955 2026] [:error] [pid 4333:tid 4350] [client 85.203.23.20:63227] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-walker-page-dropdown-first.php"] [unique_id "aVoidzAH-zZWAfquimDtrAAAAA4"]
[Sun Jan 04 16:19:03.603154 2026] [:error] [pid 4365:tid 4413] [client 85.203.23.11:60433] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud-new.php"] [unique_id "aVoid8Mi25XHOoMs4mdUiwAAAZI"]
[Sun Jan 04 16:19:04.101680 2026] [:error] [pid 4365:tid 4415] [client 85.203.23.6:40979] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/zer.php"] [unique_id "aVoieMMi25XHOoMs4mdUjAAAAZQ"]
[Sun Jan 04 16:19:04.595108 2026] [:error] [pid 4426:tid 4443] [client 85.203.23.36:27621] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aVoieJAfkrNbrfBUY5Uz4AAAAk0"]
[Sun Jan 04 16:19:05.095036 2026] [:error] [pid 56796:tid 56800] [client 85.203.23.47:26955] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/screen-event.php"] [unique_id "aVoieYXa4dVs9ML_oAb0UAAAAcE"]
[Sun Jan 04 16:19:05.592660 2026] [:error] [pid 64248:tid 64263] [client 85.203.23.16:41109] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/site-info-client.php"] [unique_id "aVoiecZZ_5Iet2g0ae3k-AAAAE0"]
[Sun Jan 04 16:19:06.089568 2026] [:error] [pid 4426:tid 4432] [client 85.203.23.20:37939] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-mails.php"] [unique_id "aVoiepAfkrNbrfBUY5Uz4wAAAkI"]
[Sun Jan 04 16:19:06.578701 2026] [:error] [pid 15480:tid 15484] [client 85.203.23.7:63949] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aVoiehBWKIu3SdvwTFiNfAAAAII"]
[Sun Jan 04 16:19:07.075114 2026] [:error] [pid 4365:tid 4398] [client 85.203.23.42:38079] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/dofault.php"] [unique_id "aVoie8Mi25XHOoMs4mdUjwAAAYM"]
[Sun Jan 04 16:19:07.572951 2026] [:error] [pid 59250:tid 59257] [client 85.203.23.23:32797] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/file-manager.php"] [unique_id "aVoie_PJ-KGeNWdqpudIZwAAAMI"]
[Sun Jan 04 16:19:08.063319 2026] [:error] [pid 64248:tid 64254] [client 85.203.23.24:39963] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aVoifMZZ_5Iet2g0ae3k-gAAAEQ"]
[Sun Jan 04 16:19:08.553451 2026] [:error] [pid 1080:tid 1146] [client 85.203.23.6:49973] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aVoifCu2Hm9AcIiqg0qlrQAAA8c"]
[Sun Jan 04 16:19:09.050103 2026] [:error] [pid 1020:tid 1042] [client 85.203.23.51:51277] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aVoifVzz6-t0R3_Ito0nJQAAAVM"]
[Sun Jan 04 16:19:09.548025 2026] [:error] [pid 4427:tid 4476] [client 85.203.23.44:35317] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aVoifT-T5ydE4nJe9Dc5AQAAA1M"]
[Sun Jan 04 16:19:10.045599 2026] [:error] [pid 4333:tid 4356] [client 85.203.23.11:43473] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/images/selam.php"] [unique_id "aVoifjAH-zZWAfquimDtvAAAABQ"]
[Sun Jan 04 16:19:10.562194 2026] [:error] [pid 64248:tid 64255] [client 85.203.23.19:45971] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aVoifsZZ_5Iet2g0ae3k_gAAAEU"]
[Sun Jan 04 16:19:11.053493 2026] [:error] [pid 4427:tid 4473] [client 85.203.23.36:41457] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aVoifz-T5ydE4nJe9Dc5AgAAA1A"]
[Sun Jan 04 16:57:53.933236 2026] [:error] [pid 4426:tid 4434] [client 36.111.67.189:40270] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVorkZAfkrNbrfBUY5U8CQAAAkQ"]
[Sun Jan 04 17:34:55.324635 2026] [:error] [pid 4365:tid 4409] [client 43.135.145.73:60990] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVo0P8Mi25XHOoMs4mdhNAAAAY4"]
[Sun Jan 04 18:34:29.436076 2026] [autoindex:error] [pid 47943:tid 47976] [client 74.7.243.210:60610] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 18:45:11.098619 2026] [autoindex:error] [pid 15480:tid 15504] [client 74.7.242.55:56580] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:26:07.134633 2026] [:error] [pid 58995:tid 59033] [client 43.153.58.28:36690] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVpOT-du_rbAuWPjkdvOIgAAA4c"]
[Sun Jan 04 19:29:33.524074 2026] [autoindex:error] [pid 51271:tid 51280] [client 100.24.208.151:40885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:29:34.024184 2026] [autoindex:error] [pid 51328:tid 51341] [client 100.24.208.151:57119] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 22:16:05.671913 2026] [autoindex:error] [pid 42666:tid 42719] [client 93.158.90.72:47779] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 22:39:58.719934 2026] [autoindex:error] [pid 42666:tid 42715] [client 162.243.167.246:51350] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 23:25:36.708782 2026] [:error] [pid 50229:tid 50252] [client 36.111.67.189:59668] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVqGcKhKBHGV8WZnituBoAAAANQ"]
[Mon Jan 05 00:50:53.306690 2026] [:error] [pid 6613:tid 6638] [client 43.157.82.252:58108] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVqabcW2a9pc2Efh4D3-agAAARc"]
[Mon Jan 05 01:36:23.842112 2026] [proxy_fcgi:error] [pid 6613:tid 6631] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:23.864033 2026] [proxy_fcgi:error] [pid 6613:tid 6615] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.345190 2026] [proxy_fcgi:error] [pid 6613:tid 6623] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.370012 2026] [proxy_fcgi:error] [pid 6613:tid 6622] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.395988 2026] [proxy_fcgi:error] [pid 6613:tid 6630] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.433862 2026] [proxy_fcgi:error] [pid 6613:tid 6625] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.458059 2026] [proxy_fcgi:error] [pid 6613:tid 6636] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.480107 2026] [proxy_fcgi:error] [pid 6613:tid 6624] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.502370 2026] [proxy_fcgi:error] [pid 6613:tid 6618] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.529229 2026] [proxy_fcgi:error] [pid 6613:tid 6638] [client 4.196.68.183:3310] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:36:24.547150 2026] [:error] [pid 6613:tid 6633] [client 4.196.68.183:3310] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aVqlGMW2a9pc2Efh4D0GigAAARI"]
[Mon Jan 05 01:36:28.032220 2026] [:error] [pid 22540:tid 22586] [client 4.196.68.183:23915] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aVqlHDQAa5AoSeJHBNp_HwAAAAw"]
[Mon Jan 05 01:36:31.829316 2026] [:error] [pid 22540:tid 22583] [client 4.196.68.183:13030] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aVqlHzQAa5AoSeJHBNp_JwAAAAk"]
[Mon Jan 05 01:36:34.084082 2026] [:error] [pid 22540:tid 22579] [client 4.196.68.183:13020] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aVqlIjQAa5AoSeJHBNp_LAAAAAU"]
[Mon Jan 05 01:36:36.880293 2026] [:error] [pid 11570:tid 11596] [client 4.196.68.183:23898] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aVqlJFpq_sPZb-JYukUKhgAAAtg"]
[Mon Jan 05 01:36:38.915002 2026] [:error] [pid 8447:tid 8454] [client 4.196.68.183:20086] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aVqlJrlwvJttJsvQpd_evwAAAoQ"]
[Mon Jan 05 01:36:40.581498 2026] [:error] [pid 7716:tid 7743] [client 4.196.68.183:22093] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aVqlKDZZYbEubuUOjjbf3AAAAlM"]
[Mon Jan 05 01:36:43.166812 2026] [:error] [pid 11570:tid 11574] [client 4.196.68.183:13027] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aVqlK1pq_sPZb-JYukUKjQAAAsI"]
[Mon Jan 05 01:36:43.894983 2026] [:error] [pid 11570:tid 11596] [client 4.196.68.183:58810] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVqlK1pq_sPZb-JYukUKjgAAAtg"]
[Mon Jan 05 01:36:44.148615 2026] [:error] [pid 11570:tid 11581] [client 4.196.68.183:21549] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVqlLFpq_sPZb-JYukUKkAAAAsk"]
[Mon Jan 05 01:36:44.444683 2026] [:error] [pid 11570:tid 11577] [client 4.196.68.183:32339] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVqlLFpq_sPZb-JYukUKkQAAAsU"]
[Mon Jan 05 01:36:45.995417 2026] [:error] [pid 6937:tid 6979] [client 4.196.68.183:20071] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVqlLQfTYSkMJzNSH4ViiAAAAUo"]
[Mon Jan 05 01:36:47.316864 2026] [:error] [pid 7626:tid 7659] [client 4.196.68.183:21523] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bjfl.php"] [unique_id "aVqlL1jhVzHrevQ2GQzhXgAAAdQ"]
[Mon Jan 05 01:36:48.861793 2026] [:error] [pid 7626:tid 7658] [client 4.196.68.183:20083] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bjfl.php"] [unique_id "aVqlMFjhVzHrevQ2GQzhYgAAAdM"]
[Mon Jan 05 01:36:50.261879 2026] [:error] [pid 6937:tid 6963] [client 4.196.68.183:20081] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bjfl.php"] [unique_id "aVqlMgfTYSkMJzNSH4VijgAAAUE"]
[Mon Jan 05 01:36:51.180997 2026] [:error] [pid 11570:tid 11595] [client 4.196.68.183:32328] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bjfl.php"] [unique_id "aVqlM1pq_sPZb-JYukUKlQAAAtc"]
[Mon Jan 05 01:36:52.912145 2026] [:error] [pid 11570:tid 11587] [client 4.196.68.183:17800] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVqlNFpq_sPZb-JYukUKlwAAAs8"]
[Mon Jan 05 01:36:54.496767 2026] [:error] [pid 6937:tid 6962] [client 4.196.68.183:12745] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVqlNgfTYSkMJzNSH4VilAAAAUA"]
[Mon Jan 05 01:36:57.103950 2026] [:error] [pid 6613:tid 6615] [client 4.196.68.183:17822] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVqlOcW2a9pc2Efh4D0GowAAAQA"]
[Mon Jan 05 01:36:59.133170 2026] [:error] [pid 7626:tid 7652] [client 4.196.68.183:7030] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aVqlO1jhVzHrevQ2GQzhaQAAAc0"]
[Mon Jan 05 01:37:00.819890 2026] [:error] [pid 7626:tid 7662] [client 4.196.68.183:6981] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVqlPFjhVzHrevQ2GQzhagAAAdc"]
[Mon Jan 05 01:37:02.173106 2026] [:error] [pid 1221:tid 1267] [client 4.196.68.183:14758] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVqlPp_3f4CdEKVLTXUJ_AAAAIw"]
[Mon Jan 05 01:37:04.642273 2026] [:error] [pid 6937:tid 6983] [client 4.196.68.183:59082] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVqlQAfTYSkMJzNSH4ViogAAAU4"]
[Mon Jan 05 01:37:09.536018 2026] [:error] [pid 22540:tid 22596] [client 4.196.68.183:14742] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws35.php"] [unique_id "aVqlRTQAa5AoSeJHBNp_RwAAABY"]
[Mon Jan 05 01:37:12.894712 2026] [:error] [pid 7155:tid 7176] [client 4.196.68.183:15601] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVqlSCD_CRsWjWrSXNJCqQAAAZM"]
[Mon Jan 05 01:37:13.250685 2026] [:error] [pid 7716:tid 7743] [client 4.196.68.183:17855] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVqlSTZZYbEubuUOjjbf7wAAAlM"]
[Mon Jan 05 01:37:14.330148 2026] [:error] [pid 7716:tid 7739] [client 4.196.68.183:17821] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVqlSjZZYbEubuUOjjbf8gAAAk8"]
[Mon Jan 05 01:37:15.465946 2026] [:error] [pid 7155:tid 7161] [client 4.196.68.183:59131] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tons.php"] [unique_id "aVqlSyD_CRsWjWrSXNJCqgAAAYQ"]
[Mon Jan 05 01:37:16.103867 2026] [:error] [pid 7716:tid 7726] [client 4.196.68.183:14748] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVqlTDZZYbEubuUOjjbf9QAAAkM"]
[Mon Jan 05 01:37:16.976257 2026] [:error] [pid 6613:tid 6620] [client 4.196.68.183:20095] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVqlTMW2a9pc2Efh4D0GrAAAAQU"]
[Mon Jan 05 01:37:17.789872 2026] [:error] [pid 7155:tid 7168] [client 4.196.68.183:12779] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVqlTSD_CRsWjWrSXNJCqwAAAYs"]
[Mon Jan 05 01:37:20.742876 2026] [:error] [pid 8447:tid 8452] [client 4.196.68.183:15615] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVqlULlwvJttJsvQpd_e5AAAAoI"]
[Mon Jan 05 01:37:23.155245 2026] [:error] [pid 7155:tid 7170] [client 4.196.68.183:12791] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVqlUyD_CRsWjWrSXNJCswAAAY0"]
[Mon Jan 05 01:37:24.913718 2026] [proxy_fcgi:error] [pid 6937:tid 6989] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:24.935074 2026] [proxy_fcgi:error] [pid 6937:tid 6965] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:24.954015 2026] [proxy_fcgi:error] [pid 6937:tid 6991] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:24.989950 2026] [proxy_fcgi:error] [pid 6937:tid 6985] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:25.970559 2026] [proxy_fcgi:error] [pid 6937:tid 6986] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:25.993088 2026] [proxy_fcgi:error] [pid 6937:tid 6992] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:26.018845 2026] [proxy_fcgi:error] [pid 6937:tid 6962] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:26.823384 2026] [proxy_fcgi:error] [pid 6937:tid 6972] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:26.840901 2026] [proxy_fcgi:error] [pid 6937:tid 6994] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:27.227370 2026] [proxy_fcgi:error] [pid 6937:tid 6979] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:27.245686 2026] [proxy_fcgi:error] [pid 6937:tid 6980] [client 4.196.68.183:5249] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 01:37:27.262118 2026] [:error] [pid 6937:tid 6984] [client 4.196.68.183:5249] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aVqlVwfTYSkMJzNSH4ViwwAAAU8"]
[Mon Jan 05 01:37:28.059517 2026] [:error] [pid 1221:tid 1264] [client 4.196.68.183:58799] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aVqlWJ_3f4CdEKVLTXUKCAAAAIk"]
[Mon Jan 05 01:37:28.450998 2026] [:error] [pid 22540:tid 22591] [client 4.196.68.183:59115] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aVqlWDQAa5AoSeJHBNp_VQAAABE"]
[Mon Jan 05 01:37:29.002756 2026] [:error] [pid 6613:tid 6625] [client 4.196.68.183:5270] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aVqlWcW2a9pc2Efh4D0GrwAAAQo"]
[Mon Jan 05 01:37:29.895450 2026] [:error] [pid 7626:tid 7660] [client 4.196.68.183:12746] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVqlWVjhVzHrevQ2GQzhhgAAAdU"]
[Mon Jan 05 01:37:32.268368 2026] [:error] [pid 11570:tid 11595] [client 4.196.68.183:59081] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVqlXFpq_sPZb-JYukUKrwAAAtc"]
[Mon Jan 05 01:37:33.146272 2026] [:error] [pid 11570:tid 11586] [client 4.196.68.183:12771] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVqlXVpq_sPZb-JYukUKsAAAAs4"]
[Mon Jan 05 01:37:34.501122 2026] [:error] [pid 7716:tid 7725] [client 4.196.68.183:12793] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVqlXjZZYbEubuUOjjbgAgAAAkI"]
[Mon Jan 05 01:37:34.900603 2026] [:error] [pid 6613:tid 6633] [client 4.196.68.183:17851] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVqlXsW2a9pc2Efh4D0GtAAAARI"]
[Mon Jan 05 01:37:37.321485 2026] [:error] [pid 22541:tid 22606] [client 4.196.68.183:15565] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVqlYUkjzS6tgkL3JEuukAAAAgU"]
[Mon Jan 05 01:37:40.087506 2026] [:error] [pid 6937:tid 6979] [client 4.196.68.183:12761] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVqlZAfTYSkMJzNSH4VizAAAAUo"]
[Mon Jan 05 01:37:42.370425 2026] [:error] [pid 11570:tid 11577] [client 4.196.68.183:20075] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVqlZlpq_sPZb-JYukUKtgAAAsU"]
[Mon Jan 05 01:37:43.086231 2026] [:error] [pid 7716:tid 7735] [client 4.196.68.183:20047] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/family.php"] [unique_id "aVqlZzZZYbEubuUOjjbgCAAAAks"]
[Mon Jan 05 01:37:44.516806 2026] [:error] [pid 6613:tid 6629] [client 4.196.68.183:21565] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/family.php"] [unique_id "aVqlaMW2a9pc2Efh4D0GuQAAAQ4"]
[Mon Jan 05 01:37:45.121152 2026] [:error] [pid 7155:tid 7171] [client 4.196.68.183:32366] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/family.php"] [unique_id "aVqlaSD_CRsWjWrSXNJCwAAAAY4"]
[Mon Jan 05 01:37:46.729457 2026] [:error] [pid 6613:tid 6634] [client 4.196.68.183:6980] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/family.php"] [unique_id "aVqlasW2a9pc2Efh4D0GvAAAARM"]
[Mon Jan 05 01:37:47.946059 2026] [:error] [pid 6937:tid 6993] [client 4.196.68.183:13004] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aVqlawfTYSkMJzNSH4Vi1QAAAVc"]
[Mon Jan 05 01:37:48.459159 2026] [:error] [pid 7626:tid 7644] [client 4.196.68.183:22057] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aVqlbFjhVzHrevQ2GQzhkAAAAcU"]
[Mon Jan 05 01:37:49.416905 2026] [:error] [pid 6937:tid 6972] [client 4.196.68.183:13033] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aVqlbQfTYSkMJzNSH4Vi2QAAAUk"]
[Mon Jan 05 01:37:50.438129 2026] [:error] [pid 6937:tid 6966] [client 4.196.68.183:14471] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aVqlbgfTYSkMJzNSH4Vi3AAAAUQ"]
[Mon Jan 05 01:37:52.058156 2026] [:error] [pid 6937:tid 6981] [client 4.196.68.183:22139] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aVqlcAfTYSkMJzNSH4Vi4QAAAUw"]
[Mon Jan 05 01:37:53.428212 2026] [:error] [pid 22540:tid 22582] [client 4.196.68.183:19700] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aVqlcTQAa5AoSeJHBNp_awAAAAg"]
[Mon Jan 05 01:37:55.002464 2026] [:error] [pid 6937:tid 6962] [client 4.196.68.183:19689] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aVqlcwfTYSkMJzNSH4Vi5gAAAUA"]
[Mon Jan 05 01:37:55.830677 2026] [:error] [pid 6937:tid 6992] [client 4.196.68.183:18384] [client 4.196.68.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aVqlcwfTYSkMJzNSH4Vi6AAAAVY"]
[Mon Jan 05 02:28:43.083445 2026] [:error] [pid 7155:tid 7159] [client 43.134.141.244:57196] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVqxWyD_CRsWjWrSXNJKXAAAAYI"]
[Mon Jan 05 03:14:39.287682 2026] [autoindex:error] [pid 6613:tid 6624] [client 195.24.236.78:54886] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 03:30:44.650691 2026] [autoindex:error] [pid 7155:tid 7163] [client 69.10.48.159:51630] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 04:28:00.748423 2026] [autoindex:error] [pid 6680:tid 6695] [client 191.101.217.152:8465] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 05 04:28:01.389462 2026] [autoindex:error] [pid 5536:tid 5607] [client 191.101.217.152:8558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 05 04:28:02.261330 2026] [autoindex:error] [pid 5632:tid 5655] [client 174.138.52.131:57912] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 05 04:28:02.906314 2026] [autoindex:error] [pid 6680:tid 6688] [client 174.138.52.131:57916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 05 04:28:03.951925 2026] [autoindex:error] [pid 5632:tid 5646] [client 49.245.80.150:52978] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 05 04:28:04.708994 2026] [autoindex:error] [pid 5536:tid 5606] [client 174.138.52.131:57930] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 05 05:00:53.067458 2026] [autoindex:error] [pid 6680:tid 6689] [client 47.252.21.203:62123] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 05:48:50.759756 2026] [autoindex:error] [pid 5536:tid 5606] [client 66.84.91.173:48445] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 05:48:52.991315 2026] [autoindex:error] [pid 5632:tid 5645] [client 66.84.91.173:17569] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 05:48:54.380191 2026] [autoindex:error] [pid 5632:tid 5648] [client 66.84.91.173:55377] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 05:48:55.687081 2026] [autoindex:error] [pid 5535:tid 5570] [client 66.84.91.173:24991] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 06:34:32.974729 2026] [autoindex:error] [pid 5534:tid 5546] [client 45.148.10.99:49490] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 08:23:27.200829 2026] [proxy_fcgi:error] [pid 5536:tid 5612] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:27.442905 2026] [proxy_fcgi:error] [pid 5536:tid 5604] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:27.565139 2026] [proxy_fcgi:error] [pid 5536:tid 5609] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:27.697904 2026] [proxy_fcgi:error] [pid 5536:tid 5605] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:27.837776 2026] [proxy_fcgi:error] [pid 5536:tid 5606] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:28.062933 2026] [proxy_fcgi:error] [pid 5536:tid 5616] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:28.256877 2026] [proxy_fcgi:error] [pid 5536:tid 5617] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:28.379020 2026] [proxy_fcgi:error] [pid 5536:tid 5598] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:28.531839 2026] [proxy_fcgi:error] [pid 5536:tid 5621] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:28.654089 2026] [proxy_fcgi:error] [pid 5536:tid 5597] [client 13.70.0.106:2595] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:23:28.773270 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:2595] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVsEgARtMZNG6xI8yDwMTgAAAIs"]
[Mon Jan 05 08:23:29.187860 2026] [:error] [pid 5535:tid 5582] [client 13.70.0.106:3615] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVsEgWnkedMjhVX0PTXEiAAAAEw"]
[Mon Jan 05 08:23:29.687563 2026] [:error] [pid 6680:tid 6691] [client 13.70.0.106:6027] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVsEgaE58uNoazzTmx0oCgAAAQk"]
[Mon Jan 05 08:23:30.835618 2026] [:error] [pid 5535:tid 5587] [client 13.70.0.106:2407] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVsEgmnkedMjhVX0PTXEjgAAAFE"]
[Mon Jan 05 08:23:32.001725 2026] [:error] [pid 6680:tid 6696] [client 13.70.0.106:5058] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVsEhKE58uNoazzTmx0oGwAAAQ4"]
[Mon Jan 05 08:23:33.059458 2026] [:error] [pid 5632:tid 5651] [client 13.70.0.106:5539] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVsEhYN3ZWvlOh-nbt_rWwAAAMc"]
[Mon Jan 05 08:23:33.392476 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:3641] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVsEhYN3ZWvlOh-nbt_rXAAAANc"]
[Mon Jan 05 08:23:34.072611 2026] [:error] [pid 5632:tid 5662] [client 13.70.0.106:2882] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/oo.php"] [unique_id "aVsEhoN3ZWvlOh-nbt_rXgAAANI"]
[Mon Jan 05 08:23:35.055484 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:5292] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVsEh4N3ZWvlOh-nbt_rYgAAAMo"]
[Mon Jan 05 08:23:35.651822 2026] [:error] [pid 5535:tid 5586] [client 13.70.0.106:5062] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVsEh2nkedMjhVX0PTXElwAAAFA"]
[Mon Jan 05 08:23:36.029880 2026] [:error] [pid 5534:tid 5546] [client 13.70.0.106:4677] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVsEiJNs9XmbR6unB0zuOwAAAAM"]
[Mon Jan 05 08:23:36.943781 2026] [:error] [pid 5536:tid 5606] [client 13.70.0.106:5297] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aVsEiARtMZNG6xI8yDwMWAAAAIk"]
[Mon Jan 05 08:23:38.055260 2026] [:error] [pid 6680:tid 6688] [client 13.70.0.106:1914] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVsEiqE58uNoazzTmx0oPQAAAQY"]
[Mon Jan 05 08:23:38.959569 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:3876] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVsEioN3ZWvlOh-nbt_rZwAAANA"]
[Mon Jan 05 08:23:40.237938 2026] [:error] [pid 5632:tid 5662] [client 13.70.0.106:6024] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVsEjIN3ZWvlOh-nbt_rbQAAANI"]
[Mon Jan 05 08:23:41.097975 2026] [:error] [pid 6680:tid 6683] [client 13.70.0.106:2396] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lisa.php"] [unique_id "aVsEjaE58uNoazzTmx0oQgAAAQE"]
[Mon Jan 05 08:23:41.464142 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:2418] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVsEjYN3ZWvlOh-nbt_rdQAAAMI"]
[Mon Jan 05 08:23:41.923838 2026] [:error] [pid 5536:tid 5615] [client 13.70.0.106:2936] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVsEjQRtMZNG6xI8yDwMYgAAAJI"]
[Mon Jan 05 08:23:42.679196 2026] [:error] [pid 5632:tid 5662] [client 13.70.0.106:3841] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVsEjoN3ZWvlOh-nbt_rfAAAANI"]
[Mon Jan 05 08:23:43.719711 2026] [:error] [pid 6680:tid 6692] [client 13.70.0.106:4704] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/000.php"] [unique_id "aVsEj6E58uNoazzTmx0oRAAAAQo"]
[Mon Jan 05 08:23:44.027052 2026] [:error] [pid 5535:tid 5573] [client 13.70.0.106:2614] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVsEkGnkedMjhVX0PTXEqAAAAEM"]
[Mon Jan 05 08:23:44.575316 2026] [:error] [pid 5632:tid 5650] [client 13.70.0.106:5105] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVsEkIN3ZWvlOh-nbt_rgQAAAMY"]
[Mon Jan 05 08:23:45.196328 2026] [:error] [pid 5536:tid 5612] [client 13.70.0.106:1354] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVsEkQRtMZNG6xI8yDwMZQAAAI8"]
[Mon Jan 05 08:23:46.422895 2026] [:error] [pid 6680:tid 6693] [client 13.70.0.106:6366] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aVsEkqE58uNoazzTmx0oTQAAAQs"]
[Mon Jan 05 08:23:47.399043 2026] [:error] [pid 6680:tid 6691] [client 13.70.0.106:2577] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVsEk6E58uNoazzTmx0oUAAAAQk"]
[Mon Jan 05 08:23:48.486237 2026] [:error] [pid 6680:tid 6695] [client 13.70.0.106:2911] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVsElKE58uNoazzTmx0oUgAAAQ0"]
[Mon Jan 05 08:23:49.487191 2026] [:error] [pid 5534:tid 5555] [client 13.70.0.106:6368] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVsElZNs9XmbR6unB0zuUQAAAAw"]
[Mon Jan 05 08:23:50.244735 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:1367] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aVsElgRtMZNG6xI8yDwMawAAAIs"]
[Mon Jan 05 08:23:50.986571 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:2401] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/87.php"] [unique_id "aVsElqE58uNoazzTmx0oWAAAAQQ"]
[Mon Jan 05 08:23:51.465243 2026] [:error] [pid 5534:tid 5553] [client 13.70.0.106:2772] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/87.php"] [unique_id "aVsEl5Ns9XmbR6unB0zuVwAAAAo"]
[Mon Jan 05 08:23:52.056718 2026] [:error] [pid 5632:tid 5653] [client 13.70.0.106:1344] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/87.php"] [unique_id "aVsEmIN3ZWvlOh-nbt_rjgAAAMk"]
[Mon Jan 05 08:23:52.848675 2026] [:error] [pid 5535:tid 5588] [client 13.70.0.106:1346] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/87.php"] [unique_id "aVsEmGnkedMjhVX0PTXEuAAAAFI"]
[Mon Jan 05 08:23:53.429160 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:1359] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVsEmQRtMZNG6xI8yDwMbwAAAI0"]
[Mon Jan 05 08:23:54.333048 2026] [:error] [pid 5535:tid 5590] [client 13.70.0.106:5096] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVsEmmnkedMjhVX0PTXEvAAAAFQ"]
[Mon Jan 05 08:23:55.669496 2026] [:error] [pid 5632:tid 5668] [client 13.70.0.106:3854] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVsEm4N3ZWvlOh-nbt_rlwAAANg"]
[Mon Jan 05 08:23:56.699429 2026] [:error] [pid 5536:tid 5619] [client 13.70.0.106:2413] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aVsEnARtMZNG6xI8yDwMfAAAAJY"]
[Mon Jan 05 08:23:57.182968 2026] [:error] [pid 6680:tid 6694] [client 13.70.0.106:3623] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVsEnaE58uNoazzTmx0okQAAAQw"]
[Mon Jan 05 08:23:57.802127 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:1356] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVsEnYN3ZWvlOh-nbt_rqAAAANA"]
[Mon Jan 05 08:23:59.041413 2026] [:error] [pid 6680:tid 6695] [client 13.70.0.106:2884] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVsEn6E58uNoazzTmx0onAAAAQ0"]
[Mon Jan 05 08:24:05.664660 2026] [:error] [pid 5534:tid 5552] [client 13.70.0.106:3616] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aVsEpZNs9XmbR6unB0zuawAAAAk"]
[Mon Jan 05 08:24:06.243259 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:2580] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVsEpoN3ZWvlOh-nbt_rwgAAAME"]
[Mon Jan 05 08:24:06.923742 2026] [:error] [pid 5632:tid 5668] [client 13.70.0.106:4199] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVsEpoN3ZWvlOh-nbt_rwwAAANg"]
[Mon Jan 05 08:24:08.069942 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:4722] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVsEqIN3ZWvlOh-nbt_rxwAAANA"]
[Mon Jan 05 08:24:08.496016 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:5059] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aVsEqIN3ZWvlOh-nbt_ryQAAANQ"]
[Mon Jan 05 08:24:08.932740 2026] [:error] [pid 5632:tid 5653] [client 13.70.0.106:5277] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVsEqIN3ZWvlOh-nbt_rygAAAMk"]
[Mon Jan 05 08:24:09.611946 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:5269] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVsEqYN3ZWvlOh-nbt_rzgAAAMI"]
[Mon Jan 05 08:24:10.981918 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:6373] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVsEqoN3ZWvlOh-nbt_r0gAAAMg"]
[Mon Jan 05 08:24:12.538044 2026] [:error] [pid 5534:tid 5567] [client 13.70.0.106:3972] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aVsErJNs9XmbR6unB0zufAAAABg"]
[Mon Jan 05 08:24:13.111510 2026] [:error] [pid 6680:tid 6682] [client 13.70.0.106:5331] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVsEraE58uNoazzTmx0otQAAAQA"]
[Mon Jan 05 08:24:13.416615 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:4680] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVsErYN3ZWvlOh-nbt_r1gAAAM8"]
[Mon Jan 05 08:24:13.718716 2026] [:error] [pid 5534:tid 5566] [client 13.70.0.106:1534] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVsErZNs9XmbR6unB0zuhgAAABc"]
[Mon Jan 05 08:24:14.421984 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:3704] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aVsEroN3ZWvlOh-nbt_r2AAAANc"]
[Mon Jan 05 08:24:14.914840 2026] [:error] [pid 5534:tid 5552] [client 13.70.0.106:1449] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVsErpNs9XmbR6unB0zujAAAAAk"]
[Mon Jan 05 08:24:15.716645 2026] [:error] [pid 5535:tid 5590] [client 13.70.0.106:1031] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVsEr2nkedMjhVX0PTXFBgAAAFQ"]
[Mon Jan 05 08:24:16.982473 2026] [:error] [pid 5534:tid 5559] [client 13.70.0.106:3533] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVsEsJNs9XmbR6unB0zukAAAABA"]
[Mon Jan 05 08:24:17.561752 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:2876] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/esp.php"] [unique_id "aVsEsYN3ZWvlOh-nbt_r3gAAAMM"]
[Mon Jan 05 08:24:18.249607 2026] [:error] [pid 6680:tid 6699] [client 13.70.0.106:1460] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVsEsqE58uNoazzTmx0ovQAAARE"]
[Mon Jan 05 08:24:19.023494 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:5382] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVsEswRtMZNG6xI8yDwMlgAAAIs"]
[Mon Jan 05 08:24:19.289278 2026] [:error] [pid 5632:tid 5644] [client 13.70.0.106:4786] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVsEs4N3ZWvlOh-nbt_r4QAAAMA"]
[Mon Jan 05 08:24:19.616840 2026] [:error] [pid 5535:tid 5576] [client 13.70.0.106:3534] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aVsEs2nkedMjhVX0PTXFCwAAAEY"]
[Mon Jan 05 08:24:19.977018 2026] [:error] [pid 5535:tid 5577] [client 13.70.0.106:5404] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVsEs2nkedMjhVX0PTXFDgAAAEc"]
[Mon Jan 05 08:24:20.489769 2026] [:error] [pid 5535:tid 5575] [client 13.70.0.106:5421] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVsEtGnkedMjhVX0PTXFDwAAAEU"]
[Mon Jan 05 08:24:20.866613 2026] [:error] [pid 6680:tid 6692] [client 13.70.0.106:4797] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVsEtKE58uNoazzTmx0owgAAAQo"]
[Mon Jan 05 08:24:21.415154 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:1037] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aVsEtYN3ZWvlOh-nbt_r5wAAANc"]
[Mon Jan 05 08:24:22.707823 2026] [:error] [pid 5535:tid 5573] [client 13.70.0.106:1693] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVsEtmnkedMjhVX0PTXFEgAAAEM"]
[Mon Jan 05 08:24:23.367869 2026] [:error] [pid 5534:tid 5547] [client 13.70.0.106:3814] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVsEt5Ns9XmbR6unB0zulQAAAAQ"]
[Mon Jan 05 08:24:23.999030 2026] [:error] [pid 5632:tid 5644] [client 13.70.0.106:5881] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVsEt4N3ZWvlOh-nbt_r8wAAAMA"]
[Mon Jan 05 08:24:24.736747 2026] [:error] [pid 5632:tid 5650] [client 13.70.0.106:4605] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/flower2.php"] [unique_id "aVsEuIN3ZWvlOh-nbt_r9QAAAMY"]
[Mon Jan 05 08:24:25.518905 2026] [:error] [pid 5534:tid 5550] [client 13.70.0.106:5862] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/family.php"] [unique_id "aVsEuZNs9XmbR6unB0zumwAAAAc"]
[Mon Jan 05 08:24:26.597472 2026] [:error] [pid 6680:tid 6687] [client 13.70.0.106:1564] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/family.php"] [unique_id "aVsEuqE58uNoazzTmx0ozAAAAQU"]
[Mon Jan 05 08:24:28.798130 2026] [proxy_fcgi:error] [pid 5535:tid 5572] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:29.913430 2026] [proxy_fcgi:error] [pid 5535:tid 5570] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.034470 2026] [proxy_fcgi:error] [pid 5535:tid 5589] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.251313 2026] [proxy_fcgi:error] [pid 5535:tid 5576] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.373620 2026] [proxy_fcgi:error] [pid 5535:tid 5577] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.494304 2026] [proxy_fcgi:error] [pid 5535:tid 5584] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.632417 2026] [proxy_fcgi:error] [pid 5535:tid 5588] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.754046 2026] [proxy_fcgi:error] [pid 5535:tid 5586] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:30.938905 2026] [proxy_fcgi:error] [pid 5535:tid 5578] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:31.059564 2026] [proxy_fcgi:error] [pid 5535:tid 5594] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:31.190344 2026] [proxy_fcgi:error] [pid 5535:tid 5573] [client 13.70.0.106:2296] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:24:31.333943 2026] [:error] [pid 5535:tid 5581] [client 13.70.0.106:2296] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aVsEv2nkedMjhVX0PTXFNgAAAEs"]
[Mon Jan 05 08:24:32.720899 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:1335] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aVsEwIN3ZWvlOh-nbt_sDwAAAMM"]
[Mon Jan 05 08:24:33.247325 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:2195] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aVsEwYN3ZWvlOh-nbt_sEgAAAMg"]
[Mon Jan 05 08:24:34.096801 2026] [:error] [pid 5535:tid 5583] [client 13.70.0.106:2297] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/o2.php"] [unique_id "aVsEwmnkedMjhVX0PTXFPAAAAE0"]
[Mon Jan 05 08:24:35.064095 2026] [:error] [pid 5534:tid 5562] [client 13.70.0.106:1594] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/new2.php"] [unique_id "aVsEw5Ns9XmbR6unB0zuogAAABM"]
[Mon Jan 05 08:24:35.618862 2026] [:error] [pid 5536:tid 5601] [client 13.70.0.106:2987] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/new2.php"] [unique_id "aVsEwwRtMZNG6xI8yDwMoQAAAIQ"]
[Mon Jan 05 08:24:36.237517 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:2291] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/new2.php"] [unique_id "aVsExARtMZNG6xI8yDwMogAAAI0"]
[Mon Jan 05 08:24:37.005677 2026] [:error] [pid 5534:tid 5551] [client 13.70.0.106:2723] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/new2.php"] [unique_id "aVsExZNs9XmbR6unB0zupwAAAAg"]
[Mon Jan 05 08:24:37.664111 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:6747] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nae.php"] [unique_id "aVsExYN3ZWvlOh-nbt_sHQAAAMI"]
[Mon Jan 05 08:24:38.264205 2026] [:error] [pid 5535:tid 5573] [client 13.70.0.106:2707] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nae.php"] [unique_id "aVsExmnkedMjhVX0PTXFTAAAAEM"]
[Mon Jan 05 08:24:39.659173 2026] [:error] [pid 5534:tid 5556] [client 13.70.0.106:6769] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nae.php"] [unique_id "aVsEx5Ns9XmbR6unB0zusQAAAA0"]
[Mon Jan 05 08:24:40.120515 2026] [:error] [pid 5534:tid 5543] [client 13.70.0.106:6723] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nae.php"] [unique_id "aVsEyJNs9XmbR6unB0zuswAAAAA"]
[Mon Jan 05 08:24:40.440947 2026] [:error] [pid 5534:tid 5566] [client 13.70.0.106:1282] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eru.php"] [unique_id "aVsEyJNs9XmbR6unB0zutQAAABc"]
[Mon Jan 05 08:24:41.707948 2026] [:error] [pid 5535:tid 5579] [client 13.70.0.106:2277] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eru.php"] [unique_id "aVsEyWnkedMjhVX0PTXFWQAAAEk"]
[Mon Jan 05 08:24:42.599179 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:6500] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eru.php"] [unique_id "aVsEyoN3ZWvlOh-nbt_sMgAAAM0"]
[Mon Jan 05 08:24:43.082171 2026] [:error] [pid 5632:tid 5653] [client 13.70.0.106:6524] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eru.php"] [unique_id "aVsEy4N3ZWvlOh-nbt_sNQAAAMk"]
[Mon Jan 05 08:24:43.564928 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:1293] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/JPG.php"] [unique_id "aVsEywRtMZNG6xI8yDwMtQAAAIs"]
[Mon Jan 05 08:24:44.605284 2026] [:error] [pid 5534:tid 5548] [client 13.70.0.106:1327] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/JPG.php"] [unique_id "aVsEzJNs9XmbR6unB0zuxgAAAAU"]
[Mon Jan 05 08:24:45.563161 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:1286] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/JPG.php"] [unique_id "aVsEzYN3ZWvlOh-nbt_sRQAAAM8"]
[Mon Jan 05 08:24:46.068839 2026] [:error] [pid 5535:tid 5591] [client 13.70.0.106:2286] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/JPG.php"] [unique_id "aVsEzmnkedMjhVX0PTXFYQAAAFU"]
[Mon Jan 05 08:24:46.553896 2026] [:error] [pid 6680:tid 6702] [client 13.70.0.106:1341] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsz.php"] [unique_id "aVsEzqE58uNoazzTmx0o4QAAARQ"]
[Mon Jan 05 08:24:47.030342 2026] [:error] [pid 5534:tid 5564] [client 13.70.0.106:5863] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsz.php"] [unique_id "aVsEz5Ns9XmbR6unB0zuyAAAABU"]
[Mon Jan 05 08:24:47.846015 2026] [:error] [pid 5536:tid 5615] [client 13.70.0.106:1586] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsz.php"] [unique_id "aVsEzwRtMZNG6xI8yDwMtwAAAJI"]
[Mon Jan 05 08:24:48.716272 2026] [:error] [pid 5534:tid 5562] [client 13.70.0.106:6731] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsz.php"] [unique_id "aVsE0JNs9XmbR6unB0zuzAAAABM"]
[Mon Jan 05 08:24:49.456926 2026] [:error] [pid 5534:tid 5545] [client 13.70.0.106:1339] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lok.php"] [unique_id "aVsE0ZNs9XmbR6unB0zuzwAAAAI"]
[Mon Jan 05 08:24:50.526826 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:2289] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lok.php"] [unique_id "aVsE0oN3ZWvlOh-nbt_sXAAAAMM"]
[Mon Jan 05 08:24:50.918418 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:6732] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lok.php"] [unique_id "aVsE0oN3ZWvlOh-nbt_sXQAAAME"]
[Mon Jan 05 08:24:51.180218 2026] [:error] [pid 5632:tid 5665] [client 13.70.0.106:4843] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lok.php"] [unique_id "aVsE04N3ZWvlOh-nbt_sXwAAANU"]
[Mon Jan 05 08:24:51.533237 2026] [:error] [pid 5535:tid 5587] [client 13.70.0.106:2717] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wan.php"] [unique_id "aVsE02nkedMjhVX0PTXFdQAAAFE"]
[Mon Jan 05 08:24:52.008275 2026] [:error] [pid 5534:tid 5563] [client 13.70.0.106:6745] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wan.php"] [unique_id "aVsE1JNs9XmbR6unB0zu0QAAABQ"]
[Mon Jan 05 08:24:52.455336 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:2748] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wan.php"] [unique_id "aVsE1IN3ZWvlOh-nbt_sYgAAANc"]
[Mon Jan 05 08:24:53.406636 2026] [:error] [pid 5534:tid 5552] [client 13.70.0.106:3782] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wan.php"] [unique_id "aVsE1ZNs9XmbR6unB0zu1gAAAAk"]
[Mon Jan 05 08:24:54.278574 2026] [:error] [pid 5632:tid 5644] [client 13.70.0.106:2275] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dds.php"] [unique_id "aVsE1oN3ZWvlOh-nbt_sawAAAMA"]
[Mon Jan 05 08:24:54.710907 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:1578] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dds.php"] [unique_id "aVsE1oN3ZWvlOh-nbt_sbAAAAME"]
[Mon Jan 05 08:24:55.137858 2026] [:error] [pid 5536:tid 5618] [client 13.70.0.106:2187] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dds.php"] [unique_id "aVsE1wRtMZNG6xI8yDwMvAAAAJU"]
[Mon Jan 05 08:24:55.543043 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:2181] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dds.php"] [unique_id "aVsE14N3ZWvlOh-nbt_scgAAAM8"]
[Mon Jan 05 08:24:56.457145 2026] [:error] [pid 5632:tid 5661] [client 13.70.0.106:5840] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yyy.php"] [unique_id "aVsE2IN3ZWvlOh-nbt_seAAAANE"]
[Mon Jan 05 08:24:57.176420 2026] [:error] [pid 5535:tid 5582] [client 13.70.0.106:2224] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yyy.php"] [unique_id "aVsE2WnkedMjhVX0PTXFfwAAAEw"]
[Mon Jan 05 08:24:58.030709 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:1670] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yyy.php"] [unique_id "aVsE2oN3ZWvlOh-nbt_sfgAAAMI"]
[Mon Jan 05 08:24:59.707783 2026] [:error] [pid 5536:tid 5620] [client 13.70.0.106:4757] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yyy.php"] [unique_id "aVsE2wRtMZNG6xI8yDwMzQAAAJc"]
[Mon Jan 05 08:25:00.419270 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:4604] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h8h9.php"] [unique_id "aVsE3IN3ZWvlOh-nbt_shQAAAM8"]
[Mon Jan 05 08:25:01.237867 2026] [:error] [pid 5535:tid 5583] [client 13.70.0.106:3807] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h8h9.php"] [unique_id "aVsE3WnkedMjhVX0PTXFkwAAAE0"]
[Mon Jan 05 08:25:01.666808 2026] [:error] [pid 5535:tid 5573] [client 13.70.0.106:4544] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h8h9.php"] [unique_id "aVsE3WnkedMjhVX0PTXFlAAAAEM"]
[Mon Jan 05 08:25:02.664028 2026] [:error] [pid 5535:tid 5582] [client 13.70.0.106:4550] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h8h9.php"] [unique_id "aVsE3mnkedMjhVX0PTXFnwAAAEw"]
[Mon Jan 05 08:25:03.739107 2026] [:error] [pid 5536:tid 5616] [client 13.70.0.106:4574] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/past.php"] [unique_id "aVsE3wRtMZNG6xI8yDwM1wAAAJM"]
[Mon Jan 05 08:25:04.210957 2026] [:error] [pid 6680:tid 6691] [client 13.70.0.106:4782] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/past.php"] [unique_id "aVsE4KE58uNoazzTmx0o7gAAAQk"]
[Mon Jan 05 08:25:04.682725 2026] [:error] [pid 6680:tid 6688] [client 13.70.0.106:1411] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/past.php"] [unique_id "aVsE4KE58uNoazzTmx0o7wAAAQY"]
[Mon Jan 05 08:25:05.311840 2026] [:error] [pid 5536:tid 5618] [client 13.70.0.106:5397] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/past.php"] [unique_id "aVsE4QRtMZNG6xI8yDwM2AAAAJU"]
[Mon Jan 05 08:25:06.181852 2026] [:error] [pid 5534:tid 5567] [client 13.70.0.106:1049] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vxrl.php"] [unique_id "aVsE4pNs9XmbR6unB0zu5gAAABg"]
[Mon Jan 05 08:25:07.315430 2026] [:error] [pid 6680:tid 6698] [client 13.70.0.106:3539] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vxrl.php"] [unique_id "aVsE46E58uNoazzTmx0o8wAAARA"]
[Mon Jan 05 08:25:07.781777 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:3674] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vxrl.php"] [unique_id "aVsE44N3ZWvlOh-nbt_slQAAAME"]
[Mon Jan 05 08:25:08.486984 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:5438] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vxrl.php"] [unique_id "aVsE5IN3ZWvlOh-nbt_smQAAAM0"]
[Mon Jan 05 08:25:08.999521 2026] [:error] [pid 5632:tid 5666] [client 13.70.0.106:3185] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVsE5IN3ZWvlOh-nbt_smwAAANY"]
[Mon Jan 05 08:25:09.933107 2026] [:error] [pid 6680:tid 6687] [client 13.70.0.106:3193] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVsE5aE58uNoazzTmx0o9AAAAQU"]
[Mon Jan 05 08:25:11.140396 2026] [:error] [pid 5535:tid 5591] [client 13.70.0.106:2872] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVsE52nkedMjhVX0PTXFuQAAAFU"]
[Mon Jan 05 08:25:12.139175 2026] [:error] [pid 6680:tid 6700] [client 13.70.0.106:2837] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new4.php"] [unique_id "aVsE6KE58uNoazzTmx0o_AAAARI"]
[Mon Jan 05 08:25:12.816331 2026] [:error] [pid 5632:tid 5653] [client 13.70.0.106:3574] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berm.php"] [unique_id "aVsE6IN3ZWvlOh-nbt_spgAAAMk"]
[Mon Jan 05 08:25:14.140062 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:1066] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berm.php"] [unique_id "aVsE6oN3ZWvlOh-nbt_sqgAAAMg"]
[Mon Jan 05 08:25:15.008426 2026] [:error] [pid 5535:tid 5571] [client 13.70.0.106:3973] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berm.php"] [unique_id "aVsE62nkedMjhVX0PTXFwAAAAEE"]
[Mon Jan 05 08:25:15.825345 2026] [:error] [pid 5536:tid 5613] [client 13.70.0.106:1028] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/berm.php"] [unique_id "aVsE6wRtMZNG6xI8yDwM5gAAAJA"]
[Mon Jan 05 08:25:16.326876 2026] [:error] [pid 5535:tid 5574] [client 13.70.0.106:3700] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/led.php"] [unique_id "aVsE7GnkedMjhVX0PTXFwwAAAEQ"]
[Mon Jan 05 08:25:17.706527 2026] [:error] [pid 5536:tid 5599] [client 13.70.0.106:1516] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/led.php"] [unique_id "aVsE7QRtMZNG6xI8yDwM6wAAAII"]
[Mon Jan 05 08:25:18.205467 2026] [:error] [pid 5632:tid 5653] [client 13.70.0.106:3680] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/led.php"] [unique_id "aVsE7oN3ZWvlOh-nbt_stgAAAMk"]
[Mon Jan 05 08:25:18.648365 2026] [:error] [pid 5535:tid 5579] [client 13.70.0.106:3679] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/led.php"] [unique_id "aVsE7mnkedMjhVX0PTXFywAAAEk"]
[Mon Jan 05 08:25:19.454274 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:5293] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVsE76E58uNoazzTmx0pCwAAARU"]
[Mon Jan 05 08:25:20.403950 2026] [:error] [pid 5534:tid 5543] [client 13.70.0.106:2885] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVsE8JNs9XmbR6unB0zvAAAAAAA"]
[Mon Jan 05 08:25:21.025092 2026] [:error] [pid 5534:tid 5566] [client 13.70.0.106:2416] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVsE8ZNs9XmbR6unB0zvBAAAABc"]
[Mon Jan 05 08:25:21.593990 2026] [:error] [pid 5534:tid 5548] [client 13.70.0.106:3589] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pn.php"] [unique_id "aVsE8ZNs9XmbR6unB0zvCQAAAAU"]
[Mon Jan 05 08:25:22.035039 2026] [:error] [pid 5534:tid 5554] [client 13.70.0.106:3847] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/7f8c8.php"] [unique_id "aVsE8pNs9XmbR6unB0zvCgAAAAs"]
[Mon Jan 05 08:25:22.375500 2026] [:error] [pid 5535:tid 5571] [client 13.70.0.106:2619] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/7f8c8.php"] [unique_id "aVsE8mnkedMjhVX0PTXF0wAAAEE"]
[Mon Jan 05 08:25:23.104107 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:6156] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/7f8c8.php"] [unique_id "aVsE8wRtMZNG6xI8yDwM8gAAAIE"]
[Mon Jan 05 08:25:23.964126 2026] [:error] [pid 6680:tid 6706] [client 13.70.0.106:5299] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/7f8c8.php"] [unique_id "aVsE86E58uNoazzTmx0pEQAAARg"]
[Mon Jan 05 08:25:25.478502 2026] [:error] [pid 6680:tid 6699] [client 13.70.0.106:3884] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tua.php"] [unique_id "aVsE9aE58uNoazzTmx0pFAAAARE"]
[Mon Jan 05 08:25:26.515561 2026] [:error] [pid 6680:tid 6698] [client 13.70.0.106:5585] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tua.php"] [unique_id "aVsE9qE58uNoazzTmx0pFwAAARA"]
[Mon Jan 05 08:25:27.600959 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:2374] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tua.php"] [unique_id "aVsE94N3ZWvlOh-nbt_szAAAAM0"]
[Mon Jan 05 08:25:28.291767 2026] [:error] [pid 5632:tid 5655] [client 13.70.0.106:5078] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tua.php"] [unique_id "aVsE-IN3ZWvlOh-nbt_s0QAAAMs"]
[Mon Jan 05 08:25:28.823809 2026] [:error] [pid 5632:tid 5656] [client 13.70.0.106:4331] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-db.php"] [unique_id "aVsE-IN3ZWvlOh-nbt_s0wAAAMw"]
[Mon Jan 05 08:25:29.542769 2026] [:error] [pid 6680:tid 6690] [client 13.70.0.106:3874] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-db.php"] [unique_id "aVsE-aE58uNoazzTmx0pHwAAAQg"]
[Mon Jan 05 08:25:30.231070 2026] [:error] [pid 5534:tid 5552] [client 13.70.0.106:5303] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-db.php"] [unique_id "aVsE-pNs9XmbR6unB0zvHAAAAAk"]
[Mon Jan 05 08:25:31.000616 2026] [:error] [pid 5535:tid 5594] [client 13.70.0.106:6064] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-db.php"] [unique_id "aVsE-mnkedMjhVX0PTXF5AAAAFg"]
[Mon Jan 05 08:25:32.258745 2026] [proxy_fcgi:error] [pid 6680:tid 6682] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:32.381421 2026] [proxy_fcgi:error] [pid 6680:tid 6692] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:32.516614 2026] [proxy_fcgi:error] [pid 6680:tid 6702] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:32.638612 2026] [proxy_fcgi:error] [pid 6680:tid 6698] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:32.959493 2026] [proxy_fcgi:error] [pid 6680:tid 6693] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:33.145766 2026] [proxy_fcgi:error] [pid 6680:tid 6691] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:33.290779 2026] [proxy_fcgi:error] [pid 6680:tid 6695] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:33.741640 2026] [proxy_fcgi:error] [pid 6680:tid 6697] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:33.869990 2026] [proxy_fcgi:error] [pid 6680:tid 6704] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:34.042992 2026] [proxy_fcgi:error] [pid 6680:tid 6705] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:34.165942 2026] [proxy_fcgi:error] [pid 6680:tid 6683] [client 13.70.0.106:3871] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:25:34.283418 2026] [:error] [pid 6680:tid 6687] [client 13.70.0.106:3871] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hum.php"] [unique_id "aVsE_qE58uNoazzTmx0pMAAAAQU"]
[Mon Jan 05 08:25:34.943960 2026] [:error] [pid 5536:tid 5601] [client 13.70.0.106:6194] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hum.php"] [unique_id "aVsE_gRtMZNG6xI8yDwNEAAAAIQ"]
[Mon Jan 05 08:25:35.327397 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:4716] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hum.php"] [unique_id "aVsE_4N3ZWvlOh-nbt_s7AAAAM0"]
[Mon Jan 05 08:25:36.188845 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:2601] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hum.php"] [unique_id "aVsFAIN3ZWvlOh-nbt_s8QAAAMo"]
[Mon Jan 05 08:25:36.927753 2026] [:error] [pid 5534:tid 5559] [client 13.70.0.106:3635] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bq.php"] [unique_id "aVsFAJNs9XmbR6unB0zvLQAAABA"]
[Mon Jan 05 08:25:37.511978 2026] [:error] [pid 5534:tid 5558] [client 13.70.0.106:6150] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bq.php"] [unique_id "aVsFAZNs9XmbR6unB0zvMAAAAA8"]
[Mon Jan 05 08:25:37.779667 2026] [:error] [pid 6680:tid 6706] [client 13.70.0.106:6391] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bq.php"] [unique_id "aVsFAaE58uNoazzTmx0pMQAAARg"]
[Mon Jan 05 08:25:38.624220 2026] [:error] [pid 5534:tid 5547] [client 13.70.0.106:5190] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bq.php"] [unique_id "aVsFApNs9XmbR6unB0zvNAAAAAQ"]
[Mon Jan 05 08:25:41.599304 2026] [:error] [pid 5632:tid 5665] [client 13.70.0.106:5258] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-xm.php"] [unique_id "aVsFBYN3ZWvlOh-nbt_s-gAAANU"]
[Mon Jan 05 08:25:45.256750 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:4669] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-xm.php"] [unique_id "aVsFCQRtMZNG6xI8yDwNGwAAAI0"]
[Mon Jan 05 08:25:47.739092 2026] [:error] [pid 5534:tid 5552] [client 13.70.0.106:2762] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-xm.php"] [unique_id "aVsFC5Ns9XmbR6unB0zvSAAAAAk"]
[Mon Jan 05 08:25:48.580626 2026] [:error] [pid 5534:tid 5563] [client 13.70.0.106:5099] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-xm.php"] [unique_id "aVsFDJNs9XmbR6unB0zvSQAAABQ"]
[Mon Jan 05 08:25:49.600275 2026] [:error] [pid 5536:tid 5599] [client 13.70.0.106:5075] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/n1.php"] [unique_id "aVsFDQRtMZNG6xI8yDwNIQAAAII"]
[Mon Jan 05 08:25:50.019769 2026] [:error] [pid 5535:tid 5574] [client 13.70.0.106:6604] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/n1.php"] [unique_id "aVsFDmnkedMjhVX0PTXGBAAAAEQ"]
[Mon Jan 05 08:25:50.705638 2026] [:error] [pid 5536:tid 5597] [client 13.70.0.106:5491] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/n1.php"] [unique_id "aVsFDgRtMZNG6xI8yDwNIwAAAIA"]
[Mon Jan 05 08:25:51.712349 2026] [:error] [pid 5632:tid 5651] [client 13.70.0.106:3637] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/n1.php"] [unique_id "aVsFD4N3ZWvlOh-nbt_tGgAAAMc"]
[Mon Jan 05 08:25:52.350648 2026] [:error] [pid 6680:tid 6701] [client 13.70.0.106:5601] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/73106.php"] [unique_id "aVsFEKE58uNoazzTmx0pSAAAARM"]
[Mon Jan 05 08:25:53.356723 2026] [:error] [pid 5632:tid 5655] [client 13.70.0.106:5488] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/73106.php"] [unique_id "aVsFEYN3ZWvlOh-nbt_tIAAAAMs"]
[Mon Jan 05 08:25:54.230851 2026] [:error] [pid 6680:tid 6685] [client 13.70.0.106:2427] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/73106.php"] [unique_id "aVsFEqE58uNoazzTmx0pSwAAAQM"]
[Mon Jan 05 08:25:55.127984 2026] [:error] [pid 6680:tid 6706] [client 13.70.0.106:3716] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/73106.php"] [unique_id "aVsFE6E58uNoazzTmx0pTwAAARg"]
[Mon Jan 05 08:25:55.813737 2026] [:error] [pid 5536:tid 5616] [client 13.70.0.106:5107] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dom.php"] [unique_id "aVsFEwRtMZNG6xI8yDwNKQAAAJM"]
[Mon Jan 05 08:25:56.456900 2026] [:error] [pid 5536:tid 5613] [client 13.70.0.106:2564] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dom.php"] [unique_id "aVsFFARtMZNG6xI8yDwNLQAAAJA"]
[Mon Jan 05 08:25:56.929924 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:3863] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dom.php"] [unique_id "aVsFFIN3ZWvlOh-nbt_tKwAAAMM"]
[Mon Jan 05 08:25:58.976672 2026] [:error] [pid 6680:tid 6704] [client 13.70.0.106:2009] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dom.php"] [unique_id "aVsFFqE58uNoazzTmx0pVwAAARY"]
[Mon Jan 05 08:25:59.240476 2026] [:error] [pid 6680:tid 6701] [client 13.70.0.106:6035] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVsFF6E58uNoazzTmx0pWQAAARM"]
[Mon Jan 05 08:25:59.843202 2026] [:error] [pid 5535:tid 5574] [client 13.70.0.106:3886] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVsFF2nkedMjhVX0PTXGEAAAAEQ"]
[Mon Jan 05 08:26:00.898487 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:1952] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVsFGIN3ZWvlOh-nbt_tNwAAANQ"]
[Mon Jan 05 08:26:01.464907 2026] [:error] [pid 5535:tid 5580] [client 13.70.0.106:3613] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aVsFGWnkedMjhVX0PTXGEgAAAEo"]
[Mon Jan 05 08:26:01.869059 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:2589] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1254.php"] [unique_id "aVsFGYN3ZWvlOh-nbt_tOAAAAME"]
[Mon Jan 05 08:26:02.333059 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:6204] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1254.php"] [unique_id "aVsFGoN3ZWvlOh-nbt_tOwAAAM0"]
[Mon Jan 05 08:26:03.073197 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:5256] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1254.php"] [unique_id "aVsFG4N3ZWvlOh-nbt_tPAAAAMg"]
[Mon Jan 05 08:26:03.411114 2026] [:error] [pid 5535:tid 5572] [client 13.70.0.106:5572] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1254.php"] [unique_id "aVsFG2nkedMjhVX0PTXGFgAAAEI"]
[Mon Jan 05 08:26:03.749261 2026] [:error] [pid 5535:tid 5578] [client 13.70.0.106:5085] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gib.php"] [unique_id "aVsFG2nkedMjhVX0PTXGGAAAAEg"]
[Mon Jan 05 08:26:04.655341 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:5097] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gib.php"] [unique_id "aVsFHIN3ZWvlOh-nbt_tQwAAANc"]
[Mon Jan 05 08:26:08.010586 2026] [:error] [pid 5536:tid 5603] [client 13.70.0.106:3595] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gib.php"] [unique_id "aVsFIARtMZNG6xI8yDwNPwAAAIY"]
[Mon Jan 05 08:26:10.359668 2026] [:error] [pid 5535:tid 5587] [client 13.70.0.106:5621] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gib.php"] [unique_id "aVsFImnkedMjhVX0PTXGKQAAAFE"]
[Mon Jan 05 08:26:12.083512 2026] [:error] [pid 5535:tid 5589] [client 13.70.0.106:3263] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aVsFJGnkedMjhVX0PTXGMAAAAFM"]
[Mon Jan 05 08:26:14.615596 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:3630] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aVsFJgRtMZNG6xI8yDwNUQAAAIE"]
[Mon Jan 05 08:26:16.700799 2026] [:error] [pid 5632:tid 5666] [client 13.70.0.106:6154] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aVsFKIN3ZWvlOh-nbt_tZAAAANY"]
[Mon Jan 05 08:26:17.379866 2026] [:error] [pid 5632:tid 5661] [client 13.70.0.106:6031] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hob.php"] [unique_id "aVsFKYN3ZWvlOh-nbt_tZgAAANE"]
[Mon Jan 05 08:26:17.679487 2026] [:error] [pid 5535:tid 5582] [client 13.70.0.106:4040] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/poj.php"] [unique_id "aVsFKWnkedMjhVX0PTXGNwAAAEw"]
[Mon Jan 05 08:26:18.100229 2026] [:error] [pid 5534:tid 5565] [client 13.70.0.106:5607] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/poj.php"] [unique_id "aVsFKpNs9XmbR6unB0zviwAAABY"]
[Mon Jan 05 08:26:18.394149 2026] [:error] [pid 6680:tid 6689] [client 13.70.0.106:5274] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/poj.php"] [unique_id "aVsFKqE58uNoazzTmx0pegAAAQc"]
[Mon Jan 05 08:26:18.954618 2026] [:error] [pid 5534:tid 5551] [client 13.70.0.106:3600] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/poj.php"] [unique_id "aVsFKpNs9XmbR6unB0zvjwAAAAg"]
[Mon Jan 05 08:26:19.680311 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:6872] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/show/asa.php"] [unique_id "aVsFK4N3ZWvlOh-nbt_tagAAANc"]
[Mon Jan 05 08:26:22.100705 2026] [:error] [pid 5536:tid 5607] [client 13.70.0.106:1991] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/show/asa.php"] [unique_id "aVsFLgRtMZNG6xI8yDwNZAAAAIo"]
[Mon Jan 05 08:26:23.670108 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:6060] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/show/asa.php"] [unique_id "aVsFL4N3ZWvlOh-nbt_tcgAAANQ"]
[Mon Jan 05 08:26:24.815168 2026] [:error] [pid 5535:tid 5579] [client 13.70.0.106:2757] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/show/asa.php"] [unique_id "aVsFMGnkedMjhVX0PTXGRAAAAEk"]
[Mon Jan 05 08:26:25.192222 2026] [:error] [pid 6680:tid 6697] [client 13.70.0.106:1987] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.an5.php"] [unique_id "aVsFMaE58uNoazzTmx0phAAAAQ8"]
[Mon Jan 05 08:26:25.627147 2026] [:error] [pid 5535:tid 5589] [client 13.70.0.106:3768] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.an5.php"] [unique_id "aVsFMWnkedMjhVX0PTXGSAAAAFM"]
[Mon Jan 05 08:26:25.999787 2026] [:error] [pid 5535:tid 5592] [client 13.70.0.106:3842] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.an5.php"] [unique_id "aVsFMWnkedMjhVX0PTXGTQAAAFY"]
[Mon Jan 05 08:26:26.790035 2026] [:error] [pid 6680:tid 6683] [client 13.70.0.106:6043] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.an5.php"] [unique_id "aVsFMqE58uNoazzTmx0phQAAAQE"]
[Mon Jan 05 08:26:27.196422 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:6201] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVsFM6E58uNoazzTmx0phwAAARU"]
[Mon Jan 05 08:26:27.946504 2026] [:error] [pid 6680:tid 6690] [client 13.70.0.106:2920] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVsFM6E58uNoazzTmx0pjAAAAQg"]
[Mon Jan 05 08:26:28.984091 2026] [:error] [pid 6680:tid 6706] [client 13.70.0.106:5631] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVsFNKE58uNoazzTmx0pjgAAARg"]
[Mon Jan 05 08:26:30.569109 2026] [:error] [pid 5535:tid 5579] [client 13.70.0.106:2414] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/re.php"] [unique_id "aVsFNmnkedMjhVX0PTXGVAAAAEk"]
[Mon Jan 05 08:26:31.828910 2026] [:error] [pid 6680:tid 6705] [client 13.70.0.106:6892] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/twso.php"] [unique_id "aVsFN6E58uNoazzTmx0plQAAARc"]
[Mon Jan 05 08:26:32.585243 2026] [:error] [pid 6680:tid 6700] [client 13.70.0.106:3724] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/twso.php"] [unique_id "aVsFOKE58uNoazzTmx0plwAAARI"]
[Mon Jan 05 08:26:33.369056 2026] [:error] [pid 5536:tid 5603] [client 13.70.0.106:6032] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/twso.php"] [unique_id "aVsFOQRtMZNG6xI8yDwNbQAAAIY"]
[Mon Jan 05 08:26:34.129711 2026] [proxy_fcgi:error] [pid 5536:tid 5599] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:34.257212 2026] [proxy_fcgi:error] [pid 5536:tid 5616] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:34.397588 2026] [proxy_fcgi:error] [pid 5536:tid 5611] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:34.600858 2026] [proxy_fcgi:error] [pid 5536:tid 5615] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:34.746900 2026] [proxy_fcgi:error] [pid 5536:tid 5618] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:34.965486 2026] [proxy_fcgi:error] [pid 5536:tid 5610] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:35.147155 2026] [proxy_fcgi:error] [pid 5536:tid 5598] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:35.683127 2026] [proxy_fcgi:error] [pid 5536:tid 5613] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:36.058160 2026] [proxy_fcgi:error] [pid 5536:tid 5617] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:36.324072 2026] [proxy_fcgi:error] [pid 5536:tid 5609] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:36.455498 2026] [proxy_fcgi:error] [pid 5536:tid 5621] [client 13.70.0.106:3720] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:26:36.574774 2026] [:error] [pid 5536:tid 5600] [client 13.70.0.106:3720] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gul.php"] [unique_id "aVsFPARtMZNG6xI8yDwNfwAAAIM"]
[Mon Jan 05 08:26:37.644750 2026] [:error] [pid 5536:tid 5616] [client 13.70.0.106:6375] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gul.php"] [unique_id "aVsFPQRtMZNG6xI8yDwNgwAAAJM"]
[Mon Jan 05 08:26:38.094416 2026] [:error] [pid 5535:tid 5581] [client 13.70.0.106:3210] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gul.php"] [unique_id "aVsFPmnkedMjhVX0PTXGZgAAAEs"]
[Mon Jan 05 08:26:38.855436 2026] [:error] [pid 6680:tid 6685] [client 13.70.0.106:6873] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gul.php"] [unique_id "aVsFPqE58uNoazzTmx0ppQAAAQM"]
[Mon Jan 05 08:26:40.215871 2026] [:error] [pid 6680:tid 6684] [client 13.70.0.106:2424] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aVsFQKE58uNoazzTmx0pqAAAAQI"]
[Mon Jan 05 08:26:41.358690 2026] [:error] [pid 6680:tid 6705] [client 13.70.0.106:5103] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aVsFQaE58uNoazzTmx0prQAAARc"]
[Mon Jan 05 08:26:42.343478 2026] [:error] [pid 5536:tid 5616] [client 13.70.0.106:2894] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aVsFQgRtMZNG6xI8yDwNiwAAAJM"]
[Mon Jan 05 08:26:42.710781 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:2380] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aVsFQqE58uNoazzTmx0psAAAARU"]
[Mon Jan 05 08:26:43.396926 2026] [:error] [pid 5632:tid 5668] [client 13.70.0.106:3606] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nbr.php"] [unique_id "aVsFQ4N3ZWvlOh-nbt_tnAAAANg"]
[Mon Jan 05 08:26:44.747061 2026] [:error] [pid 6680:tid 6682] [client 13.70.0.106:2004] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nbr.php"] [unique_id "aVsFRKE58uNoazzTmx0ptQAAAQA"]
[Mon Jan 05 08:26:46.082144 2026] [:error] [pid 6680:tid 6701] [client 13.70.0.106:3628] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nbr.php"] [unique_id "aVsFRqE58uNoazzTmx0pugAAARM"]
[Mon Jan 05 08:26:48.882846 2026] [:error] [pid 5535:tid 5591] [client 13.70.0.106:2041] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nbr.php"] [unique_id "aVsFSGnkedMjhVX0PTXGbgAAAFU"]
[Mon Jan 05 08:26:50.540303 2026] [:error] [pid 5536:tid 5619] [client 13.70.0.106:2792] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2index.php"] [unique_id "aVsFSgRtMZNG6xI8yDwNkwAAAJY"]
[Mon Jan 05 08:26:51.103856 2026] [:error] [pid 5536:tid 5609] [client 13.70.0.106:2381] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2index.php"] [unique_id "aVsFSwRtMZNG6xI8yDwNlAAAAIw"]
[Mon Jan 05 08:26:51.523821 2026] [:error] [pid 5632:tid 5661] [client 13.70.0.106:5111] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2index.php"] [unique_id "aVsFS4N3ZWvlOh-nbt_togAAANE"]
[Mon Jan 05 08:26:52.233208 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:5222] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2index.php"] [unique_id "aVsFTIN3ZWvlOh-nbt_tpQAAANc"]
[Mon Jan 05 08:26:53.380616 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:2033] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aVsFTYN3ZWvlOh-nbt_trgAAANA"]
[Mon Jan 05 08:26:54.663350 2026] [:error] [pid 5536:tid 5603] [client 13.70.0.106:4228] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aVsFTgRtMZNG6xI8yDwNmAAAAIY"]
[Mon Jan 05 08:26:56.003342 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:5244] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aVsFUARtMZNG6xI8yDwNnQAAAIs"]
[Mon Jan 05 08:26:56.894507 2026] [:error] [pid 5534:tid 5547] [client 13.70.0.106:2402] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aVsFUJNs9XmbR6unB0zv3AAAAAQ"]
[Mon Jan 05 08:26:57.990146 2026] [:error] [pid 5534:tid 5560] [client 13.70.0.106:6169] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/awh77.php"] [unique_id "aVsFUZNs9XmbR6unB0zv3gAAABE"]
[Mon Jan 05 08:26:58.995726 2026] [:error] [pid 6680:tid 6693] [client 13.70.0.106:5440] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/awh77.php"] [unique_id "aVsFUqE58uNoazzTmx0p0wAAAQs"]
[Mon Jan 05 08:26:59.895165 2026] [:error] [pid 5536:tid 5601] [client 13.70.0.106:6347] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/awh77.php"] [unique_id "aVsFUwRtMZNG6xI8yDwNoQAAAIQ"]
[Mon Jan 05 08:27:00.274974 2026] [:error] [pid 5632:tid 5661] [client 13.70.0.106:6171] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/awh77.php"] [unique_id "aVsFVIN3ZWvlOh-nbt_tvQAAANE"]
[Mon Jan 05 08:27:00.713372 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:6398] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxx.php"] [unique_id "aVsFVARtMZNG6xI8yDwNowAAAIE"]
[Mon Jan 05 08:27:01.461880 2026] [:error] [pid 5534:tid 5548] [client 13.70.0.106:3597] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxx.php"] [unique_id "aVsFVZNs9XmbR6unB0zv6AAAAAU"]
[Mon Jan 05 08:27:02.303254 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:1845] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxx.php"] [unique_id "aVsFVqE58uNoazzTmx0p5QAAARU"]
[Mon Jan 05 08:27:03.407275 2026] [:error] [pid 5536:tid 5611] [client 13.70.0.106:2046] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxx.php"] [unique_id "aVsFVwRtMZNG6xI8yDwNqwAAAI4"]
[Mon Jan 05 08:27:04.799118 2026] [:error] [pid 5536:tid 5597] [client 13.70.0.106:6063] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sow.php"] [unique_id "aVsFWARtMZNG6xI8yDwNsQAAAIA"]
[Mon Jan 05 08:27:05.243896 2026] [:error] [pid 5536:tid 5606] [client 13.70.0.106:5291] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sow.php"] [unique_id "aVsFWQRtMZNG6xI8yDwNswAAAIk"]
[Mon Jan 05 08:27:06.736330 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:5294] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sow.php"] [unique_id "aVsFWqE58uNoazzTmx0p9gAAARU"]
[Mon Jan 05 08:27:08.275314 2026] [:error] [pid 5535:tid 5580] [client 13.70.0.106:5202] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sow.php"] [unique_id "aVsFXGnkedMjhVX0PTXGggAAAEo"]
[Mon Jan 05 08:27:09.674790 2026] [:error] [pid 5535:tid 5571] [client 13.70.0.106:6212] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hgm.php"] [unique_id "aVsFXWnkedMjhVX0PTXGiwAAAEE"]
[Mon Jan 05 08:27:11.123103 2026] [:error] [pid 5535:tid 5590] [client 13.70.0.106:4608] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hgm.php"] [unique_id "aVsFX2nkedMjhVX0PTXGkQAAAFQ"]
[Mon Jan 05 08:27:11.584890 2026] [:error] [pid 6680:tid 6689] [client 13.70.0.106:6858] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hgm.php"] [unique_id "aVsFX6E58uNoazzTmx0qDQAAAQc"]
[Mon Jan 05 08:27:11.894289 2026] [:error] [pid 6680:tid 6682] [client 13.70.0.106:5187] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hgm.php"] [unique_id "aVsFX6E58uNoazzTmx0qDwAAAQA"]
[Mon Jan 05 08:27:12.897591 2026] [:error] [pid 5534:tid 5565] [client 13.70.0.106:5441] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/agdew.php"] [unique_id "aVsFYJNs9XmbR6unB0zv7wAAABY"]
[Mon Jan 05 08:27:13.617352 2026] [:error] [pid 5536:tid 5605] [client 13.70.0.106:2808] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/agdew.php"] [unique_id "aVsFYQRtMZNG6xI8yDwNyAAAAIg"]
[Mon Jan 05 08:27:16.795114 2026] [:error] [pid 5534:tid 5558] [client 13.70.0.106:5445] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/agdew.php"] [unique_id "aVsFZJNs9XmbR6unB0zv_gAAAA8"]
[Mon Jan 05 08:27:19.858872 2026] [:error] [pid 5536:tid 5611] [client 13.70.0.106:3216] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/agdew.php"] [unique_id "aVsFZwRtMZNG6xI8yDwNywAAAI4"]
[Mon Jan 05 08:27:22.887068 2026] [:error] [pid 6680:tid 6701] [client 13.70.0.106:4630] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ker.php"] [unique_id "aVsFaqE58uNoazzTmx0qJgAAARM"]
[Mon Jan 05 08:27:26.030868 2026] [:error] [pid 5534:tid 5545] [client 13.70.0.106:2390] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ker.php"] [unique_id "aVsFbpNs9XmbR6unB0zwBgAAAAI"]
[Mon Jan 05 08:27:27.197938 2026] [:error] [pid 5534:tid 5556] [client 13.70.0.106:1985] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ker.php"] [unique_id "aVsFb5Ns9XmbR6unB0zwCAAAAA0"]
[Mon Jan 05 08:27:28.822807 2026] [:error] [pid 5632:tid 5663] [client 13.70.0.106:2321] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ker.php"] [unique_id "aVsFcIN3ZWvlOh-nbt_uFwAAANM"]
[Mon Jan 05 08:27:30.761601 2026] [:error] [pid 5535:tid 5575] [client 13.70.0.106:5185] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efa4f.php"] [unique_id "aVsFcmnkedMjhVX0PTXGpwAAAEU"]
[Mon Jan 05 08:27:32.487473 2026] [:error] [pid 5534:tid 5554] [client 13.70.0.106:4623] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efa4f.php"] [unique_id "aVsFdJNs9XmbR6unB0zwGAAAAAs"]
[Mon Jan 05 08:27:33.069684 2026] [:error] [pid 5534:tid 5552] [client 13.70.0.106:6901] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efa4f.php"] [unique_id "aVsFdZNs9XmbR6unB0zwGQAAAAk"]
[Mon Jan 05 08:27:33.611235 2026] [:error] [pid 6680:tid 6689] [client 13.70.0.106:5215] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efa4f.php"] [unique_id "aVsFdaE58uNoazzTmx0qOAAAAQc"]
[Mon Jan 05 08:27:34.516279 2026] [:error] [pid 5534:tid 5566] [client 13.70.0.106:2306] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zuk.php"] [unique_id "aVsFdpNs9XmbR6unB0zwHAAAABc"]
[Mon Jan 05 08:27:35.831615 2026] [:error] [pid 5536:tid 5607] [client 13.70.0.106:4266] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zuk.php"] [unique_id "aVsFdwRtMZNG6xI8yDwN3wAAAIo"]
[Mon Jan 05 08:27:36.953415 2026] [proxy_fcgi:error] [pid 5536:tid 5610] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:37.075577 2026] [proxy_fcgi:error] [pid 5536:tid 5619] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:37.201325 2026] [proxy_fcgi:error] [pid 5536:tid 5609] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:37.760059 2026] [proxy_fcgi:error] [pid 5536:tid 5617] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:37.886434 2026] [proxy_fcgi:error] [pid 5536:tid 5600] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.026738 2026] [proxy_fcgi:error] [pid 5536:tid 5598] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.148346 2026] [proxy_fcgi:error] [pid 5536:tid 5604] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.294154 2026] [proxy_fcgi:error] [pid 5536:tid 5611] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.445118 2026] [proxy_fcgi:error] [pid 5536:tid 5616] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.582046 2026] [proxy_fcgi:error] [pid 5536:tid 5602] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.745332 2026] [proxy_fcgi:error] [pid 5536:tid 5599] [client 13.70.0.106:5209] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:27:38.862485 2026] [:error] [pid 5536:tid 5621] [client 13.70.0.106:5209] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aVsFegRtMZNG6xI8yDwN7AAAAJg"]
[Mon Jan 05 08:27:39.445019 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:6153] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aVsFe4N3ZWvlOh-nbt_uPQAAANQ"]
[Mon Jan 05 08:27:40.183824 2026] [:error] [pid 6680:tid 6692] [client 13.70.0.106:5473] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aVsFfKE58uNoazzTmx0qTwAAAQo"]
[Mon Jan 05 08:27:40.892478 2026] [:error] [pid 6680:tid 6694] [client 13.70.0.106:5108] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xc.php"] [unique_id "aVsFfKE58uNoazzTmx0qUwAAAQw"]
[Mon Jan 05 08:27:41.782846 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:3753] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aVsFfYN3ZWvlOh-nbt_uRgAAAMM"]
[Mon Jan 05 08:27:43.401832 2026] [:error] [pid 6680:tid 6695] [client 13.70.0.106:3594] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aVsFf6E58uNoazzTmx0qVgAAAQ0"]
[Mon Jan 05 08:27:45.123718 2026] [:error] [pid 6680:tid 6688] [client 13.70.0.106:5527] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aVsFgaE58uNoazzTmx0qYAAAAQY"]
[Mon Jan 05 08:27:45.817995 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:5116] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/co.php"] [unique_id "aVsFgYN3ZWvlOh-nbt_uVAAAAMM"]
[Mon Jan 05 08:27:47.332292 2026] [:error] [pid 5536:tid 5613] [client 13.70.0.106:1259] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wui.php"] [unique_id "aVsFgwRtMZNG6xI8yDwN9gAAAJA"]
[Mon Jan 05 08:27:48.633203 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:2793] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wui.php"] [unique_id "aVsFhIN3ZWvlOh-nbt_ubgAAAMo"]
[Mon Jan 05 08:27:49.974094 2026] [:error] [pid 5534:tid 5550] [client 13.70.0.106:2045] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wui.php"] [unique_id "aVsFhZNs9XmbR6unB0zwKwAAAAc"]
[Mon Jan 05 08:27:51.779220 2026] [:error] [pid 5534:tid 5563] [client 13.70.0.106:2021] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wui.php"] [unique_id "aVsFh5Ns9XmbR6unB0zwLQAAABQ"]
[Mon Jan 05 08:27:53.319613 2026] [:error] [pid 5534:tid 5557] [client 13.70.0.106:5477] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVsFiZNs9XmbR6unB0zwMQAAAA4"]
[Mon Jan 05 08:27:55.557834 2026] [:error] [pid 5632:tid 5667] [client 13.70.0.106:2029] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVsFi4N3ZWvlOh-nbt_ugAAAANc"]
[Mon Jan 05 08:27:56.671496 2026] [:error] [pid 6680:tid 6693] [client 13.70.0.106:6055] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVsFjKE58uNoazzTmx0qcQAAAQs"]
[Mon Jan 05 08:27:58.543441 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:5575] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aVsFjqE58uNoazzTmx0qdQAAAQQ"]
[Mon Jan 05 08:27:59.186493 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:1910] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ryuk.php"] [unique_id "aVsFj4N3ZWvlOh-nbt_uiwAAAM0"]
[Mon Jan 05 08:28:00.099647 2026] [:error] [pid 5535:tid 5590] [client 13.70.0.106:6848] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ryuk.php"] [unique_id "aVsFkGnkedMjhVX0PTXG1AAAAFQ"]
[Mon Jan 05 08:28:00.700771 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:6024] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ryuk.php"] [unique_id "aVsFkIN3ZWvlOh-nbt_ujwAAAMo"]
[Mon Jan 05 08:28:01.356076 2026] [:error] [pid 6680:tid 6701] [client 13.70.0.106:4620] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ryuk.php"] [unique_id "aVsFkaE58uNoazzTmx0qgAAAARM"]
[Mon Jan 05 08:28:02.589471 2026] [:error] [pid 6680:tid 6706] [client 13.70.0.106:1225] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zoro.php"] [unique_id "aVsFkqE58uNoazzTmx0qgwAAARg"]
[Mon Jan 05 08:28:04.687180 2026] [:error] [pid 5534:tid 5557] [client 13.70.0.106:5448] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zoro.php"] [unique_id "aVsFlJNs9XmbR6unB0zwOwAAAA4"]
[Mon Jan 05 08:28:07.098862 2026] [:error] [pid 5534:tid 5544] [client 13.70.0.106:6336] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zoro.php"] [unique_id "aVsFl5Ns9XmbR6unB0zwPwAAAAE"]
[Mon Jan 05 08:28:07.947815 2026] [:error] [pid 5632:tid 5648] [client 13.70.0.106:4362] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zoro.php"] [unique_id "aVsFl4N3ZWvlOh-nbt_upQAAAMQ"]
[Mon Jan 05 08:28:08.425183 2026] [:error] [pid 5535:tid 5580] [client 13.70.0.106:5035] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aVsFmGnkedMjhVX0PTXG3wAAAEo"]
[Mon Jan 05 08:28:09.613822 2026] [:error] [pid 6680:tid 6694] [client 13.70.0.106:2064] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aVsFmaE58uNoazzTmx0qlgAAAQw"]
[Mon Jan 05 08:28:10.948338 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:2103] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aVsFmgRtMZNG6xI8yDwOGgAAAI0"]
[Mon Jan 05 08:28:12.047479 2026] [:error] [pid 5535:tid 5572] [client 13.70.0.106:4883] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kal.php"] [unique_id "aVsFnGnkedMjhVX0PTXG7wAAAEI"]
[Mon Jan 05 08:28:14.300951 2026] [:error] [pid 5535:tid 5591] [client 13.70.0.106:5568] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVsFnmnkedMjhVX0PTXG8gAAAFU"]
[Mon Jan 05 08:28:15.271100 2026] [:error] [pid 5534:tid 5564] [client 13.70.0.106:2085] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVsFn5Ns9XmbR6unB0zwRwAAABU"]
[Mon Jan 05 08:28:16.890566 2026] [:error] [pid 5632:tid 5666] [client 13.70.0.106:5034] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVsFoIN3ZWvlOh-nbt_uwgAAANY"]
[Mon Jan 05 08:28:17.832480 2026] [:error] [pid 5534:tid 5549] [client 13.70.0.106:4163] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aVsFoZNs9XmbR6unB0zwSwAAAAY"]
[Mon Jan 05 08:28:21.242473 2026] [:error] [pid 5534:tid 5567] [client 13.70.0.106:5052] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/racs3.php"] [unique_id "aVsFpZNs9XmbR6unB0zwTwAAABg"]
[Mon Jan 05 08:28:21.539233 2026] [:error] [pid 5535:tid 5586] [client 13.70.0.106:4165] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/racs3.php"] [unique_id "aVsFpWnkedMjhVX0PTXG_wAAAFA"]
[Mon Jan 05 08:28:22.259764 2026] [:error] [pid 5535:tid 5590] [client 13.70.0.106:6195] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/racs3.php"] [unique_id "aVsFpmnkedMjhVX0PTXHAQAAAFQ"]
[Mon Jan 05 08:28:23.861249 2026] [:error] [pid 5535:tid 5589] [client 13.70.0.106:3729] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/racs3.php"] [unique_id "aVsFp2nkedMjhVX0PTXHCwAAAFM"]
[Mon Jan 05 08:28:24.679816 2026] [:error] [pid 5535:tid 5574] [client 13.70.0.106:3742] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ed35f.php"] [unique_id "aVsFqGnkedMjhVX0PTXHEQAAAEQ"]
[Mon Jan 05 08:28:26.500577 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:3728] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ed35f.php"] [unique_id "aVsFqoN3ZWvlOh-nbt_u4QAAANA"]
[Mon Jan 05 08:28:27.476913 2026] [:error] [pid 5535:tid 5578] [client 13.70.0.106:4638] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ed35f.php"] [unique_id "aVsFq2nkedMjhVX0PTXHGAAAAEg"]
[Mon Jan 05 08:28:30.488032 2026] [:error] [pid 5536:tid 5602] [client 13.70.0.106:4877] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ed35f.php"] [unique_id "aVsFrgRtMZNG6xI8yDwONQAAAIU"]
[Mon Jan 05 08:28:31.979199 2026] [:error] [pid 5632:tid 5648] [client 13.70.0.106:5218] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fresh3.php"] [unique_id "aVsFr4N3ZWvlOh-nbt_u8gAAAMQ"]
[Mon Jan 05 08:28:33.431376 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:6018] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fresh3.php"] [unique_id "aVsFsYN3ZWvlOh-nbt_u9QAAAM0"]
[Mon Jan 05 08:28:34.393566 2026] [:error] [pid 5536:tid 5617] [client 13.70.0.106:1257] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fresh3.php"] [unique_id "aVsFsgRtMZNG6xI8yDwOOwAAAJQ"]
[Mon Jan 05 08:28:35.468124 2026] [:error] [pid 5534:tid 5566] [client 13.70.0.106:4624] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fresh3.php"] [unique_id "aVsFs5Ns9XmbR6unB0zwWQAAABc"]
[Mon Jan 05 08:28:36.630686 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:4617] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nope.php"] [unique_id "aVsFtARtMZNG6xI8yDwOPQAAAIE"]
[Mon Jan 05 08:28:37.442759 2026] [:error] [pid 5534:tid 5546] [client 13.70.0.106:6382] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nope.php"] [unique_id "aVsFtZNs9XmbR6unB0zwWwAAAAM"]
[Mon Jan 05 08:28:38.280911 2026] [proxy_fcgi:error] [pid 5632:tid 5668] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:38.446797 2026] [proxy_fcgi:error] [pid 5632:tid 5659] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:38.590484 2026] [proxy_fcgi:error] [pid 5632:tid 5653] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:39.160992 2026] [proxy_fcgi:error] [pid 5632:tid 5648] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:39.599495 2026] [proxy_fcgi:error] [pid 5632:tid 5652] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:39.766538 2026] [proxy_fcgi:error] [pid 5632:tid 5655] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:40.227537 2026] [proxy_fcgi:error] [pid 5632:tid 5649] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:40.349563 2026] [proxy_fcgi:error] [pid 5632:tid 5647] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:40.471433 2026] [proxy_fcgi:error] [pid 5632:tid 5667] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:40.594010 2026] [proxy_fcgi:error] [pid 5632:tid 5662] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:40.718872 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 13.70.0.106:3621] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:28:40.884051 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:3621] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c451f.php"] [unique_id "aVsFuIN3ZWvlOh-nbt_vBQAAAM0"]
[Mon Jan 05 08:28:42.169199 2026] [:error] [pid 5536:tid 5615] [client 13.70.0.106:5145] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c451f.php"] [unique_id "aVsFugRtMZNG6xI8yDwORgAAAJI"]
[Mon Jan 05 08:28:43.236494 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:4172] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c451f.php"] [unique_id "aVsFu4N3ZWvlOh-nbt_vCQAAAMI"]
[Mon Jan 05 08:28:45.201033 2026] [:error] [pid 5535:tid 5572] [client 13.70.0.106:6908] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c451f.php"] [unique_id "aVsFvWnkedMjhVX0PTXHLAAAAEI"]
[Mon Jan 05 08:28:46.387473 2026] [:error] [pid 5632:tid 5653] [client 13.70.0.106:4091] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zasd.php"] [unique_id "aVsFvoN3ZWvlOh-nbt_vDAAAAMk"]
[Mon Jan 05 08:28:47.542074 2026] [:error] [pid 5535:tid 5574] [client 13.70.0.106:5589] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zasd.php"] [unique_id "aVsFv2nkedMjhVX0PTXHMAAAAEQ"]
[Mon Jan 05 08:28:48.887629 2026] [:error] [pid 5536:tid 5601] [client 13.70.0.106:6027] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zasd.php"] [unique_id "aVsFwARtMZNG6xI8yDwOUQAAAIQ"]
[Mon Jan 05 08:28:51.153511 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:1218] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zasd.php"] [unique_id "aVsFw6E58uNoazzTmx0q_gAAARU"]
[Mon Jan 05 08:28:53.227141 2026] [:error] [pid 5535:tid 5577] [client 13.70.0.106:4054] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aVsFxWnkedMjhVX0PTXHOQAAAEc"]
[Mon Jan 05 08:28:55.055251 2026] [:error] [pid 5535:tid 5581] [client 13.70.0.106:5241] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aVsFx2nkedMjhVX0PTXHPAAAAEs"]
[Mon Jan 05 08:28:55.887047 2026] [:error] [pid 5534:tid 5566] [client 13.70.0.106:6505] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aVsFx5Ns9XmbR6unB0zwdwAAABc"]
[Mon Jan 05 08:28:57.071799 2026] [:error] [pid 5534:tid 5543] [client 13.70.0.106:4613] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aVsFyZNs9XmbR6unB0zwfAAAAAA"]
[Mon Jan 05 08:28:58.012232 2026] [:error] [pid 5535:tid 5588] [client 13.70.0.106:5467] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aVsFymnkedMjhVX0PTXHQgAAAFI"]
[Mon Jan 05 08:28:59.282845 2026] [:error] [pid 6680:tid 6687] [client 13.70.0.106:6503] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aVsFy6E58uNoazzTmx0rDAAAAQU"]
[Mon Jan 05 08:29:00.122271 2026] [:error] [pid 5535:tid 5575] [client 13.70.0.106:6502] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aVsFzGnkedMjhVX0PTXHRAAAAEU"]
[Mon Jan 05 08:29:00.548501 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:6515] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aVsFzKE58uNoazzTmx0rFgAAAQQ"]
[Mon Jan 05 08:29:02.473103 2026] [:error] [pid 5536:tid 5613] [client 13.70.0.106:4832] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcxb.php"] [unique_id "aVsFzgRtMZNG6xI8yDwOfwAAAJA"]
[Mon Jan 05 08:29:03.130150 2026] [:error] [pid 5535:tid 5584] [client 13.70.0.106:6464] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcxb.php"] [unique_id "aVsFz2nkedMjhVX0PTXHSwAAAE4"]
[Mon Jan 05 08:29:04.846882 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:1291] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcxb.php"] [unique_id "aVsF0IN3ZWvlOh-nbt_vOgAAAMg"]
[Mon Jan 05 08:29:06.193062 2026] [:error] [pid 5535:tid 5570] [client 13.70.0.106:3757] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcxb.php"] [unique_id "aVsF0mnkedMjhVX0PTXHTQAAAEA"]
[Mon Jan 05 08:29:07.497781 2026] [:error] [pid 5536:tid 5605] [client 13.70.0.106:1281] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thoms.php"] [unique_id "aVsF0wRtMZNG6xI8yDwOhAAAAIg"]
[Mon Jan 05 08:29:08.429181 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:6158] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thoms.php"] [unique_id "aVsF1ARtMZNG6xI8yDwOhQAAAIE"]
[Mon Jan 05 08:29:09.352312 2026] [:error] [pid 5632:tid 5666] [client 13.70.0.106:2194] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thoms.php"] [unique_id "aVsF1YN3ZWvlOh-nbt_vQgAAANY"]
[Mon Jan 05 08:29:09.802790 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:2200] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thoms.php"] [unique_id "aVsF1YN3ZWvlOh-nbt_vRAAAAME"]
[Mon Jan 05 08:29:10.432695 2026] [:error] [pid 5632:tid 5644] [client 13.70.0.106:2730] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ink.php"] [unique_id "aVsF1oN3ZWvlOh-nbt_vRQAAAMA"]
[Mon Jan 05 08:29:11.599366 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:4834] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ink.php"] [unique_id "aVsF14N3ZWvlOh-nbt_vSAAAANA"]
[Mon Jan 05 08:29:12.236202 2026] [:error] [pid 5536:tid 5616] [client 13.70.0.106:5858] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ink.php"] [unique_id "aVsF2ARtMZNG6xI8yDwOiwAAAJM"]
[Mon Jan 05 08:29:13.147081 2026] [:error] [pid 5536:tid 5606] [client 13.70.0.106:3838] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ink.php"] [unique_id "aVsF2QRtMZNG6xI8yDwOjAAAAIk"]
[Mon Jan 05 08:29:13.768787 2026] [:error] [pid 6680:tid 6701] [client 13.70.0.106:4586] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc1.php"] [unique_id "aVsF2aE58uNoazzTmx0rOgAAARM"]
[Mon Jan 05 08:29:14.735215 2026] [:error] [pid 6680:tid 6682] [client 13.70.0.106:1665] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc1.php"] [unique_id "aVsF2qE58uNoazzTmx0rPAAAAQA"]
[Mon Jan 05 08:29:15.887198 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:1685] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc1.php"] [unique_id "aVsF24N3ZWvlOh-nbt_vTQAAAMI"]
[Mon Jan 05 08:29:17.187025 2026] [:error] [pid 5536:tid 5614] [client 13.70.0.106:4561] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wpc1.php"] [unique_id "aVsF3QRtMZNG6xI8yDwOjgAAAJE"]
[Mon Jan 05 08:29:18.271057 2026] [:error] [pid 5536:tid 5597] [client 13.70.0.106:1700] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/G6.php"] [unique_id "aVsF3gRtMZNG6xI8yDwOkAAAAIA"]
[Mon Jan 05 08:29:19.136700 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:3836] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/G6.php"] [unique_id "aVsF34N3ZWvlOh-nbt_vUQAAAME"]
[Mon Jan 05 08:29:19.907531 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:3052] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/G6.php"] [unique_id "aVsF3wRtMZNG6xI8yDwOlAAAAIE"]
[Mon Jan 05 08:29:21.182248 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:1664] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/G6.php"] [unique_id "aVsF4YN3ZWvlOh-nbt_vVQAAANA"]
[Mon Jan 05 08:29:22.126765 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:3790] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xrp.php"] [unique_id "aVsF4oN3ZWvlOh-nbt_vWAAAAMg"]
[Mon Jan 05 08:29:23.092093 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:4577] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xrp.php"] [unique_id "aVsF46E58uNoazzTmx0rRgAAAQQ"]
[Mon Jan 05 08:29:23.940822 2026] [:error] [pid 5536:tid 5621] [client 13.70.0.106:1418] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xrp.php"] [unique_id "aVsF4wRtMZNG6xI8yDwOmQAAAJg"]
[Mon Jan 05 08:29:24.538350 2026] [:error] [pid 5632:tid 5662] [client 13.70.0.106:4560] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xrp.php"] [unique_id "aVsF5IN3ZWvlOh-nbt_vWwAAANI"]
[Mon Jan 05 08:29:26.011838 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:2655] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xex.php"] [unique_id "aVsF5oN3ZWvlOh-nbt_vXgAAANQ"]
[Mon Jan 05 08:29:27.060609 2026] [:error] [pid 5535:tid 5580] [client 13.70.0.106:3680] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xex.php"] [unique_id "aVsF52nkedMjhVX0PTXHYgAAAEo"]
[Mon Jan 05 08:29:27.515428 2026] [:error] [pid 5632:tid 5647] [client 13.70.0.106:4599] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xex.php"] [unique_id "aVsF54N3ZWvlOh-nbt_vYQAAAMM"]
[Mon Jan 05 08:29:27.869482 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:1492] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xex.php"] [unique_id "aVsF54N3ZWvlOh-nbt_vYgAAAME"]
[Mon Jan 05 08:29:28.479921 2026] [:error] [pid 5536:tid 5597] [client 13.70.0.106:3528] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aVsF6ARtMZNG6xI8yDwOnQAAAIA"]
[Mon Jan 05 08:29:29.335470 2026] [:error] [pid 5536:tid 5612] [client 13.70.0.106:1469] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aVsF6QRtMZNG6xI8yDwOnwAAAI8"]
[Mon Jan 05 08:29:30.458935 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:4568] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aVsF6oN3ZWvlOh-nbt_vcQAAAM8"]
[Mon Jan 05 08:29:31.238825 2026] [:error] [pid 6680:tid 6692] [client 13.70.0.106:4564] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aVsF66E58uNoazzTmx0rUAAAAQo"]
[Mon Jan 05 08:29:31.974468 2026] [:error] [pid 5535:tid 5570] [client 13.70.0.106:1441] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tarc.php"] [unique_id "aVsF62nkedMjhVX0PTXHawAAAEA"]
[Mon Jan 05 08:29:32.683483 2026] [:error] [pid 5536:tid 5618] [client 13.70.0.106:3833] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tarc.php"] [unique_id "aVsF7ARtMZNG6xI8yDwOogAAAJU"]
[Mon Jan 05 08:29:34.212537 2026] [:error] [pid 5536:tid 5617] [client 13.70.0.106:3789] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tarc.php"] [unique_id "aVsF7gRtMZNG6xI8yDwOpQAAAJQ"]
[Mon Jan 05 08:29:38.276884 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:2219] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tarc.php"] [unique_id "aVsF8oN3ZWvlOh-nbt_vfQAAANQ"]
[Mon Jan 05 08:29:44.255677 2026] [proxy_fcgi:error] [pid 5632:tid 5651] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:44.388313 2026] [proxy_fcgi:error] [pid 5632:tid 5647] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:44.509935 2026] [proxy_fcgi:error] [pid 5632:tid 5653] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:44.670163 2026] [proxy_fcgi:error] [pid 5632:tid 5659] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:44.799125 2026] [proxy_fcgi:error] [pid 5632:tid 5645] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:44.947766 2026] [proxy_fcgi:error] [pid 5632:tid 5658] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:45.072792 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:45.199603 2026] [proxy_fcgi:error] [pid 5632:tid 5665] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:45.365650 2026] [proxy_fcgi:error] [pid 5632:tid 5657] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:45.487123 2026] [proxy_fcgi:error] [pid 5632:tid 5652] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:45.666411 2026] [proxy_fcgi:error] [pid 5632:tid 5662] [client 13.70.0.106:4585] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:29:45.824495 2026] [:error] [pid 5632:tid 5663] [client 13.70.0.106:4585] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVsF-YN3ZWvlOh-nbt_vlwAAANM"]
[Mon Jan 05 08:29:47.284615 2026] [:error] [pid 5536:tid 5602] [client 13.70.0.106:5408] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVsF-wRtMZNG6xI8yDwOqwAAAIU"]
[Mon Jan 05 08:29:48.657899 2026] [:error] [pid 5534:tid 5560] [client 13.70.0.106:6157] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVsF_JNs9XmbR6unB0zwpAAAABE"]
[Mon Jan 05 08:29:50.424965 2026] [:error] [pid 5536:tid 5618] [client 13.70.0.106:4605] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aVsF_gRtMZNG6xI8yDwOsQAAAJU"]
[Mon Jan 05 08:29:51.390196 2026] [:error] [pid 5632:tid 5666] [client 13.70.0.106:2626] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/skk.php"] [unique_id "aVsF_4N3ZWvlOh-nbt_voAAAANY"]
[Mon Jan 05 08:29:52.342114 2026] [:error] [pid 5534:tid 5559] [client 13.70.0.106:4588] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/skk.php"] [unique_id "aVsGAJNs9XmbR6unB0zwpQAAABA"]
[Mon Jan 05 08:29:53.440288 2026] [:error] [pid 5536:tid 5611] [client 13.70.0.106:4553] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/skk.php"] [unique_id "aVsGAQRtMZNG6xI8yDwOtgAAAI4"]
[Mon Jan 05 08:29:55.801918 2026] [:error] [pid 5534:tid 5555] [client 13.70.0.106:6481] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/skk.php"] [unique_id "aVsGA5Ns9XmbR6unB0zwrAAAAAw"]
[Mon Jan 05 08:29:57.350771 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:2702] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/testas.php"] [unique_id "aVsGBQRtMZNG6xI8yDwOvAAAAI0"]
[Mon Jan 05 08:29:59.204986 2026] [:error] [pid 6680:tid 6688] [client 13.70.0.106:3142] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/testas.php"] [unique_id "aVsGB6E58uNoazzTmx0rgAAAAQY"]
[Mon Jan 05 08:30:00.335878 2026] [:error] [pid 5535:tid 5588] [client 13.70.0.106:2677] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/testas.php"] [unique_id "aVsGCGnkedMjhVX0PTXHkQAAAFI"]
[Mon Jan 05 08:30:01.492469 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:2206] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/testas.php"] [unique_id "aVsGCYN3ZWvlOh-nbt_vrAAAAM8"]
[Mon Jan 05 08:30:03.532133 2026] [:error] [pid 5534:tid 5544] [client 13.70.0.106:3171] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma1.php"] [unique_id "aVsGC5Ns9XmbR6unB0zwrwAAAAE"]
[Mon Jan 05 08:30:04.697891 2026] [:error] [pid 6680:tid 6690] [client 13.70.0.106:2229] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma1.php"] [unique_id "aVsGDKE58uNoazzTmx0rhQAAAQg"]
[Mon Jan 05 08:30:05.597560 2026] [:error] [pid 5535:tid 5583] [client 13.70.0.106:2710] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma1.php"] [unique_id "aVsGDWnkedMjhVX0PTXHnAAAAE0"]
[Mon Jan 05 08:30:07.179283 2026] [:error] [pid 5535:tid 5578] [client 13.70.0.106:4519] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma1.php"] [unique_id "aVsGD2nkedMjhVX0PTXHpAAAAEg"]
[Mon Jan 05 08:30:08.667247 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:1313] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/loi.php"] [unique_id "aVsGEIN3ZWvlOh-nbt_vuwAAAMI"]
[Mon Jan 05 08:30:09.984237 2026] [:error] [pid 5534:tid 5548] [client 13.70.0.106:2667] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/loi.php"] [unique_id "aVsGEZNs9XmbR6unB0zwuQAAAAU"]
[Mon Jan 05 08:30:11.839484 2026] [:error] [pid 5536:tid 5604] [client 13.70.0.106:1571] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/loi.php"] [unique_id "aVsGEwRtMZNG6xI8yDwOywAAAIc"]
[Mon Jan 05 08:30:13.441230 2026] [:error] [pid 5535:tid 5572] [client 13.70.0.106:3792] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/loi.php"] [unique_id "aVsGFWnkedMjhVX0PTXHsAAAAEI"]
[Mon Jan 05 08:30:15.211771 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:5349] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aVsGF4N3ZWvlOh-nbt_vxwAAAMo"]
[Mon Jan 05 08:30:16.595273 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:4494] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aVsGGARtMZNG6xI8yDwO0AAAAI0"]
[Mon Jan 05 08:30:17.698438 2026] [:error] [pid 6680:tid 6699] [client 13.70.0.106:5344] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aVsGGaE58uNoazzTmx0rlwAAARE"]
[Mon Jan 05 08:30:18.437636 2026] [:error] [pid 5535:tid 5571] [client 13.70.0.106:5824] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wolv2.php"] [unique_id "aVsGGmnkedMjhVX0PTXHuAAAAEE"]
[Mon Jan 05 08:30:18.745027 2026] [:error] [pid 5534:tid 5564] [client 13.70.0.106:4159] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aVsGGpNs9XmbR6unB0zwxAAAABU"]
[Mon Jan 05 08:30:19.669770 2026] [:error] [pid 5535:tid 5579] [client 13.70.0.106:3173] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aVsGG2nkedMjhVX0PTXHugAAAEk"]
[Mon Jan 05 08:30:22.872207 2026] [:error] [pid 5536:tid 5613] [client 13.70.0.106:4142] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aVsGHgRtMZNG6xI8yDwO1AAAAJA"]
[Mon Jan 05 08:30:23.528681 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:3092] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aVsGH4N3ZWvlOh-nbt_v0wAAAMo"]
[Mon Jan 05 08:30:25.016421 2026] [:error] [pid 5536:tid 5604] [client 13.70.0.106:5319] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4ff11.php"] [unique_id "aVsGIQRtMZNG6xI8yDwO1gAAAIc"]
[Mon Jan 05 08:30:28.151637 2026] [:error] [pid 5534:tid 5555] [client 13.70.0.106:3131] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4ff11.php"] [unique_id "aVsGJJNs9XmbR6unB0zwzQAAAAw"]
[Mon Jan 05 08:30:31.393131 2026] [:error] [pid 6680:tid 6690] [client 13.70.0.106:6804] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4ff11.php"] [unique_id "aVsGJ6E58uNoazzTmx0roAAAAQg"]
[Mon Jan 05 08:30:34.282026 2026] [:error] [pid 5632:tid 5656] [client 13.70.0.106:1121] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/4ff11.php"] [unique_id "aVsGKoN3ZWvlOh-nbt_v7QAAAMw"]
[Mon Jan 05 08:30:34.832848 2026] [:error] [pid 5534:tid 5563] [client 13.70.0.106:5855] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kla.php"] [unique_id "aVsGKpNs9XmbR6unB0zw0AAAABQ"]
[Mon Jan 05 08:30:35.624189 2026] [:error] [pid 5534:tid 5549] [client 13.70.0.106:5657] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kla.php"] [unique_id "aVsGK5Ns9XmbR6unB0zw0QAAAAY"]
[Mon Jan 05 08:30:36.363687 2026] [:error] [pid 5535:tid 5570] [client 13.70.0.106:6835] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kla.php"] [unique_id "aVsGLGnkedMjhVX0PTXH0gAAAEA"]
[Mon Jan 05 08:30:37.001731 2026] [:error] [pid 6680:tid 6684] [client 13.70.0.106:5879] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/kla.php"] [unique_id "aVsGLaE58uNoazzTmx0rpwAAAQI"]
[Mon Jan 05 08:30:38.864745 2026] [:error] [pid 5536:tid 5614] [client 13.70.0.106:4943] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hzz.php"] [unique_id "aVsGLgRtMZNG6xI8yDwO3AAAAJE"]
[Mon Jan 05 08:30:39.901302 2026] [:error] [pid 6680:tid 6697] [client 13.70.0.106:6833] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hzz.php"] [unique_id "aVsGL6E58uNoazzTmx0rqwAAAQ8"]
[Mon Jan 05 08:30:41.939488 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:3286] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hzz.php"] [unique_id "aVsGMYN3ZWvlOh-nbt_v7wAAAMg"]
[Mon Jan 05 08:30:42.591500 2026] [:error] [pid 5534:tid 5555] [client 13.70.0.106:3891] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hzz.php"] [unique_id "aVsGMpNs9XmbR6unB0zw2QAAAAw"]
[Mon Jan 05 08:30:43.143371 2026] [:error] [pid 5534:tid 5548] [client 13.70.0.106:3011] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mtvcrew.php"] [unique_id "aVsGM5Ns9XmbR6unB0zw2gAAAAU"]
[Mon Jan 05 08:30:44.429778 2026] [:error] [pid 5535:tid 5572] [client 13.70.0.106:3033] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mtvcrew.php"] [unique_id "aVsGNGnkedMjhVX0PTXH6gAAAEI"]
[Mon Jan 05 08:30:45.043980 2026] [proxy_fcgi:error] [pid 5535:tid 5570] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:45.163483 2026] [proxy_fcgi:error] [pid 5535:tid 5577] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:45.399299 2026] [proxy_fcgi:error] [pid 5535:tid 5592] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:45.639851 2026] [proxy_fcgi:error] [pid 5535:tid 5594] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:46.219796 2026] [proxy_fcgi:error] [pid 5535:tid 5576] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:46.367969 2026] [proxy_fcgi:error] [pid 5535:tid 5587] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:46.549520 2026] [proxy_fcgi:error] [pid 5535:tid 5578] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:46.670189 2026] [proxy_fcgi:error] [pid 5535:tid 5589] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:46.846359 2026] [proxy_fcgi:error] [pid 5535:tid 5591] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:47.063183 2026] [proxy_fcgi:error] [pid 5535:tid 5584] [client 13.70.0.106:1089] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:30:47.308378 2026] [:error] [pid 5535:tid 5572] [client 13.70.0.106:1089] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mo.php"] [unique_id "aVsGN2nkedMjhVX0PTXH_gAAAEI"]
[Mon Jan 05 08:30:48.791968 2026] [:error] [pid 6680:tid 6685] [client 13.70.0.106:5810] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mo.php"] [unique_id "aVsGOKE58uNoazzTmx0rswAAAQM"]
[Mon Jan 05 08:30:50.245217 2026] [:error] [pid 5536:tid 5617] [client 13.70.0.106:1637] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mo.php"] [unique_id "aVsGOgRtMZNG6xI8yDwO8QAAAJQ"]
[Mon Jan 05 08:30:51.642696 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:6836] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mo.php"] [unique_id "aVsGO4N3ZWvlOh-nbt_v-AAAANA"]
[Mon Jan 05 08:30:52.789944 2026] [:error] [pid 5632:tid 5651] [client 13.70.0.106:5829] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yep.php"] [unique_id "aVsGPIN3ZWvlOh-nbt_v-wAAAMc"]
[Mon Jan 05 08:30:53.668322 2026] [:error] [pid 5632:tid 5663] [client 13.70.0.106:5800] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yep.php"] [unique_id "aVsGPYN3ZWvlOh-nbt_wAgAAANM"]
[Mon Jan 05 08:30:54.264416 2026] [:error] [pid 5535:tid 5594] [client 13.70.0.106:1130] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yep.php"] [unique_id "aVsGPmnkedMjhVX0PTXIAwAAAFg"]
[Mon Jan 05 08:30:56.734473 2026] [:error] [pid 5535:tid 5588] [client 13.70.0.106:5851] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yep.php"] [unique_id "aVsGQGnkedMjhVX0PTXIBwAAAFI"]
[Mon Jan 05 08:30:57.671240 2026] [:error] [pid 6680:tid 6694] [client 13.70.0.106:1204] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x3.php"] [unique_id "aVsGQaE58uNoazzTmx0rvAAAAQw"]
[Mon Jan 05 08:30:58.161395 2026] [:error] [pid 5535:tid 5583] [client 13.70.0.106:6832] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x3.php"] [unique_id "aVsGQmnkedMjhVX0PTXICQAAAE0"]
[Mon Jan 05 08:30:59.356037 2026] [:error] [pid 5536:tid 5611] [client 13.70.0.106:4934] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x3.php"] [unique_id "aVsGQwRtMZNG6xI8yDwPAwAAAI4"]
[Mon Jan 05 08:30:59.712376 2026] [:error] [pid 5536:tid 5616] [client 13.70.0.106:5870] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x3.php"] [unique_id "aVsGQwRtMZNG6xI8yDwPBAAAAJM"]
[Mon Jan 05 08:31:00.610413 2026] [:error] [pid 5536:tid 5615] [client 13.70.0.106:1203] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6erg.php"] [unique_id "aVsGRARtMZNG6xI8yDwPBwAAAJI"]
[Mon Jan 05 08:31:01.613374 2026] [:error] [pid 6680:tid 6700] [client 13.70.0.106:4988] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6erg.php"] [unique_id "aVsGRaE58uNoazzTmx0rxQAAARI"]
[Mon Jan 05 08:31:02.257653 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:1162] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6erg.php"] [unique_id "aVsGRqE58uNoazzTmx0rxwAAAQQ"]
[Mon Jan 05 08:31:04.353455 2026] [:error] [pid 5535:tid 5582] [client 13.70.0.106:4949] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6erg.php"] [unique_id "aVsGSGnkedMjhVX0PTXIDAAAAEw"]
[Mon Jan 05 08:31:05.244821 2026] [:error] [pid 5536:tid 5611] [client 13.70.0.106:4948] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aVsGSQRtMZNG6xI8yDwPEAAAAI4"]
[Mon Jan 05 08:31:06.550901 2026] [:error] [pid 5535:tid 5593] [client 13.70.0.106:4935] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aVsGSmnkedMjhVX0PTXIDQAAAFc"]
[Mon Jan 05 08:31:07.728377 2026] [:error] [pid 5535:tid 5577] [client 13.70.0.106:6824] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aVsGS2nkedMjhVX0PTXIEAAAAEc"]
[Mon Jan 05 08:31:09.443225 2026] [:error] [pid 5534:tid 5565] [client 13.70.0.106:2926] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aVsGTZNs9XmbR6unB0zw5wAAABY"]
[Mon Jan 05 08:31:10.812807 2026] [:error] [pid 5536:tid 5614] [client 13.70.0.106:4959] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVsGTgRtMZNG6xI8yDwPFAAAAJE"]
[Mon Jan 05 08:31:11.548425 2026] [:error] [pid 5536:tid 5617] [client 13.70.0.106:5848] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVsGTwRtMZNG6xI8yDwPGQAAAJQ"]
[Mon Jan 05 08:31:12.047828 2026] [:error] [pid 5534:tid 5563] [client 13.70.0.106:1108] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVsGUJNs9XmbR6unB0zw6QAAABQ"]
[Mon Jan 05 08:31:12.690048 2026] [:error] [pid 6680:tid 6695] [client 13.70.0.106:6794] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wrt.php"] [unique_id "aVsGUKE58uNoazzTmx0r0AAAAQ0"]
[Mon Jan 05 08:31:14.102991 2026] [:error] [pid 6680:tid 6696] [client 13.70.0.106:5861] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aVsGUqE58uNoazzTmx0r0gAAAQ4"]
[Mon Jan 05 08:31:15.507945 2026] [:error] [pid 5536:tid 5617] [client 13.70.0.106:2913] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aVsGUwRtMZNG6xI8yDwPIwAAAJQ"]
[Mon Jan 05 08:31:16.849419 2026] [:error] [pid 6680:tid 6689] [client 13.70.0.106:6823] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aVsGVKE58uNoazzTmx0r1wAAAQc"]
[Mon Jan 05 08:31:19.138114 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:5799] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aVsGV4N3ZWvlOh-nbt_wFwAAAMo"]
[Mon Jan 05 08:31:21.909194 2026] [:error] [pid 6680:tid 6700] [client 13.70.0.106:5337] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jju.php"] [unique_id "aVsGWaE58uNoazzTmx0r3gAAARI"]
[Mon Jan 05 08:31:23.330607 2026] [:error] [pid 5536:tid 5601] [client 13.70.0.106:4747] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jju.php"] [unique_id "aVsGWwRtMZNG6xI8yDwPLgAAAIQ"]
[Mon Jan 05 08:31:27.317208 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:4990] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jju.php"] [unique_id "aVsGX4N3ZWvlOh-nbt_wHgAAANQ"]
[Mon Jan 05 08:31:29.139682 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:1533] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jju.php"] [unique_id "aVsGYYN3ZWvlOh-nbt_wJwAAAMg"]
[Mon Jan 05 08:31:30.318561 2026] [:error] [pid 5536:tid 5598] [client 13.70.0.106:6222] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aVsGYgRtMZNG6xI8yDwPQAAAAIE"]
[Mon Jan 05 08:31:31.382935 2026] [:error] [pid 6680:tid 6690] [client 13.70.0.106:6329] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aVsGY6E58uNoazzTmx0r5wAAAQg"]
[Mon Jan 05 08:31:33.078172 2026] [:error] [pid 5536:tid 5618] [client 13.70.0.106:5307] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aVsGZQRtMZNG6xI8yDwPTAAAAJU"]
[Mon Jan 05 08:31:36.099342 2026] [:error] [pid 5534:tid 5546] [client 13.70.0.106:4560] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aVsGaJNs9XmbR6unB0zw-gAAAAM"]
[Mon Jan 05 08:31:37.604171 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:6326] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ffile.php"] [unique_id "aVsGaQRtMZNG6xI8yDwPWwAAAIs"]
[Mon Jan 05 08:31:38.537687 2026] [:error] [pid 5535:tid 5594] [client 13.70.0.106:5281] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ffile.php"] [unique_id "aVsGamnkedMjhVX0PTXIJwAAAFg"]
[Mon Jan 05 08:31:41.310356 2026] [:error] [pid 5632:tid 5658] [client 13.70.0.106:6229] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ffile.php"] [unique_id "aVsGbYN3ZWvlOh-nbt_wTQAAAM4"]
[Mon Jan 05 08:31:43.169527 2026] [:error] [pid 6680:tid 6699] [client 13.70.0.106:5269] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ffile.php"] [unique_id "aVsGb6E58uNoazzTmx0sHAAAARE"]
[Mon Jan 05 08:31:44.777972 2026] [:error] [pid 6680:tid 6687] [client 13.70.0.106:4435] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVsGcKE58uNoazzTmx0sHwAAAQU"]
[Mon Jan 05 08:31:45.543166 2026] [:error] [pid 5536:tid 5607] [client 13.70.0.106:5276] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVsGcQRtMZNG6xI8yDwPcgAAAIo"]
[Mon Jan 05 08:31:46.110798 2026] [:error] [pid 5535:tid 5570] [client 13.70.0.106:6322] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aVsGcmnkedMjhVX0PTXIMQAAAEA"]
[Mon Jan 05 08:31:47.602989 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:47.738414 2026] [proxy_fcgi:error] [pid 5632:tid 5657] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:48.123729 2026] [proxy_fcgi:error] [pid 5632:tid 5667] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:48.248271 2026] [proxy_fcgi:error] [pid 5632:tid 5655] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:48.374658 2026] [proxy_fcgi:error] [pid 5632:tid 5644] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:48.787002 2026] [proxy_fcgi:error] [pid 5632:tid 5658] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:49.028994 2026] [proxy_fcgi:error] [pid 5632:tid 5656] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:49.150825 2026] [proxy_fcgi:error] [pid 5632:tid 5653] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:49.272176 2026] [proxy_fcgi:error] [pid 5632:tid 5650] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:49.394120 2026] [proxy_fcgi:error] [pid 5632:tid 5652] [client 13.70.0.106:5258] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:31:49.512961 2026] [:error] [pid 5632:tid 5651] [client 13.70.0.106:5258] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVsGdYN3ZWvlOh-nbt_wYwAAAMc"]
[Mon Jan 05 08:31:50.421539 2026] [:error] [pid 5536:tid 5603] [client 13.70.0.106:3519] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVsGdgRtMZNG6xI8yDwPdwAAAIY"]
[Mon Jan 05 08:31:51.486711 2026] [:error] [pid 5536:tid 5599] [client 13.70.0.106:6129] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVsGdwRtMZNG6xI8yDwPewAAAII"]
[Mon Jan 05 08:31:52.806115 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:5922] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1aa.php"] [unique_id "aVsGeIN3ZWvlOh-nbt_waQAAANA"]
[Mon Jan 05 08:31:54.096232 2026] [:error] [pid 5535:tid 5575] [client 13.70.0.106:3419] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/she.php"] [unique_id "aVsGemnkedMjhVX0PTXISwAAAEU"]
[Mon Jan 05 08:31:54.670666 2026] [:error] [pid 5535:tid 5573] [client 13.70.0.106:6139] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/she.php"] [unique_id "aVsGemnkedMjhVX0PTXIUAAAAEM"]
[Mon Jan 05 08:31:55.286814 2026] [:error] [pid 5632:tid 5665] [client 13.70.0.106:4316] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/she.php"] [unique_id "aVsGe4N3ZWvlOh-nbt_wawAAANU"]
[Mon Jan 05 08:31:56.694554 2026] [:error] [pid 5536:tid 5609] [client 13.70.0.106:2299] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/she.php"] [unique_id "aVsGfARtMZNG6xI8yDwPfgAAAIw"]
[Mon Jan 05 08:31:57.824829 2026] [:error] [pid 5534:tid 5565] [client 13.70.0.106:2297] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVsGfZNs9XmbR6unB0zxPAAAABY"]
[Mon Jan 05 08:31:59.297997 2026] [:error] [pid 5632:tid 5654] [client 13.70.0.106:3451] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVsGf4N3ZWvlOh-nbt_wbwAAAMo"]
[Mon Jan 05 08:32:01.924914 2026] [:error] [pid 5632:tid 5645] [client 13.70.0.106:5110] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVsGgYN3ZWvlOh-nbt_wdwAAAME"]
[Mon Jan 05 08:32:02.881756 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:5067] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aVsGgoN3ZWvlOh-nbt_wewAAANQ"]
[Mon Jan 05 08:32:03.516607 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:2255] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/excel.php"] [unique_id "aVsGg4N3ZWvlOh-nbt_wfAAAAMg"]
[Mon Jan 05 08:32:05.452687 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:2243] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/excel.php"] [unique_id "aVsGhaE58uNoazzTmx0sPgAAAQQ"]
[Mon Jan 05 08:32:07.081960 2026] [:error] [pid 6680:tid 6682] [client 13.70.0.106:3369] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/excel.php"] [unique_id "aVsGh6E58uNoazzTmx0sRAAAAQA"]
[Mon Jan 05 08:32:08.499341 2026] [:error] [pid 6680:tid 6704] [client 13.70.0.106:5900] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/excel.php"] [unique_id "aVsGiKE58uNoazzTmx0sUQAAARY"]
[Mon Jan 05 08:32:10.981768 2026] [:error] [pid 6680:tid 6690] [client 13.70.0.106:5548] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVsGiqE58uNoazzTmx0sXQAAAQg"]
[Mon Jan 05 08:32:12.035821 2026] [:error] [pid 5536:tid 5621] [client 13.70.0.106:1907] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVsGjARtMZNG6xI8yDwPiAAAAJg"]
[Mon Jan 05 08:32:13.266105 2026] [:error] [pid 5632:tid 5664] [client 13.70.0.106:2275] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVsGjYN3ZWvlOh-nbt_wmQAAANQ"]
[Mon Jan 05 08:32:16.766151 2026] [:error] [pid 5534:tid 5545] [client 13.70.0.106:3340] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ar.php"] [unique_id "aVsGkJNs9XmbR6unB0zxVAAAAAI"]
[Mon Jan 05 08:32:20.182611 2026] [:error] [pid 5632:tid 5661] [client 13.70.0.106:5535] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ap.php"] [unique_id "aVsGlIN3ZWvlOh-nbt_wmwAAANE"]
[Mon Jan 05 08:32:21.218957 2026] [:error] [pid 6680:tid 6705] [client 13.70.0.106:4410] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ap.php"] [unique_id "aVsGlaE58uNoazzTmx0sZQAAARc"]
[Mon Jan 05 08:32:22.731686 2026] [:error] [pid 5534:tid 5546] [client 13.70.0.106:1405] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ap.php"] [unique_id "aVsGlpNs9XmbR6unB0zxYQAAAAM"]
[Mon Jan 05 08:32:24.231249 2026] [:error] [pid 5534:tid 5555] [client 13.70.0.106:4363] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ap.php"] [unique_id "aVsGmJNs9XmbR6unB0zxYwAAAAw"]
[Mon Jan 05 08:32:25.367865 2026] [:error] [pid 6680:tid 6695] [client 13.70.0.106:3941] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVsGmaE58uNoazzTmx0sagAAAQ0"]
[Mon Jan 05 08:32:26.868000 2026] [:error] [pid 5632:tid 5656] [client 13.70.0.106:2103] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVsGmoN3ZWvlOh-nbt_wqwAAAMw"]
[Mon Jan 05 08:32:27.872812 2026] [:error] [pid 5534:tid 5550] [client 13.70.0.106:3955] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVsGm5Ns9XmbR6unB0zxaAAAAAc"]
[Mon Jan 05 08:32:31.214937 2026] [:error] [pid 5535:tid 5575] [client 13.70.0.106:1366] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aVsGn2nkedMjhVX0PTXIuAAAAEU"]
[Mon Jan 05 08:32:33.111190 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:1926] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/love.php"] [unique_id "aVsGoQRtMZNG6xI8yDwPnAAAAI0"]
[Mon Jan 05 08:32:37.588971 2026] [:error] [pid 5534:tid 5544] [client 13.70.0.106:3936] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/love.php"] [unique_id "aVsGpZNs9XmbR6unB0zxcAAAAAE"]
[Mon Jan 05 08:32:38.345246 2026] [:error] [pid 5632:tid 5663] [client 13.70.0.106:4352] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/love.php"] [unique_id "aVsGpoN3ZWvlOh-nbt_wtgAAANM"]
[Mon Jan 05 08:32:38.685496 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:1399] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/love.php"] [unique_id "aVsGpoN3ZWvlOh-nbt_wtwAAANA"]
[Mon Jan 05 08:32:40.993025 2026] [:error] [pid 5536:tid 5600] [client 13.70.0.106:2067] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso3.php"] [unique_id "aVsGqARtMZNG6xI8yDwPoAAAAIM"]
[Mon Jan 05 08:32:42.627233 2026] [:error] [pid 6680:tid 6702] [client 13.70.0.106:4392] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso3.php"] [unique_id "aVsGqqE58uNoazzTmx0sdAAAARQ"]
[Mon Jan 05 08:32:44.397677 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:2266] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso3.php"] [unique_id "aVsGrIN3ZWvlOh-nbt_wuwAAAM0"]
[Mon Jan 05 08:32:45.087048 2026] [:error] [pid 5632:tid 5655] [client 13.70.0.106:3933] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso3.php"] [unique_id "aVsGrYN3ZWvlOh-nbt_wzAAAAMs"]
[Mon Jan 05 08:32:47.847447 2026] [:error] [pid 5632:tid 5657] [client 13.70.0.106:6461] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x7.php"] [unique_id "aVsGr4N3ZWvlOh-nbt_w0QAAAM0"]
[Mon Jan 05 08:32:50.014003 2026] [proxy_fcgi:error] [pid 5632:tid 5668] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:50.134678 2026] [proxy_fcgi:error] [pid 5632:tid 5645] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:50.255373 2026] [proxy_fcgi:error] [pid 5632:tid 5651] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:50.396976 2026] [proxy_fcgi:error] [pid 5632:tid 5656] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:50.518939 2026] [proxy_fcgi:error] [pid 5632:tid 5659] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:51.570066 2026] [proxy_fcgi:error] [pid 5632:tid 5668] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:51.690591 2026] [proxy_fcgi:error] [pid 5632:tid 5645] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:52.781001 2026] [proxy_fcgi:error] [pid 5632:tid 5648] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:53.328804 2026] [proxy_fcgi:error] [pid 5632:tid 5655] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:53.508649 2026] [proxy_fcgi:error] [pid 5632:tid 5667] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:53.651879 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 13.70.0.106:2062] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:32:53.775863 2026] [:error] [pid 5632:tid 5650] [client 13.70.0.106:2062] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aVsGtYN3ZWvlOh-nbt_w6AAAAMY"]
[Mon Jan 05 08:32:54.184637 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:6780] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aVsGtoN3ZWvlOh-nbt_w6QAAAMI"]
[Mon Jan 05 08:32:56.233021 2026] [:error] [pid 5536:tid 5617] [client 13.70.0.106:4223] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aVsGuARtMZNG6xI8yDwPxAAAAJQ"]
[Mon Jan 05 08:32:57.988177 2026] [:error] [pid 6680:tid 6686] [client 13.70.0.106:5135] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pass.php"] [unique_id "aVsGuaE58uNoazzTmx0sjAAAAQQ"]
[Mon Jan 05 08:32:59.667472 2026] [:error] [pid 6680:tid 6692] [client 13.70.0.106:6744] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aVsGu6E58uNoazzTmx0skwAAAQo"]
[Mon Jan 05 08:33:01.443389 2026] [:error] [pid 5632:tid 5646] [client 13.70.0.106:6003] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aVsGvYN3ZWvlOh-nbt_w-AAAAMI"]
[Mon Jan 05 08:33:03.379842 2026] [:error] [pid 5632:tid 5660] [client 13.70.0.106:6000] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aVsGv4N3ZWvlOh-nbt_w_QAAANA"]
[Mon Jan 05 08:33:05.330943 2026] [:error] [pid 5534:tid 5559] [client 13.70.0.106:5999] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ot.php"] [unique_id "aVsGwZNs9XmbR6unB0zxhAAAABA"]
[Mon Jan 05 08:33:07.989346 2026] [:error] [pid 5536:tid 5611] [client 13.70.0.106:2513] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/witmm.php"] [unique_id "aVsGwwRtMZNG6xI8yDwPzgAAAI4"]
[Mon Jan 05 08:33:10.726200 2026] [:error] [pid 5536:tid 5615] [client 13.70.0.106:5971] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/witmm.php"] [unique_id "aVsGxgRtMZNG6xI8yDwP0AAAAJI"]
[Mon Jan 05 08:33:12.768597 2026] [:error] [pid 5632:tid 5650] [client 13.70.0.106:5157] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/witmm.php"] [unique_id "aVsGyIN3ZWvlOh-nbt_xDgAAAMY"]
[Mon Jan 05 08:33:14.534735 2026] [:error] [pid 5632:tid 5652] [client 13.70.0.106:6759] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/witmm.php"] [unique_id "aVsGyoN3ZWvlOh-nbt_xDwAAAMg"]
[Mon Jan 05 08:33:17.674193 2026] [:error] [pid 5632:tid 5649] [client 13.70.0.106:5967] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rxzx.php"] [unique_id "aVsGzYN3ZWvlOh-nbt_xIAAAAMU"]
[Mon Jan 05 08:33:19.165438 2026] [:error] [pid 6680:tid 6689] [client 13.70.0.106:6725] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rxzx.php"] [unique_id "aVsGz6E58uNoazzTmx0sogAAAQc"]
[Mon Jan 05 08:33:20.228952 2026] [:error] [pid 5632:tid 5655] [client 13.70.0.106:5974] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rxzx.php"] [unique_id "aVsG0IN3ZWvlOh-nbt_xIgAAAMs"]
[Mon Jan 05 08:33:21.999516 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:6734] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rxzx.php"] [unique_id "aVsG0YN3ZWvlOh-nbt_xIwAAAM8"]
[Mon Jan 05 08:33:23.056736 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:5139] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aVsG06E58uNoazzTmx0sqQAAARU"]
[Mon Jan 05 08:33:24.656917 2026] [:error] [pid 5536:tid 5602] [client 13.70.0.106:2553] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aVsG1ARtMZNG6xI8yDwP7gAAAIU"]
[Mon Jan 05 08:33:25.911261 2026] [:error] [pid 5536:tid 5620] [client 13.70.0.106:2963] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aVsG1QRtMZNG6xI8yDwP8AAAAJc"]
[Mon Jan 05 08:33:27.116583 2026] [:error] [pid 5536:tid 5610] [client 13.70.0.106:5162] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aVsG1wRtMZNG6xI8yDwP8gAAAI0"]
[Mon Jan 05 08:33:29.129791 2026] [:error] [pid 5535:tid 5574] [client 13.70.0.106:2543] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aVsG2WnkedMjhVX0PTXI_AAAAEQ"]
[Mon Jan 05 08:33:30.274843 2026] [:error] [pid 5535:tid 5593] [client 13.70.0.106:2555] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aVsG2mnkedMjhVX0PTXI_gAAAFc"]
[Mon Jan 05 08:33:31.738650 2026] [:error] [pid 5632:tid 5668] [client 13.70.0.106:5170] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aVsG24N3ZWvlOh-nbt_xKwAAANg"]
[Mon Jan 05 08:33:33.131801 2026] [:error] [pid 5535:tid 5588] [client 13.70.0.106:6750] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tt.php"] [unique_id "aVsG3WnkedMjhVX0PTXJAgAAAFI"]
[Mon Jan 05 08:33:34.897666 2026] [:error] [pid 5632:tid 5656] [client 13.70.0.106:2530] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVsG3oN3ZWvlOh-nbt_xLwAAAMw"]
[Mon Jan 05 08:33:36.185036 2026] [:error] [pid 5536:tid 5614] [client 13.70.0.106:5121] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVsG4ARtMZNG6xI8yDwP-QAAAJE"]
[Mon Jan 05 08:33:38.159029 2026] [:error] [pid 5535:tid 5575] [client 13.70.0.106:5987] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVsG4mnkedMjhVX0PTXJBgAAAEU"]
[Mon Jan 05 08:33:39.357286 2026] [:error] [pid 5632:tid 5655] [client 13.70.0.106:3687] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jga.php"] [unique_id "aVsG44N3ZWvlOh-nbt_xOQAAAMs"]
[Mon Jan 05 08:33:41.202504 2026] [:error] [pid 5536:tid 5612] [client 13.70.0.106:3617] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/resp.php"] [unique_id "aVsG5QRtMZNG6xI8yDwQBgAAAI8"]
[Mon Jan 05 08:33:42.471900 2026] [:error] [pid 5632:tid 5668] [client 13.70.0.106:3650] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/resp.php"] [unique_id "aVsG5oN3ZWvlOh-nbt_xXQAAANg"]
[Mon Jan 05 08:33:44.156911 2026] [:error] [pid 5534:tid 5557] [client 13.70.0.106:2545] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/resp.php"] [unique_id "aVsG6JNs9XmbR6unB0zxogAAAA4"]
[Mon Jan 05 08:33:45.903446 2026] [:error] [pid 5536:tid 5612] [client 13.70.0.106:1437] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/resp.php"] [unique_id "aVsG6QRtMZNG6xI8yDwQHQAAAI8"]
[Mon Jan 05 08:33:47.603461 2026] [:error] [pid 6680:tid 6704] [client 13.70.0.106:5999] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aVsG66E58uNoazzTmx0tEAAAARY"]
[Mon Jan 05 08:33:49.562072 2026] [:error] [pid 6680:tid 6703] [client 13.70.0.106:1041] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aVsG7aE58uNoazzTmx0tFQAAARU"]
[Mon Jan 05 08:33:52.374204 2026] [:error] [pid 5632:tid 5656] [client 13.70.0.106:3622] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aVsG8IN3ZWvlOh-nbt_xewAAAMw"]
[Mon Jan 05 08:33:53.083299 2026] [proxy_fcgi:error] [pid 5535:tid 5573] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:53.210423 2026] [proxy_fcgi:error] [pid 5535:tid 5572] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:53.344255 2026] [proxy_fcgi:error] [pid 5535:tid 5588] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:53.481060 2026] [proxy_fcgi:error] [pid 5535:tid 5579] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:53.601347 2026] [proxy_fcgi:error] [pid 5535:tid 5584] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:54.113566 2026] [proxy_fcgi:error] [pid 5535:tid 5582] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:55.345458 2026] [proxy_fcgi:error] [pid 5535:tid 5575] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:55.469205 2026] [proxy_fcgi:error] [pid 5535:tid 5581] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:55.926228 2026] [proxy_fcgi:error] [pid 5535:tid 5583] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:56.073221 2026] [proxy_fcgi:error] [pid 5535:tid 5574] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:56.199995 2026] [proxy_fcgi:error] [pid 5535:tid 5589] [client 13.70.0.106:2972] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 08:33:56.321156 2026] [:error] [pid 5535:tid 5591] [client 13.70.0.106:2972] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon3.php"] [unique_id "aVsG9GnkedMjhVX0PTXJLAAAAFU"]
[Mon Jan 05 08:33:58.060178 2026] [:error] [pid 5535:tid 5587] [client 13.70.0.106:4701] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon3.php"] [unique_id "aVsG9mnkedMjhVX0PTXJLQAAAFE"]
[Mon Jan 05 08:33:58.706366 2026] [:error] [pid 6680:tid 6704] [client 13.70.0.106:2499] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon3.php"] [unique_id "aVsG9qE58uNoazzTmx0tIQAAARY"]
[Mon Jan 05 08:33:59.794921 2026] [:error] [pid 5535:tid 5594] [client 13.70.0.106:1463] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon3.php"] [unique_id "aVsG92nkedMjhVX0PTXJLwAAAFg"]
[Mon Jan 05 08:34:01.076276 2026] [:error] [pid 6680:tid 6697] [client 13.70.0.106:1444] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aVsG-aE58uNoazzTmx0tJgAAAQ8"]
[Mon Jan 05 08:34:02.359372 2026] [:error] [pid 5632:tid 5649] [client 13.70.0.106:1713] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aVsG-oN3ZWvlOh-nbt_xhgAAAMU"]
[Mon Jan 05 08:34:04.811557 2026] [:error] [pid 6680:tid 6685] [client 13.70.0.106:3698] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aVsG_KE58uNoazzTmx0tQgAAAQM"]
[Mon Jan 05 08:34:07.040852 2026] [:error] [pid 5534:tid 5554] [client 13.70.0.106:4558] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aVsG_5Ns9XmbR6unB0zx1QAAAAs"]
[Mon Jan 05 08:34:08.683221 2026] [:error] [pid 5536:tid 5599] [client 13.70.0.106:3669] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c4.php"] [unique_id "aVsHAARtMZNG6xI8yDwQbgAAAII"]
[Mon Jan 05 08:34:10.145805 2026] [:error] [pid 5536:tid 5601] [client 13.70.0.106:3702] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c4.php"] [unique_id "aVsHAgRtMZNG6xI8yDwQcQAAAIQ"]
[Mon Jan 05 08:34:11.150426 2026] [:error] [pid 5632:tid 5661] [client 13.70.0.106:3658] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c4.php"] [unique_id "aVsHA4N3ZWvlOh-nbt_xnQAAANE"]
[Mon Jan 05 08:34:12.268680 2026] [:error] [pid 5632:tid 5659] [client 13.70.0.106:3580] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c4.php"] [unique_id "aVsHBIN3ZWvlOh-nbt_xoAAAAM8"]
[Mon Jan 05 08:34:13.926636 2026] [:error] [pid 5632:tid 5648] [client 13.70.0.106:1698] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aVsHBYN3ZWvlOh-nbt_xpQAAAMQ"]
[Mon Jan 05 08:34:15.609971 2026] [:error] [pid 5536:tid 5608] [client 13.70.0.106:4568] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aVsHBwRtMZNG6xI8yDwQdwAAAIs"]
[Mon Jan 05 08:34:16.923165 2026] [:error] [pid 5632:tid 5650] [client 13.70.0.106:4935] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aVsHCIN3ZWvlOh-nbt_xqAAAAMY"]
[Mon Jan 05 08:34:18.041159 2026] [:error] [pid 5535:tid 5579] [client 13.70.0.106:1030] [client 13.70.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aVsHCmnkedMjhVX0PTXJVwAAAEk"]
[Mon Jan 05 10:02:13.183496 2026] [autoindex:error] [pid 5632:tid 5651] [client 47.252.21.241:8330] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 10:08:42.488870 2026] [autoindex:error] [pid 5534:tid 5567] [client 104.253.37.79:61116] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 11:02:02.829077 2026] [autoindex:error] [pid 5534:tid 5544] [client 217.60.61.236:43884] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 12:33:42.954662 2026] [autoindex:error] [pid 5632:tid 5644] [client 66.249.64.1:65162] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 12:33:43.053516 2026] [autoindex:error] [pid 5536:tid 5604] [client 66.249.64.14:55964] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 15:02:32.342464 2026] [:error] [pid 6680:tid 6691] [client 43.152.72.244:38028] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVtiCKE58uNoazzTmx2XnAAAAQk"]
[Mon Jan 05 15:47:16.945512 2026] [:error] [pid 54081:tid 54098] [client 45.248.93.223:58393] [client 45.248.93.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.248.93.223, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aVtshFL4jLgtF-b9w4c-9QAAAU4"]
[Mon Jan 05 15:47:16.959093 2026] [proxy_fcgi:error] [pid 54081:tid 54098] [client 45.248.93.223:58393] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 16:13:40.933421 2026] [autoindex:error] [pid 5536:tid 5607] [client 148.113.130.156:23328] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 17:13:19.387150 2026] [autoindex:error] [pid 5632:tid 5665] [client 54.237.75.16:45028] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 17:13:19.795133 2026] [autoindex:error] [pid 5536:tid 5606] [client 54.237.75.16:53662] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 17:51:47.944868 2026] [proxy_fcgi:error] [pid 5632:tid 5651] [client 94.130.222.48:57877] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Jan 05 17:51:53.127534 2026] [proxy_fcgi:error] [pid 5534:tid 5564] [client 94.130.222.48:54548] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Jan 05 17:51:57.835627 2026] [proxy_fcgi:error] [pid 6680:tid 6706] [client 94.130.222.48:49184] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Jan 05 17:52:01.933622 2026] [proxy_fcgi:error] [pid 5632:tid 5654] [client 94.130.222.48:53164] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Jan 05 18:02:30.947245 2026] [:error] [pid 5535:tid 5583] [client 221.229.106.25:53864] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVuMNmnkedMjhVX0PTVR4wAAAE0"]
[Mon Jan 05 19:43:19.049098 2026] [proxy_fcgi:error] [pid 5535:tid 5581] [client 4.217.216.192:24651] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 19:43:19.188286 2026] [proxy_fcgi:error] [pid 5535:tid 5575] [client 4.217.216.192:24651] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 19:43:19.328239 2026] [proxy_fcgi:error] [pid 5535:tid 5570] [client 4.217.216.192:24651] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 19:43:19.466779 2026] [proxy_fcgi:error] [pid 5535:tid 5577] [client 4.217.216.192:24651] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:26:07.258758 2026] [:error] [pid 28407:tid 28413] [client 68.218.64.76:28405] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca4.php"] [unique_id "aVut39ercd3ptydUzM1IEwAAAYM"]
[Mon Jan 05 20:26:08.135723 2026] [:error] [pid 5632:tid 5652] [client 68.218.64.76:29120] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca4.php"] [unique_id "aVut4IN3ZWvlOh-nbt_IdgAAAMg"]
[Mon Jan 05 20:26:12.626982 2026] [:error] [pid 5632:tid 5662] [client 68.218.64.76:30072] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca4.php"] [unique_id "aVut5IN3ZWvlOh-nbt_IegAAANI"]
[Mon Jan 05 20:26:15.147845 2026] [:error] [pid 28407:tid 28435] [client 68.218.64.76:30037] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ca4.php"] [unique_id "aVut59ercd3ptydUzM1IKwAAAZg"]
[Mon Jan 05 20:26:15.958046 2026] [:error] [pid 5534:tid 5547] [client 68.218.64.76:5472] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aVut55Ns9XmbR6unB0zLcwAAAAQ"]
[Mon Jan 05 20:26:19.485491 2026] [:error] [pid 28407:tid 28419] [client 68.218.64.76:44933] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aVut69ercd3ptydUzM1IMgAAAYg"]
[Mon Jan 05 20:26:19.843419 2026] [:error] [pid 54081:tid 54095] [client 68.218.64.76:58769] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aVut61L4jLgtF-b9w4eEvgAAAUs"]
[Mon Jan 05 20:26:32.652924 2026] [:error] [pid 54081:tid 54103] [client 68.218.64.76:30759] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inwp.php"] [unique_id "aVut-FL4jLgtF-b9w4eEzQAAAVM"]
[Mon Jan 05 20:26:37.510113 2026] [:error] [pid 5535:tid 5591] [client 68.218.64.76:44989] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inwp.php"] [unique_id "aVut_WnkedMjhVX0PTVxoAAAAFU"]
[Mon Jan 05 20:26:41.944862 2026] [:error] [pid 5536:tid 5609] [client 68.218.64.76:26082] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inwp.php"] [unique_id "aVuuAQRtMZNG6xI8yDzt6AAAAIw"]
[Mon Jan 05 20:26:44.976211 2026] [:error] [pid 5534:tid 5547] [client 68.218.64.76:25124] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inwp.php"] [unique_id "aVuuBJNs9XmbR6unB0zLpwAAAAQ"]
[Mon Jan 05 20:26:49.523314 2026] [:error] [pid 5632:tid 5647] [client 68.218.64.76:44365] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aVuuCYN3ZWvlOh-nbt_IowAAAMM"]
[Mon Jan 05 20:26:53.721046 2026] [:error] [pid 5534:tid 5546] [client 68.218.64.76:60300] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aVuuDZNs9XmbR6unB0zLrwAAAAM"]
[Mon Jan 05 20:26:56.022755 2026] [:error] [pid 5536:tid 5601] [client 68.218.64.76:30844] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aVuuEARtMZNG6xI8yDzt-gAAAIQ"]
[Mon Jan 05 20:26:57.798568 2026] [:error] [pid 5535:tid 5574] [client 68.218.64.76:24510] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aVuuEWnkedMjhVX0PTVxsAAAAEQ"]
[Mon Jan 05 20:27:12.933338 2026] [:error] [pid 5632:tid 5652] [client 68.218.64.76:23017] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/7logs.php"] [unique_id "aVuuIIN3ZWvlOh-nbt_IvwAAAMg"]
[Mon Jan 05 20:27:17.637702 2026] [:error] [pid 28407:tid 28429] [client 68.218.64.76:27656] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tanjiro.php"] [unique_id "aVuuJdercd3ptydUzM1IXgAAAZI"]
[Mon Jan 05 20:27:20.569767 2026] [:error] [pid 5535:tid 5581] [client 68.218.64.76:29346] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tanjiro.php"] [unique_id "aVuuKGnkedMjhVX0PTVyNwAAAEs"]
[Mon Jan 05 20:27:36.328133 2026] [:error] [pid 6680:tid 6705] [client 68.218.64.76:46806] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wefile.php"] [unique_id "aVuuOKE58uNoazzTmx31TAAAARc"]
[Mon Jan 05 20:27:37.566750 2026] [:error] [pid 5536:tid 5613] [client 68.218.64.76:58728] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wefile.php"] [unique_id "aVuuOQRtMZNG6xI8yDzuUgAAAJA"]
[Mon Jan 05 20:27:37.731293 2026] [:error] [pid 5536:tid 5617] [client 68.218.64.76:60263] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wefile.php"] [unique_id "aVuuOQRtMZNG6xI8yDzuUwAAAJQ"]
[Mon Jan 05 20:27:38.188300 2026] [:error] [pid 5536:tid 5618] [client 68.218.64.76:46789] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wefile.php"] [unique_id "aVuuOgRtMZNG6xI8yDzuVgAAAJU"]
[Mon Jan 05 20:27:39.012316 2026] [:error] [pid 6680:tid 6685] [client 68.218.64.76:46837] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ad1.php"] [unique_id "aVuuO6E58uNoazzTmx31UAAAAQM"]
[Mon Jan 05 20:27:43.703756 2026] [:error] [pid 5534:tid 5559] [client 68.218.64.76:60795] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ad1.php"] [unique_id "aVuuP5Ns9XmbR6unB0zL2gAAABA"]
[Mon Jan 05 20:27:47.264436 2026] [:error] [pid 5632:tid 5648] [client 68.218.64.76:60789] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ad1.php"] [unique_id "aVuuQ4N3ZWvlOh-nbt_I5wAAAMQ"]
[Mon Jan 05 20:27:50.708282 2026] [:error] [pid 6680:tid 6682] [client 68.218.64.76:31992] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ad1.php"] [unique_id "aVuuRqE58uNoazzTmx31WgAAAQA"]
[Mon Jan 05 20:27:57.678977 2026] [:error] [pid 5534:tid 5558] [client 68.218.64.76:5602] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bjfl.php"] [unique_id "aVuuTZNs9XmbR6unB0zL-AAAAA8"]
[Mon Jan 05 20:28:06.981851 2026] [:error] [pid 5534:tid 5559] [client 68.218.64.76:33224] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVuuVpNs9XmbR6unB0zMBgAAABA"]
[Mon Jan 05 20:28:09.153823 2026] [:error] [pid 5534:tid 5547] [client 68.218.64.76:33225] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aVuuWZNs9XmbR6unB0zMDQAAAAQ"]
[Mon Jan 05 20:28:24.421352 2026] [proxy_fcgi:error] [pid 5536:tid 5605] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.661546 2026] [proxy_fcgi:error] [pid 5536:tid 5610] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.680800 2026] [proxy_fcgi:error] [pid 5536:tid 5600] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.720745 2026] [proxy_fcgi:error] [pid 5536:tid 5604] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.739856 2026] [proxy_fcgi:error] [pid 5536:tid 5607] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.758383 2026] [proxy_fcgi:error] [pid 5536:tid 5621] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.778990 2026] [proxy_fcgi:error] [pid 5536:tid 5606] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.813010 2026] [proxy_fcgi:error] [pid 5536:tid 5599] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.833128 2026] [proxy_fcgi:error] [pid 5536:tid 5620] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.858137 2026] [proxy_fcgi:error] [pid 5536:tid 5597] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.877358 2026] [proxy_fcgi:error] [pid 5536:tid 5602] [client 68.218.64.76:6071] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:28:24.900320 2026] [:error] [pid 5536:tid 5609] [client 68.218.64.76:6071] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xwpg.php"] [unique_id "aVuuaARtMZNG6xI8yDzulAAAAIw"]
[Mon Jan 05 20:28:27.190795 2026] [:error] [pid 5536:tid 5613] [client 68.218.64.76:26540] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xwpg.php"] [unique_id "aVuuawRtMZNG6xI8yDzumQAAAJA"]
[Mon Jan 05 20:28:27.423320 2026] [:error] [pid 6680:tid 6693] [client 68.218.64.76:29071] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xwpg.php"] [unique_id "aVuua6E58uNoazzTmx31fQAAAQs"]
[Mon Jan 05 20:28:28.887906 2026] [:error] [pid 5632:tid 5665] [client 68.218.64.76:6026] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xwpg.php"] [unique_id "aVuubIN3ZWvlOh-nbt_I-QAAANU"]
[Mon Jan 05 20:28:30.258231 2026] [:error] [pid 6680:tid 6689] [client 68.218.64.76:29114] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Rk41.php"] [unique_id "aVuubqE58uNoazzTmx31ggAAAQc"]
[Mon Jan 05 20:28:31.984465 2026] [:error] [pid 5536:tid 5610] [client 68.218.64.76:24064] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Rk41.php"] [unique_id "aVuubwRtMZNG6xI8yDzunwAAAI0"]
[Mon Jan 05 20:28:34.200857 2026] [:error] [pid 5534:tid 5547] [client 68.218.64.76:34790] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Rk41.php"] [unique_id "aVuucpNs9XmbR6unB0zMLgAAAAQ"]
[Mon Jan 05 20:28:35.083601 2026] [:error] [pid 5535:tid 5586] [client 68.218.64.76:29683] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/Rk41.php"] [unique_id "aVuuc2nkedMjhVX0PTVyTgAAAFA"]
[Mon Jan 05 20:28:36.599881 2026] [:error] [pid 5536:tid 5607] [client 68.218.64.76:5407] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ztv.php"] [unique_id "aVuudARtMZNG6xI8yDzuogAAAIo"]
[Mon Jan 05 20:28:42.213531 2026] [:error] [pid 6680:tid 6682] [client 68.218.64.76:44455] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ztv.php"] [unique_id "aVuueqE58uNoazzTmx31kAAAAQA"]
[Mon Jan 05 20:28:42.887828 2026] [:error] [pid 6680:tid 6699] [client 68.218.64.76:59265] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ztv.php"] [unique_id "aVuueqE58uNoazzTmx31kQAAARE"]
[Mon Jan 05 20:28:56.378946 2026] [:error] [pid 5536:tid 5621] [client 68.218.64.76:5354] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sef.php"] [unique_id "aVuuiARtMZNG6xI8yDzuswAAAJg"]
[Mon Jan 05 20:28:59.272565 2026] [:error] [pid 5534:tid 5564] [client 68.218.64.76:28316] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sef.php"] [unique_id "aVuui5Ns9XmbR6unB0zMTQAAABU"]
[Mon Jan 05 20:29:13.978704 2026] [:error] [pid 54081:tid 54099] [client 68.218.64.76:31047] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/155.php"] [unique_id "aVuumVL4jLgtF-b9w4eFTQAAAU8"]
[Mon Jan 05 20:29:15.129004 2026] [:error] [pid 5535:tid 5578] [client 68.218.64.76:31087] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/155.php"] [unique_id "aVuum2nkedMjhVX0PTVydQAAAEg"]
[Mon Jan 05 20:29:27.806484 2026] [proxy_fcgi:error] [pid 5534:tid 5548] [client 68.218.64.76:5264] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 20:36:45.044400 2026] [autoindex:error] [pid 5535:tid 5589] [client 104.167.25.15:37113] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:36:45.558592 2026] [autoindex:error] [pid 54081:tid 54107] [client 104.207.45.234:12929] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:36:46.146226 2026] [autoindex:error] [pid 28407:tid 28414] [client 104.207.36.21:19351] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:36:47.134590 2026] [autoindex:error] [pid 5632:tid 5663] [client 209.50.183.54:19501] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 21:33:04.078075 2026] [autoindex:error] [pid 54081:tid 54091] [client 34.26.151.251:59671] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 22:01:42.830107 2026] [autoindex:error] [pid 5534:tid 5543] [client 34.74.248.16:43213] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 23:07:44.564658 2026] [autoindex:error] [pid 5535:tid 5590] [client 34.74.248.16:59325] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 00:09:07.591637 2026] [:error] [pid 60509:tid 60524] [client 43.130.141.193:38586] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVviI6BSiT1_wVwKSvQO3gAAAEM"]
[Tue Jan 06 00:11:09.985976 2026] [autoindex:error] [pid 60514:tid 60589] [client 93.158.91.35:49641] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 00:27:01.023330 2026] [:error] [pid 60605:tid 60630] [client 122.51.236.174:49288] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVvmVZGdDsTlcaRtgxQ1igAAARc"]
[Tue Jan 06 00:33:45.845558 2026] [autoindex:error] [pid 60509:tid 60538] [client 35.203.186.172:63707] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 00:58:44.005957 2026] [autoindex:error] [pid 60605:tid 60614] [client 35.190.128.81:57431] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 01:04:18.145766 2026] [:error] [pid 60510:tid 60561] [client 4.194.177.248:17145] [client 4.194.177.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVvvEm3HNEkuMRrTL0IMEQAAAI0"]
[Tue Jan 06 01:04:19.105673 2026] [:error] [pid 60605:tid 60610] [client 4.194.177.248:17136] [client 4.194.177.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVvvE5GdDsTlcaRtgxRHMgAAAQM"]
[Tue Jan 06 01:04:19.954267 2026] [:error] [pid 53108:tid 53115] [client 4.194.177.248:17125] [client 4.194.177.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVvvE7Bx3HO3OwSCI0gkHQAAAUU"]
[Tue Jan 06 01:04:21.036480 2026] [:error] [pid 29187:tid 29204] [client 4.194.177.248:17033] [client 4.194.177.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVvvFYSYYRtfmMXGZCqMlgAAAA8"]
[Tue Jan 06 01:07:01.645653 2026] [autoindex:error] [pid 60605:tid 60626] [client 34.76.75.243:64436] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 01:41:36.895847 2026] [autoindex:error] [pid 60510:tid 60557] [client 34.74.248.16:51149] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 02:44:50.532827 2026] [autoindex:error] [pid 60514:tid 60577] [client 15.204.155.25:62544] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 04:39:26.932715 2026] [autoindex:error] [pid 44903:tid 44920] [client 34.74.248.16:59935] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 06:16:26.620609 2026] [:error] [pid 45012:tid 45034] [client 51.38.109.223:62199] [client 51.38.109.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aVw4OhaMAxCuju1d0uYKVAAAANQ"]
[Tue Jan 06 06:32:17.934952 2026] [:error] [pid 35140:tid 35147] [client 182.42.111.156:43284] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aVw78XoQaIDFMbT-XMwVAAAAAQU"]
[Tue Jan 06 09:01:56.680988 2026] [autoindex:error] [pid 44904:tid 44944] [client 138.199.6.210:41726] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 09:49:21.203859 2026] [autoindex:error] [pid 44905:tid 44991] [client 54.165.59.204:43160] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 11:49:19.364511 2026] [:error] [pid 45959:tid 45964] [client 172.81.133.44:51747] [client 172.81.133.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aVyGP1ajdn8P3hjgMYwUIAAAAUI"]
[Tue Jan 06 11:52:20.558691 2026] [:error] [pid 45959:tid 45971] [client 165.232.72.218:59370] [client 165.232.72.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.72.218, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aVyG9Fajdn8P3hjgMYwVHgAAAUk"]
[Tue Jan 06 11:52:20.569628 2026] [proxy_fcgi:error] [pid 45959:tid 45971] [client 165.232.72.218:59370] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 12:09:24.895321 2026] [:error] [pid 44905:tid 44992] [client 43.130.9.111:46404] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVyK9Lu7ufwWVst9EAtd-AAAAJg"]
[Tue Jan 06 12:39:33.354426 2026] [:error] [pid 45959:tid 45983] [client 36.41.75.167:56155] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aVySBVajdn8P3hjgMYwobwAAAVU"]
[Tue Jan 06 13:16:37.863418 2026] [:error] [pid 35140:tid 35145] [client 139.59.73.163:55737] [client 139.59.73.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.73.163, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aVyatXoQaIDFMbT-XMxzuAAAAQM"]
[Tue Jan 06 13:16:37.876844 2026] [proxy_fcgi:error] [pid 35140:tid 35145] [client 139.59.73.163:55737] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 13:26:15.033737 2026] [autoindex:error] [pid 44905:tid 44989] [client 54.201.195.80:43992] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 14:01:43.471071 2026] [:error] [pid 35140:tid 35142] [client 3.83.129.12:52678] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aVylR3oQaIDFMbT-XMx-YQAAAQA"]
[Tue Jan 06 14:02:22.445689 2026] [:error] [pid 35140:tid 35148] [client 3.83.129.12:38054] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aVylbnoQaIDFMbT-XMx-iAAAAQY"]
[Tue Jan 06 14:58:04.654164 2026] [autoindex:error] [pid 45012:tid 45019] [client 16.170.215.225:39946] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 15:00:58.257159 2026] [:error] [pid 44904:tid 44958] [client 45.148.10.250:56898] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aVyzKjtieuI1BJEZcvfnVAAAAFE"]
[Tue Jan 06 16:00:31.682512 2026] [autoindex:error] [pid 35140:tid 35158] [client 54.165.59.204:40188] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 17:24:15.291014 2026] [autoindex:error] [pid 35140:tid 35146] [client 54.215.205.59:34146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 17:24:16.511849 2026] [autoindex:error] [pid 35140:tid 35160] [client 54.219.174.228:36660] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 17:49:33.725271 2026] [autoindex:error] [pid 45959:tid 45965] [client 51.68.107.157:28211] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 18:56:30.464860 2026] [:error] [pid 45959:tid 45967] [client 45.148.10.250:40632] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aVzqXlajdn8P3hjgMYymxwAAAUU"]
[Tue Jan 06 20:32:57.507605 2026] [:error] [pid 45959:tid 45965] [client 43.153.54.14:56688] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV0A-Vajdn8P3hjgMYzROgAAAUM"]
[Tue Jan 06 21:10:26.266078 2026] [autoindex:error] [pid 44905:tid 44974] [client 66.249.64.8:46389] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 23:19:37.873065 2026] [:error] [pid 44904:tid 44959] [client 4.247.167.136:4490] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oCTtieuI1BJEZcvdZmQAAAFI"]
[Tue Jan 06 23:19:41.659393 2026] [:error] [pid 35140:tid 35161] [client 4.247.167.136:4610] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDXoQaIDFMbT-XMz2XgAAARM"]
[Tue Jan 06 23:19:47.761252 2026] [:error] [pid 45012:tid 45026] [client 4.247.167.136:5078] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oExaMAxCuju1d0uYsaAAAAMw"]
[Tue Jan 06 23:19:48.617128 2026] [:error] [pid 45012:tid 45020] [client 4.247.167.136:5021] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFBaMAxCuju1d0uYsfwAAAMY"]
[Tue Jan 06 23:30:18.150632 2026] [autoindex:error] [pid 35140:tid 35155] [client 34.44.152.67:17408] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 23:30:19.310784 2026] [autoindex:error] [pid 45959:tid 45977] [client 34.44.152.67:17409] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 00:11:31.333594 2026] [autoindex:error] [pid 35140:tid 35154] [client 34.11.71.18:53184] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 02:09:52.170964 2026] [:error] [pid 45959:tid 45966] [client 4.194.88.69:16999] [client 4.194.88.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV1P8Fajdn8P3hjgMYxq6QAAAUQ"]
[Wed Jan 07 02:09:52.397598 2026] [:error] [pid 44905:tid 44968] [client 4.194.88.69:16917] [client 4.194.88.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV1P8Lu7ufwWVst9EAtI6wAAAIA"]
[Wed Jan 07 02:09:52.588429 2026] [:error] [pid 35140:tid 35144] [client 4.194.88.69:16965] [client 4.194.88.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV1P8HoQaIDFMbT-XMwtRQAAAQI"]
[Wed Jan 07 02:09:52.796172 2026] [:error] [pid 44905:tid 44978] [client 4.194.88.69:16896] [client 4.194.88.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV1P8Lu7ufwWVst9EAtI7QAAAIo"]
[Wed Jan 07 02:24:58.321128 2026] [autoindex:error] [pid 45012:tid 45020] [client 194.195.116.230:46814] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 03:06:52.211990 2026] [autoindex:error] [pid 45959:tid 45983] [client 18.199.169.224:60840] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 04:33:51.197932 2026] [autoindex:error] [pid 6572:tid 6664] [client 195.178.110.242:48456] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 06:38:22.486897 2026] [autoindex:error] [pid 6677:tid 6707] [client 51.75.162.143:57916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 06:51:16.463465 2026] [proxy_fcgi:error] [pid 6570:tid 6597] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:16.555450 2026] [proxy_fcgi:error] [pid 6570:tid 6610] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:16.649944 2026] [proxy_fcgi:error] [pid 6570:tid 6596] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:16.930612 2026] [proxy_fcgi:error] [pid 6570:tid 6592] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.051765 2026] [proxy_fcgi:error] [pid 6570:tid 6601] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.177246 2026] [proxy_fcgi:error] [pid 6570:tid 6588] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.273492 2026] [proxy_fcgi:error] [pid 6570:tid 6593] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.373508 2026] [proxy_fcgi:error] [pid 6570:tid 6603] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.715894 2026] [proxy_fcgi:error] [pid 6570:tid 6587] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.825922 2026] [proxy_fcgi:error] [pid 6570:tid 6608] [client 4.193.252.206:14545] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:51:17.934382 2026] [:error] [pid 6570:tid 6599] [client 4.193.252.206:14545] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/s.php"] [unique_id "aV2R5ZmjKDvKV_Af0er32gAAAA0"]
[Wed Jan 07 06:51:18.529628 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:6627] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/s.php"] [unique_id "aV2R5ojhb00oxKSD4leyXQAAARQ"]
[Wed Jan 07 06:51:19.053609 2026] [:error] [pid 6571:tid 6615] [client 4.193.252.206:7167] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/s.php"] [unique_id "aV2R5w_rJpa_Vt6ZE1D8twAAAEI"]
[Wed Jan 07 06:51:19.382519 2026] [:error] [pid 6570:tid 6594] [client 4.193.252.206:14532] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/s.php"] [unique_id "aV2R55mjKDvKV_Af0er33AAAAAg"]
[Wed Jan 07 06:51:20.018243 2026] [:error] [pid 6571:tid 6616] [client 4.193.252.206:7125] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xrp.php"] [unique_id "aV2R6A_rJpa_Vt6ZE1D8uAAAAEM"]
[Wed Jan 07 06:51:20.335263 2026] [:error] [pid 6571:tid 6636] [client 4.193.252.206:20898] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xrp.php"] [unique_id "aV2R6A_rJpa_Vt6ZE1D8uQAAAFc"]
[Wed Jan 07 06:51:20.542241 2026] [:error] [pid 51200:tid 51256] [client 4.193.252.206:14548] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xrp.php"] [unique_id "aV2R6Ijhb00oxKSD4leyYQAAAQg"]
[Wed Jan 07 06:51:20.862301 2026] [:error] [pid 6570:tid 6600] [client 4.193.252.206:7158] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xrp.php"] [unique_id "aV2R6JmjKDvKV_Af0er33wAAAA4"]
[Wed Jan 07 06:51:21.192594 2026] [:error] [pid 6572:tid 6656] [client 4.193.252.206:14585] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aV2R6XVZKKyUNbqWyYJFcwAAAJA"]
[Wed Jan 07 06:51:21.405026 2026] [:error] [pid 6677:tid 6716] [client 4.193.252.206:22487] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aV2R6X1cbekSFYxHbiMr3AAAANg"]
[Wed Jan 07 06:51:21.745028 2026] [:error] [pid 6570:tid 6607] [client 4.193.252.206:7145] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aV2R6ZmjKDvKV_Af0er34AAAABU"]
[Wed Jan 07 06:51:22.217225 2026] [:error] [pid 6677:tid 6709] [client 4.193.252.206:7135] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/byp.php"] [unique_id "aV2R6n1cbekSFYxHbiMr3wAAANE"]
[Wed Jan 07 06:51:22.713326 2026] [:error] [pid 6571:tid 6617] [client 4.193.252.206:6375] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws28.php"] [unique_id "aV2R6g_rJpa_Vt6ZE1D8vAAAAEQ"]
[Wed Jan 07 06:51:23.211957 2026] [:error] [pid 6571:tid 6633] [client 4.193.252.206:45254] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws28.php"] [unique_id "aV2R6w_rJpa_Vt6ZE1D8vgAAAFQ"]
[Wed Jan 07 06:51:23.819453 2026] [:error] [pid 6571:tid 6629] [client 4.193.252.206:25547] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws28.php"] [unique_id "aV2R6w_rJpa_Vt6ZE1D8wAAAAFA"]
[Wed Jan 07 06:51:24.158452 2026] [:error] [pid 6571:tid 6630] [client 4.193.252.206:6842] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws28.php"] [unique_id "aV2R7A_rJpa_Vt6ZE1D8wQAAAFE"]
[Wed Jan 07 06:51:24.644985 2026] [:error] [pid 6677:tid 6698] [client 4.193.252.206:6612] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/num.php"] [unique_id "aV2R7H1cbekSFYxHbiMr4gAAAMY"]
[Wed Jan 07 06:51:25.134143 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:6356] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/num.php"] [unique_id "aV2R7Yjhb00oxKSD4leyYwAAAQE"]
[Wed Jan 07 06:51:25.562851 2026] [:error] [pid 6570:tid 6597] [client 4.193.252.206:29467] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/num.php"] [unique_id "aV2R7ZmjKDvKV_Af0er35AAAAAs"]
[Wed Jan 07 06:51:26.083514 2026] [:error] [pid 6572:tid 6647] [client 4.193.252.206:6600] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/num.php"] [unique_id "aV2R7nVZKKyUNbqWyYJFdQAAAIc"]
[Wed Jan 07 06:51:26.343896 2026] [:error] [pid 6571:tid 6619] [client 4.193.252.206:20914] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aV2R7g_rJpa_Vt6ZE1D8xwAAAEY"]
[Wed Jan 07 06:51:26.689927 2026] [:error] [pid 6570:tid 6596] [client 4.193.252.206:6646] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aV2R7pmjKDvKV_Af0er35QAAAAo"]
[Wed Jan 07 06:51:27.299370 2026] [:error] [pid 6570:tid 6601] [client 4.193.252.206:6654] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aV2R75mjKDvKV_Af0er35gAAAA8"]
[Wed Jan 07 06:51:28.059385 2026] [:error] [pid 6572:tid 6663] [client 4.193.252.206:20867] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gmo.php"] [unique_id "aV2R8HVZKKyUNbqWyYJFdgAAAJc"]
[Wed Jan 07 06:51:28.759279 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:6616] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app.php"] [unique_id "aV2R8Ijhb00oxKSD4leyZgAAARM"]
[Wed Jan 07 06:51:29.233176 2026] [:error] [pid 6572:tid 6659] [client 4.193.252.206:6798] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app.php"] [unique_id "aV2R8XVZKKyUNbqWyYJFdwAAAJM"]
[Wed Jan 07 06:51:29.597393 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:6652] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app.php"] [unique_id "aV2R8Yjhb00oxKSD4leyaQAAARQ"]
[Wed Jan 07 06:51:29.894635 2026] [:error] [pid 6572:tid 6651] [client 4.193.252.206:29442] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app.php"] [unique_id "aV2R8XVZKKyUNbqWyYJFeAAAAIs"]
[Wed Jan 07 06:51:30.802795 2026] [:error] [pid 51200:tid 51261] [client 4.193.252.206:22403] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new4.php"] [unique_id "aV2R8ojhb00oxKSD4leybgAAAQ0"]
[Wed Jan 07 06:51:31.355121 2026] [:error] [pid 6570:tid 6604] [client 4.193.252.206:20891] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new4.php"] [unique_id "aV2R85mjKDvKV_Af0er36gAAABI"]
[Wed Jan 07 06:51:31.796502 2026] [:error] [pid 6572:tid 6640] [client 4.193.252.206:29455] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new4.php"] [unique_id "aV2R83VZKKyUNbqWyYJFewAAAIA"]
[Wed Jan 07 06:51:32.647890 2026] [:error] [pid 6677:tid 6694] [client 4.193.252.206:14546] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new4.php"] [unique_id "aV2R9H1cbekSFYxHbiMr6QAAAMI"]
[Wed Jan 07 06:51:32.975133 2026] [:error] [pid 6571:tid 6635] [client 4.193.252.206:45968] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dox.php"] [unique_id "aV2R9A_rJpa_Vt6ZE1D8ywAAAFY"]
[Wed Jan 07 06:51:33.541970 2026] [:error] [pid 6677:tid 6700] [client 4.193.252.206:6367] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dox.php"] [unique_id "aV2R9X1cbekSFYxHbiMr7AAAAMg"]
[Wed Jan 07 06:51:33.965187 2026] [:error] [pid 6571:tid 6637] [client 4.193.252.206:6847] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dox.php"] [unique_id "aV2R9Q_rJpa_Vt6ZE1D8zgAAAFg"]
[Wed Jan 07 06:51:34.362621 2026] [:error] [pid 6677:tid 6693] [client 4.193.252.206:6632] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dox.php"] [unique_id "aV2R9n1cbekSFYxHbiMr7wAAAME"]
[Wed Jan 07 06:51:34.883200 2026] [:error] [pid 51200:tid 51270] [client 4.193.252.206:20900] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aV2R9ojhb00oxKSD4leycQAAARY"]
[Wed Jan 07 06:51:35.469809 2026] [:error] [pid 6677:tid 6707] [client 4.193.252.206:29483] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aV2R931cbekSFYxHbiMr9QAAAM8"]
[Wed Jan 07 06:51:35.709979 2026] [:error] [pid 6677:tid 6713] [client 4.193.252.206:6813] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aV2R931cbekSFYxHbiMr9gAAANU"]
[Wed Jan 07 06:51:36.215850 2026] [:error] [pid 6677:tid 6711] [client 4.193.252.206:20897] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/vx.php"] [unique_id "aV2R-H1cbekSFYxHbiMr-AAAANM"]
[Wed Jan 07 06:51:36.531421 2026] [:error] [pid 6570:tid 6586] [client 4.193.252.206:20896] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aV2R-JmjKDvKV_Af0er36wAAAAA"]
[Wed Jan 07 06:51:36.861183 2026] [:error] [pid 6571:tid 6616] [client 4.193.252.206:6822] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aV2R-A_rJpa_Vt6ZE1D80gAAAEM"]
[Wed Jan 07 06:51:37.162430 2026] [:error] [pid 6677:tid 6694] [client 4.193.252.206:29466] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aV2R-X1cbekSFYxHbiMr-wAAAMI"]
[Wed Jan 07 06:51:37.503899 2026] [:error] [pid 51200:tid 51265] [client 4.193.252.206:6307] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin.php"] [unique_id "aV2R-Yjhb00oxKSD4leydgAAARE"]
[Wed Jan 07 06:51:37.975777 2026] [:error] [pid 6677:tid 6696] [client 4.193.252.206:6284] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aV2R-X1cbekSFYxHbiMr_AAAAMQ"]
[Wed Jan 07 06:51:38.282868 2026] [:error] [pid 6571:tid 6620] [client 4.193.252.206:14932] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aV2R-g_rJpa_Vt6ZE1D81AAAAEc"]
[Wed Jan 07 06:51:38.782420 2026] [:error] [pid 6677:tid 6700] [client 4.193.252.206:20924] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aV2R-n1cbekSFYxHbiMr_gAAAMg"]
[Wed Jan 07 06:51:39.092761 2026] [:error] [pid 6571:tid 6636] [client 4.193.252.206:51769] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aV2R-w_rJpa_Vt6ZE1D81QAAAFc"]
[Wed Jan 07 06:51:39.474060 2026] [:error] [pid 6572:tid 6642] [client 4.193.252.206:6277] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xa.php"] [unique_id "aV2R-3VZKKyUNbqWyYJFgQAAAII"]
[Wed Jan 07 06:51:39.793391 2026] [:error] [pid 6570:tid 6594] [client 4.193.252.206:6595] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xa.php"] [unique_id "aV2R-5mjKDvKV_Af0er37AAAAAg"]
[Wed Jan 07 06:51:40.139149 2026] [:error] [pid 6570:tid 6590] [client 4.193.252.206:23744] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xa.php"] [unique_id "aV2R_JmjKDvKV_Af0er37QAAAAQ"]
[Wed Jan 07 06:51:40.469367 2026] [:error] [pid 6570:tid 6605] [client 4.193.252.206:14941] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xa.php"] [unique_id "aV2R_JmjKDvKV_Af0er37gAAABM"]
[Wed Jan 07 06:51:44.178755 2026] [:error] [pid 6572:tid 6662] [client 4.193.252.206:13546] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f8.php"] [unique_id "aV2SAHVZKKyUNbqWyYJFhgAAAJY"]
[Wed Jan 07 06:51:44.402287 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:45974] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f8.php"] [unique_id "aV2SAIjhb00oxKSD4leyfQAAARI"]
[Wed Jan 07 06:51:44.657831 2026] [:error] [pid 6570:tid 6609] [client 4.193.252.206:27730] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f8.php"] [unique_id "aV2SAJmjKDvKV_Af0er39AAAABc"]
[Wed Jan 07 06:51:44.949864 2026] [:error] [pid 6677:tid 6706] [client 4.193.252.206:27740] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f8.php"] [unique_id "aV2SAH1cbekSFYxHbiMsAQAAAM4"]
[Wed Jan 07 06:51:45.433008 2026] [:error] [pid 6571:tid 6637] [client 4.193.252.206:52209] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon3.php"] [unique_id "aV2SAQ_rJpa_Vt6ZE1D82gAAAFg"]
[Wed Jan 07 06:51:46.210252 2026] [:error] [pid 6572:tid 6641] [client 4.193.252.206:27756] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon3.php"] [unique_id "aV2SAnVZKKyUNbqWyYJFiQAAAIE"]
[Wed Jan 07 06:51:46.652218 2026] [:error] [pid 51200:tid 51273] [client 4.193.252.206:6293] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon3.php"] [unique_id "aV2SAojhb00oxKSD4leyfwAAARg"]
[Wed Jan 07 06:51:47.026661 2026] [:error] [pid 6571:tid 6615] [client 4.193.252.206:23797] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/moon3.php"] [unique_id "aV2SAw_rJpa_Vt6ZE1D83QAAAEI"]
[Wed Jan 07 06:51:47.335492 2026] [:error] [pid 6677:tid 6702] [client 4.193.252.206:6686] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ffile.php"] [unique_id "aV2SA31cbekSFYxHbiMsBwAAAMo"]
[Wed Jan 07 06:51:47.645615 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:13558] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ffile.php"] [unique_id "aV2SA4jhb00oxKSD4leygQAAARM"]
[Wed Jan 07 06:51:47.926354 2026] [:error] [pid 6570:tid 6592] [client 4.193.252.206:51729] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ffile.php"] [unique_id "aV2SA5mjKDvKV_Af0er39QAAAAY"]
[Wed Jan 07 06:51:48.313539 2026] [:error] [pid 6571:tid 6632] [client 4.193.252.206:50923] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ffile.php"] [unique_id "aV2SBA_rJpa_Vt6ZE1D83wAAAFM"]
[Wed Jan 07 06:51:48.662324 2026] [:error] [pid 6677:tid 6711] [client 4.193.252.206:51772] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/X7x.php"] [unique_id "aV2SBH1cbekSFYxHbiMsCQAAANM"]
[Wed Jan 07 06:51:48.923219 2026] [:error] [pid 6572:tid 6657] [client 4.193.252.206:51753] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/X7x.php"] [unique_id "aV2SBHVZKKyUNbqWyYJFjAAAAJE"]
[Wed Jan 07 06:51:49.424415 2026] [:error] [pid 6677:tid 6714] [client 4.193.252.206:13506] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/X7x.php"] [unique_id "aV2SBX1cbekSFYxHbiMsCwAAANY"]
[Wed Jan 07 06:51:49.660412 2026] [:error] [pid 6677:tid 6701] [client 4.193.252.206:51715] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/X7x.php"] [unique_id "aV2SBX1cbekSFYxHbiMsDQAAAMk"]
[Wed Jan 07 06:51:49.937461 2026] [:error] [pid 6572:tid 6650] [client 4.193.252.206:34354] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aV2SBXVZKKyUNbqWyYJFjgAAAIo"]
[Wed Jan 07 06:51:50.486473 2026] [:error] [pid 6677:tid 6706] [client 4.193.252.206:51738] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aV2SBn1cbekSFYxHbiMsEAAAAM4"]
[Wed Jan 07 06:51:50.797060 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:13505] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aV2SBn1cbekSFYxHbiMsEgAAAMA"]
[Wed Jan 07 06:51:51.301268 2026] [:error] [pid 6572:tid 6647] [client 4.193.252.206:6719] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aV2SB3VZKKyUNbqWyYJFkAAAAIc"]
[Wed Jan 07 06:51:51.674762 2026] [:error] [pid 6571:tid 6629] [client 4.193.252.206:27747] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Sanskrit.php"] [unique_id "aV2SBw_rJpa_Vt6ZE1D84gAAAFA"]
[Wed Jan 07 06:51:52.022814 2026] [:error] [pid 51200:tid 51262] [client 4.193.252.206:23756] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Sanskrit.php"] [unique_id "aV2SCIjhb00oxKSD4leyhAAAAQ4"]
[Wed Jan 07 06:51:52.393696 2026] [:error] [pid 51200:tid 51260] [client 4.193.252.206:34359] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Sanskrit.php"] [unique_id "aV2SCIjhb00oxKSD4leyhQAAAQw"]
[Wed Jan 07 06:51:52.808440 2026] [:error] [pid 51200:tid 51257] [client 4.193.252.206:34339] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Sanskrit.php"] [unique_id "aV2SCIjhb00oxKSD4leyhgAAAQk"]
[Wed Jan 07 06:51:53.295645 2026] [:error] [pid 6572:tid 6640] [client 4.193.252.206:52171] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gec.php"] [unique_id "aV2SCXVZKKyUNbqWyYJFlAAAAIA"]
[Wed Jan 07 06:51:53.674505 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:30047] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gec.php"] [unique_id "aV2SCYjhb00oxKSD4leyhwAAAQs"]
[Wed Jan 07 06:51:54.395443 2026] [:error] [pid 6571:tid 6627] [client 4.193.252.206:50901] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gec.php"] [unique_id "aV2SCg_rJpa_Vt6ZE1D85QAAAE4"]
[Wed Jan 07 06:51:54.990471 2026] [:error] [pid 6571:tid 6621] [client 4.193.252.206:50919] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gec.php"] [unique_id "aV2SCg_rJpa_Vt6ZE1D85gAAAEg"]
[Wed Jan 07 06:51:55.295637 2026] [:error] [pid 6571:tid 6613] [client 4.193.252.206:34346] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aV2SCw_rJpa_Vt6ZE1D85wAAAEA"]
[Wed Jan 07 06:51:55.674129 2026] [:error] [pid 51200:tid 51261] [client 4.193.252.206:27742] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aV2SC4jhb00oxKSD4leyigAAAQ0"]
[Wed Jan 07 06:51:56.139980 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:34343] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aV2SDIjhb00oxKSD4leyjQAAAQI"]
[Wed Jan 07 06:51:56.458932 2026] [:error] [pid 51200:tid 51255] [client 4.193.252.206:27723] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/as.php"] [unique_id "aV2SDIjhb00oxKSD4leyjgAAAQc"]
[Wed Jan 07 06:51:56.716356 2026] [:error] [pid 51200:tid 51251] [client 4.193.252.206:6683] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file30.php"] [unique_id "aV2SDIjhb00oxKSD4leykQAAAQM"]
[Wed Jan 07 06:51:57.023350 2026] [:error] [pid 6677:tid 6705] [client 4.193.252.206:6704] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file30.php"] [unique_id "aV2SDX1cbekSFYxHbiMsGQAAAM0"]
[Wed Jan 07 06:51:57.238470 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:34314] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file30.php"] [unique_id "aV2SDYjhb00oxKSD4leykgAAARM"]
[Wed Jan 07 06:51:57.462735 2026] [:error] [pid 6570:tid 6595] [client 4.193.252.206:35902] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/file30.php"] [unique_id "aV2SDZmjKDvKV_Af0er3_AAAAAk"]
[Wed Jan 07 06:51:58.008092 2026] [:error] [pid 6677:tid 6715] [client 4.193.252.206:34322] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aV2SDn1cbekSFYxHbiMsGwAAANc"]
[Wed Jan 07 06:51:58.339797 2026] [:error] [pid 6571:tid 6626] [client 4.193.252.206:35842] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aV2SDg_rJpa_Vt6ZE1D86wAAAE0"]
[Wed Jan 07 06:51:58.569612 2026] [:error] [pid 51200:tid 51265] [client 4.193.252.206:6690] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aV2SDojhb00oxKSD4leylAAAARE"]
[Wed Jan 07 06:51:58.986199 2026] [:error] [pid 51200:tid 51254] [client 4.193.252.206:34313] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nox.php"] [unique_id "aV2SDojhb00oxKSD4leylQAAAQY"]
[Wed Jan 07 06:51:59.254922 2026] [:error] [pid 6571:tid 6619] [client 4.193.252.206:14183] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/222.php"] [unique_id "aV2SDw_rJpa_Vt6ZE1D87QAAAEY"]
[Wed Jan 07 06:52:00.075743 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:13772] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/222.php"] [unique_id "aV2SEIjhb00oxKSD4leylwAAAQs"]
[Wed Jan 07 06:52:00.838824 2026] [:error] [pid 51200:tid 51248] [client 4.193.252.206:50942] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/222.php"] [unique_id "aV2SEIjhb00oxKSD4leynAAAAQA"]
[Wed Jan 07 06:52:01.187079 2026] [:error] [pid 6571:tid 6632] [client 4.193.252.206:35898] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/222.php"] [unique_id "aV2SEQ_rJpa_Vt6ZE1D87gAAAFM"]
[Wed Jan 07 06:52:01.491802 2026] [:error] [pid 6572:tid 6644] [client 4.193.252.206:34366] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xml.php"] [unique_id "aV2SEXVZKKyUNbqWyYJFmQAAAIQ"]
[Wed Jan 07 06:52:01.878369 2026] [:error] [pid 6570:tid 6596] [client 4.193.252.206:35893] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xml.php"] [unique_id "aV2SEZmjKDvKV_Af0er3_wAAAAo"]
[Wed Jan 07 06:52:02.485961 2026] [:error] [pid 6571:tid 6629] [client 4.193.252.206:13795] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xml.php"] [unique_id "aV2SEg_rJpa_Vt6ZE1D88AAAAFA"]
[Wed Jan 07 06:52:03.342796 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:34336] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xml.php"] [unique_id "aV2SE4jhb00oxKSD4leyoQAAAQs"]
[Wed Jan 07 06:52:03.748312 2026] [:error] [pid 6572:tid 6662] [client 4.193.252.206:50883] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless14.php"] [unique_id "aV2SE3VZKKyUNbqWyYJFnAAAAJY"]
[Wed Jan 07 06:52:04.172730 2026] [:error] [pid 51200:tid 51252] [client 4.193.252.206:48741] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless14.php"] [unique_id "aV2SFIjhb00oxKSD4leyowAAAQQ"]
[Wed Jan 07 06:52:04.435211 2026] [:error] [pid 6571:tid 6617] [client 4.193.252.206:30069] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless14.php"] [unique_id "aV2SFA_rJpa_Vt6ZE1D88gAAAEQ"]
[Wed Jan 07 06:52:04.922492 2026] [:error] [pid 6572:tid 6645] [client 4.193.252.206:24953] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless14.php"] [unique_id "aV2SFHVZKKyUNbqWyYJFnwAAAIU"]
[Wed Jan 07 06:52:05.195908 2026] [:error] [pid 6570:tid 6603] [client 4.193.252.206:35872] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aV2SFZmjKDvKV_Af0er4BQAAABE"]
[Wed Jan 07 06:52:05.478252 2026] [:error] [pid 6570:tid 6589] [client 4.193.252.206:24950] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aV2SFZmjKDvKV_Af0er4BgAAAAM"]
[Wed Jan 07 06:52:05.897568 2026] [:error] [pid 6677:tid 6714] [client 4.193.252.206:35894] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aV2SFX1cbekSFYxHbiMsHwAAANY"]
[Wed Jan 07 06:52:06.186323 2026] [:error] [pid 6570:tid 6594] [client 4.193.252.206:31323] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/css.php"] [unique_id "aV2SFpmjKDvKV_Af0er4CAAAAAg"]
[Wed Jan 07 06:52:06.398644 2026] [:error] [pid 6677:tid 6716] [client 4.193.252.206:30018] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/oo.php"] [unique_id "aV2SFn1cbekSFYxHbiMsIAAAANg"]
[Wed Jan 07 06:52:06.722633 2026] [:error] [pid 6677:tid 6697] [client 4.193.252.206:13814] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/oo.php"] [unique_id "aV2SFn1cbekSFYxHbiMsIQAAAMU"]
[Wed Jan 07 06:52:06.930995 2026] [:error] [pid 6572:tid 6650] [client 4.193.252.206:35886] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/oo.php"] [unique_id "aV2SFnVZKKyUNbqWyYJFowAAAIo"]
[Wed Jan 07 06:52:07.221084 2026] [:error] [pid 51200:tid 51265] [client 4.193.252.206:35848] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/oo.php"] [unique_id "aV2SF4jhb00oxKSD4leypgAAARE"]
[Wed Jan 07 06:52:07.471626 2026] [:error] [pid 6677:tid 6701] [client 4.193.252.206:43085] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aV2SF31cbekSFYxHbiMsIgAAAMk"]
[Wed Jan 07 06:52:07.908131 2026] [:error] [pid 6570:tid 6590] [client 4.193.252.206:24903] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aV2SF5mjKDvKV_Af0er4CgAAAAQ"]
[Wed Jan 07 06:52:08.752263 2026] [:error] [pid 6572:tid 6651] [client 4.193.252.206:24934] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aV2SGHVZKKyUNbqWyYJFpgAAAIs"]
[Wed Jan 07 06:52:09.097526 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:43092] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x.php"] [unique_id "aV2SGX1cbekSFYxHbiMsJQAAAMA"]
[Wed Jan 07 06:52:09.590920 2026] [:error] [pid 6677:tid 6708] [client 4.193.252.206:13739] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aV2SGX1cbekSFYxHbiMsKAAAANA"]
[Wed Jan 07 06:52:09.828662 2026] [:error] [pid 6677:tid 6715] [client 4.193.252.206:28943] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aV2SGX1cbekSFYxHbiMsKQAAANc"]
[Wed Jan 07 06:52:10.125375 2026] [:error] [pid 6570:tid 6591] [client 4.193.252.206:13697] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aV2SGpmjKDvKV_Af0er4DQAAAAU"]
[Wed Jan 07 06:52:10.423242 2026] [:error] [pid 6572:tid 6664] [client 4.193.252.206:31354] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/f35.php"] [unique_id "aV2SGnVZKKyUNbqWyYJFpwAAAJg"]
[Wed Jan 07 06:52:10.684714 2026] [:error] [pid 6570:tid 6595] [client 4.193.252.206:14024] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jga.php"] [unique_id "aV2SGpmjKDvKV_Af0er4DgAAAAk"]
[Wed Jan 07 06:52:10.925857 2026] [:error] [pid 6572:tid 6661] [client 4.193.252.206:48749] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jga.php"] [unique_id "aV2SGnVZKKyUNbqWyYJFqAAAAJU"]
[Wed Jan 07 06:52:11.188213 2026] [:error] [pid 6571:tid 6622] [client 4.193.252.206:35844] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jga.php"] [unique_id "aV2SGw_rJpa_Vt6ZE1D89QAAAEk"]
[Wed Jan 07 06:52:11.446545 2026] [:error] [pid 6677:tid 6709] [client 4.193.252.206:43130] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jga.php"] [unique_id "aV2SG31cbekSFYxHbiMsLAAAANE"]
[Wed Jan 07 06:52:11.661054 2026] [:error] [pid 6571:tid 6637] [client 4.193.252.206:31314] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aV2SGw_rJpa_Vt6ZE1D89gAAAFg"]
[Wed Jan 07 06:52:12.037596 2026] [:error] [pid 6570:tid 6609] [client 4.193.252.206:28967] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aV2SHJmjKDvKV_Af0er4EAAAABc"]
[Wed Jan 07 06:52:12.235789 2026] [:error] [pid 51200:tid 51252] [client 4.193.252.206:14054] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aV2SHIjhb00oxKSD4leyrAAAAQQ"]
[Wed Jan 07 06:52:12.987379 2026] [:error] [pid 51200:tid 51261] [client 4.193.252.206:31343] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gg.php"] [unique_id "aV2SHIjhb00oxKSD4leyrgAAAQ0"]
[Wed Jan 07 06:52:13.232606 2026] [:error] [pid 6570:tid 6610] [client 4.193.252.206:28981] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV2SHZmjKDvKV_Af0er4EQAAABg"]
[Wed Jan 07 06:52:13.438275 2026] [:error] [pid 6677:tid 6710] [client 4.193.252.206:14042] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV2SHX1cbekSFYxHbiMsMAAAANI"]
[Wed Jan 07 06:52:13.712948 2026] [:error] [pid 6677:tid 6704] [client 4.193.252.206:43115] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV2SHX1cbekSFYxHbiMsNwAAAMw"]
[Wed Jan 07 06:52:13.948494 2026] [:error] [pid 6677:tid 6713] [client 4.193.252.206:28968] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV2SHX1cbekSFYxHbiMsOQAAANU"]
[Wed Jan 07 06:52:14.147315 2026] [:error] [pid 6571:tid 6614] [client 4.193.252.206:14066] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws29.php"] [unique_id "aV2SHg_rJpa_Vt6ZE1D8-AAAAEE"]
[Wed Jan 07 06:52:14.504478 2026] [:error] [pid 6571:tid 6616] [client 4.193.252.206:13721] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws29.php"] [unique_id "aV2SHg_rJpa_Vt6ZE1D8-QAAAEM"]
[Wed Jan 07 06:52:14.772967 2026] [:error] [pid 51200:tid 51270] [client 4.193.252.206:43094] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws29.php"] [unique_id "aV2SHojhb00oxKSD4leyuQAAARY"]
[Wed Jan 07 06:52:14.974982 2026] [:error] [pid 51200:tid 51251] [client 4.193.252.206:28985] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws29.php"] [unique_id "aV2SHojhb00oxKSD4leyugAAAQM"]
[Wed Jan 07 06:52:15.253900 2026] [:error] [pid 51200:tid 51264] [client 4.193.252.206:6149] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wen.php"] [unique_id "aV2SH4jhb00oxKSD4leyvAAAARA"]
[Wed Jan 07 06:52:15.567936 2026] [:error] [pid 6571:tid 6620] [client 4.193.252.206:24936] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wen.php"] [unique_id "aV2SHw_rJpa_Vt6ZE1D8_gAAAEc"]
[Wed Jan 07 06:52:16.066079 2026] [:error] [pid 51200:tid 51272] [client 4.193.252.206:14033] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wen.php"] [unique_id "aV2SIIjhb00oxKSD4leyvgAAARc"]
[Wed Jan 07 06:52:16.421401 2026] [:error] [pid 6571:tid 6617] [client 4.193.252.206:6165] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wen.php"] [unique_id "aV2SIA_rJpa_Vt6ZE1D8_wAAAEQ"]
[Wed Jan 07 06:52:16.849864 2026] [:error] [pid 6571:tid 6633] [client 4.193.252.206:6152] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/pass.php"] [unique_id "aV2SIA_rJpa_Vt6ZE1D9AQAAAFQ"]
[Wed Jan 07 06:52:17.204822 2026] [proxy_fcgi:error] [pid 6571:tid 6622] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:17.468297 2026] [proxy_fcgi:error] [pid 6571:tid 6619] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:17.558272 2026] [proxy_fcgi:error] [pid 6571:tid 6614] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:17.655363 2026] [proxy_fcgi:error] [pid 6571:tid 6616] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:17.746203 2026] [proxy_fcgi:error] [pid 6571:tid 6625] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:17.934178 2026] [proxy_fcgi:error] [pid 6571:tid 6632] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:18.040535 2026] [proxy_fcgi:error] [pid 6571:tid 6635] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:18.131482 2026] [proxy_fcgi:error] [pid 6571:tid 6629] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:18.222340 2026] [proxy_fcgi:error] [pid 6571:tid 6620] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:18.316863 2026] [proxy_fcgi:error] [pid 6571:tid 6617] [client 4.193.252.206:26663] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:52:18.529597 2026] [:error] [pid 6571:tid 6618] [client 4.193.252.206:26663] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/user.php"] [unique_id "aV2SIg_rJpa_Vt6ZE1D9EAAAAEU"]
[Wed Jan 07 06:52:18.776539 2026] [:error] [pid 6570:tid 6595] [client 4.193.252.206:13702] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/user.php"] [unique_id "aV2SIpmjKDvKV_Af0er4GAAAAAk"]
[Wed Jan 07 06:52:19.134442 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:26658] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/user.php"] [unique_id "aV2SI4jhb00oxKSD4leywQAAARI"]
[Wed Jan 07 06:52:19.824771 2026] [:error] [pid 6570:tid 6607] [client 4.193.252.206:28936] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/user.php"] [unique_id "aV2SI5mjKDvKV_Af0er4GgAAABU"]
[Wed Jan 07 06:52:20.127482 2026] [:error] [pid 6572:tid 6650] [client 4.193.252.206:6155] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aV2SJHVZKKyUNbqWyYJFrQAAAIo"]
[Wed Jan 07 06:52:20.393448 2026] [:error] [pid 6570:tid 6601] [client 4.193.252.206:14706] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aV2SJJmjKDvKV_Af0er4HAAAAA8"]
[Wed Jan 07 06:52:20.707812 2026] [:error] [pid 6572:tid 6648] [client 4.193.252.206:14678] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aV2SJHVZKKyUNbqWyYJFrgAAAIg"]
[Wed Jan 07 06:52:21.040750 2026] [:error] [pid 51200:tid 51258] [client 4.193.252.206:26638] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/0x.php"] [unique_id "aV2SJYjhb00oxKSD4leyxAAAAQo"]
[Wed Jan 07 06:52:21.447649 2026] [:error] [pid 51200:tid 51248] [client 4.193.252.206:7016] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/buy.php"] [unique_id "aV2SJYjhb00oxKSD4leyxQAAAQA"]
[Wed Jan 07 06:52:22.035539 2026] [:error] [pid 51200:tid 51265] [client 4.193.252.206:12956] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/buy.php"] [unique_id "aV2SJojhb00oxKSD4leyxwAAARE"]
[Wed Jan 07 06:52:22.639813 2026] [:error] [pid 51200:tid 51273] [client 4.193.252.206:14062] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/buy.php"] [unique_id "aV2SJojhb00oxKSD4leyyQAAARg"]
[Wed Jan 07 06:52:23.008258 2026] [:error] [pid 6677:tid 6713] [client 4.193.252.206:26146] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/buy.php"] [unique_id "aV2SJ31cbekSFYxHbiMsPgAAANU"]
[Wed Jan 07 06:52:23.298711 2026] [:error] [pid 51200:tid 51254] [client 4.193.252.206:26137] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aV2SJ4jhb00oxKSD4leyygAAAQY"]
[Wed Jan 07 06:52:23.527683 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:14072] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aV2SJ31cbekSFYxHbiMsQAAAAMA"]
[Wed Jan 07 06:52:23.783504 2026] [:error] [pid 6677:tid 6710] [client 4.193.252.206:12965] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aV2SJ31cbekSFYxHbiMsQgAAANI"]
[Wed Jan 07 06:52:24.155280 2026] [:error] [pid 6677:tid 6707] [client 4.193.252.206:6194] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/bless.php"] [unique_id "aV2SKH1cbekSFYxHbiMsRAAAAM8"]
[Wed Jan 07 06:52:24.355307 2026] [:error] [pid 6571:tid 6627] [client 4.193.252.206:14070] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-sign.php"] [unique_id "aV2SKA_rJpa_Vt6ZE1D9EQAAAE4"]
[Wed Jan 07 06:52:24.655265 2026] [:error] [pid 6571:tid 6628] [client 4.193.252.206:28939] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-sign.php"] [unique_id "aV2SKA_rJpa_Vt6ZE1D9EgAAAE8"]
[Wed Jan 07 06:52:24.871093 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:6999] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-sign.php"] [unique_id "aV2SKIjhb00oxKSD4leyzQAAAQs"]
[Wed Jan 07 06:52:25.071113 2026] [:error] [pid 51200:tid 51257] [client 4.193.252.206:28941] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-sign.php"] [unique_id "aV2SKYjhb00oxKSD4leyzgAAAQk"]
[Wed Jan 07 06:52:25.320763 2026] [:error] [pid 6571:tid 6622] [client 4.193.252.206:28929] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ppp.php"] [unique_id "aV2SKQ_rJpa_Vt6ZE1D9FQAAAEk"]
[Wed Jan 07 06:52:25.556252 2026] [:error] [pid 6571:tid 6619] [client 4.193.252.206:14029] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ppp.php"] [unique_id "aV2SKQ_rJpa_Vt6ZE1D9FgAAAEY"]
[Wed Jan 07 06:52:25.766892 2026] [:error] [pid 6571:tid 6625] [client 4.193.252.206:14037] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ppp.php"] [unique_id "aV2SKQ_rJpa_Vt6ZE1D9GAAAAEw"]
[Wed Jan 07 06:52:26.064439 2026] [:error] [pid 6571:tid 6631] [client 4.193.252.206:28938] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ppp.php"] [unique_id "aV2SKg_rJpa_Vt6ZE1D9GQAAAFI"]
[Wed Jan 07 06:52:26.306458 2026] [:error] [pid 6571:tid 6632] [client 4.193.252.206:14289] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aV2SKg_rJpa_Vt6ZE1D9GwAAAFM"]
[Wed Jan 07 06:52:26.503498 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:43120] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aV2SKojhb00oxKSD4ley0AAAARQ"]
[Wed Jan 07 06:52:26.800178 2026] [:error] [pid 6571:tid 6617] [client 4.193.252.206:13725] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aV2SKg_rJpa_Vt6ZE1D9HQAAAEQ"]
[Wed Jan 07 06:52:27.181374 2026] [:error] [pid 6571:tid 6618] [client 4.193.252.206:28984] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aV2SKw_rJpa_Vt6ZE1D9HwAAAEU"]
[Wed Jan 07 06:52:27.508824 2026] [:error] [pid 6570:tid 6603] [client 4.193.252.206:13751] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV2SK5mjKDvKV_Af0er4HwAAABE"]
[Wed Jan 07 06:52:27.809470 2026] [:error] [pid 51200:tid 51263] [client 4.193.252.206:6998] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV2SK4jhb00oxKSD4ley0wAAAQ8"]
[Wed Jan 07 06:52:28.053414 2026] [:error] [pid 6571:tid 6621] [client 4.193.252.206:43095] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV2SLA_rJpa_Vt6ZE1D9IQAAAEg"]
[Wed Jan 07 06:52:28.265605 2026] [:error] [pid 6572:tid 6644] [client 4.193.252.206:26655] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV2SLHVZKKyUNbqWyYJFsgAAAIQ"]
[Wed Jan 07 06:52:28.581261 2026] [:error] [pid 6572:tid 6653] [client 4.193.252.206:12989] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aV2SLHVZKKyUNbqWyYJFswAAAI0"]
[Wed Jan 07 06:52:28.854433 2026] [:error] [pid 6572:tid 6664] [client 4.193.252.206:31301] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aV2SLHVZKKyUNbqWyYJFtAAAAJg"]
[Wed Jan 07 06:52:29.121127 2026] [:error] [pid 51200:tid 51256] [client 4.193.252.206:6145] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aV2SLYjhb00oxKSD4ley1AAAAQg"]
[Wed Jan 07 06:52:29.420795 2026] [:error] [pid 6572:tid 6640] [client 4.193.252.206:43098] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/cong.php"] [unique_id "aV2SLXVZKKyUNbqWyYJFtwAAAIA"]
[Wed Jan 07 06:52:29.769060 2026] [:error] [pid 6572:tid 6649] [client 4.193.252.206:6705] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aV2SLXVZKKyUNbqWyYJFuQAAAIk"]
[Wed Jan 07 06:52:30.083852 2026] [:error] [pid 51200:tid 51262] [client 4.193.252.206:14047] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aV2SLojhb00oxKSD4ley1wAAAQ4"]
[Wed Jan 07 06:52:30.417100 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:43087] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aV2SLojhb00oxKSD4ley2QAAAQI"]
[Wed Jan 07 06:52:30.693973 2026] [:error] [pid 6572:tid 6655] [client 4.193.252.206:28978] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aV2SLnVZKKyUNbqWyYJFugAAAI8"]
[Wed Jan 07 06:52:31.274878 2026] [:error] [pid 6570:tid 6592] [client 4.193.252.206:6154] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-help.php"] [unique_id "aV2SL5mjKDvKV_Af0er4IQAAAAY"]
[Wed Jan 07 06:52:31.677002 2026] [:error] [pid 6572:tid 6656] [client 4.193.252.206:12967] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-help.php"] [unique_id "aV2SL3VZKKyUNbqWyYJFvQAAAJA"]
[Wed Jan 07 06:52:31.951996 2026] [:error] [pid 6572:tid 6648] [client 4.193.252.206:28955] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-help.php"] [unique_id "aV2SL3VZKKyUNbqWyYJFvwAAAIg"]
[Wed Jan 07 06:52:32.347426 2026] [:error] [pid 6572:tid 6642] [client 4.193.252.206:14669] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-help.php"] [unique_id "aV2SMHVZKKyUNbqWyYJFwAAAAII"]
[Wed Jan 07 06:52:32.555773 2026] [:error] [pid 6572:tid 6647] [client 4.193.252.206:43126] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xc.php"] [unique_id "aV2SMHVZKKyUNbqWyYJFwQAAAIc"]
[Wed Jan 07 06:52:32.844536 2026] [:error] [pid 6571:tid 6614] [client 4.193.252.206:14684] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xc.php"] [unique_id "aV2SMA_rJpa_Vt6ZE1D9JQAAAEE"]
[Wed Jan 07 06:52:33.170641 2026] [:error] [pid 6572:tid 6644] [client 4.193.252.206:43080] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xc.php"] [unique_id "aV2SMXVZKKyUNbqWyYJFwgAAAIQ"]
[Wed Jan 07 06:52:33.429435 2026] [:error] [pid 6570:tid 6590] [client 4.193.252.206:13718] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xc.php"] [unique_id "aV2SMZmjKDvKV_Af0er4IwAAAAQ"]
[Wed Jan 07 06:52:33.604726 2026] [:error] [pid 6571:tid 6625] [client 4.193.252.206:24916] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV2SMQ_rJpa_Vt6ZE1D9JgAAAEw"]
[Wed Jan 07 06:52:33.834446 2026] [:error] [pid 6570:tid 6598] [client 4.193.252.206:24902] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV2SMZmjKDvKV_Af0er4JQAAAAw"]
[Wed Jan 07 06:52:34.158392 2026] [:error] [pid 6570:tid 6609] [client 4.193.252.206:28990] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV2SMpmjKDvKV_Af0er4JwAAABc"]
[Wed Jan 07 06:52:34.351937 2026] [:error] [pid 6570:tid 6602] [client 4.193.252.206:26683] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV2SMpmjKDvKV_Af0er4KQAAABA"]
[Wed Jan 07 06:52:34.545429 2026] [:error] [pid 6570:tid 6610] [client 4.193.252.206:12961] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aV2SMpmjKDvKV_Af0er4KgAAABg"]
[Wed Jan 07 06:52:34.829134 2026] [:error] [pid 51200:tid 51258] [client 4.193.252.206:12972] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aV2SMojhb00oxKSD4ley3QAAAQo"]
[Wed Jan 07 06:52:35.156246 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:6179] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aV2SM4jhb00oxKSD4ley3wAAARI"]
[Wed Jan 07 06:52:35.385505 2026] [:error] [pid 51200:tid 51255] [client 4.193.252.206:12945] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/files.php"] [unique_id "aV2SM4jhb00oxKSD4ley4AAAAQc"]
[Wed Jan 07 06:52:35.666494 2026] [:error] [pid 6570:tid 6603] [client 4.193.252.206:28952] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/hly.php"] [unique_id "aV2SM5mjKDvKV_Af0er4LwAAABE"]
[Wed Jan 07 06:52:35.947075 2026] [:error] [pid 6572:tid 6652] [client 4.193.252.206:48707] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/hly.php"] [unique_id "aV2SM3VZKKyUNbqWyYJFxgAAAIw"]
[Wed Jan 07 06:52:36.177019 2026] [:error] [pid 6570:tid 6592] [client 4.193.252.206:6204] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/hly.php"] [unique_id "aV2SNJmjKDvKV_Af0er4MQAAAAY"]
[Wed Jan 07 06:52:36.366688 2026] [:error] [pid 6570:tid 6586] [client 4.193.252.206:43082] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/hly.php"] [unique_id "aV2SNJmjKDvKV_Af0er4MwAAAAA"]
[Wed Jan 07 06:52:36.646210 2026] [:error] [pid 51200:tid 51263] [client 4.193.252.206:43107] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/text.php"] [unique_id "aV2SNIjhb00oxKSD4ley4QAAAQ8"]
[Wed Jan 07 06:52:36.887222 2026] [:error] [pid 51200:tid 51251] [client 4.193.252.206:24940] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/text.php"] [unique_id "aV2SNIjhb00oxKSD4ley4gAAAQM"]
[Wed Jan 07 06:52:37.197236 2026] [:error] [pid 51200:tid 51256] [client 4.193.252.206:13728] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/text.php"] [unique_id "aV2SNYjhb00oxKSD4ley4wAAAQg"]
[Wed Jan 07 06:52:37.505231 2026] [:error] [pid 6570:tid 6591] [client 4.193.252.206:6161] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/text.php"] [unique_id "aV2SNZmjKDvKV_Af0er4NAAAAAU"]
[Wed Jan 07 06:52:37.744461 2026] [:error] [pid 6572:tid 6662] [client 4.193.252.206:26639] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aV2SNXVZKKyUNbqWyYJFyQAAAJY"]
[Wed Jan 07 06:52:37.959397 2026] [:error] [pid 6572:tid 6643] [client 4.193.252.206:13726] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aV2SNXVZKKyUNbqWyYJFygAAAIM"]
[Wed Jan 07 06:52:38.280629 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:13791] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aV2SNojhb00oxKSD4ley5gAAAQs"]
[Wed Jan 07 06:52:38.535456 2026] [:error] [pid 51200:tid 51269] [client 4.193.252.206:14073] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/item.php"] [unique_id "aV2SNojhb00oxKSD4ley5wAAARU"]
[Wed Jan 07 06:52:38.781142 2026] [:error] [pid 6570:tid 6597] [client 4.193.252.206:12971] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aV2SNpmjKDvKV_Af0er4NQAAAAs"]
[Wed Jan 07 06:52:39.163128 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:6185] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aV2SN4jhb00oxKSD4ley6QAAAQE"]
[Wed Jan 07 06:52:39.387738 2026] [:error] [pid 51200:tid 51261] [client 4.193.252.206:14022] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aV2SN4jhb00oxKSD4ley6wAAAQ0"]
[Wed Jan 07 06:52:39.711027 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:14277] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/install.php"] [unique_id "aV2SN4jhb00oxKSD4ley7AAAARQ"]
[Wed Jan 07 06:52:39.920757 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:6175] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aV2SN4jhb00oxKSD4ley7gAAARI"]
[Wed Jan 07 06:52:40.164516 2026] [:error] [pid 51200:tid 51270] [client 4.193.252.206:24896] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aV2SOIjhb00oxKSD4ley7wAAARY"]
[Wed Jan 07 06:52:40.416512 2026] [:error] [pid 6677:tid 6711] [client 4.193.252.206:14319] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aV2SOH1cbekSFYxHbiMsTAAAANM"]
[Wed Jan 07 06:52:40.685855 2026] [:error] [pid 51200:tid 51255] [client 4.193.252.206:43096] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aV2SOIjhb00oxKSD4ley8AAAAQc"]
[Wed Jan 07 06:52:41.011028 2026] [:error] [pid 6570:tid 6596] [client 4.193.252.206:14030] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aV2SOZmjKDvKV_Af0er4NwAAAAo"]
[Wed Jan 07 06:52:41.350960 2026] [:error] [pid 6570:tid 6593] [client 4.193.252.206:14313] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aV2SOZmjKDvKV_Af0er4OgAAAAc"]
[Wed Jan 07 06:52:41.621842 2026] [:error] [pid 6570:tid 6604] [client 4.193.252.206:28950] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aV2SOZmjKDvKV_Af0er4OwAAABI"]
[Wed Jan 07 06:52:41.980796 2026] [:error] [pid 51200:tid 51263] [client 4.193.252.206:48709] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aV2SOYjhb00oxKSD4ley9AAAAQ8"]
[Wed Jan 07 06:52:42.217082 2026] [:error] [pid 51200:tid 51256] [client 4.193.252.206:14077] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xp.php"] [unique_id "aV2SOojhb00oxKSD4ley9QAAAQg"]
[Wed Jan 07 06:52:42.480076 2026] [:error] [pid 6570:tid 6601] [client 4.193.252.206:14061] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xp.php"] [unique_id "aV2SOpmjKDvKV_Af0er4PAAAAA8"]
[Wed Jan 07 06:52:42.704310 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:14274] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xp.php"] [unique_id "aV2SOojhb00oxKSD4ley9wAAARM"]
[Wed Jan 07 06:52:43.272789 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:14297] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xp.php"] [unique_id "aV2SO4jhb00oxKSD4ley-QAAAQI"]
[Wed Jan 07 06:52:43.573367 2026] [:error] [pid 6677:tid 6716] [client 4.193.252.206:13722] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yes.php"] [unique_id "aV2SO31cbekSFYxHbiMsUAAAANg"]
[Wed Jan 07 06:52:43.972612 2026] [:error] [pid 6677:tid 6698] [client 4.193.252.206:28988] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yes.php"] [unique_id "aV2SO31cbekSFYxHbiMsUgAAAMY"]
[Wed Jan 07 06:52:44.494143 2026] [:error] [pid 6677:tid 6709] [client 4.193.252.206:28956] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yes.php"] [unique_id "aV2SPH1cbekSFYxHbiMsVQAAANE"]
[Wed Jan 07 06:52:44.824113 2026] [:error] [pid 6677:tid 6705] [client 4.193.252.206:14330] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yes.php"] [unique_id "aV2SPH1cbekSFYxHbiMsWQAAAM0"]
[Wed Jan 07 06:52:45.252602 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:13707] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/09fa6.php"] [unique_id "aV2SPX1cbekSFYxHbiMsWwAAAMA"]
[Wed Jan 07 06:52:45.549755 2026] [:error] [pid 6677:tid 6706] [client 4.193.252.206:24951] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/09fa6.php"] [unique_id "aV2SPX1cbekSFYxHbiMsXQAAAM4"]
[Wed Jan 07 06:52:45.866058 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:13750] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/09fa6.php"] [unique_id "aV2SPYjhb00oxKSD4ley-gAAAQE"]
[Wed Jan 07 06:52:46.208385 2026] [:error] [pid 51200:tid 51264] [client 4.193.252.206:35864] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/09fa6.php"] [unique_id "aV2SPojhb00oxKSD4ley-wAAARA"]
[Wed Jan 07 06:52:46.509712 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:30016] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/89.php"] [unique_id "aV2SPojhb00oxKSD4ley_gAAARI"]
[Wed Jan 07 06:52:46.763984 2026] [:error] [pid 6677:tid 6712] [client 4.193.252.206:31348] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/89.php"] [unique_id "aV2SPn1cbekSFYxHbiMsXgAAANQ"]
[Wed Jan 07 06:52:47.179031 2026] [:error] [pid 6570:tid 6589] [client 4.193.252.206:14300] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/89.php"] [unique_id "aV2SP5mjKDvKV_Af0er4PgAAAAM"]
[Wed Jan 07 06:52:47.404800 2026] [:error] [pid 6677:tid 6698] [client 4.193.252.206:31340] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/89.php"] [unique_id "aV2SP31cbekSFYxHbiMsYAAAAMY"]
[Wed Jan 07 06:52:47.763991 2026] [:error] [pid 6677:tid 6708] [client 4.193.252.206:43073] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/has.php"] [unique_id "aV2SP31cbekSFYxHbiMsYQAAANA"]
[Wed Jan 07 06:52:48.049387 2026] [:error] [pid 6570:tid 6605] [client 4.193.252.206:35875] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/has.php"] [unique_id "aV2SQJmjKDvKV_Af0er4QQAAABM"]
[Wed Jan 07 06:52:48.331316 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:35900] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/has.php"] [unique_id "aV2SQIjhb00oxKSD4lezAgAAARM"]
[Wed Jan 07 06:52:48.909279 2026] [:error] [pid 6677:tid 6709] [client 4.193.252.206:35853] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/has.php"] [unique_id "aV2SQH1cbekSFYxHbiMsYgAAANE"]
[Wed Jan 07 06:52:49.265698 2026] [:error] [pid 6572:tid 6647] [client 4.193.252.206:14295] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nax.php"] [unique_id "aV2SQXVZKKyUNbqWyYJFzgAAAIc"]
[Wed Jan 07 06:52:49.643353 2026] [:error] [pid 6677:tid 6696] [client 4.193.252.206:14180] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nax.php"] [unique_id "aV2SQX1cbekSFYxHbiMsZQAAAMQ"]
[Wed Jan 07 06:52:50.147922 2026] [:error] [pid 6570:tid 6594] [client 4.193.252.206:43122] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nax.php"] [unique_id "aV2SQpmjKDvKV_Af0er4QgAAAAg"]
[Wed Jan 07 06:52:50.544980 2026] [:error] [pid 6570:tid 6591] [client 4.193.252.206:35879] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/nax.php"] [unique_id "aV2SQpmjKDvKV_Af0er4RAAAAAU"]
[Wed Jan 07 06:52:50.817393 2026] [:error] [pid 6570:tid 6597] [client 4.193.252.206:14317] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ooj.php"] [unique_id "aV2SQpmjKDvKV_Af0er4RQAAAAs"]
[Wed Jan 07 06:52:51.015034 2026] [:error] [pid 6570:tid 6609] [client 4.193.252.206:30054] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ooj.php"] [unique_id "aV2SQ5mjKDvKV_Af0er4RgAAABc"]
[Wed Jan 07 06:52:51.208053 2026] [:error] [pid 6677:tid 6695] [client 4.193.252.206:34350] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ooj.php"] [unique_id "aV2SQ31cbekSFYxHbiMsZwAAAMM"]
[Wed Jan 07 06:52:51.562440 2026] [:error] [pid 6677:tid 6710] [client 4.193.252.206:52173] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ooj.php"] [unique_id "aV2SQ31cbekSFYxHbiMsaQAAANI"]
[Wed Jan 07 06:52:51.819758 2026] [:error] [pid 6677:tid 6707] [client 4.193.252.206:14150] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orm.php"] [unique_id "aV2SQ31cbekSFYxHbiMsawAAAM8"]
[Wed Jan 07 06:52:52.024642 2026] [:error] [pid 6677:tid 6693] [client 4.193.252.206:14177] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orm.php"] [unique_id "aV2SRH1cbekSFYxHbiMsbAAAAME"]
[Wed Jan 07 06:52:52.321657 2026] [:error] [pid 6677:tid 6703] [client 4.193.252.206:30037] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orm.php"] [unique_id "aV2SRH1cbekSFYxHbiMsbgAAAMs"]
[Wed Jan 07 06:52:52.852121 2026] [:error] [pid 6570:tid 6600] [client 4.193.252.206:48750] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orm.php"] [unique_id "aV2SRJmjKDvKV_Af0er4SAAAAA4"]
[Wed Jan 07 06:52:53.393405 2026] [:error] [pid 51200:tid 51253] [client 4.193.252.206:34349] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yep.php"] [unique_id "aV2SRYjhb00oxKSD4lezBAAAAQU"]
[Wed Jan 07 06:52:53.801580 2026] [:error] [pid 6570:tid 6596] [client 4.193.252.206:14284] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yep.php"] [unique_id "aV2SRZmjKDvKV_Af0er4SQAAAAo"]
[Wed Jan 07 06:52:54.071627 2026] [:error] [pid 6572:tid 6659] [client 4.193.252.206:13789] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yep.php"] [unique_id "aV2SRnVZKKyUNbqWyYJF0QAAAJM"]
[Wed Jan 07 06:52:54.304294 2026] [:error] [pid 6570:tid 6587] [client 4.193.252.206:35859] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/yep.php"] [unique_id "aV2SRpmjKDvKV_Af0er4SgAAAAE"]
[Wed Jan 07 06:52:54.571485 2026] [:error] [pid 6570:tid 6593] [client 4.193.252.206:6718] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x3.php"] [unique_id "aV2SRpmjKDvKV_Af0er4SwAAAAc"]
[Wed Jan 07 06:52:54.866030 2026] [:error] [pid 6572:tid 6652] [client 4.193.252.206:50930] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x3.php"] [unique_id "aV2SRnVZKKyUNbqWyYJF0gAAAIw"]
[Wed Jan 07 06:52:55.130360 2026] [:error] [pid 6570:tid 6606] [client 4.193.252.206:23775] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x3.php"] [unique_id "aV2SR5mjKDvKV_Af0er4TQAAABQ"]
[Wed Jan 07 06:52:55.769183 2026] [:error] [pid 6570:tid 6604] [client 4.193.252.206:13786] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/x3.php"] [unique_id "aV2SR5mjKDvKV_Af0er4TwAAABI"]
[Wed Jan 07 06:52:55.969301 2026] [:error] [pid 6570:tid 6589] [client 4.193.252.206:50938] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/6erg.php"] [unique_id "aV2SR5mjKDvKV_Af0er4UAAAAAM"]
[Wed Jan 07 06:52:56.215933 2026] [:error] [pid 6572:tid 6660] [client 4.193.252.206:13822] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/6erg.php"] [unique_id "aV2SSHVZKKyUNbqWyYJF0wAAAJQ"]
[Wed Jan 07 06:52:56.553992 2026] [:error] [pid 6570:tid 6605] [client 4.193.252.206:35861] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/6erg.php"] [unique_id "aV2SSJmjKDvKV_Af0er4UgAAABM"]
[Wed Jan 07 06:52:56.804132 2026] [:error] [pid 6570:tid 6586] [client 4.193.252.206:30056] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/6erg.php"] [unique_id "aV2SSJmjKDvKV_Af0er4UwAAAAA"]
[Wed Jan 07 06:52:57.166891 2026] [:error] [pid 6677:tid 6705] [client 4.193.252.206:13817] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aV2SSX1cbekSFYxHbiMscQAAAM0"]
[Wed Jan 07 06:52:57.383599 2026] [:error] [pid 6572:tid 6661] [client 4.193.252.206:13802] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aV2SSXVZKKyUNbqWyYJF1QAAAJU"]
[Wed Jan 07 06:52:57.676650 2026] [:error] [pid 51200:tid 51264] [client 4.193.252.206:50929] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aV2SSYjhb00oxKSD4lezCAAAARA"]
[Wed Jan 07 06:52:58.071498 2026] [:error] [pid 6570:tid 6591] [client 4.193.252.206:50926] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ggfi.php"] [unique_id "aV2SSpmjKDvKV_Af0er4VAAAAAU"]
[Wed Jan 07 06:52:58.379917 2026] [:error] [pid 6570:tid 6597] [client 4.193.252.206:48709] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aV2SSpmjKDvKV_Af0er4VQAAAAs"]
[Wed Jan 07 06:52:58.685166 2026] [:error] [pid 6572:tid 6655] [client 4.193.252.206:23741] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aV2SSnVZKKyUNbqWyYJF1wAAAI8"]
[Wed Jan 07 06:52:58.967304 2026] [:error] [pid 6572:tid 6664] [client 4.193.252.206:50913] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aV2SSnVZKKyUNbqWyYJF2AAAAJg"]
[Wed Jan 07 06:52:59.334018 2026] [:error] [pid 51200:tid 51270] [client 4.193.252.206:6681] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wrt.php"] [unique_id "aV2SS4jhb00oxKSD4lezCgAAARY"]
[Wed Jan 07 06:52:59.582263 2026] [:error] [pid 51200:tid 51263] [client 4.193.252.206:6678] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jju.php"] [unique_id "aV2SS4jhb00oxKSD4lezCwAAAQ8"]
[Wed Jan 07 06:52:59.808039 2026] [:error] [pid 6572:tid 6662] [client 4.193.252.206:23778] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jju.php"] [unique_id "aV2SS3VZKKyUNbqWyYJF2QAAAJY"]
[Wed Jan 07 06:53:00.094545 2026] [:error] [pid 6570:tid 6607] [client 4.193.252.206:51770] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jju.php"] [unique_id "aV2STJmjKDvKV_Af0er4VwAAABU"]
[Wed Jan 07 06:53:00.325730 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:13518] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/jju.php"] [unique_id "aV2STIjhb00oxKSD4lezDgAAARM"]
[Wed Jan 07 06:53:00.703170 2026] [:error] [pid 51200:tid 51248] [client 4.193.252.206:50941] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aV2STIjhb00oxKSD4lezEgAAAQA"]
[Wed Jan 07 06:53:00.966003 2026] [:error] [pid 6570:tid 6602] [client 4.193.252.206:6692] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aV2STJmjKDvKV_Af0er4WQAAABA"]
[Wed Jan 07 06:53:01.430486 2026] [:error] [pid 51200:tid 51269] [client 4.193.252.206:51745] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aV2STYjhb00oxKSD4lezFQAAARU"]
[Wed Jan 07 06:53:01.808348 2026] [:error] [pid 6677:tid 6695] [client 4.193.252.206:13540] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/rsnu.php"] [unique_id "aV2STX1cbekSFYxHbiMsdgAAAMM"]
[Wed Jan 07 06:53:02.106897 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:52218] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lc.php"] [unique_id "aV2STojhb00oxKSD4lezFgAAAQE"]
[Wed Jan 07 06:53:02.391283 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:51742] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lc.php"] [unique_id "aV2STojhb00oxKSD4lezFwAAARQ"]
[Wed Jan 07 06:53:02.711405 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:23798] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lc.php"] [unique_id "aV2STojhb00oxKSD4lezGQAAARI"]
[Wed Jan 07 06:53:02.972983 2026] [:error] [pid 6571:tid 6624] [client 4.193.252.206:43098] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/lc.php"] [unique_id "aV2STg_rJpa_Vt6ZE1D9KQAAAEs"]
[Wed Jan 07 06:53:03.276449 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:13513] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gfile.php"] [unique_id "aV2ST4jhb00oxKSD4lezHAAAAQI"]
[Wed Jan 07 06:53:03.554978 2026] [:error] [pid 6677:tid 6699] [client 4.193.252.206:29502] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gfile.php"] [unique_id "aV2ST31cbekSFYxHbiMseAAAAMc"]
[Wed Jan 07 06:53:03.861248 2026] [:error] [pid 6571:tid 6633] [client 4.193.252.206:6306] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gfile.php"] [unique_id "aV2STw_rJpa_Vt6ZE1D9KgAAAFQ"]
[Wed Jan 07 06:53:04.140883 2026] [:error] [pid 6677:tid 6711] [client 4.193.252.206:29484] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gfile.php"] [unique_id "aV2SUH1cbekSFYxHbiMseQAAANM"]
[Wed Jan 07 06:53:04.363781 2026] [:error] [pid 6570:tid 6596] [client 4.193.252.206:45973] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gold.php"] [unique_id "aV2SUJmjKDvKV_Af0er4WgAAAAo"]
[Wed Jan 07 06:53:04.613500 2026] [:error] [pid 6570:tid 6587] [client 4.193.252.206:29503] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gold.php"] [unique_id "aV2SUJmjKDvKV_Af0er4WwAAAAE"]
[Wed Jan 07 06:53:05.015740 2026] [:error] [pid 51200:tid 51272] [client 4.193.252.206:14966] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gold.php"] [unique_id "aV2SUYjhb00oxKSD4lezHgAAARc"]
[Wed Jan 07 06:53:05.293968 2026] [:error] [pid 6677:tid 6710] [client 4.193.252.206:14967] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/gold.php"] [unique_id "aV2SUX1cbekSFYxHbiMsegAAANI"]
[Wed Jan 07 06:53:05.539272 2026] [:error] [pid 6677:tid 6700] [client 4.193.252.206:6613] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new.php"] [unique_id "aV2SUX1cbekSFYxHbiMsfAAAAMg"]
[Wed Jan 07 06:53:05.890364 2026] [:error] [pid 6677:tid 6703] [client 4.193.252.206:20911] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new.php"] [unique_id "aV2SUX1cbekSFYxHbiMsfgAAAMs"]
[Wed Jan 07 06:53:06.173771 2026] [:error] [pid 6571:tid 6621] [client 4.193.252.206:14960] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new.php"] [unique_id "aV2SUg_rJpa_Vt6ZE1D9LAAAAEg"]
[Wed Jan 07 06:53:06.486839 2026] [:error] [pid 6677:tid 6709] [client 4.193.252.206:7156] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/new.php"] [unique_id "aV2SUn1cbekSFYxHbiMsfwAAANE"]
[Wed Jan 07 06:53:06.714151 2026] [:error] [pid 6677:tid 6708] [client 4.193.252.206:45309] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aua.php"] [unique_id "aV2SUn1cbekSFYxHbiMsgAAAANA"]
[Wed Jan 07 06:53:06.975808 2026] [:error] [pid 6572:tid 6653] [client 4.193.252.206:25596] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aua.php"] [unique_id "aV2SUnVZKKyUNbqWyYJF4AAAAI0"]
[Wed Jan 07 06:53:07.228393 2026] [:error] [pid 6677:tid 6702] [client 4.193.252.206:6601] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aua.php"] [unique_id "aV2SU31cbekSFYxHbiMsgQAAAMo"]
[Wed Jan 07 06:53:07.554615 2026] [:error] [pid 6677:tid 6696] [client 4.193.252.206:25597] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aua.php"] [unique_id "aV2SU31cbekSFYxHbiMsggAAAMQ"]
[Wed Jan 07 06:53:07.770004 2026] [:error] [pid 6571:tid 6616] [client 4.193.252.206:6821] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/great.php"] [unique_id "aV2SUw_rJpa_Vt6ZE1D9LgAAAEM"]
[Wed Jan 07 06:53:08.015510 2026] [:error] [pid 6570:tid 6608] [client 4.193.252.206:6626] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/great.php"] [unique_id "aV2SVJmjKDvKV_Af0er4XgAAABY"]
[Wed Jan 07 06:53:08.367228 2026] [:error] [pid 6571:tid 6613] [client 4.193.252.206:50942] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/great.php"] [unique_id "aV2SVA_rJpa_Vt6ZE1D9LwAAAEA"]
[Wed Jan 07 06:53:08.566855 2026] [:error] [pid 51200:tid 51257] [client 4.193.252.206:27208] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/great.php"] [unique_id "aV2SVIjhb00oxKSD4lezIQAAAQk"]
[Wed Jan 07 06:53:08.814486 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:12753] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aV2SVH1cbekSFYxHbiMsgwAAAMA"]
[Wed Jan 07 06:53:09.043410 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:45278] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aV2SVYjhb00oxKSD4lezIwAAARQ"]
[Wed Jan 07 06:53:09.267852 2026] [:error] [pid 6571:tid 6627] [client 4.193.252.206:28278] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aV2SVQ_rJpa_Vt6ZE1D9MAAAAE4"]
[Wed Jan 07 06:53:09.605043 2026] [:error] [pid 6570:tid 6594] [client 4.193.252.206:45455] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class9.php"] [unique_id "aV2SVZmjKDvKV_Af0er4YwAAAAg"]
[Wed Jan 07 06:53:09.853464 2026] [:error] [pid 6570:tid 6598] [client 4.193.252.206:52294] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ot.php"] [unique_id "aV2SVZmjKDvKV_Af0er4ZAAAAAw"]
[Wed Jan 07 06:53:10.126369 2026] [:error] [pid 51200:tid 51270] [client 4.193.252.206:28246] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ot.php"] [unique_id "aV2SVojhb00oxKSD4lezJQAAARY"]
[Wed Jan 07 06:53:10.438619 2026] [:error] [pid 6677:tid 6713] [client 4.193.252.206:52511] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ot.php"] [unique_id "aV2SVn1cbekSFYxHbiMshgAAANU"]
[Wed Jan 07 06:53:10.692619 2026] [:error] [pid 6570:tid 6600] [client 4.193.252.206:23050] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ot.php"] [unique_id "aV2SVpmjKDvKV_Af0er4aAAAAA4"]
[Wed Jan 07 06:53:10.972617 2026] [:error] [pid 6570:tid 6587] [client 4.193.252.206:52333] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/witmm.php"] [unique_id "aV2SVpmjKDvKV_Af0er4agAAAAE"]
[Wed Jan 07 06:53:11.261761 2026] [:error] [pid 6571:tid 6622] [client 4.193.252.206:52529] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/witmm.php"] [unique_id "aV2SVw_rJpa_Vt6ZE1D9MgAAAEk"]
[Wed Jan 07 06:53:11.494644 2026] [:error] [pid 6572:tid 6643] [client 4.193.252.206:52720] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/witmm.php"] [unique_id "aV2SV3VZKKyUNbqWyYJF6QAAAIM"]
[Wed Jan 07 06:53:11.793409 2026] [:error] [pid 6677:tid 6711] [client 4.193.252.206:52735] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/witmm.php"] [unique_id "aV2SV31cbekSFYxHbiMshwAAANM"]
[Wed Jan 07 06:53:12.166297 2026] [:error] [pid 6571:tid 6614] [client 4.193.252.206:52059] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aV2SWA_rJpa_Vt6ZE1D9MwAAAEE"]
[Wed Jan 07 06:53:12.398790 2026] [:error] [pid 6570:tid 6588] [client 4.193.252.206:26205] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aV2SWJmjKDvKV_Af0er4bQAAAAI"]
[Wed Jan 07 06:53:12.686521 2026] [:error] [pid 6572:tid 6646] [client 4.193.252.206:21566] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aV2SWHVZKKyUNbqWyYJF6gAAAIY"]
[Wed Jan 07 06:53:12.944831 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:12599] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ocxla.php"] [unique_id "aV2SWIjhb00oxKSD4lezJwAAARM"]
[Wed Jan 07 06:53:13.436407 2026] [:error] [pid 6572:tid 6642] [client 4.193.252.206:6760] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tt.php"] [unique_id "aV2SWXVZKKyUNbqWyYJF6wAAAII"]
[Wed Jan 07 06:53:13.678517 2026] [:error] [pid 6572:tid 6654] [client 4.193.252.206:21293] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tt.php"] [unique_id "aV2SWXVZKKyUNbqWyYJF7gAAAI4"]
[Wed Jan 07 06:53:13.912771 2026] [:error] [pid 6572:tid 6653] [client 4.193.252.206:6736] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tt.php"] [unique_id "aV2SWXVZKKyUNbqWyYJF7wAAAI0"]
[Wed Jan 07 06:53:14.119051 2026] [:error] [pid 6571:tid 6631] [client 4.193.252.206:6779] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/tt.php"] [unique_id "aV2SWg_rJpa_Vt6ZE1D9NgAAAFI"]
[Wed Jan 07 06:53:14.410677 2026] [:error] [pid 6571:tid 6632] [client 4.193.252.206:52403] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/resp.php"] [unique_id "aV2SWg_rJpa_Vt6ZE1D9NwAAAFM"]
[Wed Jan 07 06:53:14.670170 2026] [:error] [pid 6571:tid 6629] [client 4.193.252.206:51976] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/resp.php"] [unique_id "aV2SWg_rJpa_Vt6ZE1D9OAAAAFA"]
[Wed Jan 07 06:53:14.945469 2026] [:error] [pid 6571:tid 6620] [client 4.193.252.206:15077] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/resp.php"] [unique_id "aV2SWg_rJpa_Vt6ZE1D9OQAAAEc"]
[Wed Jan 07 06:53:15.158145 2026] [:error] [pid 51200:tid 51272] [client 4.193.252.206:52376] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/resp.php"] [unique_id "aV2SW4jhb00oxKSD4lezKwAAARc"]
[Wed Jan 07 06:53:15.397836 2026] [:error] [pid 6572:tid 6651] [client 4.193.252.206:15083] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aV2SW3VZKKyUNbqWyYJF8AAAAIs"]
[Wed Jan 07 06:53:15.655744 2026] [:error] [pid 51200:tid 51269] [client 4.193.252.206:6746] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aV2SW4jhb00oxKSD4lezLgAAARU"]
[Wed Jan 07 06:53:16.028099 2026] [:error] [pid 6677:tid 6693] [client 4.193.252.206:23154] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aV2SXH1cbekSFYxHbiMsiQAAAME"]
[Wed Jan 07 06:53:16.271859 2026] [:error] [pid 6570:tid 6599] [client 4.193.252.206:16446] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/100.kb.php"] [unique_id "aV2SXJmjKDvKV_Af0er4bwAAAA0"]
[Wed Jan 07 06:53:16.537715 2026] [:error] [pid 6677:tid 6703] [client 4.193.252.206:20503] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wqqs.php"] [unique_id "aV2SXH1cbekSFYxHbiMsigAAAMs"]
[Wed Jan 07 06:53:16.848983 2026] [:error] [pid 6677:tid 6707] [client 4.193.252.206:51997] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wqqs.php"] [unique_id "aV2SXH1cbekSFYxHbiMsiwAAAM8"]
[Wed Jan 07 06:53:17.068487 2026] [:error] [pid 6677:tid 6716] [client 4.193.252.206:52389] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wqqs.php"] [unique_id "aV2SXX1cbekSFYxHbiMsjQAAANg"]
[Wed Jan 07 06:53:17.291116 2026] [:error] [pid 6677:tid 6698] [client 4.193.252.206:52412] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wqqs.php"] [unique_id "aV2SXX1cbekSFYxHbiMsjgAAAMY"]
[Wed Jan 07 06:53:17.719456 2026] [:error] [pid 6572:tid 6661] [client 4.193.252.206:13540] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/zwq13.php"] [unique_id "aV2SXXVZKKyUNbqWyYJF8QAAAJU"]
[Wed Jan 07 06:53:17.997283 2026] [:error] [pid 6571:tid 6624] [client 4.193.252.206:6757] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/zwq13.php"] [unique_id "aV2SXQ_rJpa_Vt6ZE1D9OwAAAEs"]
[Wed Jan 07 06:53:18.334671 2026] [proxy_fcgi:error] [pid 6571:tid 6634] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:18.426224 2026] [proxy_fcgi:error] [pid 6571:tid 6621] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:18.519086 2026] [proxy_fcgi:error] [pid 6571:tid 6616] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:18.610351 2026] [proxy_fcgi:error] [pid 6571:tid 6613] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:18.722113 2026] [proxy_fcgi:error] [pid 6571:tid 6627] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:18.813709 2026] [proxy_fcgi:error] [pid 6571:tid 6630] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:18.911975 2026] [proxy_fcgi:error] [pid 6571:tid 6619] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:19.002159 2026] [proxy_fcgi:error] [pid 6571:tid 6614] [client 4.193.252.206:14232] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:19.089367 2026] [:error] [pid 6571:tid 6626] [client 4.193.252.206:14232] [client 4.193.252.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV2SXw_rJpa_Vt6ZE1D9RgAAAE0"]
[Wed Jan 07 06:53:19.335861 2026] [:error] [pid 6572:tid 6641] [client 4.193.252.206:15080] [client 4.193.252.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.cientifica.com.au"] [uri "/wp-includes/js/codemirror/info.php"] [unique_id "aV2SX3VZKKyUNbqWyYJF8gAAAIE"]
[Wed Jan 07 06:53:19.814459 2026] [proxy_fcgi:error] [pid 6571:tid 6636] [client 4.193.252.206:12618] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 06:53:19.903143 2026] [:error] [pid 6571:tid 6632] [client 4.193.252.206:12618] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api137.php"] [unique_id "aV2SXw_rJpa_Vt6ZE1D9SwAAAFM"]
[Wed Jan 07 06:53:20.200458 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:15102] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api137.php"] [unique_id "aV2SYIjhb00oxKSD4lezMwAAARM"]
[Wed Jan 07 06:53:20.390236 2026] [:error] [pid 6677:tid 6702] [client 4.193.252.206:16398] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api137.php"] [unique_id "aV2SYH1cbekSFYxHbiMskAAAAMo"]
[Wed Jan 07 06:53:20.618441 2026] [:error] [pid 6570:tid 6610] [client 4.193.252.206:52411] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/api137.php"] [unique_id "aV2SYJmjKDvKV_Af0er4cgAAABg"]
[Wed Jan 07 06:53:20.924344 2026] [:error] [pid 6571:tid 6629] [client 4.193.252.206:12625] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class629.php"] [unique_id "aV2SYA_rJpa_Vt6ZE1D9TQAAAFA"]
[Wed Jan 07 06:53:21.224090 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:52388] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class629.php"] [unique_id "aV2SYX1cbekSFYxHbiMskQAAAMA"]
[Wed Jan 07 06:53:21.452043 2026] [:error] [pid 6570:tid 6603] [client 4.193.252.206:16394] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class629.php"] [unique_id "aV2SYZmjKDvKV_Af0er4dAAAABE"]
[Wed Jan 07 06:53:21.725247 2026] [:error] [pid 6571:tid 6620] [client 4.193.252.206:21248] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/class629.php"] [unique_id "aV2SYQ_rJpa_Vt6ZE1D9TgAAAEc"]
[Wed Jan 07 06:53:22.054607 2026] [:error] [pid 6677:tid 6699] [client 4.193.252.206:20972] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp670.php"] [unique_id "aV2SYn1cbekSFYxHbiMslAAAAMc"]
[Wed Jan 07 06:53:22.239317 2026] [:error] [pid 51200:tid 51248] [client 4.193.252.206:6739] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp670.php"] [unique_id "aV2SYojhb00oxKSD4lezNwAAAQA"]
[Wed Jan 07 06:53:22.417986 2026] [:error] [pid 6572:tid 6655] [client 4.193.252.206:20931] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp670.php"] [unique_id "aV2SYnVZKKyUNbqWyYJF9AAAAI8"]
[Wed Jan 07 06:53:22.653639 2026] [:error] [pid 51200:tid 51254] [client 4.193.252.206:52355] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp670.php"] [unique_id "aV2SYojhb00oxKSD4lezOAAAAQY"]
[Wed Jan 07 06:53:23.022932 2026] [:error] [pid 6572:tid 6657] [client 4.193.252.206:15075] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v1.php"] [unique_id "aV2SY3VZKKyUNbqWyYJF9gAAAJE"]
[Wed Jan 07 06:53:23.228631 2026] [:error] [pid 6570:tid 6593] [client 4.193.252.206:16433] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v1.php"] [unique_id "aV2SY5mjKDvKV_Af0er4dwAAAAc"]
[Wed Jan 07 06:53:23.540752 2026] [:error] [pid 51200:tid 51255] [client 4.193.252.206:52965] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v1.php"] [unique_id "aV2SY4jhb00oxKSD4lezOQAAAQc"]
[Wed Jan 07 06:53:23.841601 2026] [:error] [pid 51200:tid 51262] [client 4.193.252.206:12569] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v1.php"] [unique_id "aV2SY4jhb00oxKSD4lezOgAAAQ4"]
[Wed Jan 07 06:53:24.213307 2026] [:error] [pid 51200:tid 51269] [client 4.193.252.206:20949] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aV2SZIjhb00oxKSD4lezOwAAARU"]
[Wed Jan 07 06:53:24.555464 2026] [:error] [pid 6677:tid 6700] [client 4.193.252.206:26690] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aV2SZH1cbekSFYxHbiMslQAAAMg"]
[Wed Jan 07 06:53:24.971437 2026] [:error] [pid 51200:tid 51258] [client 4.193.252.206:42637] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aV2SZIjhb00oxKSD4lezPgAAAQo"]
[Wed Jan 07 06:53:25.298323 2026] [:error] [pid 6570:tid 6595] [client 4.193.252.206:22062] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/xx.php"] [unique_id "aV2SZZmjKDvKV_Af0er4egAAAAk"]
[Wed Jan 07 06:53:25.617508 2026] [:error] [pid 6570:tid 6591] [client 4.193.252.206:6215] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/userk.php"] [unique_id "aV2SZZmjKDvKV_Af0er4ewAAAAU"]
[Wed Jan 07 06:53:25.883783 2026] [:error] [pid 6571:tid 6616] [client 4.193.252.206:52357] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/userk.php"] [unique_id "aV2SZQ_rJpa_Vt6ZE1D9UQAAAEM"]
[Wed Jan 07 06:53:26.163008 2026] [:error] [pid 6571:tid 6633] [client 4.193.252.206:22039] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/userk.php"] [unique_id "aV2SZg_rJpa_Vt6ZE1D9UwAAAFQ"]
[Wed Jan 07 06:53:26.489029 2026] [:error] [pid 6572:tid 6664] [client 4.193.252.206:13073] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/userk.php"] [unique_id "aV2SZnVZKKyUNbqWyYJF-AAAAJg"]
[Wed Jan 07 06:53:26.868045 2026] [:error] [pid 6570:tid 6599] [client 4.193.252.206:13093] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/skinmain.php"] [unique_id "aV2SZpmjKDvKV_Af0er4fAAAAA0"]
[Wed Jan 07 06:53:27.106466 2026] [:error] [pid 6570:tid 6598] [client 4.193.252.206:45815] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/skinmain.php"] [unique_id "aV2SZ5mjKDvKV_Af0er4fQAAAAw"]
[Wed Jan 07 06:53:27.286170 2026] [:error] [pid 6572:tid 6648] [client 4.193.252.206:15136] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/skinmain.php"] [unique_id "aV2SZ3VZKKyUNbqWyYJF-QAAAIg"]
[Wed Jan 07 06:53:27.515479 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:20958] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/skinmain.php"] [unique_id "aV2SZ4jhb00oxKSD4lezQQAAAQE"]
[Wed Jan 07 06:53:27.769855 2026] [:error] [pid 51200:tid 51270] [client 4.193.252.206:23136] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/new.php"] [unique_id "aV2SZ4jhb00oxKSD4lezQgAAARY"]
[Wed Jan 07 06:53:27.984274 2026] [:error] [pid 6572:tid 6642] [client 4.193.252.206:22019] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/new.php"] [unique_id "aV2SZ3VZKKyUNbqWyYJF-gAAAII"]
[Wed Jan 07 06:53:28.577395 2026] [:error] [pid 6571:tid 6619] [client 4.193.252.206:42663] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/new.php"] [unique_id "aV2SaA_rJpa_Vt6ZE1D9VgAAAEY"]
[Wed Jan 07 06:53:28.852194 2026] [:error] [pid 51200:tid 51257] [client 4.193.252.206:48055] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/new.php"] [unique_id "aV2SaIjhb00oxKSD4lezRQAAAQk"]
[Wed Jan 07 06:53:29.066837 2026] [:error] [pid 51200:tid 51248] [client 4.193.252.206:20928] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orxnwdbb.php"] [unique_id "aV2SaYjhb00oxKSD4lezRgAAAQA"]
[Wed Jan 07 06:53:29.387890 2026] [:error] [pid 6571:tid 6615] [client 4.193.252.206:13107] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orxnwdbb.php"] [unique_id "aV2SaQ_rJpa_Vt6ZE1D9WQAAAEI"]
[Wed Jan 07 06:53:29.691802 2026] [:error] [pid 6572:tid 6644] [client 4.193.252.206:13061] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orxnwdbb.php"] [unique_id "aV2SaXVZKKyUNbqWyYJF_QAAAIQ"]
[Wed Jan 07 06:53:30.152190 2026] [:error] [pid 6677:tid 6703] [client 4.193.252.206:6949] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/orxnwdbb.php"] [unique_id "aV2San1cbekSFYxHbiMslwAAAMs"]
[Wed Jan 07 06:53:30.547721 2026] [:error] [pid 6570:tid 6610] [client 4.193.252.206:6465] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v3.php"] [unique_id "aV2SapmjKDvKV_Af0er4gAAAABg"]
[Wed Jan 07 06:53:30.883032 2026] [:error] [pid 6677:tid 6706] [client 4.193.252.206:22030] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v3.php"] [unique_id "aV2San1cbekSFYxHbiMsmgAAAM4"]
[Wed Jan 07 06:53:31.129387 2026] [:error] [pid 6571:tid 6637] [client 4.193.252.206:42627] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v3.php"] [unique_id "aV2Saw_rJpa_Vt6ZE1D9WgAAAFg"]
[Wed Jan 07 06:53:31.332008 2026] [:error] [pid 6571:tid 6636] [client 4.193.252.206:6508] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/v3.php"] [unique_id "aV2Saw_rJpa_Vt6ZE1D9WwAAAFc"]
[Wed Jan 07 06:53:31.522707 2026] [:error] [pid 6570:tid 6586] [client 4.193.252.206:24446] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fs8.php"] [unique_id "aV2Sa5mjKDvKV_Af0er4gQAAAAA"]
[Wed Jan 07 06:53:31.783593 2026] [:error] [pid 6677:tid 6709] [client 4.193.252.206:6485] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fs8.php"] [unique_id "aV2Sa31cbekSFYxHbiMsnAAAANE"]
[Wed Jan 07 06:53:32.136475 2026] [:error] [pid 6677:tid 6705] [client 4.193.252.206:15152] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fs8.php"] [unique_id "aV2SbH1cbekSFYxHbiMsnQAAAM0"]
[Wed Jan 07 06:53:32.341672 2026] [:error] [pid 6677:tid 6696] [client 4.193.252.206:28207] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/fs8.php"] [unique_id "aV2SbH1cbekSFYxHbiMsnwAAAMQ"]
[Wed Jan 07 06:53:32.563732 2026] [:error] [pid 6677:tid 6713] [client 4.193.252.206:52774] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/links.php"] [unique_id "aV2SbH1cbekSFYxHbiMsoAAAANU"]
[Wed Jan 07 06:53:32.789513 2026] [:error] [pid 6570:tid 6603] [client 4.193.252.206:20900] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/links.php"] [unique_id "aV2SbJmjKDvKV_Af0er4ggAAABE"]
[Wed Jan 07 06:53:33.077165 2026] [:error] [pid 6572:tid 6663] [client 4.193.252.206:15024] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/links.php"] [unique_id "aV2SbXVZKKyUNbqWyYJGAQAAAJc"]
[Wed Jan 07 06:53:33.358826 2026] [:error] [pid 6677:tid 6694] [client 4.193.252.206:52765] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-admin/includes/links.php"] [unique_id "aV2SbX1cbekSFYxHbiMsoQAAAMI"]
[Wed Jan 07 06:53:33.633370 2026] [:error] [pid 6677:tid 6711] [client 4.193.252.206:52787] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/backup/dumper.php"] [unique_id "aV2SbX1cbekSFYxHbiMsogAAANM"]
[Wed Jan 07 06:53:33.856033 2026] [:error] [pid 51200:tid 51273] [client 4.193.252.206:52795] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/backup/dumper.php"] [unique_id "aV2SbYjhb00oxKSD4lezSgAAARg"]
[Wed Jan 07 06:53:34.042103 2026] [:error] [pid 51200:tid 51252] [client 4.193.252.206:52754] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/backup/dumper.php"] [unique_id "aV2Sbojhb00oxKSD4lezSwAAAQQ"]
[Wed Jan 07 06:53:34.302334 2026] [:error] [pid 6677:tid 6710] [client 4.193.252.206:22073] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/backup/dumper.php"] [unique_id "aV2Sbn1cbekSFYxHbiMspAAAANI"]
[Wed Jan 07 06:53:34.728597 2026] [:error] [pid 6677:tid 6700] [client 4.193.252.206:12823] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/adminer-4.5.0-mysql.php"] [unique_id "aV2Sbn1cbekSFYxHbiMspQAAAMg"]
[Wed Jan 07 06:53:35.060691 2026] [:error] [pid 6572:tid 6662] [client 4.193.252.206:15178] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/adminer-4.5.0-mysql.php"] [unique_id "aV2Sb3VZKKyUNbqWyYJGBAAAAJY"]
[Wed Jan 07 06:53:35.334111 2026] [:error] [pid 6570:tid 6587] [client 4.193.252.206:24407] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/adminer-4.5.0-mysql.php"] [unique_id "aV2Sb5mjKDvKV_Af0er4gwAAAAE"]
[Wed Jan 07 06:53:35.671422 2026] [:error] [pid 51200:tid 51272] [client 4.193.252.206:24411] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/adminer-4.5.0-mysql.php"] [unique_id "aV2Sb4jhb00oxKSD4lezTQAAARc"]
[Wed Jan 07 06:53:35.919351 2026] [:error] [pid 6571:tid 6633] [client 4.193.252.206:24444] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/site/wp-class.php"] [unique_id "aV2Sbw_rJpa_Vt6ZE1D9YAAAAFQ"]
[Wed Jan 07 06:53:36.222399 2026] [:error] [pid 6677:tid 6707] [client 4.193.252.206:15200] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/site/wp-class.php"] [unique_id "aV2ScH1cbekSFYxHbiMsqQAAAM8"]
[Wed Jan 07 06:53:36.620681 2026] [:error] [pid 6677:tid 6706] [client 4.193.252.206:7076] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/site/wp-class.php"] [unique_id "aV2ScH1cbekSFYxHbiMsqwAAAM4"]
[Wed Jan 07 06:53:36.956123 2026] [:error] [pid 6570:tid 6602] [client 4.193.252.206:21273] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/site/wp-class.php"] [unique_id "aV2ScJmjKDvKV_Af0er4hAAAABA"]
[Wed Jan 07 06:53:37.202346 2026] [:error] [pid 51200:tid 51268] [client 4.193.252.206:28211] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/video.php"] [unique_id "aV2ScYjhb00oxKSD4lezUAAAARQ"]
[Wed Jan 07 06:53:37.496435 2026] [:error] [pid 51200:tid 51251] [client 4.193.252.206:22114] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/video.php"] [unique_id "aV2ScYjhb00oxKSD4lezUgAAAQM"]
[Wed Jan 07 06:53:37.729376 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:34094] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/video.php"] [unique_id "aV2ScYjhb00oxKSD4lezVAAAAQE"]
[Wed Jan 07 06:53:38.021076 2026] [:error] [pid 6677:tid 6702] [client 4.193.252.206:20949] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/video.php"] [unique_id "aV2Scn1cbekSFYxHbiMsrAAAAMo"]
[Wed Jan 07 06:53:38.239974 2026] [:error] [pid 6572:tid 6656] [client 4.193.252.206:12506] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/scgi-bin.php"] [unique_id "aV2ScnVZKKyUNbqWyYJGBgAAAJA"]
[Wed Jan 07 06:53:38.468104 2026] [:error] [pid 6571:tid 6619] [client 4.193.252.206:12832] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/scgi-bin.php"] [unique_id "aV2Scg_rJpa_Vt6ZE1D9YgAAAEY"]
[Wed Jan 07 06:53:38.728845 2026] [:error] [pid 51200:tid 51267] [client 4.193.252.206:12668] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/scgi-bin.php"] [unique_id "aV2Scojhb00oxKSD4lezVQAAARM"]
[Wed Jan 07 06:53:38.971747 2026] [:error] [pid 6572:tid 6645] [client 4.193.252.206:24399] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/scgi-bin.php"] [unique_id "aV2ScnVZKKyUNbqWyYJGCAAAAIU"]
[Wed Jan 07 06:53:39.371945 2026] [:error] [pid 6572:tid 6640] [client 4.193.252.206:12682] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/finest09.php"] [unique_id "aV2Sc3VZKKyUNbqWyYJGCQAAAIA"]
[Wed Jan 07 06:53:39.792494 2026] [:error] [pid 6572:tid 6648] [client 4.193.252.206:52110] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/finest09.php"] [unique_id "aV2Sc3VZKKyUNbqWyYJGCwAAAIg"]
[Wed Jan 07 06:53:40.029823 2026] [:error] [pid 6571:tid 6626] [client 4.193.252.206:52333] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/finest09.php"] [unique_id "aV2SdA_rJpa_Vt6ZE1D9ZAAAAE0"]
[Wed Jan 07 06:53:40.328960 2026] [:error] [pid 6677:tid 6705] [client 4.193.252.206:12825] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/finest09.php"] [unique_id "aV2SdH1cbekSFYxHbiMsrQAAAM0"]
[Wed Jan 07 06:53:40.615746 2026] [:error] [pid 6572:tid 6660] [client 4.193.252.206:12700] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1100.php"] [unique_id "aV2SdHVZKKyUNbqWyYJGDgAAAJQ"]
[Wed Jan 07 06:53:41.050057 2026] [:error] [pid 6572:tid 6661] [client 4.193.252.206:15169] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1100.php"] [unique_id "aV2SdXVZKKyUNbqWyYJGEQAAAJU"]
[Wed Jan 07 06:53:41.343688 2026] [:error] [pid 6571:tid 6637] [client 4.193.252.206:13030] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1100.php"] [unique_id "aV2SdQ_rJpa_Vt6ZE1D9ZgAAAFg"]
[Wed Jan 07 06:53:41.572882 2026] [:error] [pid 6571:tid 6631] [client 4.193.252.206:52156] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/1100.php"] [unique_id "aV2SdQ_rJpa_Vt6ZE1D9ZwAAAFI"]
[Wed Jan 07 06:53:41.814958 2026] [:error] [pid 6571:tid 6632] [client 4.193.252.206:12998] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/iov.php"] [unique_id "aV2SdQ_rJpa_Vt6ZE1D9aAAAAFM"]
[Wed Jan 07 06:53:42.115007 2026] [:error] [pid 6571:tid 6623] [client 4.193.252.206:24416] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/iov.php"] [unique_id "aV2Sdg_rJpa_Vt6ZE1D9agAAAEo"]
[Wed Jan 07 06:53:42.337604 2026] [:error] [pid 51200:tid 51264] [client 4.193.252.206:15187] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/iov.php"] [unique_id "aV2Sdojhb00oxKSD4lezVwAAARA"]
[Wed Jan 07 06:53:42.549996 2026] [:error] [pid 51200:tid 51262] [client 4.193.252.206:24431] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/iov.php"] [unique_id "aV2Sdojhb00oxKSD4lezWAAAAQ4"]
[Wed Jan 07 06:53:42.851086 2026] [:error] [pid 6677:tid 6694] [client 4.193.252.206:7051] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app/config.php"] [unique_id "aV2Sdn1cbekSFYxHbiMsrwAAAMI"]
[Wed Jan 07 06:53:43.081634 2026] [:error] [pid 6572:tid 6656] [client 4.193.252.206:12843] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app/config.php"] [unique_id "aV2Sd3VZKKyUNbqWyYJGFQAAAJA"]
[Wed Jan 07 06:53:43.360024 2026] [:error] [pid 6677:tid 6700] [client 4.193.252.206:13028] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app/config.php"] [unique_id "aV2Sd31cbekSFYxHbiMssAAAAMg"]
[Wed Jan 07 06:53:43.567334 2026] [:error] [pid 6677:tid 6698] [client 4.193.252.206:52099] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/app/config.php"] [unique_id "aV2Sd31cbekSFYxHbiMssgAAAMY"]
[Wed Jan 07 06:53:43.952432 2026] [:error] [pid 6571:tid 6625] [client 4.193.252.206:24439] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2Sdw_rJpa_Vt6ZE1D9bQAAAEw"]
[Wed Jan 07 06:53:44.216759 2026] [:error] [pid 6571:tid 6616] [client 4.193.252.206:12726] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2SeA_rJpa_Vt6ZE1D9bwAAAEM"]
[Wed Jan 07 06:53:44.437680 2026] [:error] [pid 6572:tid 6642] [client 4.193.252.206:13018] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2SeHVZKKyUNbqWyYJGFwAAAII"]
[Wed Jan 07 06:53:44.621888 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:48057] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2SeIjhb00oxKSD4lezXAAAAQE"]
[Wed Jan 07 06:53:44.830680 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:52121] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known.php"] [unique_id "aV2SeIjhb00oxKSD4lezXQAAAQs"]
[Wed Jan 07 06:53:45.069137 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:13051] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known.php"] [unique_id "aV2SeYjhb00oxKSD4lezXgAAAQI"]
[Wed Jan 07 06:53:45.346363 2026] [:error] [pid 6677:tid 6692] [client 4.193.252.206:31354] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known.php"] [unique_id "aV2SeX1cbekSFYxHbiMstAAAAMA"]
[Wed Jan 07 06:53:45.588315 2026] [:error] [pid 6677:tid 6695] [client 4.193.252.206:12848] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/.well-known.php"] [unique_id "aV2SeX1cbekSFYxHbiMstQAAAMM"]
[Wed Jan 07 06:53:45.812048 2026] [:error] [pid 6571:tid 6618] [client 4.193.252.206:24406] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/02.php"] [unique_id "aV2SeQ_rJpa_Vt6ZE1D9cgAAAEU"]
[Wed Jan 07 06:53:46.092165 2026] [:error] [pid 51200:tid 51255] [client 4.193.252.206:27178] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/02.php"] [unique_id "aV2Seojhb00oxKSD4lezYgAAAQc"]
[Wed Jan 07 06:53:46.331323 2026] [:error] [pid 6572:tid 6651] [client 4.193.252.206:13046] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/02.php"] [unique_id "aV2SenVZKKyUNbqWyYJGHAAAAIs"]
[Wed Jan 07 06:53:46.816857 2026] [:error] [pid 51200:tid 51261] [client 4.193.252.206:13055] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/02.php"] [unique_id "aV2Seojhb00oxKSD4lezZAAAAQ0"]
[Wed Jan 07 06:53:47.008781 2026] [:error] [pid 51200:tid 51269] [client 4.193.252.206:12703] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/13.php"] [unique_id "aV2Se4jhb00oxKSD4lezZQAAARU"]
[Wed Jan 07 06:53:47.303953 2026] [:error] [pid 6571:tid 6626] [client 4.193.252.206:6911] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/13.php"] [unique_id "aV2Sew_rJpa_Vt6ZE1D9cwAAAE0"]
[Wed Jan 07 06:53:47.574704 2026] [:error] [pid 51200:tid 51273] [client 4.193.252.206:14346] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/13.php"] [unique_id "aV2Se4jhb00oxKSD4lezaAAAARg"]
[Wed Jan 07 06:53:47.830511 2026] [:error] [pid 51200:tid 51272] [client 4.193.252.206:13033] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/13.php"] [unique_id "aV2Se4jhb00oxKSD4lezagAAARc"]
[Wed Jan 07 06:53:48.352415 2026] [:error] [pid 6570:tid 6608] [client 4.193.252.206:7049] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2024.php"] [unique_id "aV2SfJmjKDvKV_Af0er4nAAAABY"]
[Wed Jan 07 06:53:48.617175 2026] [:error] [pid 6677:tid 6693] [client 4.193.252.206:45784] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2024.php"] [unique_id "aV2SfH1cbekSFYxHbiMsuAAAAME"]
[Wed Jan 07 06:53:48.923943 2026] [:error] [pid 6677:tid 6706] [client 4.193.252.206:12685] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2024.php"] [unique_id "aV2SfH1cbekSFYxHbiMsuQAAAM4"]
[Wed Jan 07 06:53:49.169295 2026] [:error] [pid 51200:tid 51249] [client 4.193.252.206:12735] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/2024.php"] [unique_id "aV2SfYjhb00oxKSD4lezbQAAAQE"]
[Wed Jan 07 06:53:49.438676 2026] [:error] [pid 6572:tid 6658] [client 4.193.252.206:13007] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aV2SfXVZKKyUNbqWyYJGIQAAAJI"]
[Wed Jan 07 06:53:49.835359 2026] [:error] [pid 6572:tid 6664] [client 4.193.252.206:23132] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aV2SfXVZKKyUNbqWyYJGIgAAAJg"]
[Wed Jan 07 06:53:50.075490 2026] [:error] [pid 6677:tid 6696] [client 4.193.252.206:12839] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aV2Sfn1cbekSFYxHbiMsvQAAAMQ"]
[Wed Jan 07 06:53:50.350051 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:14132] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/403.php"] [unique_id "aV2Sfojhb00oxKSD4lezbgAAAQs"]
[Wed Jan 07 06:53:50.679684 2026] [:error] [pid 6677:tid 6698] [client 4.193.252.206:27166] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Diff.php"] [unique_id "aV2Sfn1cbekSFYxHbiMsvgAAAMY"]
[Wed Jan 07 06:53:50.876748 2026] [:error] [pid 51200:tid 51266] [client 4.193.252.206:13023] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Diff.php"] [unique_id "aV2Sfojhb00oxKSD4lezbwAAARI"]
[Wed Jan 07 06:53:51.170724 2026] [:error] [pid 6572:tid 6648] [client 4.193.252.206:6880] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Diff.php"] [unique_id "aV2Sf3VZKKyUNbqWyYJGJQAAAIg"]
[Wed Jan 07 06:53:51.422592 2026] [:error] [pid 6570:tid 6605] [client 4.193.252.206:14113] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Diff.php"] [unique_id "aV2Sf5mjKDvKV_Af0er4owAAABM"]
[Wed Jan 07 06:53:51.682695 2026] [:error] [pid 6572:tid 6646] [client 4.193.252.206:24415] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Engine.php"] [unique_id "aV2Sf3VZKKyUNbqWyYJGKAAAAIY"]
[Wed Jan 07 06:53:51.891783 2026] [:error] [pid 6677:tid 6701] [client 4.193.252.206:22114] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Engine.php"] [unique_id "aV2Sf31cbekSFYxHbiMswQAAAMk"]
[Wed Jan 07 06:53:52.100486 2026] [:error] [pid 6572:tid 6653] [client 4.193.252.206:6879] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Engine.php"] [unique_id "aV2SgHVZKKyUNbqWyYJGKQAAAI0"]
[Wed Jan 07 06:53:52.332737 2026] [:error] [pid 51200:tid 51255] [client 4.193.252.206:14124] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Engine.php"] [unique_id "aV2SgIjhb00oxKSD4lezcQAAAQc"]
[Wed Jan 07 06:53:52.582021 2026] [:error] [pid 51200:tid 51257] [client 4.193.252.206:7055] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ID3.php"] [unique_id "aV2SgIjhb00oxKSD4lezcwAAAQk"]
[Wed Jan 07 06:53:52.806042 2026] [:error] [pid 51200:tid 51261] [client 4.193.252.206:12814] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ID3.php"] [unique_id "aV2SgIjhb00oxKSD4lezdAAAAQ0"]
[Wed Jan 07 06:53:53.090365 2026] [:error] [pid 51200:tid 51273] [client 4.193.252.206:14722] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ID3.php"] [unique_id "aV2SgYjhb00oxKSD4lezdQAAARg"]
[Wed Jan 07 06:53:53.300056 2026] [:error] [pid 6571:tid 6625] [client 4.193.252.206:27140] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ID3.php"] [unique_id "aV2SgQ_rJpa_Vt6ZE1D9eAAAAEw"]
[Wed Jan 07 06:53:53.518197 2026] [:error] [pid 6571:tid 6624] [client 4.193.252.206:24417] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/IXR.php"] [unique_id "aV2SgQ_rJpa_Vt6ZE1D9eQAAAEs"]
[Wed Jan 07 06:53:53.752106 2026] [:error] [pid 6570:tid 6594] [client 4.193.252.206:24418] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/IXR.php"] [unique_id "aV2SgZmjKDvKV_Af0er4pAAAAAg"]
[Wed Jan 07 06:53:53.934345 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:27149] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/IXR.php"] [unique_id "aV2SgYjhb00oxKSD4lezeQAAAQs"]
[Wed Jan 07 06:53:54.141725 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:52122] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/IXR.php"] [unique_id "aV2Sgojhb00oxKSD4lezegAAAQI"]
[Wed Jan 07 06:53:54.401593 2026] [:error] [pid 51200:tid 51260] [client 4.193.252.206:27162] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/SimplePie.php"] [unique_id "aV2Sgojhb00oxKSD4lezewAAAQw"]
[Wed Jan 07 06:53:54.679530 2026] [:error] [pid 6572:tid 6661] [client 4.193.252.206:12500] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/SimplePie.php"] [unique_id "aV2SgnVZKKyUNbqWyYJGKwAAAJU"]
[Wed Jan 07 06:53:54.965357 2026] [:error] [pid 6677:tid 6707] [client 4.193.252.206:14128] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/SimplePie.php"] [unique_id "aV2Sgn1cbekSFYxHbiMsxAAAAM8"]
[Wed Jan 07 06:53:55.266949 2026] [:error] [pid 51200:tid 51254] [client 4.193.252.206:12725] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/SimplePie.php"] [unique_id "aV2Sg4jhb00oxKSD4lezfgAAAQY"]
[Wed Jan 07 06:53:55.534835 2026] [:error] [pid 6571:tid 6620] [client 4.193.252.206:45805] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Text.php"] [unique_id "aV2Sgw_rJpa_Vt6ZE1D9egAAAEc"]
[Wed Jan 07 06:53:55.760901 2026] [:error] [pid 51200:tid 51251] [client 4.193.252.206:12820] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Text.php"] [unique_id "aV2Sg4jhb00oxKSD4lezgQAAAQM"]
[Wed Jan 07 06:53:56.011977 2026] [:error] [pid 51200:tid 51269] [client 4.193.252.206:52108] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Text.php"] [unique_id "aV2ShIjhb00oxKSD4lezggAAARU"]
[Wed Jan 07 06:53:56.239175 2026] [:error] [pid 6677:tid 6693] [client 4.193.252.206:24882] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/Text.php"] [unique_id "aV2ShH1cbekSFYxHbiMsxQAAAME"]
[Wed Jan 07 06:53:56.549337 2026] [:error] [pid 6570:tid 6609] [client 4.193.252.206:7056] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aahana.php"] [unique_id "aV2ShJmjKDvKV_Af0er4pwAAABc"]
[Wed Jan 07 06:53:56.855325 2026] [:error] [pid 51200:tid 51262] [client 4.193.252.206:29014] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aahana.php"] [unique_id "aV2ShIjhb00oxKSD4lezhQAAAQ4"]
[Wed Jan 07 06:53:57.300842 2026] [:error] [pid 51200:tid 51259] [client 4.193.252.206:27181] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aahana.php"] [unique_id "aV2ShYjhb00oxKSD4lezhgAAAQs"]
[Wed Jan 07 06:53:57.534940 2026] [:error] [pid 51200:tid 51250] [client 4.193.252.206:13013] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/aahana.php"] [unique_id "aV2ShYjhb00oxKSD4lezhwAAAQI"]
[Wed Jan 07 06:53:57.726208 2026] [:error] [pid 6571:tid 6630] [client 4.193.252.206:13027] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws35.php"] [unique_id "aV2ShQ_rJpa_Vt6ZE1D9fgAAAFE"]
[Wed Jan 07 06:53:57.908684 2026] [:error] [pid 6572:tid 6644] [client 4.193.252.206:14126] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws35.php"] [unique_id "aV2ShXVZKKyUNbqWyYJGLQAAAIQ"]
[Wed Jan 07 06:53:58.143720 2026] [:error] [pid 6572:tid 6655] [client 4.193.252.206:13028] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws35.php"] [unique_id "aV2ShnVZKKyUNbqWyYJGLgAAAI8"]
[Wed Jan 07 06:53:58.441647 2026] [:error] [pid 6570:tid 6587] [client 4.193.252.206:14087] [client 4.193.252.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ws35.php"] [unique_id "aV2ShpmjKDvKV_Af0er4qQAAAAE"]
[Wed Jan 07 06:56:20.178119 2026] [autoindex:error] [pid 6570:tid 6590] [client 45.148.10.250:43582] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 07:30:45.305854 2026] [:error] [pid 30633:tid 30679] [client 223.15.245.170:48145] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV2bJfZiVWlF7303nMgEwQAAAFA"]
[Wed Jan 07 07:50:32.306910 2026] [autoindex:error] [pid 30720:tid 30724] [client 194.195.116.230:42122] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 08:00:11.274608 2026] [autoindex:error] [pid 30720:tid 30726] [client 195.178.110.242:43084] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 08:21:05.493519 2026] [:error] [pid 30720:tid 30737] [client 129.226.174.80:34844] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV2m8YdgcpQjqzUi9Wb7BAAAAU8"]
[Wed Jan 07 09:15:44.833414 2026] [:error] [pid 58294:tid 58298] [client 124.217.27.183:44998] [client 124.217.27.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.27.183, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aV2zwFfzA7c0ITpf3nGL2QAAAII"]
[Wed Jan 07 09:15:44.845197 2026] [proxy_fcgi:error] [pid 58294:tid 58298] [client 124.217.27.183:44998] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 09:38:37.102097 2026] [autoindex:error] [pid 58330:tid 58336] [client 51.68.107.159:10037] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 09:59:20.417109 2026] [:error] [pid 30633:tid 30681] [client 195.178.110.161:38294] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aV29-PZiVWlF7303nMgqAQAAAFI"]
[Wed Jan 07 10:16:13.099642 2026] [:error] [pid 58330:tid 58332] [client 43.130.34.74:35526] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV3B7Q8kGngKGK7_wndZgAAAAQA"]
[Wed Jan 07 10:54:47.249820 2026] [autoindex:error] [pid 30633:tid 30678] [client 199.244.88.222:52861] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 12:08:49.554180 2026] [autoindex:error] [pid 30633:tid 30687] [client 74.7.227.169:52464] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 13:23:05.579398 2026] [:error] [pid 58330:tid 58335] [client 195.178.110.161:37854] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aV3tuQ8kGngKGK7_wnecaAAAAQM"]
[Wed Jan 07 13:29:04.995801 2026] [autoindex:error] [pid 30720:tid 30740] [client 52.90.244.244:38738] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 13:33:50.108072 2026] [autoindex:error] [pid 30634:tid 30714] [client 74.7.227.1:47384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 13:40:32.636320 2026] [:error] [pid 30634:tid 30699] [client 49.235.136.28:40034] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV3x0ICIPBibObtmZtugRAAAAMk"]
[Wed Jan 07 15:17:28.963426 2026] [:error] [pid 58330:tid 58335] [client 43.153.123.3:48834] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV4IiA8kGngKGK7_wne6PAAAAQM"]
[Wed Jan 07 17:03:27.490282 2026] [:error] [pid 58294:tid 58306] [client 43.166.136.202:33492] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV4hX1fzA7c0ITpf3nECdgAAAIo"]
[Wed Jan 07 20:05:06.295888 2026] [:error] [pid 51128:tid 51135] [client 101.91.148.219:34845] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV5L8kGjtE8U88mrwuedwQAAAYU"]
[Wed Jan 07 20:36:26.785868 2026] [autoindex:error] [pid 30633:tid 30671] [client 79.99.149.115:17699] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 20:43:46.783821 2026] [autoindex:error] [pid 51128:tid 51154] [client 62.171.152.107:20676] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 20:45:25.082934 2026] [autoindex:error] [pid 58330:tid 58343] [client 145.220.91.19:60738] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 20:50:41.386830 2026] [autoindex:error] [pid 58330:tid 58333] [client 151.244.84.195:62767] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 20:53:51.394087 2026] [autoindex:error] [pid 51128:tid 51139] [client 47.88.101.3:49375] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 20:53:54.646693 2026] [autoindex:error] [pid 30633:tid 30677] [client 47.254.76.138:54773] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 21:57:46.015398 2026] [:error] [pid 30634:tid 30700] [client 170.106.181.163:52166] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV5mWoCIPBibObtmZtsRBgAAAMo"]
[Wed Jan 07 22:16:38.280203 2026] [autoindex:error] [pid 30633:tid 30671] [client 182.253.238.235:52436] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 22:16:38.592878 2026] [autoindex:error] [pid 30633:tid 30672] [client 182.253.238.235:52436] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 22:16:38.904061 2026] [:error] [pid 30633:tid 30683] [client 182.253.238.235:52436] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aV5qxvZiVWlF7303nMi_HQAAAFQ"]
[Wed Jan 07 23:00:59.397663 2026] [autoindex:error] [pid 50838:tid 50863] [client 95.182.127.182:35189] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 23:01:00.737861 2026] [autoindex:error] [pid 50838:tid 50864] [client 95.182.127.182:35189] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 23:06:04.940218 2026] [autoindex:error] [pid 51128:tid 51154] [client 46.45.185.176:55573] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 07 23:37:05.936106 2026] [:error] [pid 58330:tid 58337] [client 43.157.168.43:40602] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV59oQ8kGngKGK7_wncbgAAAAQU"]
[Thu Jan 08 01:23:30.397428 2026] [autoindex:error] [pid 50905:tid 50915] [client 54.82.246.162:49360] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 01:23:33.765722 2026] [autoindex:error] [pid 50936:tid 50938] [client 95.214.100.83:37835] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 02:45:23.995489 2026] [:error] [pid 50838:tid 50845] [client 114.80.36.40:46432] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV6pw7SweZ27JIN4H8v8iQAAAcU"]
[Thu Jan 08 03:19:20.262297 2026] [autoindex:error] [pid 58330:tid 58351] [client 3.85.104.150:34220] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 03:36:47.406929 2026] [autoindex:error] [pid 12806:tid 12882] [client 3.234.240.224:46020] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 05:11:11.550900 2026] [:error] [pid 15358:tid 15380] [client 170.106.179.68:34512] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV7L7yoRk9xWJ3toSBK4EQAAAMo"]
[Thu Jan 08 06:52:04.245503 2026] [:error] [pid 15358:tid 15386] [client 170.106.160.90:59292] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV7jlCoRk9xWJ3toSBLVUgAAANA"]
[Thu Jan 08 08:18:51.490705 2026] [autoindex:error] [pid 15263:tid 15279] [client 216.73.216.81:49026] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 08:52:33.730056 2026] [:error] [pid 15263:tid 15275] [client 121.229.185.160:59884] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV7_0dv61bxum7WG_e-IzAAAAAM"]
[Thu Jan 08 09:53:46.276219 2026] [:error] [pid 15265:tid 15346] [client 106.205.47.181:26896] [client 106.205.47.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.205.47.181, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aV8OKqE6VBKhew2LTFTKqwAAAJQ"]
[Thu Jan 08 09:53:46.290329 2026] [proxy_fcgi:error] [pid 15265:tid 15346] [client 106.205.47.181:26896] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 10:27:53.301193 2026] [:error] [pid 15263:tid 15278] [client 103.77.107.178:57788] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aV8WKdv61bxum7WG_e-fwwAAAAY"]
[Thu Jan 08 10:27:53.838682 2026] [:error] [pid 2424:tid 2428] [client 103.77.107.178:58027] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aV8WKbTDJR8aofkBk9SV5AAAAQI"]
[Thu Jan 08 11:29:27.018565 2026] [autoindex:error] [pid 15263:tid 15280] [client 52.167.144.161:38751] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 12:12:02.227130 2026] [:error] [pid 2484:tid 2495] [client 43.135.148.92:57316] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV8ukjiDlnlaQQK_AEP1LQAAAUg"]
[Thu Jan 08 13:31:22.857101 2026] [autoindex:error] [pid 15358:tid 15374] [client 34.229.251.138:47084] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 13:52:01.656428 2026] [:error] [pid 2484:tid 2507] [client 43.153.35.128:48824] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV9GATiDlnlaQQK_AEMUFAAAAVM"]
[Thu Jan 08 15:19:26.043803 2026] [:error] [pid 17404:tid 17407] [client 203.2.64.59:33596] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV9afmVd_oH193N6AnWIxQAAAYE"]
[Thu Jan 08 16:15:58.389775 2026] [autoindex:error] [pid 15265:tid 15347] [client 34.0.142.240:42854] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 16:52:38.248817 2026] [autoindex:error] [pid 2424:tid 2435] [client 38.242.228.47:46254] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 17:07:51.737587 2026] [autoindex:error] [pid 7586:tid 7607] [client 37.27.246.22:60738] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 17:07:53.120916 2026] [autoindex:error] [pid 15358:tid 15377] [client 37.27.246.22:60746] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 18:39:05.544245 2026] [autoindex:error] [pid 17404:tid 17424] [client 51.68.111.216:32239] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 18:46:18.698839 2026] [:error] [pid 2424:tid 2426] [client 49.51.204.74:60670] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aV-K-rTDJR8aofkBk9QKWwAAAQA"]
[Thu Jan 08 19:16:00.143599 2026] [autoindex:error] [pid 2484:tid 2512] [client 34.76.43.10:60740] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:16:00.690090 2026] [autoindex:error] [pid 15263:tid 15278] [client 34.76.43.10:52710] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:16:43.094517 2026] [autoindex:error] [pid 2424:tid 2436] [client 34.79.224.162:40112] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:16:43.625643 2026] [autoindex:error] [pid 15358:tid 15373] [client 34.79.224.162:60400] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:18:34.873194 2026] [autoindex:error] [pid 7586:tid 7592] [client 35.190.210.132:44988] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:18:36.258442 2026] [autoindex:error] [pid 7586:tid 7602] [client 34.79.108.56:58794] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:19:20.246423 2026] [autoindex:error] [pid 2484:tid 2493] [client 34.79.224.162:53274] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:19:21.782006 2026] [autoindex:error] [pid 17404:tid 17408] [client 35.205.140.19:55842] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 19:22:00.386921 2026] [autoindex:error] [pid 15263:tid 15282] [client 178.159.37.16:57658] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 08 20:10:37.043758 2026] [:error] [pid 15358:tid 15389] [client 170.106.180.139:40662] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aV-evSoRk9xWJ3toSBJ2MAAAANM"]
[Fri Jan 09 00:19:07.870656 2026] [autoindex:error] [pid 2424:tid 2426] [client 195.178.110.242:38632] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 02:34:09.108911 2026] [proxy_fcgi:error] [pid 2424:tid 2438] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:09.251915 2026] [proxy_fcgi:error] [pid 2424:tid 2426] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:09.447030 2026] [proxy_fcgi:error] [pid 2424:tid 2447] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:09.593744 2026] [proxy_fcgi:error] [pid 2424:tid 2427] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:09.904566 2026] [proxy_fcgi:error] [pid 2424:tid 2436] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:10.040832 2026] [proxy_fcgi:error] [pid 2424:tid 2448] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:10.183310 2026] [proxy_fcgi:error] [pid 2424:tid 2435] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:10.320727 2026] [proxy_fcgi:error] [pid 2424:tid 2431] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:10.582358 2026] [proxy_fcgi:error] [pid 2424:tid 2440] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:10.751790 2026] [proxy_fcgi:error] [pid 2424:tid 2432] [client 20.214.244.149:3678] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:34:10.888392 2026] [:error] [pid 2424:tid 2439] [client 20.214.244.149:3678] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aV_4orTDJR8aofkBk9R2tgAAAQ0"]
[Fri Jan 09 02:34:11.191517 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.149:3645] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aV_4oyoRk9xWJ3toSBLFrAAAAMY"]
[Fri Jan 09 02:34:11.523020 2026] [:error] [pid 17404:tid 17407] [client 20.214.244.149:3627] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aV_4o2Vd_oH193N6AnUDHwAAAYE"]
[Fri Jan 09 02:34:11.904381 2026] [:error] [pid 17404:tid 17418] [client 20.214.244.149:3589] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aV_4o2Vd_oH193N6AnUDIQAAAYw"]
[Fri Jan 09 02:34:12.376081 2026] [:error] [pid 17404:tid 17415] [client 20.214.244.149:3605] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/private.php"] [unique_id "aV_4pGVd_oH193N6AnUDIwAAAYk"]
[Fri Jan 09 02:34:12.694039 2026] [:error] [pid 2484:tid 2496] [client 20.214.244.149:3659] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/private.php"] [unique_id "aV_4pDiDlnlaQQK_AEPmiQAAAUk"]
[Fri Jan 09 02:34:13.107499 2026] [:error] [pid 13673:tid 13695] [client 20.214.244.149:3644] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/private.php"] [unique_id "aV_4pYD4ue0-noJ7SHPK5QAAAhQ"]
[Fri Jan 09 02:34:13.459230 2026] [:error] [pid 15265:tid 15334] [client 20.214.244.149:3661] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/private.php"] [unique_id "aV_4paE6VBKhew2LTFSSxQAAAIg"]
[Fri Jan 09 02:34:13.974399 2026] [:error] [pid 17404:tid 17421] [client 20.214.244.149:3608] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/secret.php"] [unique_id "aV_4pWVd_oH193N6AnUDJgAAAY8"]
[Fri Jan 09 02:34:14.347253 2026] [:error] [pid 15264:tid 15319] [client 20.214.244.149:3647] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/secret.php"] [unique_id "aV_4poov6_kvS0Owh-pL7QAAAFQ"]
[Fri Jan 09 02:34:14.802605 2026] [:error] [pid 15358:tid 15379] [client 20.214.244.149:3588] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/secret.php"] [unique_id "aV_4pioRk9xWJ3toSBLFrgAAAMk"]
[Fri Jan 09 02:34:15.295291 2026] [:error] [pid 15358:tid 15373] [client 20.214.244.149:3631] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/secret.php"] [unique_id "aV_4pyoRk9xWJ3toSBLFsAAAAMM"]
[Fri Jan 09 02:34:15.724786 2026] [:error] [pid 17404:tid 17410] [client 20.214.244.149:3675] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aV_4p2Vd_oH193N6AnUDKAAAAYQ"]
[Fri Jan 09 02:34:16.178262 2026] [:error] [pid 15358:tid 15374] [client 20.214.244.149:3612] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aV_4qCoRk9xWJ3toSBLFtQAAAMQ"]
[Fri Jan 09 02:34:16.680912 2026] [:error] [pid 17404:tid 17411] [client 20.214.244.149:3643] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aV_4qGVd_oH193N6AnUDKQAAAYU"]
[Fri Jan 09 02:34:17.095559 2026] [:error] [pid 17404:tid 17426] [client 20.214.244.149:3671] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aV_4qWVd_oH193N6AnUDLAAAAZQ"]
[Fri Jan 09 02:34:17.440316 2026] [:error] [pid 7586:tid 7611] [client 20.214.244.149:14374] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aV_4qcJyk37GdXP5TmWq6QAAAdU"]
[Fri Jan 09 02:34:17.898208 2026] [:error] [pid 7586:tid 7606] [client 20.214.244.149:3651] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aV_4qcJyk37GdXP5TmWq6gAAAdA"]
[Fri Jan 09 02:34:18.296109 2026] [:error] [pid 17404:tid 17407] [client 20.214.244.149:3595] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aV_4qmVd_oH193N6AnUDLgAAAYE"]
[Fri Jan 09 02:34:18.661910 2026] [:error] [pid 2424:tid 2446] [client 20.214.244.149:3684] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aV_4qrTDJR8aofkBk9R2uwAAARQ"]
[Fri Jan 09 02:34:19.249637 2026] [:error] [pid 13673:tid 13688] [client 20.214.244.149:3687] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/panel.php"] [unique_id "aV_4q4D4ue0-noJ7SHPK7wAAAg0"]
[Fri Jan 09 02:34:19.724171 2026] [:error] [pid 2424:tid 2447] [client 20.214.244.149:3674] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/panel.php"] [unique_id "aV_4q7TDJR8aofkBk9R2vQAAARU"]
[Fri Jan 09 02:34:20.164631 2026] [:error] [pid 17404:tid 17416] [client 20.214.244.149:3613] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/panel.php"] [unique_id "aV_4rGVd_oH193N6AnUDMgAAAYo"]
[Fri Jan 09 02:34:20.796419 2026] [:error] [pid 2424:tid 2448] [client 20.214.244.149:3629] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/panel.php"] [unique_id "aV_4rLTDJR8aofkBk9R2vwAAARY"]
[Fri Jan 09 02:34:21.567712 2026] [:error] [pid 13673:tid 13675] [client 20.214.244.149:3610] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/console.php"] [unique_id "aV_4rYD4ue0-noJ7SHPK8gAAAgA"]
[Fri Jan 09 02:34:22.013840 2026] [:error] [pid 7586:tid 7599] [client 20.214.244.149:3611] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/console.php"] [unique_id "aV_4rsJyk37GdXP5TmWq7QAAAcs"]
[Fri Jan 09 02:34:22.489073 2026] [:error] [pid 13673:tid 13676] [client 20.214.244.149:3688] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/console.php"] [unique_id "aV_4roD4ue0-noJ7SHPK9QAAAgE"]
[Fri Jan 09 02:34:22.797308 2026] [:error] [pid 13673:tid 13681] [client 20.214.244.149:3628] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/console.php"] [unique_id "aV_4roD4ue0-noJ7SHPK-AAAAgY"]
[Fri Jan 09 02:34:23.229373 2026] [:error] [pid 13673:tid 13677] [client 20.214.244.149:3673] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/terminal.php"] [unique_id "aV_4r4D4ue0-noJ7SHPK-QAAAgI"]
[Fri Jan 09 02:34:23.752474 2026] [:error] [pid 7586:tid 7590] [client 20.214.244.149:3584] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/terminal.php"] [unique_id "aV_4r8Jyk37GdXP5TmWq7gAAAcI"]
[Fri Jan 09 02:34:24.501266 2026] [:error] [pid 13673:tid 13683] [client 20.214.244.149:3695] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/terminal.php"] [unique_id "aV_4sID4ue0-noJ7SHPK_AAAAgg"]
[Fri Jan 09 02:34:24.918299 2026] [:error] [pid 7586:tid 7594] [client 20.214.244.149:3652] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/terminal.php"] [unique_id "aV_4sMJyk37GdXP5TmWq7wAAAcY"]
[Fri Jan 09 02:34:25.380351 2026] [:error] [pid 13673:tid 13684] [client 20.214.244.149:3676] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exec.php"] [unique_id "aV_4sYD4ue0-noJ7SHPK_wAAAgk"]
[Fri Jan 09 02:34:25.953082 2026] [:error] [pid 13673:tid 13695] [client 20.214.244.149:3640] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exec.php"] [unique_id "aV_4sYD4ue0-noJ7SHPLAQAAAhQ"]
[Fri Jan 09 02:34:26.340506 2026] [:error] [pid 15265:tid 15347] [client 20.214.244.149:3667] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exec.php"] [unique_id "aV_4sqE6VBKhew2LTFSSxwAAAJU"]
[Fri Jan 09 02:34:27.095902 2026] [:error] [pid 13673:tid 13681] [client 20.214.244.149:3638] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exec.php"] [unique_id "aV_4s4D4ue0-noJ7SHPLBQAAAgY"]
[Fri Jan 09 02:34:27.488085 2026] [:error] [pid 17404:tid 17411] [client 20.214.244.149:3635] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eval.php"] [unique_id "aV_4s2Vd_oH193N6AnUDNQAAAYU"]
[Fri Jan 09 02:34:27.987103 2026] [:error] [pid 15265:tid 15328] [client 20.214.244.149:3602] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eval.php"] [unique_id "aV_4s6E6VBKhew2LTFSSyAAAAII"]
[Fri Jan 09 02:34:28.604491 2026] [:error] [pid 2484:tid 2491] [client 20.214.244.149:14396] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eval.php"] [unique_id "aV_4tDiDlnlaQQK_AEPmiwAAAUU"]
[Fri Jan 09 02:34:29.175153 2026] [:error] [pid 2484:tid 2511] [client 20.214.244.149:3689] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eval.php"] [unique_id "aV_4tTiDlnlaQQK_AEPmjAAAAVc"]
[Fri Jan 09 02:34:29.557977 2026] [:error] [pid 15263:tid 15291] [client 20.214.244.149:3598] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system.php"] [unique_id "aV_4tdv61bxum7WG_e9DgAAAABM"]
[Fri Jan 09 02:34:30.155955 2026] [:error] [pid 13673:tid 13687] [client 20.214.244.149:3669] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system.php"] [unique_id "aV_4toD4ue0-noJ7SHPLCgAAAgw"]
[Fri Jan 09 02:34:30.620086 2026] [:error] [pid 7586:tid 7612] [client 20.214.244.149:3692] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system.php"] [unique_id "aV_4tsJyk37GdXP5TmWq9AAAAdY"]
[Fri Jan 09 02:34:31.320613 2026] [:error] [pid 15263:tid 15288] [client 20.214.244.149:3641] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/system.php"] [unique_id "aV_4t9v61bxum7WG_e9DggAAABA"]
[Fri Jan 09 02:34:31.759954 2026] [:error] [pid 7586:tid 7607] [client 20.214.244.149:3698] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aV_4t8Jyk37GdXP5TmWq9gAAAdE"]
[Fri Jan 09 02:34:32.141494 2026] [:error] [pid 15263:tid 15279] [client 20.214.244.149:14353] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aV_4uNv61bxum7WG_e9DgwAAAAc"]
[Fri Jan 09 02:34:32.516913 2026] [:error] [pid 7586:tid 7606] [client 20.214.244.149:3683] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aV_4uMJyk37GdXP5TmWq-AAAAdA"]
[Fri Jan 09 02:34:32.842739 2026] [:error] [pid 15264:tid 15323] [client 20.214.244.149:3702] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aV_4uIov6_kvS0Owh-pMAAAAAFg"]
[Fri Jan 09 02:34:33.339784 2026] [:error] [pid 15263:tid 15282] [client 20.214.244.149:14344] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aV_4udv61bxum7WG_e9DiAAAAAo"]
[Fri Jan 09 02:34:34.178150 2026] [:error] [pid 17404:tid 17426] [client 20.214.244.149:3653] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aV_4umVd_oH193N6AnUDOQAAAZQ"]
[Fri Jan 09 02:34:34.617509 2026] [:error] [pid 7586:tid 7591] [client 20.214.244.149:3646] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aV_4usJyk37GdXP5TmWq_AAAAcM"]
[Fri Jan 09 02:34:35.322638 2026] [:error] [pid 15358:tid 15390] [client 20.214.244.149:3599] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aV_4uyoRk9xWJ3toSBLFuQAAANQ"]
[Fri Jan 09 02:34:35.693037 2026] [:error] [pid 15358:tid 15380] [client 20.214.244.149:3665] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backup.php"] [unique_id "aV_4uyoRk9xWJ3toSBLFuwAAAMo"]
[Fri Jan 09 02:34:35.990733 2026] [:error] [pid 15358:tid 15379] [client 20.214.244.149:3686] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backup.php"] [unique_id "aV_4uyoRk9xWJ3toSBLFvAAAAMk"]
[Fri Jan 09 02:34:36.340697 2026] [:error] [pid 15265:tid 15341] [client 20.214.244.149:3601] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backup.php"] [unique_id "aV_4vKE6VBKhew2LTFSSzAAAAI8"]
[Fri Jan 09 02:34:36.755799 2026] [:error] [pid 15265:tid 15337] [client 20.214.244.149:3592] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backup.php"] [unique_id "aV_4vKE6VBKhew2LTFSSzQAAAIs"]
[Fri Jan 09 02:34:37.168193 2026] [:error] [pid 2484:tid 2489] [client 20.214.244.149:3603] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dump.php"] [unique_id "aV_4vTiDlnlaQQK_AEPmjgAAAUM"]
[Fri Jan 09 02:34:37.702210 2026] [:error] [pid 17404:tid 17407] [client 20.214.244.149:3666] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dump.php"] [unique_id "aV_4vWVd_oH193N6AnUDPAAAAYE"]
[Fri Jan 09 02:34:38.201542 2026] [:error] [pid 2484:tid 2502] [client 20.214.244.149:14349] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dump.php"] [unique_id "aV_4vjiDlnlaQQK_AEPmjwAAAU4"]
[Fri Jan 09 02:34:38.554312 2026] [:error] [pid 15263:tid 15273] [client 20.214.244.149:3615] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dump.php"] [unique_id "aV_4vtv61bxum7WG_e9DkQAAAAE"]
[Fri Jan 09 02:34:38.974181 2026] [:error] [pid 15358:tid 15388] [client 20.214.244.149:3609] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aV_4vioRk9xWJ3toSBLFvQAAANI"]
[Fri Jan 09 02:34:39.450026 2026] [:error] [pid 7586:tid 7602] [client 20.214.244.149:3622] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aV_4v8Jyk37GdXP5TmWrAAAAAcw"]
[Fri Jan 09 02:34:40.171732 2026] [:error] [pid 13673:tid 13679] [client 20.214.244.149:3650] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aV_4wID4ue0-noJ7SHPLEwAAAgQ"]
[Fri Jan 09 02:34:40.576851 2026] [:error] [pid 7586:tid 7614] [client 20.214.244.149:3586] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aV_4wMJyk37GdXP5TmWrAgAAAdg"]
[Fri Jan 09 02:34:40.931410 2026] [:error] [pid 15265:tid 15331] [client 20.214.244.149:14377] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/data.php"] [unique_id "aV_4wKE6VBKhew2LTFSS1gAAAIU"]
[Fri Jan 09 02:34:41.375192 2026] [:error] [pid 2424:tid 2435] [client 20.214.244.149:3632] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/data.php"] [unique_id "aV_4wbTDJR8aofkBk9R2zAAAAQk"]
[Fri Jan 09 02:34:41.807861 2026] [:error] [pid 17404:tid 17416] [client 20.214.244.149:3619] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/data.php"] [unique_id "aV_4wWVd_oH193N6AnUDPwAAAYo"]
[Fri Jan 09 02:34:42.122318 2026] [:error] [pid 15265:tid 15340] [client 20.214.244.149:3679] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/data.php"] [unique_id "aV_4wqE6VBKhew2LTFSS1wAAAI4"]
[Fri Jan 09 02:34:42.673880 2026] [:error] [pid 15265:tid 15328] [client 20.214.244.149:14358] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tmp.php"] [unique_id "aV_4wqE6VBKhew2LTFSS2gAAAII"]
[Fri Jan 09 02:34:43.226535 2026] [:error] [pid 17404:tid 17408] [client 20.214.244.149:4036] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tmp.php"] [unique_id "aV_4w2Vd_oH193N6AnUDQQAAAYI"]
[Fri Jan 09 02:34:43.649629 2026] [:error] [pid 2484:tid 2487] [client 20.214.244.149:3593] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tmp.php"] [unique_id "aV_4wziDlnlaQQK_AEPmlAAAAUE"]
[Fri Jan 09 02:34:44.075631 2026] [:error] [pid 15264:tid 15313] [client 20.214.244.149:14372] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tmp.php"] [unique_id "aV_4xIov6_kvS0Owh-pMCAAAAE4"]
[Fri Jan 09 02:34:44.628457 2026] [:error] [pid 13673:tid 13696] [client 20.214.244.149:3657] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php"] [unique_id "aV_4xID4ue0-noJ7SHPLGQAAAhU"]
[Fri Jan 09 02:34:44.971263 2026] [:error] [pid 15264:tid 15304] [client 20.214.244.149:14371] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php"] [unique_id "aV_4xIov6_kvS0Owh-pMCgAAAEU"]
[Fri Jan 09 02:34:45.300144 2026] [:error] [pid 15263:tid 15294] [client 20.214.244.149:3691] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php"] [unique_id "aV_4xdv61bxum7WG_e9DlgAAABY"]
[Fri Jan 09 02:34:45.731133 2026] [:error] [pid 13673:tid 13697] [client 20.214.244.149:14391] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php"] [unique_id "aV_4xYD4ue0-noJ7SHPLGgAAAhY"]
[Fri Jan 09 02:34:46.143956 2026] [:error] [pid 15265:tid 15338] [client 20.214.244.149:3662] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aV_4xqE6VBKhew2LTFSS3QAAAIw"]
[Fri Jan 09 02:34:46.494039 2026] [:error] [pid 15263:tid 15289] [client 20.214.244.149:14384] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aV_4xtv61bxum7WG_e9DnQAAABE"]
[Fri Jan 09 02:34:46.912820 2026] [:error] [pid 13673:tid 13675] [client 20.214.244.149:3648] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aV_4xoD4ue0-noJ7SHPLHgAAAgA"]
[Fri Jan 09 02:34:47.422714 2026] [:error] [pid 13673:tid 13688] [client 20.214.244.149:14380] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aV_4x4D4ue0-noJ7SHPLIAAAAg0"]
[Fri Jan 09 02:34:48.003167 2026] [:error] [pid 2484:tid 2495] [client 20.214.244.149:4051] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aV_4yDiDlnlaQQK_AEPmlgAAAUg"]
[Fri Jan 09 02:34:48.467351 2026] [:error] [pid 17404:tid 17406] [client 20.214.244.149:3701] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aV_4yGVd_oH193N6AnUDRwAAAYA"]
[Fri Jan 09 02:34:48.842074 2026] [:error] [pid 15265:tid 15350] [client 20.214.244.149:3704] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aV_4yKE6VBKhew2LTFSS3gAAAJg"]
[Fri Jan 09 02:34:49.337823 2026] [:error] [pid 15263:tid 15291] [client 20.214.244.149:14383] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aV_4ydv61bxum7WG_e9DnwAAABM"]
[Fri Jan 09 02:34:49.666794 2026] [:error] [pid 2484:tid 2507] [client 20.214.244.149:3670] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aV_4yTiDlnlaQQK_AEPmmQAAAVM"]
[Fri Jan 09 02:34:50.066672 2026] [:error] [pid 17404:tid 17423] [client 20.214.244.149:4032] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aV_4ymVd_oH193N6AnUDSQAAAZE"]
[Fri Jan 09 02:34:50.530636 2026] [:error] [pid 15263:tid 15292] [client 20.214.244.149:3626] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aV_4ytv61bxum7WG_e9DoQAAABQ"]
[Fri Jan 09 02:34:50.988452 2026] [:error] [pid 15264:tid 15321] [client 20.214.244.149:3642] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aV_4yoov6_kvS0Owh-pMDgAAAFY"]
[Fri Jan 09 02:34:51.446695 2026] [:error] [pid 15264:tid 15323] [client 20.214.244.149:4066] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aV_4y4ov6_kvS0Owh-pMDwAAAFg"]
[Fri Jan 09 02:34:51.912755 2026] [:error] [pid 2484:tid 2511] [client 20.214.244.149:14347] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aV_4yziDlnlaQQK_AEPmngAAAVc"]
[Fri Jan 09 02:34:52.290267 2026] [:error] [pid 2424:tid 2430] [client 20.214.244.149:3663] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aV_4zLTDJR8aofkBk9R20wAAAQQ"]
[Fri Jan 09 02:34:52.674379 2026] [:error] [pid 17404:tid 17427] [client 20.214.244.149:3649] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aV_4zGVd_oH193N6AnUDTAAAAZU"]
[Fri Jan 09 02:34:53.036890 2026] [:error] [pid 15265:tid 15336] [client 20.214.244.149:3677] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/old.php"] [unique_id "aV_4zaE6VBKhew2LTFSS4gAAAIo"]
[Fri Jan 09 02:34:53.478893 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.149:3709] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/old.php"] [unique_id "aV_4zSoRk9xWJ3toSBLFygAAAMY"]
[Fri Jan 09 02:34:53.979169 2026] [:error] [pid 2484:tid 2502] [client 20.214.244.149:4038] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/old.php"] [unique_id "aV_4zTiDlnlaQQK_AEPmoQAAAU4"]
[Fri Jan 09 02:34:54.384409 2026] [:error] [pid 15265:tid 15348] [client 20.214.244.149:3624] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/old.php"] [unique_id "aV_4zqE6VBKhew2LTFSS5QAAAJY"]
[Fri Jan 09 02:34:54.864925 2026] [:error] [pid 2424:tid 2442] [client 20.214.244.149:3680] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aV_4zrTDJR8aofkBk9R21AAAARA"]
[Fri Jan 09 02:34:55.260145 2026] [:error] [pid 15264:tid 15305] [client 20.214.244.149:3664] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aV_4z4ov6_kvS0Owh-pMEQAAAEY"]
[Fri Jan 09 02:34:55.719295 2026] [:error] [pid 15265:tid 15332] [client 20.214.244.149:14354] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aV_4z6E6VBKhew2LTFSS6QAAAIY"]
[Fri Jan 09 02:34:56.098953 2026] [:error] [pid 17404:tid 17413] [client 20.214.244.149:3706] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aV_40GVd_oH193N6AnUDTwAAAYc"]
[Fri Jan 09 02:34:56.453613 2026] [:error] [pid 2424:tid 2436] [client 20.214.244.149:14348] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aV_40LTDJR8aofkBk9R21wAAAQo"]
[Fri Jan 09 02:34:56.880079 2026] [:error] [pid 2424:tid 2431] [client 20.214.244.149:14339] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aV_40LTDJR8aofkBk9R22gAAAQU"]
[Fri Jan 09 02:34:57.284181 2026] [:error] [pid 15265:tid 15330] [client 20.214.244.149:3634] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aV_40aE6VBKhew2LTFSS6wAAAIQ"]
[Fri Jan 09 02:34:57.606741 2026] [:error] [pid 15264:tid 15309] [client 20.214.244.149:3682] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aV_40Yov6_kvS0Owh-pMFAAAAEo"]
[Fri Jan 09 02:34:58.053503 2026] [:error] [pid 2484:tid 2488] [client 20.214.244.149:3711] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aV_40jiDlnlaQQK_AEPmogAAAUI"]
[Fri Jan 09 02:34:58.585862 2026] [:error] [pid 15264:tid 15310] [client 20.214.244.149:3697] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aV_40oov6_kvS0Owh-pMFQAAAEs"]
[Fri Jan 09 02:34:58.984515 2026] [:error] [pid 13673:tid 13684] [client 20.214.244.149:3597] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aV_40oD4ue0-noJ7SHPLLgAAAgk"]
[Fri Jan 09 02:34:59.328210 2026] [:error] [pid 15265:tid 15329] [client 20.214.244.149:14350] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aV_406E6VBKhew2LTFSS8gAAAIM"]
[Fri Jan 09 02:34:59.653279 2026] [:error] [pid 15265:tid 15344] [client 20.214.244.149:3585] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aV_406E6VBKhew2LTFSS9AAAAJI"]
[Fri Jan 09 02:35:00.083216 2026] [:error] [pid 15264:tid 15316] [client 20.214.244.149:14379] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aV_41Iov6_kvS0Owh-pMHAAAAFE"]
[Fri Jan 09 02:35:00.449670 2026] [:error] [pid 15265:tid 15326] [client 20.214.244.149:14392] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aV_41KE6VBKhew2LTFSS9QAAAIA"]
[Fri Jan 09 02:35:00.759092 2026] [:error] [pid 17404:tid 17429] [client 20.214.244.149:3639] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aV_41GVd_oH193N6AnUDVwAAAZc"]
[Fri Jan 09 02:35:01.098481 2026] [:error] [pid 15358:tid 15391] [client 20.214.244.149:3618] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aV_41SoRk9xWJ3toSBLF0AAAANU"]
[Fri Jan 09 02:35:01.547199 2026] [:error] [pid 2424:tid 2441] [client 20.214.244.149:14368] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aV_41bTDJR8aofkBk9R23gAAAQ8"]
[Fri Jan 09 02:35:02.030529 2026] [:error] [pid 13673:tid 13677] [client 20.214.244.149:4042] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aV_41oD4ue0-noJ7SHPLNAAAAgI"]
[Fri Jan 09 02:35:02.468199 2026] [:error] [pid 13673:tid 13676] [client 20.214.244.149:14363] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aV_41oD4ue0-noJ7SHPLNgAAAgE"]
[Fri Jan 09 02:35:02.834517 2026] [:error] [pid 13673:tid 13685] [client 20.214.244.149:3654] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d.php"] [unique_id "aV_41oD4ue0-noJ7SHPLOAAAAgo"]
[Fri Jan 09 02:35:03.229864 2026] [:error] [pid 13673:tid 13692] [client 20.214.244.149:3621] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d.php"] [unique_id "aV_414D4ue0-noJ7SHPLOQAAAhE"]
[Fri Jan 09 02:35:03.689492 2026] [:error] [pid 15263:tid 15276] [client 20.214.244.149:3658] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d.php"] [unique_id "aV_419v61bxum7WG_e9DrAAAAAQ"]
[Fri Jan 09 02:35:04.006367 2026] [:error] [pid 15263:tid 15281] [client 20.214.244.149:4060] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d.php"] [unique_id "aV_42Nv61bxum7WG_e9DrQAAAAk"]
[Fri Jan 09 02:35:04.287409 2026] [:error] [pid 15263:tid 15291] [client 20.214.244.149:3620] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e.php"] [unique_id "aV_42Nv61bxum7WG_e9DrwAAABM"]
[Fri Jan 09 02:35:04.661309 2026] [:error] [pid 15264:tid 15299] [client 20.214.244.149:14364] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e.php"] [unique_id "aV_42Iov6_kvS0Owh-pMHwAAAEA"]
[Fri Jan 09 02:35:05.115297 2026] [:error] [pid 7586:tid 7598] [client 20.214.244.149:3596] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e.php"] [unique_id "aV_42cJyk37GdXP5TmWrEAAAAco"]
[Fri Jan 09 02:35:05.448308 2026] [:error] [pid 15358:tid 15370] [client 20.214.244.149:14336] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/e.php"] [unique_id "aV_42SoRk9xWJ3toSBLF0gAAAMA"]
[Fri Jan 09 02:35:05.787307 2026] [:error] [pid 15265:tid 15328] [client 20.214.244.149:3591] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aV_42aE6VBKhew2LTFSS-wAAAII"]
[Fri Jan 09 02:35:06.260024 2026] [:error] [pid 7586:tid 7596] [client 20.214.244.149:4067] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aV_42sJyk37GdXP5TmWrFAAAAcg"]
[Fri Jan 09 02:35:06.569925 2026] [:error] [pid 7586:tid 7595] [client 20.214.244.149:14346] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aV_42sJyk37GdXP5TmWrFQAAAcc"]
[Fri Jan 09 02:35:07.150727 2026] [:error] [pid 15264:tid 15315] [client 20.214.244.149:14373] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/p.php"] [unique_id "aV_424ov6_kvS0Owh-pMJAAAAFA"]
[Fri Jan 09 02:35:07.616283 2026] [:error] [pid 15358:tid 15385] [client 20.214.244.149:3784] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aV_42yoRk9xWJ3toSBLF0wAAAM8"]
[Fri Jan 09 02:35:08.320582 2026] [:error] [pid 15264:tid 15309] [client 20.214.244.149:3710] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aV_43Iov6_kvS0Owh-pMKAAAAEo"]
[Fri Jan 09 02:35:08.669441 2026] [:error] [pid 7586:tid 7593] [client 20.214.244.149:14386] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aV_43MJyk37GdXP5TmWrHQAAAcU"]
[Fri Jan 09 02:35:09.119809 2026] [:error] [pid 7586:tid 7604] [client 20.214.244.149:3606] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aV_43cJyk37GdXP5TmWrHgAAAc4"]
[Fri Jan 09 02:35:09.490088 2026] [:error] [pid 7586:tid 7605] [client 20.214.244.149:3707] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aV_43cJyk37GdXP5TmWrIAAAAc8"]
[Fri Jan 09 02:35:09.810840 2026] [:error] [pid 7586:tid 7598] [client 20.214.244.149:3604] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aV_43cJyk37GdXP5TmWrIwAAAco"]
[Fri Jan 09 02:35:10.252499 2026] [proxy_fcgi:error] [pid 17404:tid 17406] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:10.390793 2026] [proxy_fcgi:error] [pid 17404:tid 17420] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:10.528696 2026] [proxy_fcgi:error] [pid 17404:tid 17423] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:10.666417 2026] [proxy_fcgi:error] [pid 17404:tid 17417] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:10.805081 2026] [proxy_fcgi:error] [pid 17404:tid 17426] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:10.944121 2026] [proxy_fcgi:error] [pid 17404:tid 17422] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:11.115612 2026] [proxy_fcgi:error] [pid 17404:tid 17427] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:11.264021 2026] [proxy_fcgi:error] [pid 17404:tid 17425] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:11.411589 2026] [proxy_fcgi:error] [pid 17404:tid 17407] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:12.602563 2026] [proxy_fcgi:error] [pid 17404:tid 17416] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:12.740372 2026] [proxy_fcgi:error] [pid 17404:tid 17421] [client 20.214.244.149:3660] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 02:35:12.876674 2026] [:error] [pid 17404:tid 17429] [client 20.214.244.149:3660] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aV_44GVd_oH193N6AnUDaQAAAZc"]
[Fri Jan 09 02:35:13.201592 2026] [:error] [pid 7586:tid 7593] [client 20.214.244.149:4033] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aV_44cJyk37GdXP5TmWrLgAAAcU"]
[Fri Jan 09 02:35:13.510531 2026] [:error] [pid 15358:tid 15377] [client 20.214.244.149:4077] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aV_44SoRk9xWJ3toSBLF4AAAAMc"]
[Fri Jan 09 02:35:13.892709 2026] [:error] [pid 7586:tid 7594] [client 20.214.244.149:14351] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aV_44cJyk37GdXP5TmWrMQAAAcY"]
[Fri Jan 09 02:35:14.213808 2026] [:error] [pid 15358:tid 15380] [client 20.214.244.149:14361] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aV_44ioRk9xWJ3toSBLF4gAAAMo"]
[Fri Jan 09 02:35:14.508609 2026] [:error] [pid 2484:tid 2499] [client 20.214.244.149:4088] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aV_44jiDlnlaQQK_AEPmqwAAAUw"]
[Fri Jan 09 02:35:14.827108 2026] [:error] [pid 15358:tid 15373] [client 20.214.244.149:3623] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aV_44ioRk9xWJ3toSBLF5gAAAMM"]
[Fri Jan 09 02:35:15.129234 2026] [:error] [pid 13673:tid 13677] [client 20.214.244.149:3681] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aV_444D4ue0-noJ7SHPLRgAAAgI"]
[Fri Jan 09 02:35:15.470513 2026] [:error] [pid 15358:tid 15392] [client 20.214.244.149:3700] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aV_44yoRk9xWJ3toSBLF6wAAANY"]
[Fri Jan 09 02:35:15.782816 2026] [:error] [pid 15265:tid 15337] [client 20.214.244.149:14360] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aV_446E6VBKhew2LTFSS_gAAAIs"]
[Fri Jan 09 02:35:16.166211 2026] [:error] [pid 13673:tid 13692] [client 20.214.244.149:4046] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aV_45ID4ue0-noJ7SHPLSAAAAhE"]
[Fri Jan 09 02:35:16.457369 2026] [:error] [pid 15265:tid 15345] [client 20.214.244.149:3614] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aV_45KE6VBKhew2LTFSTAwAAAJM"]
[Fri Jan 09 02:35:16.791816 2026] [:error] [pid 7586:tid 7597] [client 20.214.244.149:4093] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aV_45MJyk37GdXP5TmWrOAAAAck"]
[Fri Jan 09 02:35:17.137627 2026] [:error] [pid 7586:tid 7596] [client 20.214.244.149:3633] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aV_45cJyk37GdXP5TmWrOQAAAcg"]
[Fri Jan 09 02:35:17.467082 2026] [:error] [pid 15265:tid 15348] [client 20.214.244.149:14340] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aV_45aE6VBKhew2LTFSTBgAAAJY"]
[Fri Jan 09 02:35:17.818716 2026] [:error] [pid 15265:tid 15349] [client 20.214.244.149:3616] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aV_45aE6VBKhew2LTFSTBwAAAJc"]
[Fri Jan 09 02:35:18.159926 2026] [:error] [pid 13673:tid 13679] [client 20.214.244.149:14388] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aV_45oD4ue0-noJ7SHPLSQAAAgQ"]
[Fri Jan 09 02:35:18.441366 2026] [:error] [pid 2424:tid 2449] [client 20.214.244.149:14375] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aV_45rTDJR8aofkBk9R24wAAARc"]
[Fri Jan 09 02:35:18.746502 2026] [:error] [pid 15358:tid 15371] [client 20.214.244.149:4070] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aV_45ioRk9xWJ3toSBLF9QAAAME"]
[Fri Jan 09 02:35:19.098874 2026] [:error] [pid 15358:tid 15385] [client 20.214.244.149:3607] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aV_45yoRk9xWJ3toSBLF9gAAAM8"]
[Fri Jan 09 02:35:19.383041 2026] [:error] [pid 15358:tid 15374] [client 20.214.244.149:3590] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aV_45yoRk9xWJ3toSBLF9wAAAMQ"]
[Fri Jan 09 02:35:19.702462 2026] [:error] [pid 15265:tid 15335] [client 20.214.244.149:14394] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aV_456E6VBKhew2LTFSTDwAAAIk"]
[Fri Jan 09 02:35:20.030969 2026] [:error] [pid 17404:tid 17417] [client 20.214.244.149:4086] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aV_46GVd_oH193N6AnUDbwAAAYs"]
[Fri Jan 09 02:35:20.452293 2026] [:error] [pid 15358:tid 15383] [client 20.214.244.149:4045] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aV_46CoRk9xWJ3toSBLF_AAAAM0"]
[Fri Jan 09 02:35:20.794381 2026] [:error] [pid 15265:tid 15337] [client 20.214.244.149:14342] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aV_46KE6VBKhew2LTFSTEQAAAIs"]
[Fri Jan 09 02:35:21.102113 2026] [:error] [pid 15358:tid 15382] [client 20.214.244.149:3708] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aV_46SoRk9xWJ3toSBLGAAAAAMw"]
[Fri Jan 09 02:35:21.476193 2026] [:error] [pid 15358:tid 15373] [client 20.214.244.149:3656] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aV_46SoRk9xWJ3toSBLGBAAAAMM"]
[Fri Jan 09 02:35:21.793535 2026] [:error] [pid 17404:tid 17426] [client 20.214.244.149:3693] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aV_46WVd_oH193N6AnUDcAAAAZQ"]
[Fri Jan 09 02:35:22.069723 2026] [:error] [pid 17404:tid 17427] [client 20.214.244.149:4078] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/999.php"] [unique_id "aV_46mVd_oH193N6AnUDcgAAAZU"]
[Fri Jan 09 02:35:22.452953 2026] [:error] [pid 15264:tid 15302] [client 20.214.244.149:3600] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/999.php"] [unique_id "aV_46oov6_kvS0Owh-pMNwAAAEM"]
[Fri Jan 09 02:35:22.746493 2026] [:error] [pid 15358:tid 15383] [client 20.214.244.149:4055] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/999.php"] [unique_id "aV_46ioRk9xWJ3toSBLGDAAAAM0"]
[Fri Jan 09 02:35:23.038827 2026] [:error] [pid 17404:tid 17424] [client 20.214.244.149:3699] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/999.php"] [unique_id "aV_462Vd_oH193N6AnUDdAAAAZI"]
[Fri Jan 09 02:35:23.321691 2026] [:error] [pid 15358:tid 15382] [client 20.214.244.149:4057] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aV_46yoRk9xWJ3toSBLGEQAAAMw"]
[Fri Jan 09 02:35:23.679207 2026] [:error] [pid 17404:tid 17416] [client 20.214.244.149:3625] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aV_462Vd_oH193N6AnUDdwAAAYo"]
[Fri Jan 09 02:35:24.058559 2026] [:error] [pid 13673:tid 13682] [client 20.214.244.149:3636] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aV_47ID4ue0-noJ7SHPLTAAAAgc"]
[Fri Jan 09 02:35:24.385337 2026] [:error] [pid 15265:tid 15329] [client 20.214.244.149:4041] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abc.php"] [unique_id "aV_47KE6VBKhew2LTFSTEwAAAIM"]
[Fri Jan 09 02:35:24.733079 2026] [:error] [pid 15265:tid 15326] [client 20.214.244.149:14343] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xyz.php"] [unique_id "aV_47KE6VBKhew2LTFSTFQAAAIA"]
[Fri Jan 09 02:35:25.008285 2026] [:error] [pid 13673:tid 13695] [client 20.214.244.149:3630] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xyz.php"] [unique_id "aV_47YD4ue0-noJ7SHPLTgAAAhQ"]
[Fri Jan 09 02:35:25.361978 2026] [:error] [pid 2484:tid 2494] [client 20.214.244.149:3617] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xyz.php"] [unique_id "aV_47TiDlnlaQQK_AEPmrwAAAUc"]
[Fri Jan 09 02:35:25.771500 2026] [:error] [pid 13673:tid 13677] [client 20.214.244.149:3587] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xyz.php"] [unique_id "aV_47YD4ue0-noJ7SHPLUwAAAgI"]
[Fri Jan 09 02:35:26.119747 2026] [:error] [pid 2484:tid 2487] [client 20.214.244.149:14387] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hack.php"] [unique_id "aV_47jiDlnlaQQK_AEPmsQAAAUE"]
[Fri Jan 09 02:35:26.401452 2026] [:error] [pid 15358:tid 15388] [client 20.214.244.149:4076] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hack.php"] [unique_id "aV_47ioRk9xWJ3toSBLGFQAAANI"]
[Fri Jan 09 02:35:26.742199 2026] [:error] [pid 13673:tid 13676] [client 20.214.244.149:3690] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hack.php"] [unique_id "aV_47oD4ue0-noJ7SHPLVQAAAgE"]
[Fri Jan 09 02:35:27.058787 2026] [:error] [pid 13673:tid 13690] [client 20.214.244.149:14389] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hack.php"] [unique_id "aV_474D4ue0-noJ7SHPLVwAAAg8"]
[Fri Jan 09 02:35:27.413637 2026] [:error] [pid 15263:tid 15295] [client 20.214.244.149:14366] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exploit.php"] [unique_id "aV_479v61bxum7WG_e9DuAAAABc"]
[Fri Jan 09 02:35:27.914913 2026] [:error] [pid 13673:tid 13697] [client 20.214.244.149:4039] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exploit.php"] [unique_id "aV_474D4ue0-noJ7SHPLWwAAAhY"]
[Fri Jan 09 02:35:28.217563 2026] [:error] [pid 15358:tid 15389] [client 20.214.244.149:3685] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exploit.php"] [unique_id "aV_48CoRk9xWJ3toSBLGHAAAANM"]
[Fri Jan 09 02:35:28.495076 2026] [:error] [pid 15264:tid 15301] [client 20.214.244.149:4034] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/exploit.php"] [unique_id "aV_48Iov6_kvS0Owh-pMPAAAAEI"]
[Fri Jan 09 02:35:28.788275 2026] [:error] [pid 15264:tid 15316] [client 20.214.244.149:3672] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backdoor.php"] [unique_id "aV_48Iov6_kvS0Owh-pMQAAAAFE"]
[Fri Jan 09 02:35:29.105565 2026] [:error] [pid 17404:tid 17426] [client 20.214.244.149:3270] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backdoor.php"] [unique_id "aV_48WVd_oH193N6AnUDfwAAAZQ"]
[Fri Jan 09 02:35:29.374919 2026] [:error] [pid 17404:tid 17422] [client 20.214.244.149:3794] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backdoor.php"] [unique_id "aV_48WVd_oH193N6AnUDgAAAAZA"]
[Fri Jan 09 02:35:29.662571 2026] [:error] [pid 15358:tid 15380] [client 20.214.244.149:3791] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/backdoor.php"] [unique_id "aV_48SoRk9xWJ3toSBLGIQAAAMo"]
[Fri Jan 09 02:35:30.044786 2026] [:error] [pid 15358:tid 15379] [client 20.214.244.149:14355] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rce.php"] [unique_id "aV_48ioRk9xWJ3toSBLGIwAAAMk"]
[Fri Jan 09 02:35:30.380439 2026] [:error] [pid 17404:tid 17406] [client 20.214.244.149:4089] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rce.php"] [unique_id "aV_48mVd_oH193N6AnUDgwAAAYA"]
[Fri Jan 09 02:35:30.650824 2026] [:error] [pid 15264:tid 15317] [client 20.214.244.149:3797] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rce.php"] [unique_id "aV_48oov6_kvS0Owh-pMQwAAAFI"]
[Fri Jan 09 02:35:30.930304 2026] [:error] [pid 7586:tid 7604] [client 20.214.244.149:14395] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rce.php"] [unique_id "aV_48sJyk37GdXP5TmWrRAAAAc4"]
[Fri Jan 09 02:35:31.281347 2026] [:error] [pid 7586:tid 7598] [client 20.214.244.149:3668] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lfi.php"] [unique_id "aV_488Jyk37GdXP5TmWrRQAAAco"]
[Fri Jan 09 02:35:31.568343 2026] [:error] [pid 13673:tid 13695] [client 20.214.244.149:3694] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lfi.php"] [unique_id "aV_484D4ue0-noJ7SHPLYQAAAhQ"]
[Fri Jan 09 02:35:31.837885 2026] [:error] [pid 13673:tid 13681] [client 20.214.244.149:14341] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lfi.php"] [unique_id "aV_484D4ue0-noJ7SHPLYgAAAgY"]
[Fri Jan 09 02:35:32.200513 2026] [:error] [pid 13673:tid 13677] [client 20.214.244.149:14385] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lfi.php"] [unique_id "aV_49ID4ue0-noJ7SHPLZAAAAgI"]
[Fri Jan 09 02:35:32.491178 2026] [:error] [pid 7586:tid 7608] [client 20.214.244.149:3813] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rfi.php"] [unique_id "aV_49MJyk37GdXP5TmWrRwAAAdI"]
[Fri Jan 09 02:35:32.793785 2026] [:error] [pid 2484:tid 2508] [client 20.214.244.149:4040] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rfi.php"] [unique_id "aV_49DiDlnlaQQK_AEPmtgAAAVQ"]
[Fri Jan 09 02:35:33.111031 2026] [:error] [pid 15358:tid 15394] [client 20.214.244.149:14376] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rfi.php"] [unique_id "aV_49SoRk9xWJ3toSBLGKQAAANg"]
[Fri Jan 09 02:35:33.472489 2026] [:error] [pid 13673:tid 13682] [client 20.214.244.149:4053] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rfi.php"] [unique_id "aV_49YD4ue0-noJ7SHPLcwAAAgc"]
[Fri Jan 09 02:35:33.751755 2026] [:error] [pid 13673:tid 13679] [client 20.214.244.149:4080] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cmd.exe"] [unique_id "aV_49YD4ue0-noJ7SHPLdgAAAgQ"]
[Fri Jan 09 02:35:34.053337 2026] [:error] [pid 2484:tid 2491] [client 20.214.244.149:3637] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cmd.exe"] [unique_id "aV_49jiDlnlaQQK_AEPmugAAAUU"]
[Fri Jan 09 02:35:34.373193 2026] [:error] [pid 7586:tid 7596] [client 20.214.244.149:3801] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cmd.exe"] [unique_id "aV_49sJyk37GdXP5TmWrSAAAAcg"]
[Fri Jan 09 02:35:34.652438 2026] [:error] [pid 2484:tid 2499] [client 20.214.244.149:3811] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cmd.exe"] [unique_id "aV_49jiDlnlaQQK_AEPmuwAAAUw"]
[Fri Jan 09 02:35:34.939398 2026] [:error] [pid 2484:tid 2490] [client 20.214.244.149:14356] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.exe"] [unique_id "aV_49jiDlnlaQQK_AEPmvAAAAUQ"]
[Fri Jan 09 02:35:35.269293 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.149:4065] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.exe"] [unique_id "aV_49yoRk9xWJ3toSBLGLAAAAMY"]
[Fri Jan 09 02:35:35.561090 2026] [:error] [pid 2484:tid 2488] [client 20.214.244.149:4047] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.exe"] [unique_id "aV_49ziDlnlaQQK_AEPmvwAAAUI"]
[Fri Jan 09 02:35:35.889013 2026] [:error] [pid 13673:tid 13685] [client 20.214.244.149:4062] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.exe"] [unique_id "aV_494D4ue0-noJ7SHPLewAAAgo"]
[Fri Jan 09 02:35:36.334764 2026] [:error] [pid 17404:tid 17414] [client 20.214.244.149:3814] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.exe"] [unique_id "aV_4-GVd_oH193N6AnUDhQAAAYg"]
[Fri Jan 09 02:35:36.650832 2026] [:error] [pid 17404:tid 17429] [client 20.214.244.149:4043] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.exe"] [unique_id "aV_4-GVd_oH193N6AnUDhgAAAZc"]
[Fri Jan 09 02:35:37.062500 2026] [:error] [pid 17404:tid 17410] [client 20.214.244.149:3817] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.exe"] [unique_id "aV_4-WVd_oH193N6AnUDhwAAAYQ"]
[Fri Jan 09 02:35:37.412741 2026] [:error] [pid 17404:tid 17411] [client 20.214.244.149:4091] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.exe"] [unique_id "aV_4-WVd_oH193N6AnUDiQAAAYU"]
[Fri Jan 09 02:35:37.790990 2026] [:error] [pid 17404:tid 17419] [client 20.214.244.149:4073] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.exe"] [unique_id "aV_4-WVd_oH193N6AnUDigAAAY0"]
[Fri Jan 09 02:35:38.160210 2026] [:error] [pid 13673:tid 13678] [client 20.214.244.149:14369] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.exe"] [unique_id "aV_4-oD4ue0-noJ7SHPLhAAAAgM"]
[Fri Jan 09 02:35:38.455343 2026] [:error] [pid 17404:tid 17426] [client 20.214.244.149:3787] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.exe"] [unique_id "aV_4-mVd_oH193N6AnUDiwAAAZQ"]
[Fri Jan 09 02:35:38.809664 2026] [:error] [pid 2424:tid 2438] [client 20.214.244.149:3777] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.exe"] [unique_id "aV_4-rTDJR8aofkBk9R25wAAAQw"]
[Fri Jan 09 02:35:39.106081 2026] [:error] [pid 15358:tid 15377] [client 20.214.244.149:14357] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/payload.php"] [unique_id "aV_4-yoRk9xWJ3toSBLGLgAAAMc"]
[Fri Jan 09 02:35:39.449003 2026] [:error] [pid 15358:tid 15379] [client 20.214.244.149:3818] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/payload.php"] [unique_id "aV_4-yoRk9xWJ3toSBLGLwAAAMk"]
[Fri Jan 09 02:35:39.851253 2026] [:error] [pid 15265:tid 15331] [client 20.214.244.149:3827] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/payload.php"] [unique_id "aV_4-6E6VBKhew2LTFSTHAAAAIU"]
[Fri Jan 09 02:35:40.130376 2026] [:error] [pid 15265:tid 15343] [client 20.214.244.149:3828] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/payload.php"] [unique_id "aV_4_KE6VBKhew2LTFSTHQAAAJE"]
[Fri Jan 09 02:35:40.561535 2026] [:error] [pid 2484:tid 2503] [client 20.214.244.149:4072] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aV_4_DiDlnlaQQK_AEPmwwAAAU8"]
[Fri Jan 09 02:35:40.942488 2026] [:error] [pid 15265:tid 15330] [client 20.214.244.149:3788] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aV_4_KE6VBKhew2LTFSTIAAAAIQ"]
[Fri Jan 09 02:35:41.324370 2026] [:error] [pid 17404:tid 17406] [client 20.214.244.149:3793] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aV_4_WVd_oH193N6AnUDjQAAAYA"]
[Fri Jan 09 02:35:41.654468 2026] [:error] [pid 15265:tid 15339] [client 20.214.244.149:14338] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aV_4_aE6VBKhew2LTFSTIgAAAI0"]
[Fri Jan 09 02:35:42.065669 2026] [:error] [pid 2424:tid 2440] [client 20.214.244.149:4081] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aV_4_rTDJR8aofkBk9R26wAAAQ4"]
[Fri Jan 09 02:35:42.362964 2026] [:error] [pid 15265:tid 15346] [client 20.214.244.149:4052] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aV_4_qE6VBKhew2LTFSTJgAAAJQ"]
[Fri Jan 09 02:35:42.744466 2026] [:error] [pid 15265:tid 15332] [client 20.214.244.149:4050] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aV_4_qE6VBKhew2LTFSTJwAAAIY"]
[Fri Jan 09 02:35:43.102731 2026] [:error] [pid 15265:tid 15340] [client 20.214.244.149:3830] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aV_4_6E6VBKhew2LTFSTKgAAAI4"]
[Fri Jan 09 02:35:43.402210 2026] [:error] [pid 15265:tid 15331] [client 20.214.244.149:3670] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waf.php"] [unique_id "aV_4_6E6VBKhew2LTFSTLQAAAIU"]
[Fri Jan 09 02:35:43.756996 2026] [:error] [pid 15265:tid 15338] [client 20.214.244.149:3271] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waf.php"] [unique_id "aV_4_6E6VBKhew2LTFSTLgAAAIw"]
[Fri Jan 09 02:35:44.230383 2026] [:error] [pid 15358:tid 15372] [client 20.214.244.149:4058] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waf.php"] [unique_id "aV_5ACoRk9xWJ3toSBLGNAAAAMI"]
[Fri Jan 09 02:35:44.704850 2026] [:error] [pid 17404:tid 17413] [client 20.214.244.149:3781] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/waf.php"] [unique_id "aV_5AGVd_oH193N6AnUDkwAAAYc"]
[Fri Jan 09 02:35:45.025652 2026] [:error] [pid 15265:tid 15326] [client 20.214.244.149:3703] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/attack.php"] [unique_id "aV_5AaE6VBKhew2LTFSTNAAAAIA"]
[Fri Jan 09 02:35:45.338426 2026] [:error] [pid 15265:tid 15332] [client 20.214.244.149:14365] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/attack.php"] [unique_id "aV_5AaE6VBKhew2LTFSTNgAAAIY"]
[Fri Jan 09 02:35:45.676636 2026] [:error] [pid 15358:tid 15389] [client 20.214.244.149:3836] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/attack.php"] [unique_id "aV_5ASoRk9xWJ3toSBLGOAAAANM"]
[Fri Jan 09 02:35:46.096978 2026] [:error] [pid 15358:tid 15378] [client 20.214.244.149:3265] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/attack.php"] [unique_id "aV_5AioRk9xWJ3toSBLGOgAAAMg"]
[Fri Jan 09 02:35:46.569846 2026] [:error] [pid 15265:tid 15347] [client 20.214.244.149:4049] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pentest.php"] [unique_id "aV_5AqE6VBKhew2LTFSTOAAAAJU"]
[Fri Jan 09 02:35:46.986366 2026] [:error] [pid 17404:tid 17418] [client 20.214.244.149:3839] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pentest.php"] [unique_id "aV_5AmVd_oH193N6AnUDlAAAAYw"]
[Fri Jan 09 02:35:47.361041 2026] [:error] [pid 15265:tid 15334] [client 20.214.244.149:14352] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pentest.php"] [unique_id "aV_5A6E6VBKhew2LTFSTOgAAAIg"]
[Fri Jan 09 02:35:47.746267 2026] [:error] [pid 2484:tid 2510] [client 20.214.244.149:3705] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pentest.php"] [unique_id "aV_5AziDlnlaQQK_AEPmygAAAVY"]
[Fri Jan 09 02:35:48.204965 2026] [:error] [pid 2484:tid 2494] [client 20.214.244.149:4068] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aV_5BDiDlnlaQQK_AEPmzgAAAUc"]
[Fri Jan 09 02:35:49.594379 2026] [:error] [pid 2424:tid 2446] [client 20.214.244.149:3829] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aV_5BbTDJR8aofkBk9R29AAAARQ"]
[Fri Jan 09 02:35:49.924073 2026] [:error] [pid 2424:tid 2436] [client 20.214.244.149:4054] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aV_5BbTDJR8aofkBk9R29wAAAQo"]
[Fri Jan 09 02:35:50.205137 2026] [:error] [pid 15358:tid 15387] [client 20.214.244.149:14398] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aV_5BioRk9xWJ3toSBLGQgAAANE"]
[Fri Jan 09 02:35:50.535410 2026] [:error] [pid 17404:tid 17419] [client 20.214.244.149:4048] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scan.php"] [unique_id "aV_5BmVd_oH193N6AnUDlQAAAY0"]
[Fri Jan 09 02:35:50.830825 2026] [:error] [pid 17404:tid 17412] [client 20.214.244.149:3798] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scan.php"] [unique_id "aV_5BmVd_oH193N6AnUDlwAAAYY"]
[Fri Jan 09 02:35:51.155462 2026] [:error] [pid 13673:tid 13692] [client 20.214.244.149:3783] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scan.php"] [unique_id "aV_5B4D4ue0-noJ7SHPLlgAAAhE"]
[Fri Jan 09 02:35:51.448790 2026] [:error] [pid 15264:tid 15310] [client 20.214.244.149:14362] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/scan.php"] [unique_id "aV_5B4ov6_kvS0Owh-pMSAAAAEs"]
[Fri Jan 09 02:35:52.181794 2026] [:error] [pid 15264:tid 15301] [client 20.214.244.149:3785] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aV_5CIov6_kvS0Owh-pMSwAAAEI"]
[Fri Jan 09 02:35:52.522771 2026] [:error] [pid 17404:tid 17424] [client 20.214.244.149:3782] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aV_5CGVd_oH193N6AnUDmwAAAZI"]
[Fri Jan 09 02:35:52.808364 2026] [:error] [pid 15264:tid 15304] [client 20.214.244.149:4059] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aV_5CIov6_kvS0Owh-pMTgAAAEU"]
[Fri Jan 09 02:35:53.131088 2026] [:error] [pid 15264:tid 15300] [client 20.214.244.149:3810] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aV_5CYov6_kvS0Owh-pMTwAAAEE"]
[Fri Jan 09 02:35:53.479492 2026] [:error] [pid 17404:tid 17414] [client 20.214.244.149:3267] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ver.php"] [unique_id "aV_5CWVd_oH193N6AnUDnwAAAYg"]
[Fri Jan 09 02:35:53.891666 2026] [:error] [pid 15265:tid 15338] [client 20.214.244.149:14399] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ver.php"] [unique_id "aV_5CaE6VBKhew2LTFSTQAAAAIw"]
[Fri Jan 09 02:35:54.214901 2026] [:error] [pid 15263:tid 15285] [client 20.214.244.149:3277] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ver.php"] [unique_id "aV_5Ctv61bxum7WG_e9DuwAAAA0"]
[Fri Jan 09 02:35:54.542918 2026] [:error] [pid 13673:tid 13679] [client 20.214.244.149:3779] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ver.php"] [unique_id "aV_5CoD4ue0-noJ7SHPLoQAAAgQ"]
[Fri Jan 09 02:35:55.921366 2026] [:error] [pid 2424:tid 2444] [client 20.214.244.149:14393] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/version.php"] [unique_id "aV_5C7TDJR8aofkBk9R2_gAAARI"]
[Fri Jan 09 02:35:56.387754 2026] [:error] [pid 15265:tid 15341] [client 20.214.244.149:3796] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/version.php"] [unique_id "aV_5DKE6VBKhew2LTFSTSAAAAI8"]
[Fri Jan 09 02:35:56.690452 2026] [:error] [pid 13673:tid 13699] [client 20.214.244.149:3831] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/version.php"] [unique_id "aV_5DID4ue0-noJ7SHPLowAAAhg"]
[Fri Jan 09 02:35:57.014150 2026] [:error] [pid 13673:tid 13692] [client 20.214.244.149:3778] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/version.php"] [unique_id "aV_5DYD4ue0-noJ7SHPLpgAAAhE"]
[Fri Jan 09 02:35:57.326785 2026] [:error] [pid 13673:tid 13687] [client 20.214.244.149:3668] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aV_5DYD4ue0-noJ7SHPLqQAAAgw"]
[Fri Jan 09 02:35:57.632481 2026] [:error] [pid 17404:tid 17419] [client 20.214.244.149:4061] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aV_5DWVd_oH193N6AnUDowAAAY0"]
[Fri Jan 09 02:35:58.084457 2026] [:error] [pid 2424:tid 2429] [client 20.214.244.149:3824] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aV_5DrTDJR8aofkBk9R3AgAAAQM"]
[Fri Jan 09 02:35:58.411954 2026] [:error] [pid 2424:tid 2426] [client 20.214.244.149:4056] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aV_5DrTDJR8aofkBk9R3BQAAAQA"]
[Fri Jan 09 02:35:58.705006 2026] [:error] [pid 15263:tid 15292] [client 20.214.244.149:4064] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aV_5Dtv61bxum7WG_e9DwAAAABQ"]
[Fri Jan 09 02:35:59.129415 2026] [:error] [pid 17404:tid 17430] [client 20.214.244.149:3266] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aV_5D2Vd_oH193N6AnUDpgAAAZg"]
[Fri Jan 09 02:35:59.463775 2026] [:error] [pid 17404:tid 17428] [client 20.214.244.149:4069] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aV_5D2Vd_oH193N6AnUDqAAAAZY"]
[Fri Jan 09 02:35:59.809356 2026] [:error] [pid 15265:tid 15335] [client 20.214.244.149:3278] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aV_5D6E6VBKhew2LTFSTTAAAAIk"]
[Fri Jan 09 02:36:00.123697 2026] [:error] [pid 13673:tid 13693] [client 20.214.244.149:3805] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test123.php"] [unique_id "aV_5EID4ue0-noJ7SHPLrgAAAhI"]
[Fri Jan 09 02:36:00.452758 2026] [:error] [pid 17404:tid 17421] [client 20.214.244.149:4095] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test123.php"] [unique_id "aV_5EGVd_oH193N6AnUDqwAAAY8"]
[Fri Jan 09 02:36:00.765006 2026] [:error] [pid 17404:tid 17413] [client 20.214.244.149:3780] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test123.php"] [unique_id "aV_5EGVd_oH193N6AnUDsAAAAYc"]
[Fri Jan 09 02:36:01.067620 2026] [:error] [pid 2484:tid 2495] [client 20.214.244.149:4079] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test123.php"] [unique_id "aV_5ETiDlnlaQQK_AEPm0QAAAUg"]
[Fri Jan 09 02:36:01.430451 2026] [:error] [pid 15263:tid 15286] [client 20.214.244.149:14337] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin123.php"] [unique_id "aV_5Edv61bxum7WG_e9DxAAAAA4"]
[Fri Jan 09 02:36:01.714763 2026] [:error] [pid 15263:tid 15283] [client 20.214.244.149:3789] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin123.php"] [unique_id "aV_5Edv61bxum7WG_e9DxgAAAAs"]
[Fri Jan 09 02:36:02.181183 2026] [:error] [pid 13673:tid 13678] [client 20.214.244.149:3280] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin123.php"] [unique_id "aV_5EoD4ue0-noJ7SHPLtAAAAgM"]
[Fri Jan 09 02:36:02.485335 2026] [:error] [pid 7586:tid 7588] [client 20.214.244.149:3405] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin123.php"] [unique_id "aV_5EsJyk37GdXP5TmWrUwAAAcA"]
[Fri Jan 09 02:36:02.810796 2026] [:error] [pid 2424:tid 2441] [client 20.214.244.149:14359] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/super.php"] [unique_id "aV_5ErTDJR8aofkBk9R3DAAAAQ8"]
[Fri Jan 09 02:36:03.141394 2026] [:error] [pid 7586:tid 7596] [client 20.214.244.149:14382] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/super.php"] [unique_id "aV_5E8Jyk37GdXP5TmWrVgAAAcg"]
[Fri Jan 09 02:36:03.431133 2026] [:error] [pid 15263:tid 15284] [client 20.214.244.149:3325] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/super.php"] [unique_id "aV_5E9v61bxum7WG_e9DygAAAAw"]
[Fri Jan 09 02:36:03.747389 2026] [:error] [pid 15265:tid 15342] [client 20.214.244.149:4035] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/super.php"] [unique_id "aV_5E6E6VBKhew2LTFSTUwAAAJA"]
[Fri Jan 09 02:36:04.059659 2026] [:error] [pid 15265:tid 15326] [client 20.214.244.149:3838] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mega.php"] [unique_id "aV_5FKE6VBKhew2LTFSTVQAAAIA"]
[Fri Jan 09 02:36:04.457640 2026] [:error] [pid 17404:tid 17424] [client 20.214.244.149:3309] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mega.php"] [unique_id "aV_5FGVd_oH193N6AnUDtwAAAZI"]
[Fri Jan 09 02:36:04.814974 2026] [:error] [pid 2484:tid 2506] [client 20.214.244.149:3822] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mega.php"] [unique_id "aV_5FDiDlnlaQQK_AEPm0wAAAVI"]
[Fri Jan 09 02:36:05.103346 2026] [:error] [pid 17404:tid 17414] [client 20.214.244.149:3274] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mega.php"] [unique_id "aV_5FWVd_oH193N6AnUDuQAAAYg"]
[Fri Jan 09 02:36:05.543689 2026] [:error] [pid 15263:tid 15295] [client 20.214.244.149:3268] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ultra.php"] [unique_id "aV_5Fdv61bxum7WG_e9D2gAAABc"]
[Fri Jan 09 02:36:05.850684 2026] [:error] [pid 17404:tid 17429] [client 20.214.244.149:3437] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ultra.php"] [unique_id "aV_5FWVd_oH193N6AnUDuwAAAZc"]
[Fri Jan 09 02:36:06.218957 2026] [:error] [pid 15263:tid 15281] [client 20.214.244.149:4083] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ultra.php"] [unique_id "aV_5Ftv61bxum7WG_e9D3wAAAAk"]
[Fri Jan 09 02:36:06.573805 2026] [:error] [pid 15265:tid 15337] [client 20.214.244.149:4075] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ultra.php"] [unique_id "aV_5FqE6VBKhew2LTFSTWwAAAIs"]
[Fri Jan 09 02:36:06.872049 2026] [:error] [pid 15264:tid 15315] [client 20.214.244.149:3803] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pro.php"] [unique_id "aV_5Foov6_kvS0Owh-pMVgAAAFA"]
[Fri Jan 09 02:36:07.197868 2026] [:error] [pid 15264:tid 15310] [client 20.214.244.149:14370] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pro.php"] [unique_id "aV_5F4ov6_kvS0Owh-pMVwAAAEs"]
[Fri Jan 09 02:36:07.687175 2026] [:error] [pid 2484:tid 2507] [client 20.214.244.149:4074] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pro.php"] [unique_id "aV_5FziDlnlaQQK_AEPm1QAAAVM"]
[Fri Jan 09 02:36:08.000152 2026] [:error] [pid 2484:tid 2497] [client 20.214.244.149:3409] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pro.php"] [unique_id "aV_5FziDlnlaQQK_AEPm2AAAAUo"]
[Fri Jan 09 02:36:08.400729 2026] [:error] [pid 15264:tid 15313] [client 20.214.244.149:3819] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/advanced.php"] [unique_id "aV_5GIov6_kvS0Owh-pMWgAAAE4"]
[Fri Jan 09 02:36:08.743006 2026] [:error] [pid 15265:tid 15333] [client 20.214.244.149:3295] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/advanced.php"] [unique_id "aV_5GKE6VBKhew2LTFSTYQAAAIc"]
[Fri Jan 09 02:36:09.033904 2026] [:error] [pid 2484:tid 2490] [client 20.214.244.149:3795] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/advanced.php"] [unique_id "aV_5GTiDlnlaQQK_AEPm2gAAAUQ"]
[Fri Jan 09 02:36:09.354515 2026] [:error] [pid 15265:tid 15350] [client 20.214.244.149:3832] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/advanced.php"] [unique_id "aV_5GaE6VBKhew2LTFSTYwAAAJg"]
[Fri Jan 09 02:36:09.656174 2026] [:error] [pid 15264:tid 15312] [client 20.214.244.149:3305] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aV_5GYov6_kvS0Owh-pMXgAAAE0"]
[Fri Jan 09 02:36:10.062329 2026] [:error] [pid 7586:tid 7596] [client 20.214.244.149:3812] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aV_5GsJyk37GdXP5TmWrZwAAAcg"]
[Fri Jan 09 02:36:10.383472 2026] [:error] [pid 15265:tid 15348] [client 20.214.244.149:3808] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aV_5GqE6VBKhew2LTFSTaAAAAJY"]
[Fri Jan 09 02:36:10.697684 2026] [:error] [pid 15265:tid 15332] [client 20.214.244.149:3297] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aV_5GqE6VBKhew2LTFSTagAAAIY"]
[Fri Jan 09 02:36:11.013344 2026] [:error] [pid 15265:tid 15340] [client 20.214.244.149:3407] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/basic.php"] [unique_id "aV_5G6E6VBKhew2LTFSTawAAAI4"]
[Fri Jan 09 02:36:11.314946 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.149:3809] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/basic.php"] [unique_id "aV_5GyoRk9xWJ3toSBLGSgAAAMY"]
[Fri Jan 09 02:36:11.653294 2026] [:error] [pid 13673:tid 13696] [client 20.214.244.149:3314] [client 20.214.244.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/basic.php"] [unique_id "aV_5G4D4ue0-noJ7SHPL0QAAAhU"]
[Fri Jan 09 02:36:12.028747 2026] [proxy_fcgi:error] [pid 15358:tid 15379] [client 20.214.244.149:3594] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 03:02:23.537069 2026] [autoindex:error] [pid 13673:tid 13688] [client 185.177.72.69:1672] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 03:02:26.702114 2026] [autoindex:error] [pid 7586:tid 7588] [client 185.177.72.69:45234] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 03:02:28.034910 2026] [:error] [pid 17404:tid 17428] [client 185.177.72.69:45250] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env"] [unique_id "aV__RGVd_oH193N6AnUJrwAAAZY"]
[Fri Jan 09 03:02:31.203363 2026] [:error] [pid 15265:tid 15334] [client 185.177.72.69:45262] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.production"] [unique_id "aV__R6E6VBKhew2LTFSaYAAAAIg"]
[Fri Jan 09 03:02:36.073981 2026] [:error] [pid 15263:tid 15279] [client 185.177.72.69:10604] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.old"] [unique_id "aV__TNv61bxum7WG_e9JowAAAAc"]
[Fri Jan 09 03:02:43.225246 2026] [:error] [pid 15264:tid 15304] [client 185.177.72.69:10614] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.dev"] [unique_id "aV__U4ov6_kvS0Owh-pQyAAAAEU"]
[Fri Jan 09 03:02:44.107969 2026] [:error] [pid 15265:tid 15334] [client 185.177.72.69:26796] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.staging"] [unique_id "aV__VKE6VBKhew2LTFSabgAAAIg"]
[Fri Jan 09 03:02:48.684526 2026] [proxy_fcgi:error] [pid 2484:tid 2502] [client 185.177.72.69:26806] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 03:02:52.018155 2026] [proxy_fcgi:error] [pid 15358:tid 15390] [client 185.177.72.69:26808] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 03:03:22.955243 2026] [:error] [pid 15265:tid 15336] [client 185.177.72.69:34930] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aV__eqE6VBKhew2LTFSamgAAAIo"]
[Fri Jan 09 03:03:24.281132 2026] [:error] [pid 7586:tid 7607] [client 185.177.72.69:48808] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.gitignore"] [unique_id "aV__fMJyk37GdXP5TmWwTQAAAdE"]
[Fri Jan 09 03:06:46.355404 2026] [:error] [pid 15358:tid 15381] [client 173.239.254.91:42549] [client 173.239.254.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.91, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aWAARioRk9xWJ3toSBLMLQAAAMs"]
[Fri Jan 09 03:06:46.366339 2026] [proxy_fcgi:error] [pid 15358:tid 15381] [client 173.239.254.91:42549] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 04:01:32.476182 2026] [autoindex:error] [pid 35916:tid 35938] [client 47.128.127.104:48908] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 04:06:00.994329 2026] [autoindex:error] [pid 35810:tid 35831] [client 106.49.49.157:37609] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 04:13:33.114236 2026] [autoindex:error] [pid 35810:tid 35820] [client 49.178.205.158:57542] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 04:13:36.440721 2026] [autoindex:error] [pid 35810:tid 35837] [client 43.245.153.60:55723] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 04:38:37.355539 2026] [:error] [pid 35812:tid 35890] [client 101.91.148.219:49144] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWAVzUAss1qSj44c-n3duwAAAJA"]
[Fri Jan 09 05:29:56.361319 2026] [autoindex:error] [pid 35916:tid 35919] [client 64.140.141.10:24428] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 08:07:56.989650 2026] [proxy_fcgi:error] [pid 35811:tid 35855] [client 4.194.179.151:9883] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 09 08:07:57.012926 2026] [autoindex:error] [pid 35812:tid 35898] [client 4.194.179.151:9620] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 08:07:57.191082 2026] [proxy_fcgi:error] [pid 35811:tid 35857] [client 4.194.179.151:9883] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 09 08:08:04.935933 2026] [proxy_fcgi:error] [pid 35812:tid 35874] [client 4.194.179.151:9832] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 09 08:08:05.042079 2026] [proxy_fcgi:error] [pid 35812:tid 35885] [client 4.194.179.151:9832] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 09 10:48:45.469376 2026] [autoindex:error] [pid 30020:tid 30061] [client 104.28.229.208:40001] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 10:53:13.244173 2026] [:error] [pid 30020:tid 30075] [client 182.44.9.147:44546] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWBtmcrjc66qOisG6L2FQQAAAJU"]
[Fri Jan 09 12:21:22.390825 2026] [:error] [pid 44848:tid 44871] [client 112.200.200.21:27133] [client 112.200.200.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.200.200.21, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWCCQqjajoTJAbEk87xQXwAAAFU"]
[Fri Jan 09 12:21:22.402515 2026] [proxy_fcgi:error] [pid 44848:tid 44871] [client 112.200.200.21:27133] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 12:37:43.072506 2026] [autoindex:error] [pid 30020:tid 30054] [client 74.7.227.61:34468] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 13:57:38.743405 2026] [autoindex:error] [pid 30019:tid 30047] [client 103.72.86.61:22345] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 14:05:49.296538 2026] [autoindex:error] [pid 14831:tid 14843] [client 3.254.89.36:33406] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 16:16:56.841891 2026] [:error] [pid 14770:tid 14790] [client 170.106.107.87:48730] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWC5eB5QbaVZ-6newJYY6gAAAhI"]
[Fri Jan 09 16:46:07.005699 2026] [autoindex:error] [pid 14872:tid 14897] [client 109.227.84.39:53052] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 17:12:48.862927 2026] [autoindex:error] [pid 14872:tid 14897] [client 209.127.142.50:52633] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 17:12:50.025451 2026] [autoindex:error] [pid 1366:tid 1383] [client 23.229.49.144:40309] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 17:12:50.715867 2026] [autoindex:error] [pid 14770:tid 14782] [client 161.115.231.26:45229] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 17:12:51.635702 2026] [autoindex:error] [pid 1366:tid 1370] [client 152.232.65.217:53892] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 17:20:59.148575 2026] [autoindex:error] [pid 1366:tid 1389] [client 54.174.166.38:40934] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 17:20:59.555192 2026] [autoindex:error] [pid 1366:tid 1368] [client 54.174.166.38:56540] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 17:51:47.991595 2026] [autoindex:error] [pid 30021:tid 30096] [client 34.248.177.161:47532] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 22:07:38.960078 2026] [autoindex:error] [pid 30021:tid 30082] [client 181.214.218.250:55060] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 22:07:39.605828 2026] [autoindex:error] [pid 30021:tid 30086] [client 181.214.218.250:55189] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 22:07:42.552168 2026] [autoindex:error] [pid 14801:tid 14827] [client 195.158.8.123:52259] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 22:07:47.334097 2026] [autoindex:error] [pid 14770:tid 14774] [client 202.55.67.194:58322] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 22:07:56.752687 2026] [autoindex:error] [pid 30019:tid 30039] [client 202.55.67.194:55740] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 22:08:04.934843 2026] [autoindex:error] [pid 14801:tid 14815] [client 195.158.8.123:34619] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Fri Jan 09 22:51:09.692181 2026] [:error] [pid 1366:tid 1383] [client 216.81.248.151:33496] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aWEV3RmasveKu8_ec1WVGgAAAY4"]
[Fri Jan 09 23:00:06.079212 2026] [:error] [pid 30021:tid 30102] [client 43.130.78.203:48902] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWEX9g_M8aRtsTog5J-8jgAAANU"]
[Fri Jan 09 23:05:11.142728 2026] [autoindex:error] [pid 1366:tid 1385] [client 74.7.227.165:55416] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 00:59:45.347037 2026] [:error] [pid 14770:tid 14783] [client 43.153.54.14:35534] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWE0AR5QbaVZ-6newJZjXAAAAgs"]
[Sat Jan 10 01:01:50.484169 2026] [proxy_fcgi:error] [pid 1366:tid 1384] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:50.600845 2026] [proxy_fcgi:error] [pid 1366:tid 1392] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:50.718125 2026] [proxy_fcgi:error] [pid 1366:tid 1379] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:50.932056 2026] [proxy_fcgi:error] [pid 1366:tid 1385] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.049069 2026] [proxy_fcgi:error] [pid 1366:tid 1382] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.165608 2026] [proxy_fcgi:error] [pid 1366:tid 1371] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.423309 2026] [proxy_fcgi:error] [pid 1366:tid 1377] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.603225 2026] [proxy_fcgi:error] [pid 1366:tid 1368] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.723252 2026] [proxy_fcgi:error] [pid 1366:tid 1375] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.849645 2026] [proxy_fcgi:error] [pid 1366:tid 1386] [client 4.214.16.213:19073] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:01:51.970216 2026] [:error] [pid 1366:tid 1389] [client 4.214.16.213:19073] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aWE0fxmasveKu8_ec1W2ZAAAAZQ"]
[Sat Jan 10 01:01:56.059273 2026] [:error] [pid 14831:tid 14837] [client 4.214.16.213:21001] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aWE0hPaKOMCmJcAyBm1f3QAAAoQ"]
[Sat Jan 10 01:02:07.790645 2026] [:error] [pid 14739:tid 14751] [client 4.214.16.213:2041] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aWE0j163M6_PkLt_IJKLvQAAAco"]
[Sat Jan 10 01:02:09.618406 2026] [:error] [pid 14739:tid 14765] [client 4.214.16.213:1581] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aWE0kV63M6_PkLt_IJKLvwAAAdg"]
[Sat Jan 10 01:02:11.604503 2026] [:error] [pid 14831:tid 14834] [client 4.214.16.213:1996] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aWE0k_aKOMCmJcAyBm1f5QAAAoE"]
[Sat Jan 10 01:02:12.805039 2026] [:error] [pid 1366:tid 1374] [client 4.214.16.213:14895] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aWE0lBmasveKu8_ec1W2cwAAAYU"]
[Sat Jan 10 01:02:13.730543 2026] [:error] [pid 44848:tid 44853] [client 4.214.16.213:19146] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aWE0lajajoTJAbEk87wBrAAAAEM"]
[Sat Jan 10 01:02:17.303868 2026] [:error] [pid 44848:tid 44861] [client 4.214.16.213:14880] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aWE0majajoTJAbEk87wBrwAAAEs"]
[Sat Jan 10 01:02:23.740989 2026] [:error] [pid 30021:tid 30098] [client 4.214.16.213:1304] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aWE0nw_M8aRtsTog5J_NmwAAANE"]
[Sat Jan 10 01:02:29.200963 2026] [:error] [pid 44848:tid 44859] [client 4.214.16.213:1951] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aWE0pajajoTJAbEk87wBwQAAAEk"]
[Sat Jan 10 01:02:34.169968 2026] [:error] [pid 30019:tid 30031] [client 4.214.16.213:1927] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aWE0qkz3igHGwX5f7IoX1QAAAAc"]
[Sat Jan 10 01:02:37.400642 2026] [:error] [pid 44848:tid 44869] [client 4.214.16.213:11498] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aWE0rajajoTJAbEk87wBxQAAAFM"]
[Sat Jan 10 01:02:39.713361 2026] [:error] [pid 14739:tid 14756] [client 4.214.16.213:1923] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aWE0r163M6_PkLt_IJKLygAAAc8"]
[Sat Jan 10 01:02:42.473025 2026] [:error] [pid 14770:tid 14780] [client 4.214.16.213:1241] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aWE0sh5QbaVZ-6newJZj5QAAAgg"]
[Sat Jan 10 01:02:46.413361 2026] [:error] [pid 14831:tid 14840] [client 4.214.16.213:15539] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aWE0tvaKOMCmJcAyBm1f_QAAAoc"]
[Sat Jan 10 01:02:48.258109 2026] [:error] [pid 14831:tid 14846] [client 4.214.16.213:1234] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inject.php"] [unique_id "aWE0uPaKOMCmJcAyBm1gAAAAAo0"]
[Sat Jan 10 01:02:52.223981 2026] [proxy_fcgi:error] [pid 14739:tid 14764] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:52.341681 2026] [proxy_fcgi:error] [pid 14739:tid 14753] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:52.637973 2026] [proxy_fcgi:error] [pid 14739:tid 14752] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:54.015981 2026] [proxy_fcgi:error] [pid 14739:tid 14746] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:54.133149 2026] [proxy_fcgi:error] [pid 14739:tid 14749] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:54.251084 2026] [proxy_fcgi:error] [pid 14739:tid 14742] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:54.372742 2026] [proxy_fcgi:error] [pid 14739:tid 14743] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:54.813530 2026] [proxy_fcgi:error] [pid 14739:tid 14758] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:54.930608 2026] [proxy_fcgi:error] [pid 14739:tid 14754] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:55.063625 2026] [proxy_fcgi:error] [pid 14739:tid 14757] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:55.199052 2026] [proxy_fcgi:error] [pid 14739:tid 14748] [client 4.214.16.213:12314] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:02:55.333851 2026] [:error] [pid 14739:tid 14755] [client 4.214.16.213:12314] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aWE0v163M6_PkLt_IJKL5AAAAc4"]
[Sat Jan 10 01:02:57.095657 2026] [:error] [pid 1366:tid 1379] [client 4.214.16.213:17018] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aWE0wRmasveKu8_ec1W2qQAAAYo"]
[Sat Jan 10 01:02:57.776101 2026] [:error] [pid 30021:tid 30100] [client 4.214.16.213:18959] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aWE0wQ_M8aRtsTog5J_NswAAANM"]
[Sat Jan 10 01:03:00.711090 2026] [:error] [pid 14872:tid 14894] [client 4.214.16.213:17739] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aWE0xKIUELhgYLNp1sZhfgAAAtQ"]
[Sat Jan 10 01:03:02.843503 2026] [:error] [pid 1366:tid 1380] [client 4.214.16.213:18995] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aWE0xhmasveKu8_ec1W2uAAAAYs"]
[Sat Jan 10 01:03:08.418529 2026] [:error] [pid 14739:tid 14764] [client 4.214.16.213:18988] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aWE0zF63M6_PkLt_IJKL5gAAAdc"]
[Sat Jan 10 01:03:13.592950 2026] [:error] [pid 1366:tid 1369] [client 4.214.16.213:49345] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/debug.php"] [unique_id "aWE00RmasveKu8_ec1W2wAAAAYE"]
[Sat Jan 10 01:03:22.591877 2026] [:error] [pid 14831:tid 14845] [client 4.214.16.213:1748] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aWE02vaKOMCmJcAyBm1gHAAAAow"]
[Sat Jan 10 01:03:28.967395 2026] [:error] [pid 1366:tid 1375] [client 4.214.16.213:1460] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aWE04BmasveKu8_ec1W21gAAAYY"]
[Sat Jan 10 01:03:31.207630 2026] [:error] [pid 30019:tid 30044] [client 4.214.16.213:17405] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aWE040z3igHGwX5f7IoYDwAAABQ"]
[Sat Jan 10 01:03:43.052969 2026] [:error] [pid 44848:tid 44850] [client 4.214.16.213:5135] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aWE076jajoTJAbEk87wB9QAAAEA"]
[Sat Jan 10 01:03:45.209758 2026] [:error] [pid 14739:tid 14757] [client 4.214.16.213:14534] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aWE08V63M6_PkLt_IJKL8gAAAdA"]
[Sat Jan 10 01:03:46.308568 2026] [:error] [pid 44848:tid 44858] [client 4.214.16.213:13280] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aWE08qjajoTJAbEk87wB_wAAAEg"]
[Sat Jan 10 01:03:47.517163 2026] [:error] [pid 30019:tid 30044] [client 4.214.16.213:14553] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/999.php"] [unique_id "aWE080z3igHGwX5f7IoYIQAAABQ"]
[Sat Jan 10 01:03:52.553508 2026] [:error] [pid 14801:tid 14819] [client 4.214.16.213:16840] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/999.php"] [unique_id "aWE0-N8UWXrz_OQYgF2LlQAAAlA"]
[Sat Jan 10 01:03:57.205789 2026] [proxy_fcgi:error] [pid 14831:tid 14857] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:57.691472 2026] [proxy_fcgi:error] [pid 14831:tid 14855] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:57.809610 2026] [proxy_fcgi:error] [pid 14831:tid 14833] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:57.926741 2026] [proxy_fcgi:error] [pid 14831:tid 14834] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:58.410298 2026] [proxy_fcgi:error] [pid 14831:tid 14838] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:58.527785 2026] [proxy_fcgi:error] [pid 14831:tid 14842] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:58.872192 2026] [proxy_fcgi:error] [pid 14831:tid 14849] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:59.129621 2026] [proxy_fcgi:error] [pid 14831:tid 14856] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:59.509421 2026] [proxy_fcgi:error] [pid 14831:tid 14835] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:03:59.626371 2026] [proxy_fcgi:error] [pid 14831:tid 14852] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:04:00.208311 2026] [proxy_fcgi:error] [pid 14831:tid 14851] [client 4.214.16.213:19315] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:04:00.323002 2026] [:error] [pid 14831:tid 14854] [client 4.214.16.213:19315] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aWE1APaKOMCmJcAyBm1gOwAAApU"]
[Sat Jan 10 01:04:01.755984 2026] [:error] [pid 1366:tid 1384] [client 4.214.16.213:12017] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aWE1ARmasveKu8_ec1W3BwAAAY8"]
[Sat Jan 10 01:04:11.916948 2026] [:error] [pid 30021:tid 30099] [client 4.214.16.213:14926] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aWE1Cw_M8aRtsTog5J_N5QAAANI"]
[Sat Jan 10 01:04:14.135067 2026] [:error] [pid 44848:tid 44868] [client 4.214.16.213:5199] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/up.php"] [unique_id "aWE1DqjajoTJAbEk87wCHwAAAFI"]
[Sat Jan 10 01:04:18.321068 2026] [:error] [pid 30021:tid 30097] [client 4.214.16.213:5225] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aWE1Eg_M8aRtsTog5J_N6wAAANA"]
[Sat Jan 10 01:04:20.211625 2026] [:error] [pid 14801:tid 14817] [client 4.214.16.213:49408] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aWE1FN8UWXrz_OQYgF2LpgAAAk4"]
[Sat Jan 10 01:04:21.096748 2026] [:error] [pid 30019:tid 30042] [client 4.214.16.213:21111] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aWE1FUz3igHGwX5f7IoYRQAAABI"]
[Sat Jan 10 01:04:23.720636 2026] [:error] [pid 14831:tid 14833] [client 4.214.16.213:14480] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/c.php"] [unique_id "aWE1F_aKOMCmJcAyBm1gUgAAAoA"]
[Sat Jan 10 01:04:25.877806 2026] [:error] [pid 30021:tid 30090] [client 4.214.16.213:12106] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aWE1GQ_M8aRtsTog5J_N8gAAAMk"]
[Sat Jan 10 01:04:27.714125 2026] [:error] [pid 30019:tid 30037] [client 4.214.16.213:14491] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aWE1G0z3igHGwX5f7IoYSgAAAA0"]
[Sat Jan 10 01:04:30.153602 2026] [:error] [pid 30019:tid 30048] [client 4.214.16.213:1385] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/b.php"] [unique_id "aWE1Hkz3igHGwX5f7IoYVQAAABg"]
[Sat Jan 10 01:04:45.898630 2026] [:error] [pid 14801:tid 14811] [client 4.214.16.213:12027] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aWE1Ld8UWXrz_OQYgF2LvAAAAkg"]
[Sat Jan 10 01:04:48.498732 2026] [:error] [pid 30021:tid 30084] [client 4.214.16.213:50704] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/db.php"] [unique_id "aWE1MA_M8aRtsTog5J_OCQAAAMM"]
[Sat Jan 10 01:04:58.855548 2026] [:error] [pid 1366:tid 1391] [client 4.214.16.213:12482] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.exe"] [unique_id "aWE1OhmasveKu8_ec1W3OwAAAZY"]
[Sat Jan 10 01:05:00.712691 2026] [proxy_fcgi:error] [pid 14739:tid 14744] [client 4.214.16.213:20821] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:05:00.830243 2026] [proxy_fcgi:error] [pid 14739:tid 14747] [client 4.214.16.213:20821] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 01:05:00.951438 2026] [:error] [pid 14739:tid 14746] [client 4.214.16.213:20821] [client 4.214.16.213] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cientifica.com.au|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cientifica.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWE1PF63M6_PkLt_IJKL_gAAAcU"]
[Sat Jan 10 01:45:20.699914 2026] [autoindex:error] [pid 44848:tid 44859] [client 161.118.211.239:64193] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 01:45:20.883310 2026] [:error] [pid 44848:tid 44857] [client 161.118.211.239:64193] [client 161.118.211.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWE-sKjajoTJAbEk87wLeAAAAEc"]
[Sat Jan 10 02:20:11.428864 2026] [autoindex:error] [pid 14872:tid 14890] [client 51.68.111.241:36291] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 06:00:16.205169 2026] [proxy_fcgi:error] [pid 20647:tid 20683] [client 20.205.8.212:7832] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:00:16.340269 2026] [proxy_fcgi:error] [pid 20647:tid 20700] [client 20.205.8.212:7832] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:00:16.463351 2026] [proxy_fcgi:error] [pid 20647:tid 20703] [client 20.205.8.212:7832] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:00:16.580506 2026] [:error] [pid 20647:tid 20697] [client 20.205.8.212:7832] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aWF6cKvb0x69MarUHzCpJAAAAE8"]
[Sat Jan 10 06:00:16.848527 2026] [:error] [pid 20647:tid 20687] [client 20.205.8.212:7886] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aWF6cKvb0x69MarUHzCpJgAAAEU"]
[Sat Jan 10 06:00:17.108242 2026] [:error] [pid 20744:tid 20779] [client 20.205.8.212:7887] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aWF6cUA8oR5jvkFpcP9pfAAAANY"]
[Sat Jan 10 06:00:17.376936 2026] [:error] [pid 20648:tid 20731] [client 20.205.8.212:7880] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/666.php"] [unique_id "aWF6cTBnnIoBkEBdx9AIbAAAAJY"]
[Sat Jan 10 06:00:17.633462 2026] [:error] [pid 20647:tid 20695] [client 20.205.8.212:7930] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aWF6cavb0x69MarUHzCpKgAAAE0"]
[Sat Jan 10 06:00:17.866102 2026] [:error] [pid 20646:tid 20659] [client 20.205.8.212:7912] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aWF6cSKwdq_UhOM64b6uJQAAAAQ"]
[Sat Jan 10 06:00:18.100974 2026] [:error] [pid 20744:tid 20777] [client 20.205.8.212:7827] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aWF6ckA8oR5jvkFpcP9pfQAAANQ"]
[Sat Jan 10 06:00:18.339136 2026] [:error] [pid 20647:tid 20690] [client 20.205.8.212:7902] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/777.php"] [unique_id "aWF6cqvb0x69MarUHzCpLAAAAEg"]
[Sat Jan 10 06:00:18.578447 2026] [:error] [pid 20744:tid 20761] [client 20.205.8.212:7839] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aWF6ckA8oR5jvkFpcP9pgAAAAMQ"]
[Sat Jan 10 06:00:18.841827 2026] [:error] [pid 20646:tid 20674] [client 20.205.8.212:7833] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aWF6ciKwdq_UhOM64b6uLgAAABM"]
[Sat Jan 10 06:00:19.075563 2026] [:error] [pid 20744:tid 20773] [client 20.205.8.212:7758] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aWF6c0A8oR5jvkFpcP9phAAAANA"]
[Sat Jan 10 06:00:19.313070 2026] [:error] [pid 20744:tid 20775] [client 20.205.8.212:7922] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/888.php"] [unique_id "aWF6c0A8oR5jvkFpcP9phwAAANI"]
[Sat Jan 10 06:00:19.552411 2026] [:error] [pid 20744:tid 20763] [client 20.205.8.212:7913] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aWF6c0A8oR5jvkFpcP9piQAAAMY"]
[Sat Jan 10 06:00:19.786243 2026] [:error] [pid 20648:tid 20732] [client 20.205.8.212:7919] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aWF6czBnnIoBkEBdx9AIbQAAAJc"]
[Sat Jan 10 06:00:20.023954 2026] [:error] [pid 20646:tid 20659] [client 20.205.8.212:7888] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aWF6dCKwdq_UhOM64b6uNgAAAAQ"]
[Sat Jan 10 06:00:20.273448 2026] [:error] [pid 20646:tid 20676] [client 20.205.8.212:7811] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/555.php"] [unique_id "aWF6dCKwdq_UhOM64b6uOQAAABU"]
[Sat Jan 10 06:00:20.517947 2026] [:error] [pid 20646:tid 20662] [client 20.205.8.212:7903] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aWF6dCKwdq_UhOM64b6uOwAAAAc"]
[Sat Jan 10 06:00:20.753766 2026] [:error] [pid 20646:tid 20661] [client 20.205.8.212:7924] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aWF6dCKwdq_UhOM64b6uPQAAAAY"]
[Sat Jan 10 06:00:21.000379 2026] [:error] [pid 20646:tid 20663] [client 20.205.8.212:7817] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aWF6dCKwdq_UhOM64b6uQAAAAAg"]
[Sat Jan 10 06:00:21.237204 2026] [:error] [pid 20646:tid 20664] [client 20.205.8.212:7905] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aWF6dSKwdq_UhOM64b6uQwAAAAk"]
[Sat Jan 10 06:00:21.476958 2026] [:error] [pid 20646:tid 20675] [client 20.205.8.212:7818] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zeal.php"] [unique_id "aWF6dSKwdq_UhOM64b6uRgAAABQ"]
[Sat Jan 10 06:00:21.711807 2026] [:error] [pid 20646:tid 20657] [client 20.205.8.212:7929] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zeal.php"] [unique_id "aWF6dSKwdq_UhOM64b6uSAAAAAI"]
[Sat Jan 10 06:00:21.949012 2026] [:error] [pid 20646:tid 20673] [client 20.205.8.212:7874] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zeal.php"] [unique_id "aWF6dSKwdq_UhOM64b6uSgAAABI"]
[Sat Jan 10 06:00:22.190336 2026] [:error] [pid 20646:tid 20669] [client 20.205.8.212:7917] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zeal.php"] [unique_id "aWF6diKwdq_UhOM64b6uTQAAAA4"]
[Sat Jan 10 06:00:22.424398 2026] [:error] [pid 20646:tid 20674] [client 20.205.8.212:7835] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aWF6diKwdq_UhOM64b6uUQAAABM"]
[Sat Jan 10 06:00:22.657508 2026] [:error] [pid 20646:tid 20663] [client 20.205.8.212:7879] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aWF6diKwdq_UhOM64b6uUgAAAAg"]
[Sat Jan 10 06:00:22.892809 2026] [:error] [pid 20648:tid 20729] [client 20.205.8.212:7925] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aWF6djBnnIoBkEBdx9AIcAAAAJQ"]
[Sat Jan 10 06:00:23.126789 2026] [:error] [pid 20647:tid 20698] [client 20.205.8.212:7923] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aWF6d6vb0x69MarUHzCpLgAAAFA"]
[Sat Jan 10 06:00:23.361441 2026] [:error] [pid 20646:tid 20675] [client 20.205.8.212:7890] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aWF6dyKwdq_UhOM64b6uVgAAABQ"]
[Sat Jan 10 06:00:23.600008 2026] [:error] [pid 20646:tid 20658] [client 20.205.8.212:7895] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aWF6dyKwdq_UhOM64b6uVwAAAAM"]
[Sat Jan 10 06:00:23.834979 2026] [:error] [pid 20646:tid 20673] [client 20.205.8.212:7907] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aWF6dyKwdq_UhOM64b6uWQAAABI"]
[Sat Jan 10 06:00:24.068262 2026] [:error] [pid 20648:tid 20721] [client 20.205.8.212:7884] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file1.php"] [unique_id "aWF6eDBnnIoBkEBdx9AIdwAAAIw"]
[Sat Jan 10 06:00:24.301535 2026] [:error] [pid 20646:tid 20669] [client 20.205.8.212:7932] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file2.php"] [unique_id "aWF6eCKwdq_UhOM64b6uXAAAAA4"]
[Sat Jan 10 06:00:24.534964 2026] [:error] [pid 20648:tid 20724] [client 20.205.8.212:7830] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file2.php"] [unique_id "aWF6eDBnnIoBkEBdx9AIegAAAI8"]
[Sat Jan 10 06:00:24.769323 2026] [:error] [pid 20648:tid 20718] [client 20.205.8.212:7816] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file2.php"] [unique_id "aWF6eDBnnIoBkEBdx9AIfQAAAIk"]
[Sat Jan 10 06:00:25.002439 2026] [:error] [pid 20648:tid 20728] [client 20.205.8.212:7893] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file2.php"] [unique_id "aWF6eTBnnIoBkEBdx9AIfwAAAJM"]
[Sat Jan 10 06:00:25.238258 2026] [:error] [pid 20646:tid 20658] [client 20.205.8.212:7875] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aWF6eSKwdq_UhOM64b6uZAAAAAM"]
[Sat Jan 10 06:00:25.471591 2026] [:error] [pid 20646:tid 20671] [client 20.205.8.212:7813] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aWF6eSKwdq_UhOM64b6uZgAAABA"]
[Sat Jan 10 06:00:25.708104 2026] [:error] [pid 20648:tid 20720] [client 20.205.8.212:7918] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aWF6eTBnnIoBkEBdx9AIggAAAIs"]
[Sat Jan 10 06:00:25.943327 2026] [:error] [pid 20648:tid 20729] [client 20.205.8.212:7825] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aWF6eTBnnIoBkEBdx9AIhQAAAJQ"]
[Sat Jan 10 06:00:26.197658 2026] [:error] [pid 20648:tid 20712] [client 20.205.8.212:7843] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aWF6ejBnnIoBkEBdx9AIhgAAAIM"]
[Sat Jan 10 06:00:26.449667 2026] [:error] [pid 20744:tid 20781] [client 20.205.8.212:7819] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aWF6ekA8oR5jvkFpcP9pjwAAANg"]
[Sat Jan 10 06:00:26.686785 2026] [:error] [pid 20744:tid 20776] [client 20.205.8.212:7759] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aWF6ekA8oR5jvkFpcP9pkQAAANM"]
[Sat Jan 10 06:00:26.938101 2026] [:error] [pid 20646:tid 20670] [client 20.205.8.212:7815] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file17.php"] [unique_id "aWF6eiKwdq_UhOM64b6ubAAAAA8"]
[Sat Jan 10 06:00:27.172509 2026] [:error] [pid 20648:tid 20715] [client 20.205.8.212:7861] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file32.php"] [unique_id "aWF6ezBnnIoBkEBdx9AIjwAAAIY"]
[Sat Jan 10 06:00:27.409674 2026] [:error] [pid 20646:tid 20655] [client 20.205.8.212:7926] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file32.php"] [unique_id "aWF6eyKwdq_UhOM64b6ucAAAAAA"]
[Sat Jan 10 06:00:27.641743 2026] [:error] [pid 20647:tid 20684] [client 20.205.8.212:7844] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file32.php"] [unique_id "aWF6e6vb0x69MarUHzCpMgAAAEI"]
[Sat Jan 10 06:00:27.890303 2026] [:error] [pid 20647:tid 20699] [client 20.205.8.212:7808] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file32.php"] [unique_id "aWF6e6vb0x69MarUHzCpNQAAAFE"]
[Sat Jan 10 06:00:28.138339 2026] [:error] [pid 20647:tid 20683] [client 20.205.8.212:7809] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filesss.php"] [unique_id "aWF6fKvb0x69MarUHzCpNwAAAEE"]
[Sat Jan 10 06:00:28.370921 2026] [:error] [pid 20646:tid 20658] [client 20.205.8.212:7864] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filesss.php"] [unique_id "aWF6fCKwdq_UhOM64b6udAAAAAM"]
[Sat Jan 10 06:00:28.605362 2026] [:error] [pid 20647:tid 20703] [client 20.205.8.212:7855] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filesss.php"] [unique_id "aWF6fKvb0x69MarUHzCpOgAAAFU"]
[Sat Jan 10 06:00:28.841258 2026] [:error] [pid 20646:tid 20666] [client 20.205.8.212:7837] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filesss.php"] [unique_id "aWF6fCKwdq_UhOM64b6ueAAAAAs"]
[Sat Jan 10 06:00:29.096667 2026] [:error] [pid 20744:tid 20766] [client 20.205.8.212:7857] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aWF6fUA8oR5jvkFpcP9pkwAAAMk"]
[Sat Jan 10 06:00:29.331140 2026] [:error] [pid 20744:tid 20761] [client 20.205.8.212:7870] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aWF6fUA8oR5jvkFpcP9plAAAAMQ"]
[Sat Jan 10 06:00:29.566539 2026] [:error] [pid 20647:tid 20691] [client 20.205.8.212:7885] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aWF6favb0x69MarUHzCpQgAAAEk"]
[Sat Jan 10 06:00:29.832386 2026] [:error] [pid 20646:tid 20678] [client 20.205.8.212:7904] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file9.php"] [unique_id "aWF6fSKwdq_UhOM64b6ufwAAABc"]
[Sat Jan 10 06:00:30.094688 2026] [:error] [pid 20647:tid 20688] [client 20.205.8.212:7757] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file13.php"] [unique_id "aWF6fqvb0x69MarUHzCpRwAAAEY"]
[Sat Jan 10 06:00:30.330290 2026] [:error] [pid 20646:tid 20666] [client 20.205.8.212:7842] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file13.php"] [unique_id "aWF6fiKwdq_UhOM64b6uigAAAAs"]
[Sat Jan 10 06:00:30.613122 2026] [:error] [pid 20648:tid 20726] [client 20.205.8.212:7782] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file13.php"] [unique_id "aWF6fjBnnIoBkEBdx9AInQAAAJE"]
[Sat Jan 10 06:00:30.885522 2026] [:error] [pid 20647:tid 20696] [client 20.205.8.212:7797] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file13.php"] [unique_id "aWF6fqvb0x69MarUHzCpTQAAAE4"]
[Sat Jan 10 06:00:31.188774 2026] [:error] [pid 20744:tid 20758] [client 20.205.8.212:7822] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aWF6f0A8oR5jvkFpcP9pmwAAAME"]
[Sat Jan 10 06:00:31.429454 2026] [:error] [pid 20646:tid 20656] [client 20.205.8.212:7765] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aWF6fyKwdq_UhOM64b6uiwAAAAE"]
[Sat Jan 10 06:00:31.757591 2026] [:error] [pid 20646:tid 20670] [client 20.205.8.212:7858] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aWF6fyKwdq_UhOM64b6ukQAAAA8"]
[Sat Jan 10 06:00:32.006616 2026] [:error] [pid 20646:tid 20678] [client 20.205.8.212:7878] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aWF6gCKwdq_UhOM64b6ukwAAABc"]
[Sat Jan 10 06:00:32.290074 2026] [:error] [pid 20646:tid 20668] [client 20.205.8.212:7921] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aWF6gCKwdq_UhOM64b6ulAAAAA0"]
[Sat Jan 10 06:00:32.536660 2026] [:error] [pid 20646:tid 20674] [client 20.205.8.212:7934] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aWF6gCKwdq_UhOM64b6ulgAAABM"]
[Sat Jan 10 06:00:32.771341 2026] [:error] [pid 20648:tid 20710] [client 20.205.8.212:7891] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aWF6gDBnnIoBkEBdx9AIogAAAIE"]
[Sat Jan 10 06:00:33.031780 2026] [:error] [pid 20646:tid 20666] [client 20.205.8.212:7852] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atomlib.php"] [unique_id "aWF6gSKwdq_UhOM64b6umgAAAAs"]
[Sat Jan 10 06:00:33.265538 2026] [:error] [pid 20648:tid 20716] [client 20.205.8.212:7914] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efile.php"] [unique_id "aWF6gTBnnIoBkEBdx9AIowAAAIc"]
[Sat Jan 10 06:00:33.500464 2026] [:error] [pid 20647:tid 20704] [client 20.205.8.212:7882] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efile.php"] [unique_id "aWF6gavb0x69MarUHzCpVgAAAFY"]
[Sat Jan 10 06:00:33.750838 2026] [:error] [pid 20646:tid 20660] [client 20.205.8.212:7851] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efile.php"] [unique_id "aWF6gSKwdq_UhOM64b6unAAAAAU"]
[Sat Jan 10 06:00:34.000592 2026] [:error] [pid 20744:tid 20768] [client 20.205.8.212:7748] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/efile.php"] [unique_id "aWF6gUA8oR5jvkFpcP9poQAAAMs"]
[Sat Jan 10 06:00:34.239710 2026] [:error] [pid 20648:tid 20720] [client 20.205.8.212:7828] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aWF6gjBnnIoBkEBdx9AIpgAAAIs"]
[Sat Jan 10 06:00:34.472930 2026] [:error] [pid 20744:tid 20767] [client 20.205.8.212:7814] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aWF6gkA8oR5jvkFpcP9pogAAAMo"]
[Sat Jan 10 06:00:34.763232 2026] [:error] [pid 20647:tid 20684] [client 20.205.8.212:7849] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aWF6gqvb0x69MarUHzCpWwAAAEI"]
[Sat Jan 10 06:00:35.017873 2026] [:error] [pid 20647:tid 20706] [client 20.205.8.212:7901] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file18.php"] [unique_id "aWF6g6vb0x69MarUHzCpXAAAAFg"]
[Sat Jan 10 06:00:35.263542 2026] [:error] [pid 20646:tid 20658] [client 20.205.8.212:7829] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aWF6gyKwdq_UhOM64b6uoQAAAAM"]
[Sat Jan 10 06:00:35.497737 2026] [:error] [pid 20646:tid 20665] [client 20.205.8.212:7836] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aWF6gyKwdq_UhOM64b6upAAAAAo"]
[Sat Jan 10 06:00:35.749090 2026] [:error] [pid 20646:tid 20672] [client 20.205.8.212:7872] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aWF6gyKwdq_UhOM64b6uqAAAABE"]
[Sat Jan 10 06:00:36.018272 2026] [:error] [pid 20744:tid 20760] [client 20.205.8.212:7776] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aWF6hEA8oR5jvkFpcP9ppgAAAMM"]
[Sat Jan 10 06:00:36.292408 2026] [:error] [pid 20744:tid 20761] [client 20.205.8.212:7745] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/031.php"] [unique_id "aWF6hEA8oR5jvkFpcP9pqAAAAMQ"]
[Sat Jan 10 06:00:36.555810 2026] [:error] [pid 20744:tid 20757] [client 20.205.8.212:7845] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/031.php"] [unique_id "aWF6hEA8oR5jvkFpcP9pqQAAAMA"]
[Sat Jan 10 06:00:36.864597 2026] [:error] [pid 20648:tid 20722] [client 20.205.8.212:7909] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/031.php"] [unique_id "aWF6hDBnnIoBkEBdx9AIrAAAAI0"]
[Sat Jan 10 06:00:37.098875 2026] [:error] [pid 20744:tid 20780] [client 20.205.8.212:7894] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/031.php"] [unique_id "aWF6hUA8oR5jvkFpcP9prgAAANc"]
[Sat Jan 10 06:00:37.333451 2026] [:error] [pid 20744:tid 20759] [client 20.205.8.212:7785] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aWF6hUA8oR5jvkFpcP9psQAAAMI"]
[Sat Jan 10 06:00:37.585261 2026] [:error] [pid 20744:tid 20774] [client 20.205.8.212:7826] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aWF6hUA8oR5jvkFpcP9ptAAAANE"]
[Sat Jan 10 06:00:37.823406 2026] [:error] [pid 20648:tid 20724] [client 20.205.8.212:7820] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aWF6hTBnnIoBkEBdx9AIrwAAAI8"]
[Sat Jan 10 06:00:38.059789 2026] [:error] [pid 20648:tid 20713] [client 20.205.8.212:7823] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aWF6hjBnnIoBkEBdx9AIsQAAAIQ"]
[Sat Jan 10 06:00:38.310594 2026] [:error] [pid 20646:tid 20659] [client 20.205.8.212:7846] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aWF6hiKwdq_UhOM64b6uqgAAAAQ"]
[Sat Jan 10 06:00:38.606213 2026] [:error] [pid 20646:tid 20669] [client 20.205.8.212:7899] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aWF6hiKwdq_UhOM64b6urQAAAA4"]
[Sat Jan 10 06:00:38.841229 2026] [:error] [pid 20647:tid 20687] [client 20.205.8.212:7838] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aWF6hqvb0x69MarUHzCpZwAAAEU"]
[Sat Jan 10 06:00:39.081488 2026] [:error] [pid 20647:tid 20704] [client 20.205.8.212:7892] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file4.php"] [unique_id "aWF6h6vb0x69MarUHzCpaQAAAFY"]
[Sat Jan 10 06:00:39.316042 2026] [:error] [pid 20647:tid 20702] [client 20.205.8.212:7792] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2%25.php"] [unique_id "aWF6h6vb0x69MarUHzCpbAAAAFQ"]
[Sat Jan 10 06:00:39.562030 2026] [:error] [pid 20647:tid 20686] [client 20.205.8.212:7834] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2%25.php"] [unique_id "aWF6h6vb0x69MarUHzCpbwAAAEQ"]
[Sat Jan 10 06:00:39.797100 2026] [:error] [pid 20744:tid 20772] [client 20.205.8.212:7764] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2%25.php"] [unique_id "aWF6h0A8oR5jvkFpcP9puQAAAM8"]
[Sat Jan 10 06:00:40.050390 2026] [:error] [pid 20646:tid 20677] [client 20.205.8.212:7767] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2%25.php"] [unique_id "aWF6iCKwdq_UhOM64b6usAAAABY"]
[Sat Jan 10 06:00:40.282919 2026] [:error] [pid 20648:tid 20723] [client 20.205.8.212:7927] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1%25.php"] [unique_id "aWF6iDBnnIoBkEBdx9AIuwAAAI4"]
[Sat Jan 10 06:00:40.558908 2026] [:error] [pid 20648:tid 20712] [client 20.205.8.212:7850] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1%25.php"] [unique_id "aWF6iDBnnIoBkEBdx9AIvAAAAIM"]
[Sat Jan 10 06:00:40.802517 2026] [:error] [pid 20647:tid 20698] [client 20.205.8.212:7860] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1%25.php"] [unique_id "aWF6iKvb0x69MarUHzCpdAAAAFA"]
[Sat Jan 10 06:00:41.039334 2026] [:error] [pid 20744:tid 20773] [client 20.205.8.212:7889] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1%25.php"] [unique_id "aWF6iUA8oR5jvkFpcP9pugAAANA"]
[Sat Jan 10 06:00:41.286704 2026] [:error] [pid 20744:tid 20758] [client 20.205.8.212:7933] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-freya.php"] [unique_id "aWF6iUA8oR5jvkFpcP9puwAAAME"]
[Sat Jan 10 06:00:41.529239 2026] [:error] [pid 20646:tid 20671] [client 20.205.8.212:7888] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-freya.php"] [unique_id "aWF6iSKwdq_UhOM64b6utAAAABA"]
[Sat Jan 10 06:00:41.770808 2026] [:error] [pid 20646:tid 20660] [client 20.205.8.212:7935] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-freya.php"] [unique_id "aWF6iSKwdq_UhOM64b6utwAAAAU"]
[Sat Jan 10 06:00:42.009247 2026] [:error] [pid 20647:tid 20700] [client 20.205.8.212:7804] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-freya.php"] [unique_id "aWF6iqvb0x69MarUHzCpeAAAAFI"]
[Sat Jan 10 06:00:42.242749 2026] [:error] [pid 20647:tid 20682] [client 20.205.8.212:7876] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/keu.php"] [unique_id "aWF6iqvb0x69MarUHzCpegAAAEA"]
[Sat Jan 10 06:00:42.489811 2026] [:error] [pid 20648:tid 20724] [client 20.205.8.212:7824] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/keu.php"] [unique_id "aWF6ijBnnIoBkEBdx9AIwAAAAI8"]
[Sat Jan 10 06:00:42.726812 2026] [:error] [pid 20648:tid 20718] [client 20.205.8.212:7755] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/keu.php"] [unique_id "aWF6ijBnnIoBkEBdx9AIwwAAAIk"]
[Sat Jan 10 06:00:42.959491 2026] [:error] [pid 20646:tid 20679] [client 20.205.8.212:7929] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/keu.php"] [unique_id "aWF6iiKwdq_UhOM64b6uvgAAABg"]
[Sat Jan 10 06:00:43.192157 2026] [:error] [pid 20646:tid 20676] [client 20.205.8.212:7867] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file88.php"] [unique_id "aWF6iyKwdq_UhOM64b6uvwAAABU"]
[Sat Jan 10 06:00:43.433980 2026] [:error] [pid 20647:tid 20690] [client 20.205.8.212:7862] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file88.php"] [unique_id "aWF6i6vb0x69MarUHzCpfwAAAEg"]
[Sat Jan 10 06:00:43.670313 2026] [:error] [pid 20647:tid 20686] [client 20.205.8.212:7774] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file88.php"] [unique_id "aWF6i6vb0x69MarUHzCpggAAAEQ"]
[Sat Jan 10 06:00:43.903222 2026] [:error] [pid 20647:tid 20688] [client 20.205.8.212:7920] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file88.php"] [unique_id "aWF6i6vb0x69MarUHzCphAAAAEY"]
[Sat Jan 10 06:00:44.163525 2026] [:error] [pid 20647:tid 20694] [client 20.205.8.212:7800] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0%25.php"] [unique_id "aWF6jKvb0x69MarUHzCphwAAAEw"]
[Sat Jan 10 06:00:44.402654 2026] [:error] [pid 20646:tid 20664] [client 20.205.8.212:7779] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0%25.php"] [unique_id "aWF6jCKwdq_UhOM64b6uwwAAAAk"]
[Sat Jan 10 06:00:44.662790 2026] [:error] [pid 20648:tid 20728] [client 20.205.8.212:7744] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0%25.php"] [unique_id "aWF6jDBnnIoBkEBdx9AIxgAAAJM"]
[Sat Jan 10 06:00:44.895818 2026] [:error] [pid 20647:tid 20700] [client 20.205.8.212:7910] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0%25.php"] [unique_id "aWF6jKvb0x69MarUHzCpjAAAAFI"]
[Sat Jan 10 06:00:45.130740 2026] [:error] [pid 20744:tid 20759] [client 20.205.8.212:7318] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aWF6jUA8oR5jvkFpcP9pwAAAAMI"]
[Sat Jan 10 06:00:45.366384 2026] [:error] [pid 20647:tid 20697] [client 20.205.8.212:7781] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aWF6javb0x69MarUHzCpjwAAAE8"]
[Sat Jan 10 06:00:45.603490 2026] [:error] [pid 20744:tid 20774] [client 20.205.8.212:7847] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aWF6jUA8oR5jvkFpcP9pwwAAANE"]
[Sat Jan 10 06:00:45.836399 2026] [:error] [pid 20648:tid 20712] [client 20.205.8.212:7831] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aWF6jTBnnIoBkEBdx9AIyAAAAIM"]
[Sat Jan 10 06:00:46.070336 2026] [:error] [pid 20647:tid 20689] [client 20.205.8.212:7799] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aWF6jqvb0x69MarUHzCpkgAAAEc"]
[Sat Jan 10 06:00:46.319977 2026] [:error] [pid 20647:tid 20695] [client 20.205.8.212:7308] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aWF6jqvb0x69MarUHzCplQAAAE0"]
[Sat Jan 10 06:00:46.557062 2026] [:error] [pid 20646:tid 20674] [client 20.205.8.212:7756] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aWF6jiKwdq_UhOM64b6uxgAAABM"]
[Sat Jan 10 06:00:46.790672 2026] [:error] [pid 20648:tid 20722] [client 20.205.8.212:7753] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jmfi2.php"] [unique_id "aWF6jjBnnIoBkEBdx9AIygAAAI0"]
[Sat Jan 10 06:00:47.034476 2026] [:error] [pid 20744:tid 20760] [client 20.205.8.212:7881] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aWF6j0A8oR5jvkFpcP9pyAAAAMM"]
[Sat Jan 10 06:00:47.268096 2026] [:error] [pid 20744:tid 20770] [client 20.205.8.212:7333] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aWF6j0A8oR5jvkFpcP9pzAAAAM0"]
[Sat Jan 10 06:00:47.501273 2026] [:error] [pid 20744:tid 20758] [client 20.205.8.212:7897] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aWF6j0A8oR5jvkFpcP9pzgAAAME"]
[Sat Jan 10 06:00:47.734733 2026] [:error] [pid 20744:tid 20780] [client 20.205.8.212:7801] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aWF6j0A8oR5jvkFpcP9p0QAAANc"]
[Sat Jan 10 06:00:47.966941 2026] [:error] [pid 20744:tid 20759] [client 20.205.8.212:7803] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aWF6j0A8oR5jvkFpcP9p1QAAAMI"]
[Sat Jan 10 06:00:48.200138 2026] [:error] [pid 20744:tid 20768] [client 20.205.8.212:7489] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aWF6kEA8oR5jvkFpcP9p2AAAAMs"]
[Sat Jan 10 06:00:48.433357 2026] [:error] [pid 20646:tid 20660] [client 20.205.8.212:7770] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aWF6kCKwdq_UhOM64b6uyAAAAAU"]
[Sat Jan 10 06:00:48.672924 2026] [:error] [pid 20648:tid 20724] [client 20.205.8.212:7853] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an.php"] [unique_id "aWF6kDBnnIoBkEBdx9AIzQAAAI8"]
[Sat Jan 10 06:00:48.913106 2026] [:error] [pid 20646:tid 20662] [client 20.205.8.212:7805] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aWF6kCKwdq_UhOM64b6uywAAAAc"]
[Sat Jan 10 06:00:49.146916 2026] [:error] [pid 20744:tid 20776] [client 20.205.8.212:7760] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aWF6kUA8oR5jvkFpcP9p3AAAANM"]
[Sat Jan 10 06:00:49.388427 2026] [:error] [pid 20646:tid 20679] [client 20.205.8.212:7796] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aWF6kSKwdq_UhOM64b6uzgAAABg"]
[Sat Jan 10 06:00:49.630055 2026] [:error] [pid 20646:tid 20669] [client 20.205.8.212:7314] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fs.php"] [unique_id "aWF6kSKwdq_UhOM64b6u0AAAAA4"]
[Sat Jan 10 06:00:49.865846 2026] [:error] [pid 20744:tid 20760] [client 20.205.8.212:7746] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/CLA.php"] [unique_id "aWF6kUA8oR5jvkFpcP9p3gAAAMM"]
[Sat Jan 10 06:00:50.108873 2026] [:error] [pid 20647:tid 20700] [client 20.205.8.212:7869] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/CLA.php"] [unique_id "aWF6kqvb0x69MarUHzCpnQAAAFI"]
[Sat Jan 10 06:00:50.355300 2026] [:error] [pid 20646:tid 20658] [client 20.205.8.212:7883] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/CLA.php"] [unique_id "aWF6kiKwdq_UhOM64b6u2QAAAAM"]
[Sat Jan 10 06:00:50.596178 2026] [:error] [pid 20648:tid 20716] [client 20.205.8.212:7335] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/CLA.php"] [unique_id "aWF6kjBnnIoBkEBdx9AI0AAAAIc"]
[Sat Jan 10 06:00:50.829952 2026] [:error] [pid 20647:tid 20703] [client 20.205.8.212:7812] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aWF6kqvb0x69MarUHzCpnwAAAFU"]
[Sat Jan 10 06:00:51.062387 2026] [:error] [pid 20647:tid 20682] [client 20.205.8.212:7848] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aWF6k6vb0x69MarUHzCpoQAAAEA"]
[Sat Jan 10 06:00:51.294881 2026] [:error] [pid 20647:tid 20685] [client 20.205.8.212:7916] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aWF6k6vb0x69MarUHzCpowAAAEM"]
[Sat Jan 10 06:00:51.541601 2026] [:error] [pid 20647:tid 20704] [client 20.205.8.212:7752] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aWF6k6vb0x69MarUHzCppQAAAFY"]
[Sat Jan 10 06:00:51.778323 2026] [:error] [pid 20647:tid 20702] [client 20.205.8.212:7328] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file6.php"] [unique_id "aWF6k6vb0x69MarUHzCppwAAAFQ"]
[Sat Jan 10 06:00:52.013507 2026] [:error] [pid 20646:tid 20655] [client 20.205.8.212:7771] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file6.php"] [unique_id "aWF6lCKwdq_UhOM64b6u4QAAAAA"]
[Sat Jan 10 06:00:52.249409 2026] [:error] [pid 20646:tid 20662] [client 20.205.8.212:7337] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file6.php"] [unique_id "aWF6lCKwdq_UhOM64b6u4wAAAAc"]
[Sat Jan 10 06:00:52.491421 2026] [:error] [pid 20646:tid 20679] [client 20.205.8.212:7931] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file6.php"] [unique_id "aWF6lCKwdq_UhOM64b6u5gAAABg"]
[Sat Jan 10 06:00:52.727485 2026] [:error] [pid 20647:tid 20686] [client 20.205.8.212:7749] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eauu.php"] [unique_id "aWF6lKvb0x69MarUHzCpqQAAAEQ"]
[Sat Jan 10 06:00:52.967676 2026] [:error] [pid 20648:tid 20731] [client 20.205.8.212:7787] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eauu.php"] [unique_id "aWF6lDBnnIoBkEBdx9AI1gAAAJY"]
[Sat Jan 10 06:00:53.202993 2026] [:error] [pid 20647:tid 20684] [client 20.205.8.212:7299] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eauu.php"] [unique_id "aWF6lavb0x69MarUHzCprAAAAEI"]
[Sat Jan 10 06:00:53.439234 2026] [:error] [pid 20648:tid 20728] [client 20.205.8.212:7761] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/eauu.php"] [unique_id "aWF6lTBnnIoBkEBdx9AI2QAAAJM"]
[Sat Jan 10 06:00:53.673080 2026] [:error] [pid 20648:tid 20723] [client 20.205.8.212:7298] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aWF6lTBnnIoBkEBdx9AI2gAAAI4"]
[Sat Jan 10 06:00:53.905734 2026] [:error] [pid 20646:tid 20670] [client 20.205.8.212:7751] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aWF6lSKwdq_UhOM64b6u6wAAAA8"]
[Sat Jan 10 06:00:54.138566 2026] [:error] [pid 20646:tid 20678] [client 20.205.8.212:7309] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aWF6liKwdq_UhOM64b6u7AAAABc"]
[Sat Jan 10 06:00:54.380602 2026] [:error] [pid 20744:tid 20780] [client 20.205.8.212:7296] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aWF6lkA8oR5jvkFpcP9p5gAAANc"]
[Sat Jan 10 06:00:54.613074 2026] [:error] [pid 20744:tid 20762] [client 20.205.8.212:7898] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aWF6lkA8oR5jvkFpcP9p6QAAAMU"]
[Sat Jan 10 06:00:54.850766 2026] [:error] [pid 20744:tid 20766] [client 20.205.8.212:7859] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aWF6lkA8oR5jvkFpcP9p7AAAAMk"]
[Sat Jan 10 06:00:55.114472 2026] [:error] [pid 20744:tid 20767] [client 20.205.8.212:7873] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aWF6l0A8oR5jvkFpcP9p7wAAAMo"]
[Sat Jan 10 06:00:55.348233 2026] [:error] [pid 20744:tid 20778] [client 20.205.8.212:7303] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fe5.php"] [unique_id "aWF6l0A8oR5jvkFpcP9p8gAAANU"]
[Sat Jan 10 06:00:55.586643 2026] [:error] [pid 20647:tid 20694] [client 20.205.8.212:7302] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cccc.php"] [unique_id "aWF6l6vb0x69MarUHzCprgAAAEw"]
[Sat Jan 10 06:00:55.842994 2026] [:error] [pid 20646:tid 20665] [client 20.205.8.212:7501] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cccc.php"] [unique_id "aWF6lyKwdq_UhOM64b6u8AAAAAo"]
[Sat Jan 10 06:00:56.075317 2026] [:error] [pid 20646:tid 20671] [client 20.205.8.212:7339] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cccc.php"] [unique_id "aWF6mCKwdq_UhOM64b6u8gAAABA"]
[Sat Jan 10 06:00:56.312468 2026] [:error] [pid 20647:tid 20700] [client 20.205.8.212:7503] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cccc.php"] [unique_id "aWF6mKvb0x69MarUHzCpsgAAAFI"]
[Sat Jan 10 06:00:56.544452 2026] [:error] [pid 20648:tid 20722] [client 20.205.8.212:7784] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aWF6mDBnnIoBkEBdx9AI3gAAAI0"]
[Sat Jan 10 06:00:56.788621 2026] [:error] [pid 20646:tid 20672] [client 20.205.8.212:7856] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aWF6mCKwdq_UhOM64b6u9AAAABE"]
[Sat Jan 10 06:00:57.023904 2026] [:error] [pid 20648:tid 20726] [client 20.205.8.212:7754] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aWF6mTBnnIoBkEBdx9AI4AAAAJE"]
[Sat Jan 10 06:00:57.257626 2026] [:error] [pid 20646:tid 20656] [client 20.205.8.212:7312] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aWF6mSKwdq_UhOM64b6u9wAAAAE"]
[Sat Jan 10 06:00:57.490750 2026] [:error] [pid 20646:tid 20663] [client 20.205.8.212:7319] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell1.php"] [unique_id "aWF6mSKwdq_UhOM64b6u-gAAAAg"]
[Sat Jan 10 06:00:57.722890 2026] [:error] [pid 20646:tid 20666] [client 20.205.8.212:7790] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell1.php"] [unique_id "aWF6mSKwdq_UhOM64b6u_AAAAAs"]
[Sat Jan 10 06:00:57.996484 2026] [:error] [pid 20648:tid 20725] [client 20.205.8.212:7341] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell1.php"] [unique_id "aWF6mTBnnIoBkEBdx9AI4QAAAJA"]
[Sat Jan 10 06:00:58.229809 2026] [:error] [pid 20646:tid 20667] [client 20.205.8.212:7536] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell1.php"] [unique_id "aWF6miKwdq_UhOM64b6vAQAAAAw"]
[Sat Jan 10 06:00:58.465131 2026] [:error] [pid 20646:tid 20677] [client 20.205.8.212:7311] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aWF6miKwdq_UhOM64b6vAgAAABY"]
[Sat Jan 10 06:00:58.700068 2026] [:error] [pid 20646:tid 20664] [client 20.205.8.212:7322] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aWF6miKwdq_UhOM64b6vBwAAAAk"]
[Sat Jan 10 06:00:58.934511 2026] [:error] [pid 20646:tid 20675] [client 20.205.8.212:7806] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aWF6miKwdq_UhOM64b6vCgAAABQ"]
[Sat Jan 10 06:00:59.170470 2026] [:error] [pid 20744:tid 20758] [client 20.205.8.212:7810] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gm.php"] [unique_id "aWF6m0A8oR5jvkFpcP9p-wAAAME"]
[Sat Jan 10 06:00:59.403140 2026] [:error] [pid 20648:tid 20711] [client 20.205.8.212:7323] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aWF6mzBnnIoBkEBdx9AI5AAAAII"]
[Sat Jan 10 06:00:59.636430 2026] [:error] [pid 20648:tid 20715] [client 20.205.8.212:7769] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aWF6mzBnnIoBkEBdx9AI5QAAAIY"]
[Sat Jan 10 06:00:59.869947 2026] [:error] [pid 20648:tid 20721] [client 20.205.8.212:7807] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aWF6mzBnnIoBkEBdx9AI5wAAAIw"]
[Sat Jan 10 06:01:00.103910 2026] [:error] [pid 20647:tid 20691] [client 20.205.8.212:7490] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aWF6nKvb0x69MarUHzCpvAAAAEk"]
[Sat Jan 10 06:01:00.338866 2026] [:error] [pid 20646:tid 20673] [client 20.205.8.212:7896] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hexx.php"] [unique_id "aWF6nCKwdq_UhOM64b6vEAAAABI"]
[Sat Jan 10 06:01:00.579419 2026] [:error] [pid 20646:tid 20669] [client 20.205.8.212:7301] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hexx.php"] [unique_id "aWF6nCKwdq_UhOM64b6vEwAAAA4"]
[Sat Jan 10 06:01:00.839011 2026] [:error] [pid 20646:tid 20678] [client 20.205.8.212:7908] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hexx.php"] [unique_id "aWF6nCKwdq_UhOM64b6vFgAAABc"]
[Sat Jan 10 06:01:01.094624 2026] [:error] [pid 20646:tid 20668] [client 20.205.8.212:7306] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/hexx.php"] [unique_id "aWF6nSKwdq_UhOM64b6vGAAAAA0"]
[Sat Jan 10 06:01:01.329371 2026] [:error] [pid 20646:tid 20665] [client 20.205.8.212:7325] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aWF6nSKwdq_UhOM64b6vGwAAAAo"]
[Sat Jan 10 06:01:01.565422 2026] [:error] [pid 20646:tid 20674] [client 20.205.8.212:7317] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aWF6nSKwdq_UhOM64b6vHQAAABM"]
[Sat Jan 10 06:01:01.801388 2026] [:error] [pid 20646:tid 20676] [client 20.205.8.212:7342] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aWF6nSKwdq_UhOM64b6vHwAAABU"]
[Sat Jan 10 06:01:02.058729 2026] [:error] [pid 20646:tid 20657] [client 20.205.8.212:7777] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/444.php"] [unique_id "aWF6niKwdq_UhOM64b6vIQAAAAI"]
[Sat Jan 10 06:01:02.295857 2026] [:error] [pid 20648:tid 20730] [client 20.205.8.212:7841] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aWF6njBnnIoBkEBdx9AI6wAAAJU"]
[Sat Jan 10 06:01:02.555072 2026] [:error] [pid 20646:tid 20669] [client 20.205.8.212:7871] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aWF6niKwdq_UhOM64b6vJwAAAA4"]
[Sat Jan 10 06:01:02.856613 2026] [:error] [pid 20646:tid 20677] [client 20.205.8.212:7795] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aWF6niKwdq_UhOM64b6vLAAAABY"]
[Sat Jan 10 06:01:03.106117 2026] [:error] [pid 20744:tid 20760] [client 20.205.8.212:7506] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aWF6n0A8oR5jvkFpcP9qBwAAAMM"]
[Sat Jan 10 06:01:03.369058 2026] [:error] [pid 20744:tid 20769] [client 20.205.8.212:7906] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cfile.php"] [unique_id "aWF6n0A8oR5jvkFpcP9qCQAAAMw"]
[Sat Jan 10 06:01:03.603511 2026] [:error] [pid 20646:tid 20674] [client 20.205.8.212:7840] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cfile.php"] [unique_id "aWF6nyKwdq_UhOM64b6vMwAAABM"]
[Sat Jan 10 06:01:03.980822 2026] [:error] [pid 20648:tid 20712] [client 20.205.8.212:7854] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cfile.php"] [unique_id "aWF6nzBnnIoBkEBdx9AI7QAAAIM"]
[Sat Jan 10 06:01:04.244993 2026] [:error] [pid 20648:tid 20722] [client 20.205.8.212:7773] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cfile.php"] [unique_id "aWF6oDBnnIoBkEBdx9AI7gAAAI0"]
[Sat Jan 10 06:01:04.532772 2026] [:error] [pid 20744:tid 20772] [client 20.205.8.212:7798] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aWF6oEA8oR5jvkFpcP9qEgAAAM8"]
[Sat Jan 10 06:01:04.834017 2026] [:error] [pid 20646:tid 20660] [client 20.205.8.212:7794] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aWF6oCKwdq_UhOM64b6vNAAAAAU"]
[Sat Jan 10 06:01:05.072275 2026] [:error] [pid 20648:tid 20725] [client 20.205.8.212:7353] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aWF6oTBnnIoBkEBdx9AI8QAAAJA"]
[Sat Jan 10 06:01:05.343369 2026] [:error] [pid 20648:tid 20718] [client 20.205.8.212:7321] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aWF6oTBnnIoBkEBdx9AI8wAAAIk"]
[Sat Jan 10 06:01:05.643144 2026] [:error] [pid 20647:tid 20698] [client 20.205.8.212:7511] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aWF6oavb0x69MarUHzCpxwAAAFA"]
[Sat Jan 10 06:01:05.925789 2026] [:error] [pid 20648:tid 20711] [client 20.205.8.212:7750] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aWF6oTBnnIoBkEBdx9AI9QAAAII"]
[Sat Jan 10 06:01:06.185601 2026] [:error] [pid 20648:tid 20709] [client 20.205.8.212:7775] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aWF6ojBnnIoBkEBdx9AI9wAAAIA"]
[Sat Jan 10 06:01:06.459709 2026] [:error] [pid 20648:tid 20731] [client 20.205.8.212:7492] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aWF6ojBnnIoBkEBdx9AI-QAAAJY"]
[Sat Jan 10 06:01:06.746812 2026] [:error] [pid 20646:tid 20663] [client 20.205.8.212:7540] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aWF6oiKwdq_UhOM64b6vNgAAAAg"]
[Sat Jan 10 06:01:06.999058 2026] [:error] [pid 20646:tid 20666] [client 20.205.8.212:7297] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aWF6oiKwdq_UhOM64b6vNwAAAAs"]
[Sat Jan 10 06:01:07.244967 2026] [:error] [pid 20647:tid 20696] [client 20.205.8.212:7868] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aWF6o6vb0x69MarUHzCpzwAAAE4"]
[Sat Jan 10 06:01:07.546925 2026] [:error] [pid 20648:tid 20730] [client 20.205.8.212:7877] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aWF6ozBnnIoBkEBdx9AI-wAAAJU"]
[Sat Jan 10 06:01:07.781669 2026] [:error] [pid 20648:tid 20728] [client 20.205.8.212:7865] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aWF6ozBnnIoBkEBdx9AI_gAAAJM"]
[Sat Jan 10 06:01:08.034335 2026] [:error] [pid 20744:tid 20780] [client 20.205.8.212:7783] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aWF6pEA8oR5jvkFpcP9qIAAAANc"]
[Sat Jan 10 06:01:08.300345 2026] [:error] [pid 20744:tid 20772] [client 20.205.8.212:7863] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aWF6pEA8oR5jvkFpcP9qIwAAAM8"]
[Sat Jan 10 06:01:08.559510 2026] [:error] [pid 20648:tid 20733] [client 20.205.8.212:7332] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aWF6pDBnnIoBkEBdx9AJAgAAAJg"]
[Sat Jan 10 06:01:08.827969 2026] [:error] [pid 20646:tid 20670] [client 20.205.8.212:7900] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vast.php"] [unique_id "aWF6pCKwdq_UhOM64b6vOwAAAA8"]
[Sat Jan 10 06:01:09.065159 2026] [:error] [pid 20646:tid 20677] [client 20.205.8.212:7488] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vast.php"] [unique_id "aWF6pSKwdq_UhOM64b6vPQAAABY"]
[Sat Jan 10 06:01:09.369166 2026] [:error] [pid 20647:tid 20706] [client 20.205.8.212:7316] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vast.php"] [unique_id "aWF6pavb0x69MarUHzCp0QAAAFg"]
[Sat Jan 10 06:01:09.607615 2026] [:error] [pid 20744:tid 20769] [client 20.205.8.212:7313] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vast.php"] [unique_id "aWF6pUA8oR5jvkFpcP9qKwAAAMw"]
[Sat Jan 10 06:01:09.850637 2026] [:error] [pid 20646:tid 20665] [client 20.205.8.212:7507] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanki.php"] [unique_id "aWF6pSKwdq_UhOM64b6vQAAAAAo"]
[Sat Jan 10 06:01:10.110025 2026] [:error] [pid 20744:tid 20763] [client 20.205.8.212:7911] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanki.php"] [unique_id "aWF6pkA8oR5jvkFpcP9qLwAAAMY"]
[Sat Jan 10 06:01:10.359474 2026] [:error] [pid 20647:tid 20699] [client 20.205.8.212:7502] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanki.php"] [unique_id "aWF6pqvb0x69MarUHzCp1gAAAFE"]
[Sat Jan 10 06:01:10.638392 2026] [:error] [pid 20648:tid 20721] [client 20.205.8.212:7791] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/yanki.php"] [unique_id "aWF6pjBnnIoBkEBdx9AJBwAAAIw"]
[Sat Jan 10 06:01:10.908314 2026] [:error] [pid 20647:tid 20698] [client 20.205.8.212:7762] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aWF6pqvb0x69MarUHzCp2QAAAFA"]
[Sat Jan 10 06:01:11.158621 2026] [:error] [pid 20647:tid 20702] [client 20.205.8.212:7528] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aWF6p6vb0x69MarUHzCp2wAAAFQ"]
[Sat Jan 10 06:01:11.400272 2026] [:error] [pid 20744:tid 20776] [client 20.205.8.212:7789] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aWF6p0A8oR5jvkFpcP9qNgAAANM"]
[Sat Jan 10 06:01:11.660079 2026] [:error] [pid 20648:tid 20730] [client 20.205.8.212:7357] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aWF6pzBnnIoBkEBdx9AJCwAAAJU"]
[Sat Jan 10 06:01:11.942603 2026] [:error] [pid 20647:tid 20690] [client 20.205.8.212:7558] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfile.php"] [unique_id "aWF6p6vb0x69MarUHzCp3QAAAEg"]
[Sat Jan 10 06:01:12.196729 2026] [:error] [pid 20646:tid 20671] [client 20.205.8.212:7555] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfile.php"] [unique_id "aWF6qCKwdq_UhOM64b6vRAAAABA"]
[Sat Jan 10 06:01:12.438021 2026] [:error] [pid 20744:tid 20759] [client 20.205.8.212:7866] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfile.php"] [unique_id "aWF6qEA8oR5jvkFpcP9qPwAAAMI"]
[Sat Jan 10 06:01:12.672480 2026] [:error] [pid 20646:tid 20656] [client 20.205.8.212:7768] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nfile.php"] [unique_id "aWF6qCKwdq_UhOM64b6vRwAAAAE"]
[Sat Jan 10 06:01:12.910640 2026] [:error] [pid 20646:tid 20673] [client 20.205.8.212:7766] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ilex.php"] [unique_id "aWF6qCKwdq_UhOM64b6vSgAAABI"]
[Sat Jan 10 06:01:13.169458 2026] [:error] [pid 20648:tid 20719] [client 20.205.8.212:7510] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ilex.php"] [unique_id "aWF6qTBnnIoBkEBdx9AJEAAAAIo"]
[Sat Jan 10 06:01:13.408491 2026] [:error] [pid 20744:tid 20757] [client 20.205.8.212:7499] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ilex.php"] [unique_id "aWF6qUA8oR5jvkFpcP9qRAAAAMA"]
[Sat Jan 10 06:01:13.640958 2026] [:error] [pid 20648:tid 20713] [client 20.205.8.212:7514] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ilex.php"] [unique_id "aWF6qTBnnIoBkEBdx9AJFAAAAIQ"]
[Sat Jan 10 06:01:13.888025 2026] [:error] [pid 20646:tid 20659] [client 20.205.8.212:7495] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aWF6qSKwdq_UhOM64b6vUwAAAAQ"]
[Sat Jan 10 06:01:14.128875 2026] [:error] [pid 20744:tid 20776] [client 20.205.8.212:7329] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aWF6qkA8oR5jvkFpcP9qSQAAANM"]
[Sat Jan 10 06:01:14.372707 2026] [:error] [pid 20646:tid 20664] [client 20.205.8.212:7518] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aWF6qiKwdq_UhOM64b6vVQAAAAk"]
[Sat Jan 10 06:01:14.610564 2026] [:error] [pid 20646:tid 20675] [client 20.205.8.212:7345] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/des.php"] [unique_id "aWF6qiKwdq_UhOM64b6vVgAAABQ"]
[Sat Jan 10 06:01:14.844033 2026] [:error] [pid 20646:tid 20676] [client 20.205.8.212:7338] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ext.php"] [unique_id "aWF6qiKwdq_UhOM64b6vWAAAABU"]
[Sat Jan 10 06:01:15.076634 2026] [:error] [pid 20646:tid 20656] [client 20.205.8.212:7500] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ext.php"] [unique_id "aWF6qyKwdq_UhOM64b6vWgAAAAE"]
[Sat Jan 10 06:01:15.320133 2026] [:error] [pid 20646:tid 20661] [client 20.205.8.212:7788] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ext.php"] [unique_id "aWF6qyKwdq_UhOM64b6vXAAAAAY"]
[Sat Jan 10 06:01:15.559111 2026] [:error] [pid 20647:tid 20704] [client 20.205.8.212:7585] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ext.php"] [unique_id "aWF6q6vb0x69MarUHzCp4gAAAFY"]
[Sat Jan 10 06:01:15.792516 2026] [:error] [pid 20647:tid 20706] [client 20.205.8.212:7534] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/axx.php"] [unique_id "aWF6q6vb0x69MarUHzCp4wAAAFg"]
[Sat Jan 10 06:01:16.044155 2026] [proxy_fcgi:error] [pid 20648:tid 20731] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:16.164092 2026] [proxy_fcgi:error] [pid 20648:tid 20723] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:16.284666 2026] [proxy_fcgi:error] [pid 20648:tid 20720] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:16.404575 2026] [proxy_fcgi:error] [pid 20648:tid 20730] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:16.523957 2026] [proxy_fcgi:error] [pid 20648:tid 20710] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:17.939391 2026] [proxy_fcgi:error] [pid 20648:tid 20732] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:18.060376 2026] [proxy_fcgi:error] [pid 20648:tid 20724] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:18.180122 2026] [proxy_fcgi:error] [pid 20648:tid 20729] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:18.302749 2026] [proxy_fcgi:error] [pid 20648:tid 20712] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:18.424163 2026] [proxy_fcgi:error] [pid 20648:tid 20722] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:18.543926 2026] [proxy_fcgi:error] [pid 20648:tid 20709] [client 20.205.8.212:7552] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 06:01:18.678042 2026] [:error] [pid 20648:tid 20719] [client 20.205.8.212:7552] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dfre.php"] [unique_id "aWF6rjBnnIoBkEBdx9AJJAAAAIo"]
[Sat Jan 10 06:01:18.910647 2026] [:error] [pid 20744:tid 20778] [client 20.205.8.212:7496] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dfre.php"] [unique_id "aWF6rkA8oR5jvkFpcP9qVQAAANU"]
[Sat Jan 10 06:01:19.147775 2026] [:error] [pid 20646:tid 20678] [client 20.205.8.212:7876] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dfre.php"] [unique_id "aWF6ryKwdq_UhOM64b6vbgAAABc"]
[Sat Jan 10 06:01:19.383893 2026] [:error] [pid 20646:tid 20658] [client 20.205.8.212:7508] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dfre.php"] [unique_id "aWF6ryKwdq_UhOM64b6vcQAAAAM"]
[Sat Jan 10 06:01:19.619174 2026] [:error] [pid 20744:tid 20762] [client 20.205.8.212:7580] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aWF6r0A8oR5jvkFpcP9qWAAAAMU"]
[Sat Jan 10 06:01:19.857946 2026] [:error] [pid 20648:tid 20725] [client 20.205.8.212:7539] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aWF6rzBnnIoBkEBdx9AJJgAAAJA"]
[Sat Jan 10 06:01:20.116034 2026] [:error] [pid 20646:tid 20657] [client 20.205.8.212:7575] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aWF6sCKwdq_UhOM64b6vdAAAAAI"]
[Sat Jan 10 06:01:20.349876 2026] [:error] [pid 20744:tid 20766] [client 20.205.8.212:7550] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aWF6sEA8oR5jvkFpcP9qWgAAAMk"]
[Sat Jan 10 06:01:20.584628 2026] [:error] [pid 20648:tid 20726] [client 20.205.8.212:7330] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aWF6sDBnnIoBkEBdx9AJKAAAAJE"]
[Sat Jan 10 06:01:20.817456 2026] [:error] [pid 20648:tid 20713] [client 20.205.8.212:7772] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aWF6sDBnnIoBkEBdx9AJKQAAAIQ"]
[Sat Jan 10 06:01:21.058368 2026] [:error] [pid 20648:tid 20717] [client 20.205.8.212:7315] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aWF6sTBnnIoBkEBdx9AJKgAAAIg"]
[Sat Jan 10 06:01:21.291452 2026] [:error] [pid 20646:tid 20659] [client 20.205.8.212:7305] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aWF6sSKwdq_UhOM64b6vdgAAAAQ"]
[Sat Jan 10 06:01:21.525153 2026] [:error] [pid 20647:tid 20700] [client 20.205.8.212:7349] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aWF6savb0x69MarUHzCp7QAAAFI"]
[Sat Jan 10 06:01:21.778717 2026] [:error] [pid 20744:tid 20760] [client 20.205.8.212:7343] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aWF6sUA8oR5jvkFpcP9qYgAAAMM"]
[Sat Jan 10 06:01:22.022288 2026] [:error] [pid 20648:tid 20711] [client 20.205.8.212:7560] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aWF6sjBnnIoBkEBdx9AJLAAAAII"]
[Sat Jan 10 06:01:22.268407 2026] [:error] [pid 20648:tid 20716] [client 20.205.8.212:7593] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/usep.php"] [unique_id "aWF6sjBnnIoBkEBdx9AJLgAAAIc"]
[Sat Jan 10 06:01:22.540587 2026] [:error] [pid 20744:tid 20779] [client 20.205.8.212:7522] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aWF6skA8oR5jvkFpcP9qZAAAANY"]
[Sat Jan 10 06:01:22.776525 2026] [:error] [pid 20647:tid 20685] [client 20.205.8.212:7541] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aWF6sqvb0x69MarUHzCp7gAAAEM"]
[Sat Jan 10 06:01:23.013271 2026] [:error] [pid 20647:tid 20692] [client 20.205.8.212:7304] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aWF6s6vb0x69MarUHzCp8AAAAEo"]
[Sat Jan 10 06:01:23.287647 2026] [:error] [pid 20646:tid 20677] [client 20.205.8.212:7497] [client 20.205.8.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3.php"] [unique_id "aWF6syKwdq_UhOM64b6vfgAAABY"]
[Sat Jan 10 07:42:03.548326 2026] [autoindex:error] [pid 31369:tid 31389] [client 93.158.91.245:35393] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 09:22:48.861714 2026] [autoindex:error] [pid 31369:tid 31380] [client 89.149.193.149:36842] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 11:19:44.535454 2026] [autoindex:error] [pid 19926:tid 19932] [client 100.24.208.151:57570] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 11:19:44.960450 2026] [autoindex:error] [pid 20647:tid 20693] [client 100.24.208.151:33698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 11:29:33.245367 2026] [:error] [pid 20648:tid 20714] [client 43.159.143.187:50182] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWHHnTBnnIoBkEBdx9BBDQAAAIU"]
[Sat Jan 10 11:48:52.524439 2026] [autoindex:error] [pid 20744:tid 20771] [client 44.252.78.213:50446] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 12:54:27.536392 2026] [proxy_fcgi:error] [pid 31369:tid 31375] [client 51.89.38.21:63734] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 13:17:22.008365 2026] [:error] [pid 1339:tid 1357] [client 51.38.109.223:62029] [client 51.38.109.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.38.109.223, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWHg4icsOJx4B_mSFzkQpAAAA48"]
[Sat Jan 10 13:17:22.013845 2026] [proxy_fcgi:error] [pid 1339:tid 1357] [client 51.38.109.223:62029] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 13:44:57.481105 2026] [autoindex:error] [pid 1296:tid 1311] [client 54.165.171.142:39272] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 15:10:18.343185 2026] [:error] [pid 1383:tid 1395] [client 152.249.9.145:57817] [client 152.249.9.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.249.9.145, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWH7WiSbzyQbm27sbcIgCAAAA8k"]
[Sat Jan 10 15:10:18.355664 2026] [proxy_fcgi:error] [pid 1383:tid 1395] [client 152.249.9.145:57817] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 16:05:40.225391 2026] [autoindex:error] [pid 64621:tid 64633] [client 66.249.64.1:59287] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 18:34:08.860529 2026] [:error] [pid 64621:tid 64634] [client 182.44.67.97:39836] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWIrIIa9na_3sfYAP9qeswAAAws"]
[Sat Jan 10 18:48:43.274232 2026] [autoindex:error] [pid 1296:tid 1303] [client 51.68.111.199:13183] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 19:55:59.484144 2026] [:error] [pid 1296:tid 1309] [client 43.157.50.58:35762] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWI-TybQW-fowWjMNKCK8AAAAks"]
[Sat Jan 10 20:46:21.737181 2026] [autoindex:error] [pid 64621:tid 64633] [client 172.105.253.181:51528] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 10 21:02:19.733943 2026] [autoindex:error] [pid 31369:tid 31386] [client 185.11.61.87:53565] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 10 21:02:20.378859 2026] [autoindex:error] [pid 1125:tid 1143] [client 185.11.61.87:58384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 10 21:02:21.024887 2026] [autoindex:error] [pid 20646:tid 20669] [client 185.11.61.87:62502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 10 21:02:21.673157 2026] [autoindex:error] [pid 1125:tid 1148] [client 185.11.61.87:50499] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 10 21:37:24.124180 2026] [:error] [pid 20646:tid 20673] [client 43.166.136.202:38506] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWJWFCKwdq_UhOM64b4iPAAAABI"]
[Sun Jan 11 00:47:30.782848 2026] [autoindex:error] [pid 1296:tid 1320] [client 45.94.31.82:57033] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 01:37:27.173724 2026] [autoindex:error] [pid 57649:tid 57667] [client 45.156.129.158:53917] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 02:24:47.661682 2026] [autoindex:error] [pid 1339:tid 1354] [client 15.204.155.25:57785] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 05:57:40.110070 2026] [:error] [pid 5152:tid 5169] [client 43.156.204.134:54810] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWLLVBm0axGMFrpuXHA4xQAAAAc"]
[Sun Jan 11 07:25:34.900213 2026] [:error] [pid 11747:tid 11757] [client 106.54.62.156:39298] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWLf7qRFw84LNpZSk7mF6QAAAUY"]
[Sun Jan 11 12:01:15.326986 2026] [autoindex:error] [pid 5272:tid 5295] [client 124.198.132.36:61895] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 12:01:15.750024 2026] [autoindex:error] [pid 40191:tid 40212] [client 124.198.132.36:61908] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 14:25:54.438406 2026] [autoindex:error] [pid 36611:tid 36618] [client 66.249.64.15:61029] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 15:25:30.965741 2026] [:error] [pid 36611:tid 36624] [client 193.26.115.110:53178] [client 193.26.115.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.example"] [unique_id "aWNQaj8oZoZHsoTdjhg5KQAAAks"]
[Sun Jan 11 15:25:35.330127 2026] [:error] [pid 11748:tid 11795] [client 193.26.115.110:53196] [client 193.26.115.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.env.example"] [unique_id "aWNQbwC5xybrWOCNnobUXAAAAZE"]
[Sun Jan 11 16:13:25.297229 2026] [autoindex:error] [pid 35977:tid 35993] [client 5.133.192.99:35819] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 19:37:04.237047 2026] [autoindex:error] [pid 11747:tid 11755] [client 34.216.175.253:35314] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 19:37:05.228658 2026] [autoindex:error] [pid 40191:tid 40200] [client 34.216.175.253:29116] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 19:37:05.627678 2026] [autoindex:error] [pid 40191:tid 40199] [client 34.216.175.253:42521] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 19:37:06.027088 2026] [autoindex:error] [pid 36611:tid 36617] [client 34.216.175.253:54472] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 20:07:49.158739 2026] [autoindex:error] [pid 5152:tid 5168] [client 66.249.64.15:47360] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 20:11:21.970071 2026] [:error] [pid 11747:tid 11773] [client 180.110.203.108:57994] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWOTaaRFw84LNpZSk7ndqwAAAVY"]
[Sun Jan 11 20:17:56.701742 2026] [:error] [pid 40191:tid 40202] [client 43.130.154.56:40324] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWOU9Em2BH1CV1p0EUHQlwAAAsk"]
[Sun Jan 11 21:09:34.792357 2026] [autoindex:error] [pid 5153:tid 5196] [client 47.90.227.150:57524] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 21:09:35.480720 2026] [autoindex:error] [pid 5155:tid 5234] [client 47.90.227.150:56198] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 11 21:54:59.616114 2026] [:error] [pid 5155:tid 5225] [client 129.226.174.80:55504] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWOrs1gEKFpNs0_zLGktVAAAAIk"]
[Mon Jan 12 00:51:24.601535 2026] [autoindex:error] [pid 5152:tid 5170] [client 172.105.253.188:60852] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 02:57:33.504594 2026] [:error] [pid 5153:tid 5195] [client 43.158.91.71:54096] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWPync1QbNSPD9bRi74DTwAAAEY"]
[Mon Jan 12 03:03:02.589982 2026] [autoindex:error] [pid 35730:tid 35736] [client 66.249.64.9:40925] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 03:51:48.324140 2026] [autoindex:error] [pid 48105:tid 48160] [client 86.106.74.251:9116] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 03:51:49.025579 2026] [autoindex:error] [pid 48106:tid 48172] [client 86.106.74.251:9222] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 03:52:05.163376 2026] [autoindex:error] [pid 48106:tid 48171] [client 86.106.74.251:12009] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 03:52:05.870647 2026] [autoindex:error] [pid 48104:tid 48122] [client 86.106.74.251:12132] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 04:44:51.735333 2026] [:error] [pid 48213:tid 48220] [client 43.159.145.153:34660] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWQLw2RmaItaLCBvAhgdsQAAAMU"]
[Mon Jan 12 08:25:47.742824 2026] [autoindex:error] [pid 48104:tid 48123] [client 66.249.68.135:44696] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 08:46:35.429049 2026] [:error] [pid 48106:tid 48183] [client 120.71.59.24:57772] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWREa-_rz8jTZY4aXpQI8wAAAJA"]
[Mon Jan 12 09:54:44.295254 2026] [:error] [pid 48104:tid 48120] [client 43.159.141.150:57952] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWRUZE4huT4DhLwu2VsDeAAAAAc"]
[Mon Jan 12 10:41:27.695677 2026] [autoindex:error] [pid 48106:tid 48179] [client 100.24.208.151:16956] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 10:41:28.109693 2026] [autoindex:error] [pid 48213:tid 48224] [client 100.24.208.151:58175] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 11:34:24.435486 2026] [:error] [pid 48105:tid 48148] [client 170.106.11.6:40382] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWRrwDbe4SdLfSmtJe01cgAAAEg"]
[Mon Jan 12 11:44:11.941090 2026] [autoindex:error] [pid 48104:tid 48131] [client 194.68.26.182:55824] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 11:44:38.075856 2026] [autoindex:error] [pid 48106:tid 48167] [client 194.68.26.182:35062] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 12:15:48.154161 2026] [autoindex:error] [pid 51896:tid 51906] [client 104.28.154.223:29703] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 12:15:49.840713 2026] [autoindex:error] [pid 51637:tid 51654] [client 104.238.42.244:62158] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 12:15:50.522213 2026] [autoindex:error] [pid 51986:tid 52025] [client 104.28.154.223:32170] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 12:15:51.569460 2026] [autoindex:error] [pid 9303:tid 9316] [client 142.111.70.6:62396] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 12:28:06.656544 2026] [:error] [pid 51897:tid 51933] [client 91.92.241.199:53748] [client 91.92.241.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aWR4VtwDOJmYnFxYfDXBlAAAAoc"]
[Mon Jan 12 14:47:33.660152 2026] [autoindex:error] [pid 51986:tid 52035] [client 23.180.120.131:52050] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 17:41:19.138149 2026] [autoindex:error] [pid 51863:tid 51888] [client 198.235.24.178:63478] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 17:43:10.078480 2026] [autoindex:error] [pid 51897:tid 51934] [client 134.209.48.242:63846] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 17:43:10.607116 2026] [:error] [pid 9303:tid 9323] [client 134.209.48.242:53027] [client 134.209.48.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.48.242, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWTCLtEoWhpeQ69gVtHLVgAAAVE"]
[Mon Jan 12 17:43:10.615690 2026] [proxy_fcgi:error] [pid 9303:tid 9323] [client 134.209.48.242:53027] AH01071: Got error 'Primary script unknown'
[Mon Jan 12 17:43:10.978952 2026] [:error] [pid 51896:tid 51901] [client 134.209.48.242:58327] [client 134.209.48.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.48.242, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aWTCLt2Y52W2afNXn_WBIgAAAkI"]
[Mon Jan 12 17:43:10.983652 2026] [proxy_fcgi:error] [pid 51896:tid 51901] [client 134.209.48.242:58327] AH01071: Got error 'Primary script unknown'
[Mon Jan 12 18:00:58.338526 2026] [:error] [pid 51956:tid 51979] [client 43.135.142.7:52008] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWTGWkb_j3zpZfEgGM8UZwAAAtU"]
[Mon Jan 12 21:11:51.012419 2026] [autoindex:error] [pid 51863:tid 51882] [client 185.39.19.49:59230] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 21:11:51.668500 2026] [autoindex:error] [pid 51956:tid 51971] [client 185.39.19.49:60374] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 21:11:52.324594 2026] [autoindex:error] [pid 51956:tid 51958] [client 185.39.19.49:61882] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 21:11:52.981496 2026] [autoindex:error] [pid 51896:tid 51907] [client 185.39.19.49:63073] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 12 21:29:45.334973 2026] [:error] [pid 48213:tid 48231] [client 114.96.103.33:51501] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWT3SWRmaItaLCBvAhgJKgAAANA"]
[Mon Jan 12 21:49:39.046806 2026] [:error] [pid 51637:tid 51652] [client 183.177.110.71:61594] [client 183.177.110.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.177.110.71, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWT783rTvTmO_ovDgVDqegAAAYk"]
[Mon Jan 12 21:49:39.060025 2026] [proxy_fcgi:error] [pid 51637:tid 51652] [client 183.177.110.71:61594] AH01071: Got error 'Primary script unknown'
[Mon Jan 12 22:39:25.124300 2026] [:error] [pid 51863:tid 51877] [client 43.135.183.82:60432] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWUHnT2-QXSEuiZdYYZ7ggAAAgo"]
[Mon Jan 12 23:20:05.165986 2026] [autoindex:error] [pid 51896:tid 51905] [client 34.222.220.129:33078] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 03:19:55.037871 2026] [autoindex:error] [pid 27215:tid 27242] [client 185.209.199.110:54888] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 04:22:16.239331 2026] [autoindex:error] [pid 26395:tid 26420] [client 62.141.44.236:50668] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 05:02:52.173733 2026] [:error] [pid 26395:tid 26403] [client 43.153.48.240:54308] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWVhfJhRkuVub9GmnFj_UAAAAQY"]
[Tue Jan 13 10:15:44.984142 2026] [autoindex:error] [pid 64776:tid 64798] [client 124.198.131.235:61692] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 10:15:45.411319 2026] [autoindex:error] [pid 57659:tid 57714] [client 124.198.131.235:61700] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 11:52:24.764681 2026] [autoindex:error] [pid 22389:tid 22409] [client 64.23.163.39:46432] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 11:52:25.762804 2026] [autoindex:error] [pid 22485:tid 22503] [client 64.23.163.39:37704] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 17:14:10.836512 2026] [autoindex:error] [pid 22389:tid 22405] [client 149.50.97.212:51214] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 17:36:00.408738 2026] [autoindex:error] [pid 22425:tid 22444] [client 100.26.190.168:54226] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 17:36:00.815444 2026] [autoindex:error] [pid 22425:tid 22454] [client 100.26.190.168:32776] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 18:54:10.315598 2026] [autoindex:error] [pid 22426:tid 22463] [client 72.11.155.223:47548] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:21:40.812792 2026] [autoindex:error] [pid 22389:tid 22410] [client 85.208.75.213:44631] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:21:44.131942 2026] [autoindex:error] [pid 22389:tid 22399] [client 85.208.75.213:44631] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:21:48.581973 2026] [autoindex:error] [pid 49677:tid 49684] [client 149.143.164.174:39005] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:21:51.856438 2026] [autoindex:error] [pid 49677:tid 49701] [client 149.143.164.174:39005] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:21:57.251501 2026] [autoindex:error] [pid 22389:tid 22406] [client 152.42.42.35:58244] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:22:00.747826 2026] [autoindex:error] [pid 22389:tid 22402] [client 152.42.42.35:58244] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:52:44.333612 2026] [autoindex:error] [pid 33727:tid 33751] [client 104.194.192.253:9158] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 23:00:59.488131 2026] [autoindex:error] [pid 63931:tid 63945] [client 106.219.161.139:9957] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 23:22:08.632059 2026] [autoindex:error] [pid 63843:tid 63887] [client 66.249.68.134:62041] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 23:44:43.350757 2026] [:error] [pid 25809:tid 25817] [client 42.104.226.200:49571] [client 42.104.226.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.104.226.200, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWZoa49SDqNJ9R9VfZDTugAAAEY"]
[Tue Jan 13 23:44:43.363528 2026] [proxy_fcgi:error] [pid 25809:tid 25817] [client 42.104.226.200:49571] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 01:11:51.551991 2026] [autoindex:error] [pid 63843:tid 63896] [client 106.219.161.139:22743] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 01:12:06.078984 2026] [autoindex:error] [pid 63842:tid 63867] [client 140.245.117.185:55658] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 01:12:06.272167 2026] [:error] [pid 63842:tid 63849] [client 140.245.117.185:55658] [client 140.245.117.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWZ85m0zPTD54ET7u1kl8wAAAUM"]
[Wed Jan 14 01:12:06.689976 2026] [:error] [pid 63842:tid 63863] [client 140.245.117.185:64676] [client 140.245.117.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.117.185, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aWZ85m0zPTD54ET7u1kmEAAAAVE"]
[Wed Jan 14 01:12:06.730640 2026] [proxy_fcgi:error] [pid 63842:tid 63863] [client 140.245.117.185:64676] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 01:12:08.111841 2026] [:error] [pid 25809:tid 25818] [client 140.245.117.185:61513] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/user/login"] [unique_id "aWZ86I9SDqNJ9R9VfZD7YAAAAEc"]
[Wed Jan 14 01:12:08.509528 2026] [:error] [pid 63931:tid 63941] [client 140.245.117.185:54209] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin"] [unique_id "aWZ86NVnG0cQj3cwmW9DgwAAAAg"]
[Wed Jan 14 01:38:43.643734 2026] [:error] [pid 63844:tid 63907] [client 43.135.183.82:56448] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWaDI0L9rjD8EK1UiLkW8QAAAMY"]
[Wed Jan 14 02:41:53.057146 2026] [autoindex:error] [pid 25809:tid 25816] [client 20.78.178.218:65332] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 02:41:53.187543 2026] [proxy_fcgi:error] [pid 25809:tid 25813] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:41:53.382403 2026] [proxy_fcgi:error] [pid 25809:tid 25834] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:41:53.506422 2026] [proxy_fcgi:error] [pid 25809:tid 25819] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:41:53.630511 2026] [proxy_fcgi:error] [pid 25809:tid 25833] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:41:53.754296 2026] [proxy_fcgi:error] [pid 25809:tid 25818] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:41:53.885519 2026] [proxy_fcgi:error] [pid 25809:tid 25821] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:41:54.011984 2026] [proxy_fcgi:error] [pid 25809:tid 25815] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:41:54.136284 2026] [proxy_fcgi:error] [pid 25809:tid 25828] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:41:54.260745 2026] [proxy_fcgi:error] [pid 25809:tid 25827] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:41:55.722325 2026] [proxy_fcgi:error] [pid 25809:tid 25835] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:41:55.846450 2026] [proxy_fcgi:error] [pid 25809:tid 25829] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:41:56.114062 2026] [proxy_fcgi:error] [pid 25809:tid 25817] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:41:56.610977 2026] [proxy_fcgi:error] [pid 25809:tid 25819] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:41:58.896175 2026] [proxy_fcgi:error] [pid 25809:tid 25822] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:41:59.021876 2026] [proxy_fcgi:error] [pid 25809:tid 25832] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:41:59.145771 2026] [proxy_fcgi:error] [pid 25809:tid 25835] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:41:59.269883 2026] [proxy_fcgi:error] [pid 25809:tid 25829] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:41:59.394317 2026] [proxy_fcgi:error] [pid 25809:tid 25816] [client 20.78.178.218:65332] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:41:59.637812 2026] [:error] [pid 25809:tid 25824] [client 20.78.178.218:65332] [client 20.78.178.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaR949SDqNJ9R9VfZASyQAAAE0"], referer: https://www.google.de/
[Wed Jan 14 02:41:59.886564 2026] [:error] [pid 63842:tid 63869] [client 20.78.178.218:65340] [client 20.78.178.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWaR920zPTD54ET7u1k7lgAAAVc"], referer: https://www.google.de/
[Wed Jan 14 02:42:00.135158 2026] [:error] [pid 25809:tid 25826] [client 20.78.178.218:65358] [client 20.78.178.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWaR-I9SDqNJ9R9VfZASygAAAE8"], referer: https://www.google.co.uk/
[Wed Jan 14 02:42:00.377131 2026] [:error] [pid 63931:tid 63949] [client 20.78.178.218:62110] [client 20.78.178.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWaR-NVnG0cQj3cwmW9nSwAAABA"], referer: https://www.google.com/
[Wed Jan 14 02:42:00.621901 2026] [proxy_fcgi:error] [pid 63931:tid 63957] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:00.746079 2026] [proxy_fcgi:error] [pid 63931:tid 63946] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:42:00.869515 2026] [proxy_fcgi:error] [pid 63931:tid 63942] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:42:00.992627 2026] [proxy_fcgi:error] [pid 63931:tid 63953] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 02:42:01.116484 2026] [proxy_fcgi:error] [pid 63931:tid 63951] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 02:42:01.239717 2026] [proxy_fcgi:error] [pid 63931:tid 63944] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:01.362986 2026] [proxy_fcgi:error] [pid 63931:tid 63937] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 02:42:01.487019 2026] [proxy_fcgi:error] [pid 63931:tid 63943] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 02:42:01.610917 2026] [proxy_fcgi:error] [pid 63931:tid 63952] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:42:01.734873 2026] [proxy_fcgi:error] [pid 63931:tid 63935] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:42:01.858561 2026] [proxy_fcgi:error] [pid 63931:tid 63940] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:42:01.984749 2026] [proxy_fcgi:error] [pid 63931:tid 63941] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 02:42:02.108747 2026] [proxy_fcgi:error] [pid 63931:tid 63945] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:42:02.234408 2026] [proxy_fcgi:error] [pid 63931:tid 63949] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:42:02.367309 2026] [proxy_fcgi:error] [pid 63931:tid 63954] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:02.495854 2026] [proxy_fcgi:error] [pid 63931:tid 63946] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:03.898117 2026] [proxy_fcgi:error] [pid 63931:tid 63951] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:42:04.023801 2026] [proxy_fcgi:error] [pid 63931:tid 63937] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:04.149044 2026] [proxy_fcgi:error] [pid 63931:tid 63943] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:04.272523 2026] [proxy_fcgi:error] [pid 63931:tid 63952] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 02:42:05.801010 2026] [proxy_fcgi:error] [pid 63931:tid 63957] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:42:05.924644 2026] [proxy_fcgi:error] [pid 63931:tid 63936] [client 20.78.178.218:62189] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:42:06.044460 2026] [:error] [pid 63931:tid 63939] [client 20.78.178.218:62189] [client 20.78.178.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aWaR_tVnG0cQj3cwmW9nbAAAAAY"], referer: https://www.google.de/
[Wed Jan 14 02:42:06.289927 2026] [proxy_fcgi:error] [pid 43494:tid 43521] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:42:06.414415 2026] [proxy_fcgi:error] [pid 43494:tid 43516] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 02:42:06.538872 2026] [proxy_fcgi:error] [pid 43494:tid 43520] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 02:42:06.667584 2026] [proxy_fcgi:error] [pid 43494:tid 43514] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 02:42:06.798385 2026] [proxy_fcgi:error] [pid 43494:tid 43504] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:42:06.925259 2026] [proxy_fcgi:error] [pid 43494:tid 43513] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 02:42:07.050653 2026] [proxy_fcgi:error] [pid 43494:tid 43515] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:42:07.177455 2026] [proxy_fcgi:error] [pid 43494:tid 43508] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 02:42:07.301522 2026] [proxy_fcgi:error] [pid 43494:tid 43511] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:42:07.427167 2026] [proxy_fcgi:error] [pid 43494:tid 43507] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 02:42:07.553300 2026] [proxy_fcgi:error] [pid 43494:tid 43509] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:42:07.673857 2026] [:error] [pid 43494:tid 43526] [client 20.78.178.218:62130] [client 20.78.178.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.78.178.218, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWaR_8iBIyHKw4YELOkXjAAAAZQ"], referer: https://www.google.com/
[Wed Jan 14 02:42:07.677475 2026] [proxy_fcgi:error] [pid 43494:tid 43526] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 02:42:07.808359 2026] [proxy_fcgi:error] [pid 43494:tid 43533] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 02:42:07.932062 2026] [proxy_fcgi:error] [pid 43494:tid 43527] [client 20.78.178.218:62130] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 03:30:16.832410 2026] [autoindex:error] [pid 24710:tid 24733] [client 107.172.180.205:46156] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 03:52:04.713784 2026] [autoindex:error] [pid 24603:tid 24681] [client 23.88.69.86:42574] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 04:23:00.596523 2026] [autoindex:error] [pid 24710:tid 24735] [client 45.156.128.117:33745] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 04:23:08.251802 2026] [autoindex:error] [pid 24602:tid 24644] [client 45.156.128.116:45679] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 04:50:35.827148 2026] [autoindex:error] [pid 58977:tid 58991] [client 66.249.79.199:56526] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 05:03:41.211201 2026] [autoindex:error] [pid 58977:tid 58986] [client 149.40.50.215:46970] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 06:15:20.277228 2026] [autoindex:error] [pid 58699:tid 58717] [client 149.40.50.215:50540] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 06:40:28.940994 2026] [:error] [pid 58901:tid 58943] [client 43.157.180.116:56274] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWbJ3L3kQSrcqIWtO0o7zgAAAc0"]
[Wed Jan 14 07:27:01.479626 2026] [autoindex:error] [pid 58977:tid 59001] [client 51.77.90.40:55892] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 07:27:02.541467 2026] [autoindex:error] [pid 58699:tid 58722] [client 51.77.90.40:55903] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 07:27:03.979214 2026] [autoindex:error] [pid 58868:tid 58893] [client 51.77.90.40:55909] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 07:57:47.996128 2026] [proxy_fcgi:error] [pid 3030:tid 3052] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:57:49.498923 2026] [proxy_fcgi:error] [pid 3030:tid 3048] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:57:49.589289 2026] [proxy_fcgi:error] [pid 3030:tid 3032] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:49.680079 2026] [proxy_fcgi:error] [pid 3030:tid 3039] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 07:57:49.771174 2026] [proxy_fcgi:error] [pid 3030:tid 3035] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:57:49.862201 2026] [proxy_fcgi:error] [pid 3030:tid 3046] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:57:49.953879 2026] [proxy_fcgi:error] [pid 3030:tid 3036] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:50.045361 2026] [proxy_fcgi:error] [pid 3030:tid 3038] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 07:57:50.136456 2026] [proxy_fcgi:error] [pid 3030:tid 3040] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 07:57:50.228204 2026] [proxy_fcgi:error] [pid 3030:tid 3049] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:57:50.590734 2026] [proxy_fcgi:error] [pid 3030:tid 3044] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:50.683197 2026] [proxy_fcgi:error] [pid 3030:tid 3056] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:57:50.774612 2026] [proxy_fcgi:error] [pid 3030:tid 3047] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:52.380120 2026] [proxy_fcgi:error] [pid 3030:tid 3032] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 07:57:52.471015 2026] [proxy_fcgi:error] [pid 3030:tid 3033] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 07:57:52.651908 2026] [proxy_fcgi:error] [pid 3030:tid 3035] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:57:52.744096 2026] [proxy_fcgi:error] [pid 3030:tid 3046] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:52.835576 2026] [proxy_fcgi:error] [pid 3030:tid 3034] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:52.926740 2026] [proxy_fcgi:error] [pid 3030:tid 3036] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:57:53.017664 2026] [proxy_fcgi:error] [pid 3030:tid 3038] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:57:53.109369 2026] [proxy_fcgi:error] [pid 3030:tid 3037] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:57:53.200663 2026] [proxy_fcgi:error] [pid 3030:tid 3040] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:53.292093 2026] [proxy_fcgi:error] [pid 3030:tid 3043] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:57:53.384112 2026] [proxy_fcgi:error] [pid 3030:tid 3049] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:57:53.474976 2026] [proxy_fcgi:error] [pid 3030:tid 3045] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:57:53.566569 2026] [proxy_fcgi:error] [pid 3030:tid 3042] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:57:53.657497 2026] [proxy_fcgi:error] [pid 3030:tid 3053] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:57:53.750211 2026] [proxy_fcgi:error] [pid 3030:tid 3047] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:57:53.944124 2026] [proxy_fcgi:error] [pid 3030:tid 3050] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:54.036284 2026] [proxy_fcgi:error] [pid 3030:tid 3048] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:54.129700 2026] [proxy_fcgi:error] [pid 3030:tid 3041] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:54.222261 2026] [proxy_fcgi:error] [pid 3030:tid 3051] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 07:57:54.314370 2026] [proxy_fcgi:error] [pid 3030:tid 3032] [client 4.193.210.173:6023] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 07:57:57.679383 2026] [:error] [pid 3030:tid 3052] [client 4.193.210.173:6023] [client 4.193.210.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aWbcBWDVAIweB8vjPiuSdAAAApQ"], referer: https://www.bing.com/
[Wed Jan 14 07:57:57.949137 2026] [:error] [pid 58901:tid 58950] [client 4.193.210.173:6102] [client 4.193.210.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbcBb3kQSrcqIWtO0pT5wAAAdQ"], referer: https://duckduckgo.com/
[Wed Jan 14 07:57:58.219349 2026] [:error] [pid 24710:tid 24715] [client 4.193.210.173:6134] [client 4.193.210.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aWbcBmXBo5bEhDEEhs2HZwAAAMM"], referer: https://www.google.fr/
[Wed Jan 14 07:57:58.395225 2026] [:error] [pid 24602:tid 24639] [client 4.193.210.173:6129] [client 4.193.210.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWbcBkooYwabcb9R9fxMMgAAAEE"], referer: https://www.google.de/
[Wed Jan 14 07:57:58.663406 2026] [:error] [pid 3142:tid 3162] [client 4.193.210.173:6106] [client 4.193.210.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWbcBhFwJ2_Y5g3eTSqOQwAAAs8"], referer: https://duckduckgo.com/
[Wed Jan 14 07:57:58.837943 2026] [:error] [pid 58899:tid 58904] [client 4.193.210.173:6122] [client 4.193.210.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aWbcBgWViGQd5R44tHGKTQAAAYE"], referer: https://www.google.de/
[Wed Jan 14 07:57:59.131146 2026] [proxy_fcgi:error] [pid 24603:tid 24665] [client 4.193.210.173:6114] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:57:59.222427 2026] [proxy_fcgi:error] [pid 24603:tid 24685] [client 4.193.210.173:6114] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:57:59.310466 2026] [:error] [pid 24603:tid 24676] [client 4.193.210.173:6114] [client 4.193.210.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.210.173, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aWbcB5PBJGFGN8VT8_TCQgAAAIs"], referer: https://www.google.fr/
[Wed Jan 14 07:57:59.315030 2026] [proxy_fcgi:error] [pid 24603:tid 24676] [client 4.193.210.173:6114] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:57:59.405751 2026] [proxy_fcgi:error] [pid 24603:tid 24682] [client 4.193.210.173:6114] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 08:17:38.922079 2026] [:error] [pid 19278:tid 19286] [client 43.153.96.233:37558] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWbgolGofyyxZQcTd1UvLgAAAAY"]
[Wed Jan 14 08:39:23.049276 2026] [autoindex:error] [pid 19189:tid 19256] [client 178.171.44.20:35091] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 11:02:25.498357 2026] [:error] [pid 37225:tid 37252] [client 192.144.148.122:57720] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWcHQeYdRPDSEpBLRUPpWgAAARg"]
[Wed Jan 14 12:48:26.326589 2026] [:error] [pid 37034:tid 37045] [client 104.28.235.59:55557] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aWcgGvpIliqezwCf6Q1GnwAAAMk"]
[Wed Jan 14 14:58:55.998163 2026] [:error] [pid 61468:tid 61491] [client 43.159.144.16:60132] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWc-r9fEBBL2jp9TJvKMzAAAAJQ"]
[Wed Jan 14 16:05:03.591448 2026] [autoindex:error] [pid 61377:tid 61425] [client 195.26.237.239:55918] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 17:23:59.586245 2026] [:error] [pid 61376:tid 61400] [client 182.44.10.67:39453] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWdgr6jRUNDW2YrxZG5GlgAAAVM"]
[Wed Jan 14 18:59:48.564518 2026] [autoindex:error] [pid 61377:tid 61420] [client 66.249.79.194:49873] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 19:51:52.158689 2026] [:error] [pid 61468:tid 61480] [client 43.153.71.12:48118] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWeDWNfEBBL2jp9TJvK6hAAAAIk"]
[Wed Jan 14 19:57:34.839203 2026] [autoindex:error] [pid 61378:tid 61452] [client 34.78.108.29:33292] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 19:57:50.659034 2026] [autoindex:error] [pid 21490:tid 21507] [client 34.78.108.29:33534] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 19:58:30.801161 2026] [autoindex:error] [pid 61377:tid 61428] [client 34.78.108.29:33798] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 19:58:49.580254 2026] [autoindex:error] [pid 61377:tid 61421] [client 34.78.108.29:34176] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 00:59:01.072680 2026] [autoindex:error] [pid 23355:tid 23379] [client 198.244.233.124:53922] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.it
[Thu Jan 15 02:06:01.363355 2026] [autoindex:error] [pid 38522:tid 38530] [client 51.89.25.52:54626] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 02:11:50.108613 2026] [:error] [pid 23264:tid 23272] [client 43.153.73.200:48924] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWfcZjxGR-Yo9U5nM0B_AQAAAUQ"]
[Thu Jan 15 02:44:10.294825 2026] [autoindex:error] [pid 23266:tid 23340] [client 4.197.150.118:1543] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 02:44:10.302483 2026] [proxy_fcgi:error] [pid 36071:tid 36076] [client 4.197.150.118:1546] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Jan 15 02:44:10.384967 2026] [proxy_fcgi:error] [pid 36071:tid 36095] [client 4.197.150.118:1546] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Jan 15 02:44:16.616500 2026] [proxy_fcgi:error] [pid 23264:tid 23272] [client 4.197.150.118:1555] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Jan 15 02:44:16.710310 2026] [proxy_fcgi:error] [pid 23264:tid 23274] [client 4.197.150.118:1555] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Jan 15 04:37:09.190466 2026] [autoindex:error] [pid 5291:tid 5340] [client 172.245.193.187:49512] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 05:22:23.807138 2026] [autoindex:error] [pid 5389:tid 5412] [client 172.245.193.187:34088] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 05:22:48.313701 2026] [autoindex:error] [pid 5389:tid 5406] [client 100.52.3.146:34549] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 05:34:14.725307 2026] [autoindex:error] [pid 5389:tid 5404] [client 157.15.90.169:50728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 06:03:45.649745 2026] [:error] [pid 51807:tid 51826] [client 49.7.227.204:33938] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWgSwcMrH4_ge4gLwN36ggAAARE"]
[Thu Jan 15 07:10:01.888498 2026] [autoindex:error] [pid 5389:tid 5398] [client 44.234.33.132:43234] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 08:08:25.585211 2026] [autoindex:error] [pid 5291:tid 5327] [client 35.244.18.30:59470] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 08:08:25.881275 2026] [autoindex:error] [pid 51857:tid 51861] [client 35.244.18.30:55340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:00.134679 2026] [autoindex:error] [pid 51807:tid 51811] [client 184.105.108.4:36926] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:06.604944 2026] [autoindex:error] [pid 5291:tid 5338] [client 167.160.64.151:7453] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:08.685833 2026] [autoindex:error] [pid 51857:tid 51860] [client 167.160.74.37:35015] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:12.025171 2026] [autoindex:error] [pid 5389:tid 5391] [client 208.89.241.232:45045] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:14.211166 2026] [autoindex:error] [pid 5292:tid 5357] [client 139.180.231.163:36185] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:18.679263 2026] [autoindex:error] [pid 51857:tid 51869] [client 192.171.85.152:47969] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 11:12:20.024924 2026] [autoindex:error] [pid 5292:tid 5358] [client 192.171.93.226:62783] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 12:14:40.029245 2026] [:error] [pid 51857:tid 51875] [client 175.6.217.4:36891] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWhpsHDlXoqhkNNyf_zYYAAAAVA"]
[Thu Jan 15 15:35:26.515038 2026] [autoindex:error] [pid 5292:tid 5364] [client 35.81.83.161:52860] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 16:28:06.755021 2026] [:error] [pid 5290:tid 5317] [client 43.133.220.37:60420] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWilFjiQRfcmyoePXPeCpwAAABI"]
[Thu Jan 15 16:35:25.470960 2026] [autoindex:error] [pid 5290:tid 5309] [client 142.44.233.67:22606] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 18:02:37.361400 2026] [:error] [pid 5389:tid 5415] [client 49.51.233.95:50248] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWi7PUkzfklDSWCNrVJY6gAAANg"]
[Thu Jan 15 19:55:31.572208 2026] [autoindex:error] [pid 51857:tid 51861] [client 74.220.52.2:58323] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 19:58:18.332990 2026] [autoindex:error] [pid 5292:tid 5375] [client 185.117.225.132:34560] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 19:58:21.231475 2026] [autoindex:error] [pid 5291:tid 5335] [client 185.117.225.132:38390] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 23:35:55.663843 2026] [autoindex:error] [pid 51857:tid 51870] [client 100.24.208.151:60434] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 15 23:35:56.073188 2026] [autoindex:error] [pid 51857:tid 51865] [client 100.24.208.151:60274] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 00:33:11.279183 2026] [:error] [pid 51807:tid 51824] [client 43.164.195.17:53094] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWkWx8MrH4_ge4gLwN1UNgAAAQ8"]
[Fri Jan 16 00:51:08.218045 2026] [autoindex:error] [pid 5291:tid 5331] [client 167.172.57.4:47292] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 00:51:09.808158 2026] [autoindex:error] [pid 51807:tid 51822] [client 167.172.57.4:50852] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 04:40:00.439117 2026] [autoindex:error] [pid 4657:tid 4724] [client 178.73.233.115:48745] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 05:41:22.007051 2026] [autoindex:error] [pid 4655:tid 4677] [client 195.86.24.111:57256] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 06:34:45.881829 2026] [:error] [pid 43435:tid 43443] [client 43.157.170.126:52644] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWlrhcTShPLPoPKNBO1QEAAAAQY"]
[Fri Jan 16 06:55:30.505658 2026] [autoindex:error] [pid 4657:tid 4727] [client 192.227.215.37:41038] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 07:05:31.669687 2026] [:error] [pid 43435:tid 43460] [client 182.42.105.85:33383] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWlyu8TShPLPoPKNBO1erQAAARc"]
[Fri Jan 16 07:30:44.379428 2026] [autoindex:error] [pid 21390:tid 21402] [client 128.140.44.178:41564] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 07:30:46.129137 2026] [autoindex:error] [pid 4655:tid 4670] [client 128.140.44.178:41570] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 08:34:24.952447 2026] [:error] [pid 4752:tid 4781] [client 43.133.220.37:53540] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWmHkLl8TqZp7XXXIGsxTwAAANE"]
[Fri Jan 16 08:39:47.777839 2026] [autoindex:error] [pid 21390:tid 21409] [client 172.68.110.236:9754] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 09:26:48.271226 2026] [autoindex:error] [pid 4656:tid 4699] [client 64.44.38.246:58188] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 10:03:41.765142 2026] [autoindex:error] [pid 9169:tid 9177] [client 116.203.103.191:52700] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 12:49:21.248316 2026] [autoindex:error] [pid 9260:tid 9263] [client 34.177.100.148:37462] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 13:19:05.918740 2026] [:error] [pid 29908:tid 29919] [client 182.44.67.97:42246] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWnKSWVs7GIQKAJ2aTWwNwAAAEk"]
[Fri Jan 16 14:16:50.758074 2026] [:error] [pid 29908:tid 29929] [client 43.130.26.3:35712] [client 43.130.26.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWnX0mVs7GIQKAJ2aTXMgwAAAFM"]
[Fri Jan 16 14:34:41.940625 2026] [autoindex:error] [pid 6094:tid 6098] [client 3.85.216.165:50626] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 15:00:40.993704 2026] [autoindex:error] [pid 30866:tid 30899] [client 66.249.68.135:35537] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 15:53:53.814945 2026] [:error] [pid 30957:tid 30960] [client 43.153.87.54:44410] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWnukd2pbRtnni7K9w8HHQAAAEA"]
[Fri Jan 16 16:20:45.812076 2026] [autoindex:error] [pid 30957:tid 30982] [client 14.137.210.50:39694] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 17:03:38.986333 2026] [:error] [pid 30865:tid 30881] [client 84.247.169.220:52366] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWn-6hCR_HCYGnC3FS-0ygAAAU0"]
[Fri Jan 16 17:03:40.282381 2026] [:error] [pid 30866:tid 30912] [client 84.247.169.220:52599] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-7Cfb83E1Tbd0nr9sjwAAABE"]
[Fri Jan 16 17:03:41.687857 2026] [:error] [pid 30865:tid 30889] [client 84.247.169.220:52789] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-7RCR_HCYGnC3FS-00AAAAVU"]
[Fri Jan 16 17:03:43.089656 2026] [:error] [pid 30925:tid 30936] [client 84.247.169.220:52956] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-77Pyx6TwF5dNaFqjWAAAAYk"]
[Fri Jan 16 17:03:44.430778 2026] [:error] [pid 30865:tid 30886] [client 84.247.169.220:53202] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-8BCR_HCYGnC3FS-01QAAAVI"]
[Fri Jan 16 19:29:46.613007 2026] [:error] [pid 54008:tid 54028] [client 182.44.8.254:54807] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWohKseowS6CyLOmCzPbKgAAAJI"]
[Fri Jan 16 20:05:29.875591 2026] [autoindex:error] [pid 54008:tid 54016] [client 74.7.227.175:34346] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://stage-public.gridapp.io
[Fri Jan 16 21:07:46.035391 2026] [:error] [pid 30865:tid 30887] [client 43.130.111.40:45378] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWo4IhCR_HCYGnC3FS8lIwAAAVM"]
[Fri Jan 16 21:29:34.978382 2026] [autoindex:error] [pid 54008:tid 54032] [client 195.178.110.155:48580] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 22:17:28.854814 2026] [autoindex:error] [pid 30865:tid 30884] [client 84.247.169.220:51327] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 22:40:55.182717 2026] [:error] [pid 30957:tid 30974] [client 49.51.73.183:55634] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWpN992pbRtnni7K9w-QlQAAAE4"]
[Sat Jan 17 02:04:17.759089 2026] [:error] [pid 30866:tid 30914] [client 14.215.163.132:32784] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWp9oSfb83E1Tbd0nr_z2wAAABM"]
[Sat Jan 17 02:34:16.415762 2026] [autoindex:error] [pid 30925:tid 30938] [client 176.96.137.48:34482] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 04:57:38.017303 2026] [autoindex:error] [pid 31224:tid 31272] [client 193.26.115.129:52092] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 04:57:38.426833 2026] [autoindex:error] [pid 31224:tid 31278] [client 193.26.115.129:52096] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 05:02:20.575861 2026] [autoindex:error] [pid 31225:tid 31292] [client 185.39.19.47:50370] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 17 05:02:21.219702 2026] [autoindex:error] [pid 31223:tid 31253] [client 185.39.19.47:50665] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 17 05:02:21.865697 2026] [autoindex:error] [pid 31223:tid 31236] [client 185.39.19.47:51141] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 17 05:02:22.512258 2026] [autoindex:error] [pid 31225:tid 31299] [client 185.39.19.47:51523] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 17 06:22:42.003005 2026] [autoindex:error] [pid 31225:tid 31308] [client 43.225.189.75:36176] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 07:05:18.144761 2026] [autoindex:error] [pid 31698:tid 31710] [client 43.225.189.75:37576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 07:17:44.406945 2026] [autoindex:error] [pid 31225:tid 31295] [client 34.177.100.148:51478] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 09:37:56.800265 2026] [autoindex:error] [pid 31698:tid 31724] [client 190.60.54.24:50794] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 09:37:57.945441 2026] [autoindex:error] [pid 31698:tid 31706] [client 189.30.199.232:1752] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 10:45:08.044862 2026] [autoindex:error] [pid 31223:tid 31234] [client 185.180.141.69:38359] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 10:45:27.766488 2026] [autoindex:error] [pid 31322:tid 31345] [client 185.180.141.69:57217] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 10:52:19.900912 2026] [:error] [pid 31224:tid 31276] [client 43.130.31.17:39772] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWr5YzgpVpEMk8-OQkim5AAAAE8"]
[Sat Jan 17 10:55:24.818057 2026] [autoindex:error] [pid 31698:tid 31701] [client 93.158.90.34:51339] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 10:59:55.540326 2026] [autoindex:error] [pid 31223:tid 31249] [client 124.198.131.235:51167] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 10:59:55.973608 2026] [autoindex:error] [pid 31322:tid 31357] [client 124.198.131.235:51180] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 13:19:24.250014 2026] [autoindex:error] [pid 31223:tid 31245] [client 20.106.229.124:53230] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 13:19:24.683360 2026] [autoindex:error] [pid 31322:tid 31339] [client 20.106.229.124:53244] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 17:10:39.282186 2026] [autoindex:error] [pid 31225:tid 31312] [client 52.204.49.148:48482] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 17:10:39.692731 2026] [autoindex:error] [pid 31698:tid 31715] [client 52.204.49.148:60342] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 19:49:07.074778 2026] [autoindex:error] [pid 31225:tid 31307] [client 66.249.68.135:63719] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 20:01:46.201357 2026] [autoindex:error] [pid 31224:tid 31261] [client 45.148.10.214:35098] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 21:05:11.077849 2026] [:error] [pid 31225:tid 31295] [client 49.234.192.248:35358] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWuJB-nu2L2yWFDbzyUP-AAAAIc"]
[Sat Jan 17 21:26:16.609985 2026] [autoindex:error] [pid 31224:tid 31262] [client 192.210.228.190:54012] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 17 21:56:54.513835 2026] [:error] [pid 31698:tid 31720] [client 104.28.161.73:43572] [client 104.28.161.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aWuVJrjKZJSxKAfZqrLowwAAARI"]
[Sun Jan 18 00:22:26.638079 2026] [proxy_fcgi:error] [pid 31698:tid 31718] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:26.891002 2026] [proxy_fcgi:error] [pid 31698:tid 31719] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:27.145032 2026] [proxy_fcgi:error] [pid 31698:tid 31717] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:27.397743 2026] [proxy_fcgi:error] [pid 31698:tid 31711] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:27.650417 2026] [proxy_fcgi:error] [pid 31698:tid 31706] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:28.028852 2026] [proxy_fcgi:error] [pid 31698:tid 31712] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:28.288692 2026] [proxy_fcgi:error] [pid 31698:tid 31707] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:28.543723 2026] [proxy_fcgi:error] [pid 31698:tid 31725] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:28.820500 2026] [proxy_fcgi:error] [pid 31698:tid 31701] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:29.076252 2026] [proxy_fcgi:error] [pid 31698:tid 31726] [client 52.164.187.143:10653] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 00:22:29.329107 2026] [:error] [pid 31698:tid 31705] [client 52.164.187.143:10653] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an7.php"] [unique_id "aWu3RbjKZJSxKAfZqrL8ZwAAAQM"]
[Sun Jan 18 00:22:30.232411 2026] [:error] [pid 31698:tid 31722] [client 52.164.187.143:11387] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an7.php"] [unique_id "aWu3RrjKZJSxKAfZqrL8aAAAARQ"]
[Sun Jan 18 00:22:31.328767 2026] [:error] [pid 31223:tid 31247] [client 52.164.187.143:10580] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gfile.php"] [unique_id "aWu3R0Mnpeq0T1sEOlITagAAAA4"]
[Sun Jan 18 00:22:32.209035 2026] [:error] [pid 31322:tid 31356] [client 52.164.187.143:11235] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless14.php"] [unique_id "aWu3SHxOW98yk2MBlyoO-wAAANY"]
[Sun Jan 18 00:22:33.068711 2026] [:error] [pid 31322:tid 31343] [client 52.164.187.143:11247] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aWu3SXxOW98yk2MBlyoO_QAAAMk"]
[Sun Jan 18 00:22:33.568103 2026] [:error] [pid 31322:tid 31354] [client 52.164.187.143:10709] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aWu3SXxOW98yk2MBlyoO_gAAANQ"]
[Sun Jan 18 00:22:34.069430 2026] [:error] [pid 31224:tid 31271] [client 52.164.187.143:11374] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aWu3SjgpVpEMk8-OQkhkBQAAAEo"]
[Sun Jan 18 00:22:34.575107 2026] [:error] [pid 31225:tid 31305] [client 52.164.187.143:10783] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acwfihfh.php"] [unique_id "aWu3Sunu2L2yWFDbzyU1TAAAAJE"]
[Sun Jan 18 00:22:35.089487 2026] [:error] [pid 31225:tid 31288] [client 52.164.187.143:10594] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aWu3S-nu2L2yWFDbzyU1TwAAAIA"]
[Sun Jan 18 00:22:35.593817 2026] [:error] [pid 31322:tid 31339] [client 52.164.187.143:10863] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aWu3S3xOW98yk2MBlyoPBAAAAMU"]
[Sun Jan 18 00:22:36.094412 2026] [:error] [pid 31223:tid 31245] [client 52.164.187.143:11311] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aWu3TEMnpeq0T1sEOlITbwAAAAw"]
[Sun Jan 18 00:22:36.592800 2026] [:error] [pid 31322:tid 31358] [client 52.164.187.143:10607] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bras.php"] [unique_id "aWu3THxOW98yk2MBlyoPCwAAANg"]
[Sun Jan 18 00:22:37.115606 2026] [:error] [pid 31225:tid 31296] [client 52.164.187.143:11061] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aWu3Tenu2L2yWFDbzyU1XQAAAIg"]
[Sun Jan 18 00:22:37.670724 2026] [:error] [pid 31225:tid 31303] [client 52.164.187.143:11105] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aWu3Tenu2L2yWFDbzyU1XgAAAI8"]
[Sun Jan 18 00:22:38.171436 2026] [:error] [pid 31698:tid 31725] [client 52.164.187.143:11053] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/an8.php"] [unique_id "aWu3TrjKZJSxKAfZqrL8dQAAARc"]
[Sun Jan 18 00:22:38.703583 2026] [:error] [pid 31223:tid 31243] [client 52.164.187.143:10938] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aWu3TkMnpeq0T1sEOlITcwAAAAo"]
[Sun Jan 18 00:22:39.202498 2026] [:error] [pid 31698:tid 31726] [client 52.164.187.143:10838] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aWu3T7jKZJSxKAfZqrL8dwAAARg"]
[Sun Jan 18 00:22:39.703650 2026] [:error] [pid 31225:tid 31310] [client 52.164.187.143:10716] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aWu3T-nu2L2yWFDbzyU1YwAAAJY"]
[Sun Jan 18 00:22:40.202940 2026] [:error] [pid 31224:tid 31267] [client 52.164.187.143:10837] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/21x.php"] [unique_id "aWu3UDgpVpEMk8-OQkhkHgAAAEY"]
[Sun Jan 18 00:22:40.702791 2026] [:error] [pid 31698:tid 31713] [client 52.164.187.143:10968] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aWu3ULjKZJSxKAfZqrL8eAAAAQs"]
[Sun Jan 18 00:22:41.226370 2026] [:error] [pid 31224:tid 31285] [client 52.164.187.143:11172] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aWu3UTgpVpEMk8-OQkhkIQAAAFg"]
[Sun Jan 18 00:22:41.751260 2026] [:error] [pid 31224:tid 31270] [client 52.164.187.143:10618] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/out.php"] [unique_id "aWu3UTgpVpEMk8-OQkhkJQAAAEk"]
[Sun Jan 18 00:22:42.334546 2026] [:error] [pid 31698:tid 31724] [client 52.164.187.143:11168] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aWu3UrjKZJSxKAfZqrL8eQAAARY"]
[Sun Jan 18 00:22:42.970463 2026] [:error] [pid 31322:tid 31355] [client 52.164.187.143:10818] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aWu3UnxOW98yk2MBlyoPEQAAANU"]
[Sun Jan 18 00:22:43.498330 2026] [:error] [pid 31223:tid 31240] [client 52.164.187.143:11246] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aWu3U0Mnpeq0T1sEOlITdgAAAAc"]
[Sun Jan 18 00:22:44.000630 2026] [:error] [pid 31225:tid 31310] [client 52.164.187.143:11179] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aWu3U-nu2L2yWFDbzyU1ZgAAAJY"]
[Sun Jan 18 00:22:44.535133 2026] [:error] [pid 31698:tid 31707] [client 52.164.187.143:10827] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aWu3VLjKZJSxKAfZqrL8egAAAQU"]
[Sun Jan 18 00:22:45.083947 2026] [:error] [pid 31224:tid 31267] [client 52.164.187.143:11152] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lanz.php"] [unique_id "aWu3VTgpVpEMk8-OQkhkLAAAAEY"]
[Sun Jan 18 00:22:45.612591 2026] [:error] [pid 31223:tid 31245] [client 52.164.187.143:10563] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aWu3VUMnpeq0T1sEOlITfAAAAAw"]
[Sun Jan 18 00:22:46.228032 2026] [:error] [pid 31225:tid 31308] [client 52.164.187.143:11380] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aWu3Vunu2L2yWFDbzyU1agAAAJQ"]
[Sun Jan 18 00:22:46.748689 2026] [:error] [pid 31698:tid 31725] [client 52.164.187.143:10497] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aWu3VrjKZJSxKAfZqrL8ewAAARc"]
[Sun Jan 18 00:22:47.296344 2026] [:error] [pid 31223:tid 31234] [client 52.164.187.143:10770] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xeeex.php"] [unique_id "aWu3V0Mnpeq0T1sEOlITfQAAAAE"]
[Sun Jan 18 00:22:47.961344 2026] [:error] [pid 31698:tid 31726] [client 52.164.187.143:10895] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aWu3V7jKZJSxKAfZqrL8fAAAARg"]
[Sun Jan 18 00:22:48.490010 2026] [:error] [pid 31322:tid 31342] [client 52.164.187.143:11383] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aWu3WHxOW98yk2MBlyoPFQAAAMg"]
[Sun Jan 18 00:22:49.001621 2026] [:error] [pid 31698:tid 31705] [client 52.164.187.143:10830] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aWu3WbjKZJSxKAfZqrL8fQAAAQM"]
[Sun Jan 18 00:22:49.516832 2026] [:error] [pid 31225:tid 31309] [client 52.164.187.143:10633] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aWu3Wenu2L2yWFDbzyU1bgAAAJU"]
[Sun Jan 18 00:22:50.017554 2026] [:error] [pid 31223:tid 31247] [client 52.164.187.143:10872] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d996699999.php"] [unique_id "aWu3WkMnpeq0T1sEOlITfgAAAA4"]
[Sun Jan 18 00:22:50.552269 2026] [:error] [pid 31225:tid 31297] [client 52.164.187.143:11223] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d996699999.php"] [unique_id "aWu3Wunu2L2yWFDbzyU1bwAAAIk"]
[Sun Jan 18 00:22:51.059393 2026] [:error] [pid 31698:tid 31712] [client 52.164.187.143:10885] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d996699999.php"] [unique_id "aWu3W7jKZJSxKAfZqrL8fgAAAQo"]
[Sun Jan 18 00:22:51.629403 2026] [:error] [pid 31224:tid 31270] [client 52.164.187.143:10900] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/d996699999.php"] [unique_id "aWu3WzgpVpEMk8-OQkhkOgAAAEk"]
[Sun Jan 18 00:22:52.179120 2026] [:error] [pid 31225:tid 31311] [client 52.164.187.143:11177] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aWu3XOnu2L2yWFDbzyU1cQAAAJc"]
[Sun Jan 18 00:22:52.706280 2026] [:error] [pid 31224:tid 31282] [client 52.164.187.143:11367] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aWu3XDgpVpEMk8-OQkhkPAAAAFU"]
[Sun Jan 18 00:22:53.205719 2026] [:error] [pid 31224:tid 31262] [client 52.164.187.143:11139] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aWu3XTgpVpEMk8-OQkhkPQAAAEE"]
[Sun Jan 18 00:22:53.769137 2026] [:error] [pid 31223:tid 31240] [client 52.164.187.143:11435] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ierne.php"] [unique_id "aWu3XUMnpeq0T1sEOlITfwAAAAc"]
[Sun Jan 18 00:22:54.486085 2026] [:error] [pid 31698:tid 31722] [client 52.164.187.143:11006] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aWu3XrjKZJSxKAfZqrL8fwAAARQ"]
[Sun Jan 18 00:22:55.118601 2026] [:error] [pid 31224:tid 31266] [client 52.164.187.143:10793] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aWu3XzgpVpEMk8-OQkhkQQAAAEU"]
[Sun Jan 18 00:22:56.018415 2026] [:error] [pid 31225:tid 31304] [client 52.164.187.143:10671] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aWu3YOnu2L2yWFDbzyU1dgAAAJA"]
[Sun Jan 18 00:22:56.743606 2026] [:error] [pid 31225:tid 31305] [client 52.164.187.143:10904] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xde.php"] [unique_id "aWu3YOnu2L2yWFDbzyU1eAAAAJE"]
[Sun Jan 18 00:22:57.452970 2026] [:error] [pid 31698:tid 31713] [client 52.164.187.143:11157] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gettest.php"] [unique_id "aWu3YbjKZJSxKAfZqrL8gQAAAQs"]
[Sun Jan 18 00:22:57.980397 2026] [:error] [pid 31698:tid 31714] [client 52.164.187.143:10875] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gettest.php"] [unique_id "aWu3YbjKZJSxKAfZqrL8ggAAAQw"]
[Sun Jan 18 01:26:39.840472 2026] [autoindex:error] [pid 31225:tid 31309] [client 216.26.230.136:29569] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 18 02:09:32.566452 2026] [:error] [pid 31322:tid 31358] [client 170.106.167.214:43928] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWvQXHxOW98yk2MBlyokxwAAANg"]
[Sun Jan 18 04:17:36.031795 2026] [:error] [pid 12925:tid 12996] [client 216.81.248.168:54080] [client 216.81.248.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aWvuYPsBL-4pnmSbziglHgAAAIg"]
[Sun Jan 18 09:49:00.802158 2026] [:error] [pid 12925:tid 12998] [client 182.44.2.148:37269] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWw8DPsBL-4pnmSbziiKXwAAAIo"]
[Sun Jan 18 10:21:15.669196 2026] [:error] [pid 13034:tid 13056] [client 43.153.10.83:59616] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWxDm8RGpUu1E8cmbmiO7gAAANI"]
[Sun Jan 18 10:25:09.238386 2026] [autoindex:error] [pid 12924:tid 12980] [client 31.171.152.136:46916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 10:25:09.985782 2026] [autoindex:error] [pid 12925:tid 12990] [client 31.171.152.136:46987] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 10:25:10.736370 2026] [autoindex:error] [pid 12923:tid 12937] [client 31.171.152.136:47058] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 10:25:11.484812 2026] [autoindex:error] [pid 12923:tid 12948] [client 31.171.152.136:47125] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 11:27:25.229675 2026] [autoindex:error] [pid 13034:tid 13045] [client 31.171.152.137:62282] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 11:27:25.976812 2026] [autoindex:error] [pid 13034:tid 13057] [client 31.171.152.137:62411] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 11:27:27.050361 2026] [autoindex:error] [pid 12925:tid 13011] [client 192.73.244.36:35188] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 11:27:33.552299 2026] [autoindex:error] [pid 12924:tid 12966] [client 154.16.115.97:40286] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 11:27:36.390496 2026] [autoindex:error] [pid 12923:tid 12955] [client 154.16.115.97:41944] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 11:27:42.780439 2026] [autoindex:error] [pid 12924:tid 12974] [client 192.73.244.36:59674] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 12:21:21.151291 2026] [:error] [pid 13034:tid 13042] [client 43.130.9.111:36550] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWxfwcRGpUu1E8cmbmjM-gAAAMQ"]
[Sun Jan 18 13:50:32.834224 2026] [autoindex:error] [pid 12923:tid 12937] [client 191.96.168.43:31469] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 13:50:33.538635 2026] [autoindex:error] [pid 12924:tid 12979] [client 191.96.168.43:31504] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 13:50:34.715043 2026] [autoindex:error] [pid 13034:tid 13047] [client 154.16.115.97:37340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 13:50:39.427678 2026] [autoindex:error] [pid 12924:tid 12983] [client 202.55.67.194:40558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 13:51:09.422053 2026] [autoindex:error] [pid 12924:tid 12961] [client 133.18.234.13:49496] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 13:51:19.389720 2026] [autoindex:error] [pid 12924:tid 12982] [client 154.16.115.97:43708] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 18 14:38:19.160537 2026] [autoindex:error] [pid 13034:tid 13050] [client 52.90.188.22:41846] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 18 14:58:51.252700 2026] [autoindex:error] [pid 12925:tid 13011] [client 34.91.212.219:32769] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 18 15:00:34.409615 2026] [autoindex:error] [pid 12925:tid 13011] [client 35.204.190.106:16384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 18 15:07:13.569687 2026] [autoindex:error] [pid 13034:tid 13050] [client 157.15.90.169:52655] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 18 16:12:30.963155 2026] [:error] [pid 12923:tid 12953] [client 114.96.103.33:38045] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWyV7usWURrrC-4Rx5JGOAAAABU"]
[Sun Jan 18 18:29:00.488454 2026] [:error] [pid 12925:tid 13010] [client 43.156.232.190:46522] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aWy17PsBL-4pnmSbzihBrgAAAJY"]
[Sun Jan 18 20:06:45.357463 2026] [:error] [pid 12923:tid 12953] [client 43.130.131.18:35518] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aWzM1esWURrrC-4Rx5KJhAAAABU"]
[Sun Jan 18 23:59:50.947411 2026] [autoindex:error] [pid 33494:tid 33504] [client 205.169.39.13:40222] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 00:00:06.883453 2026] [autoindex:error] [pid 7225:tid 7240] [client 82.165.241.88:54840] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 00:02:04.781518 2026] [autoindex:error] [pid 7225:tid 7232] [client 97.107.136.97:59812] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 01:04:19.238308 2026] [:error] [pid 11711:tid 11807] [client 170.106.161.78:48888] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW0Sk-tTMvs-MBCRKgdt4AAAA0w"]
[Mon Jan 19 01:56:40.607955 2026] [autoindex:error] [pid 11711:tid 11810] [client 51.89.25.52:58947] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 02:44:44.978809 2026] [:error] [pid 11620:tid 11632] [client 43.153.12.58:47204] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aW0qHGCcXLNx7aML8kF79QAAAco"]
[Mon Jan 19 04:20:00.331993 2026] [autoindex:error] [pid 27680:tid 27713] [client 92.205.111.211:58950] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 04:20:00.906679 2026] [autoindex:error] [pid 55092:tid 55109] [client 92.205.111.211:58963] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 08:01:31.694969 2026] [:error] [pid 55203:tid 55225] [client 197.254.237.210:57623] [client 197.254.237.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.254.237.210, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aW10Wy-AaXI6_wL-5XxN_gAAANQ"]
[Mon Jan 19 08:01:31.705207 2026] [proxy_fcgi:error] [pid 55203:tid 55225] [client 197.254.237.210:57623] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 08:06:48.286887 2026] [:error] [pid 55092:tid 55114] [client 170.106.165.186:45572] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW11mM2DE_yLQhxnvwzc5gAAAA0"]
[Mon Jan 19 08:30:01.503480 2026] [autoindex:error] [pid 47477:tid 47524] [client 34.96.45.216:38717] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 08:30:02.169859 2026] [autoindex:error] [pid 55094:tid 55176] [client 34.96.45.216:24736] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 08:30:03.878729 2026] [autoindex:error] [pid 55094:tid 55165] [client 34.96.45.216:3660] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 08:30:04.734262 2026] [autoindex:error] [pid 47477:tid 47509] [client 34.96.45.216:61154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 08:30:08.347515 2026] [autoindex:error] [pid 47439:tid 47447] [client 34.26.225.56:37995] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 09:55:46.061317 2026] [:error] [pid 1542:tid 1601] [client 170.106.107.87:50056] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aW2PIi9AKT0aRaKZVXSgsQAAAIA"]
[Mon Jan 19 09:57:41.414413 2026] [:error] [pid 1630:tid 1654] [client 173.214.167.46:61415] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aW2PlS8jxjHcpcfYtKnN7QAAANY"]
[Mon Jan 19 09:57:44.275661 2026] [autoindex:error] [pid 1540:tid 1556] [client 34.26.225.56:37595] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 10:02:17.053460 2026] [autoindex:error] [pid 1541:tid 1578] [client 192.36.198.147:37345] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 10:22:40.404529 2026] [autoindex:error] [pid 1630:tid 1634] [client 34.138.42.37:39049] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 10:40:54.200121 2026] [autoindex:error] [pid 1630:tid 1643] [client 99.239.190.181:60114] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 10:50:52.598073 2026] [:error] [pid 1541:tid 1579] [client 49.7.227.204:55726] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aW2cDEYFhTurKCJuQsaTQgAAAEU"]
[Mon Jan 19 10:58:02.237374 2026] [autoindex:error] [pid 26513:tid 26541] [client 34.138.170.55:49981] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 12:34:14.667759 2026] [autoindex:error] [pid 47089:tid 47101] [client 66.249.68.136:59373] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 12:34:14.838496 2026] [autoindex:error] [pid 47089:tid 47095] [client 66.249.68.136:64439] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 12:35:41.410842 2026] [autoindex:error] [pid 45657:tid 45676] [client 34.138.170.55:52291] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 12:47:15.953189 2026] [:error] [pid 47089:tid 47092] [client 103.77.106.118:55217] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aW23UxlIzijVNfdIsZ41BAAAAQE"]
[Mon Jan 19 12:47:16.329565 2026] [:error] [pid 45563:tid 45624] [client 103.77.106.118:52170] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW23VJI4--OKA-PqumwNYQAAAIM"]
[Mon Jan 19 14:05:46.066247 2026] [autoindex:error] [pid 45563:tid 45634] [client 3.91.16.201:59094] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 14:22:02.985030 2026] [autoindex:error] [pid 45657:tid 45671] [client 35.185.81.208:50293] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 14:57:38.533594 2026] [autoindex:error] [pid 45562:tid 45602] [client 3.252.190.98:57384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 15:21:11.959066 2026] [autoindex:error] [pid 47089:tid 47113] [client 131.181.68.50:55878] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 15:48:55.491904 2026] [autoindex:error] [pid 47089:tid 47108] [client 35.185.81.208:42957] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 16:49:55.556936 2026] [autoindex:error] [pid 47089:tid 47102] [client 34.75.159.135:46621] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 18:13:34.684543 2026] [autoindex:error] [pid 36216:tid 36235] [client 34.75.159.135:58247] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 19:06:06.793963 2026] [autoindex:error] [pid 36216:tid 36239] [client 35.196.203.218:47829] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 19:18:00.892332 2026] [proxy_fcgi:error] [pid 45562:tid 45611] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:01.095332 2026] [proxy_fcgi:error] [pid 45562:tid 45610] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:01.304893 2026] [proxy_fcgi:error] [pid 45562:tid 45596] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:01.499971 2026] [proxy_fcgi:error] [pid 45562:tid 45617] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:01.695249 2026] [proxy_fcgi:error] [pid 45562:tid 45599] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:01.890158 2026] [proxy_fcgi:error] [pid 45562:tid 45614] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:02.170364 2026] [proxy_fcgi:error] [pid 45562:tid 45605] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:02.365155 2026] [proxy_fcgi:error] [pid 45562:tid 45604] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:02.563821 2026] [proxy_fcgi:error] [pid 45562:tid 45595] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:02.760458 2026] [proxy_fcgi:error] [pid 45562:tid 45607] [client 68.155.153.238:26076] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 19:18:04.134508 2026] [:error] [pid 45562:tid 45602] [client 68.155.153.238:26076] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aW4S7DoUil_kwpvtDW7L3gAAAEg"]
[Mon Jan 19 19:18:05.997445 2026] [:error] [pid 45561:tid 45570] [client 68.155.153.238:26083] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aW4S7a4ONSZn4nkTayJUBwAAAAQ"]
[Mon Jan 19 19:18:06.630660 2026] [:error] [pid 36216:tid 36232] [client 68.155.153.238:25984] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aW4S7sIpfKKs9fzB-yB7sgAAAU4"]
[Mon Jan 19 19:18:07.849079 2026] [:error] [pid 45563:tid 45622] [client 68.155.153.238:6089] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file22.php"] [unique_id "aW4S75I4--OKA-PqumyTPgAAAIE"]
[Mon Jan 19 19:18:08.460241 2026] [:error] [pid 36216:tid 36219] [client 68.155.153.238:26103] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aW4S8MIpfKKs9fzB-yB7uQAAAUE"]
[Mon Jan 19 19:18:09.016475 2026] [:error] [pid 45561:tid 45567] [client 68.155.153.238:26060] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aW4S8a4ONSZn4nkTayJUCQAAAAE"]
[Mon Jan 19 19:18:09.723731 2026] [:error] [pid 45561:tid 45590] [client 68.155.153.238:26067] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aW4S8a4ONSZn4nkTayJUDAAAABg"]
[Mon Jan 19 19:18:10.413251 2026] [:error] [pid 45561:tid 45580] [client 68.155.153.238:26013] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/check.php"] [unique_id "aW4S8q4ONSZn4nkTayJUDQAAAA4"]
[Mon Jan 19 19:18:11.091955 2026] [:error] [pid 45561:tid 45589] [client 68.155.153.238:26096] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-header-json.php"] [unique_id "aW4S864ONSZn4nkTayJUEAAAABc"]
[Mon Jan 19 19:18:12.019738 2026] [:error] [pid 36216:tid 36238] [client 68.155.153.238:26097] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-header-json.php"] [unique_id "aW4S9MIpfKKs9fzB-yB7vQAAAVQ"]
[Mon Jan 19 19:18:12.683614 2026] [:error] [pid 45561:tid 45568] [client 68.155.153.238:26093] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-header-json.php"] [unique_id "aW4S9K4ONSZn4nkTayJUEwAAAAI"]
[Mon Jan 19 19:18:13.299661 2026] [:error] [pid 45561:tid 45575] [client 68.155.153.238:26069] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-header-json.php"] [unique_id "aW4S9a4ONSZn4nkTayJUFgAAAAk"]
[Mon Jan 19 19:18:14.286204 2026] [:error] [pid 36216:tid 36222] [client 68.155.153.238:25995] [client 68.155.153.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aW4S9sIpfKKs9fzB-yB7wQAAAUQ"]
[Mon Jan 19 19:18:15.610077 2026] [:error] [pid 45563:tid 45640] [client 68.155.153.238:26074] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aW4S95I4--OKA-PqumyTRQAAAJM"]
[Mon Jan 19 19:18:16.143279 2026] [:error] [pid 45562:tid 45603] [client 68.155.153.238:26109] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aW4S-DoUil_kwpvtDW7L4gAAAEk"]
[Mon Jan 19 19:18:16.706088 2026] [:error] [pid 47089:tid 47100] [client 68.155.153.238:26012] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aW4S-BlIzijVNfdIsZ7obAAAAQk"]
[Mon Jan 19 19:18:17.264063 2026] [:error] [pid 45563:tid 45644] [client 68.155.153.238:26070] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aW4S-ZI4--OKA-PqumyTRgAAAJc"]
[Mon Jan 19 19:18:17.746472 2026] [:error] [pid 45657:tid 45664] [client 68.155.153.238:25994] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aW4S-Q4XFYp2OcwCx-B6NQAAAMU"]
[Mon Jan 19 19:18:18.296717 2026] [:error] [pid 36216:tid 36240] [client 68.155.153.238:26092] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aW4S-sIpfKKs9fzB-yB7xwAAAVY"]
[Mon Jan 19 19:18:19.091439 2026] [:error] [pid 36216:tid 36227] [client 68.155.153.238:26090] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aW4S-8IpfKKs9fzB-yB7ygAAAUk"]
[Mon Jan 19 19:18:19.833699 2026] [:error] [pid 36216:tid 36230] [client 68.155.153.238:26079] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aW4S-8IpfKKs9fzB-yB7zQAAAUw"]
[Mon Jan 19 19:18:20.655812 2026] [:error] [pid 45563:tid 45633] [client 68.155.153.238:25991] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aW4S_JI4--OKA-PqumyTSQAAAIw"]
[Mon Jan 19 19:18:21.438764 2026] [:error] [pid 45657:tid 45674] [client 68.155.153.238:26004] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aW4S_Q4XFYp2OcwCx-B6PQAAAM8"]
[Mon Jan 19 19:18:21.995032 2026] [:error] [pid 36216:tid 36237] [client 68.155.153.238:26007] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aW4S_cIpfKKs9fzB-yB70QAAAVM"]
[Mon Jan 19 19:18:22.800835 2026] [:error] [pid 45563:tid 45622] [client 68.155.153.238:25986] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aW4S_pI4--OKA-PqumyTUAAAAIE"]
[Mon Jan 19 19:18:24.128074 2026] [:error] [pid 45657:tid 45671] [client 68.155.153.238:6087] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aW4TAA4XFYp2OcwCx-B6PwAAAMw"]
[Mon Jan 19 19:18:25.792446 2026] [:error] [pid 45563:tid 45631] [client 68.155.153.238:26050] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aW4TAZI4--OKA-PqumyTWQAAAIo"]
[Mon Jan 19 19:18:27.245881 2026] [:error] [pid 45561:tid 45590] [client 68.155.153.238:25990] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aW4TA64ONSZn4nkTayJUHQAAABg"]
[Mon Jan 19 19:18:28.304429 2026] [:error] [pid 45561:tid 45587] [client 68.155.153.238:26102] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aW4TBK4ONSZn4nkTayJUIQAAABU"]
[Mon Jan 19 19:18:29.450225 2026] [:error] [pid 47089:tid 47093] [client 68.155.153.238:25997] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aW4TBRlIzijVNfdIsZ7ocgAAAQI"]
[Mon Jan 19 19:18:30.151720 2026] [:error] [pid 36216:tid 36231] [client 68.155.153.238:25993] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aW4TBsIpfKKs9fzB-yB71wAAAU0"]
[Mon Jan 19 19:58:59.690720 2026] [autoindex:error] [pid 45562:tid 45596] [client 65.109.21.225:37412] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 19:59:01.635681 2026] [autoindex:error] [pid 47089:tid 47110] [client 91.124.72.37:13523] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 20:30:59.145034 2026] [autoindex:error] [pid 36216:tid 36233] [client 35.196.203.218:59863] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 21:33:45.794800 2026] [:error] [pid 45657:tid 45675] [client 43.130.71.237:55202] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW4yuQ4XFYp2OcwCx-CWigAAANA"]
[Mon Jan 19 22:26:07.253726 2026] [autoindex:error] [pid 45563:tid 45628] [client 43.225.189.99:54456] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 23:12:46.528306 2026] [autoindex:error] [pid 36216:tid 36218] [client 43.225.189.99:46512] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 19 23:39:00.094043 2026] [:error] [pid 45562:tid 45598] [client 223.244.35.77:40378] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aW5QFDoUil_kwpvtDW4ASQAAAEQ"]
[Tue Jan 20 01:18:29.746281 2026] [autoindex:error] [pid 36216:tid 36240] [client 196.51.200.1:54529] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 01:59:56.489162 2026] [autoindex:error] [pid 47089:tid 47094] [client 100.24.208.151:56589] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 01:59:57.072428 2026] [autoindex:error] [pid 45561:tid 45576] [client 100.24.208.151:8216] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 03:27:47.299097 2026] [proxy_fcgi:error] [pid 47089:tid 47112] [client 87.121.84.105:54608] AH01071: Got error 'Primary script unknown'
[Tue Jan 20 03:56:29.981557 2026] [autoindex:error] [pid 17728:tid 17750] [client 34.91.219.29:35338] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 20 03:56:31.602465 2026] [autoindex:error] [pid 17622:tid 17695] [client 34.91.219.29:35340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 20 03:56:32.611199 2026] [autoindex:error] [pid 17620:tid 17643] [client 34.91.219.29:33598] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 20 03:56:33.617478 2026] [autoindex:error] [pid 17620:tid 17649] [client 34.91.219.29:33608] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 20 04:01:49.123597 2026] [:error] [pid 17620:tid 17633] [client 43.131.39.179:35826] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW6NrVIxOy_FGGR2bit6FQAAAAQ"]
[Tue Jan 20 05:50:57.816815 2026] [:error] [pid 17728:tid 17735] [client 1.15.52.154:40004] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW6nQXHKpzeaRGBjHRxyDwAAAMM"]
[Tue Jan 20 06:32:29.267239 2026] [autoindex:error] [pid 17728:tid 17747] [client 194.99.20.48:49157] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 06:32:31.651296 2026] [autoindex:error] [pid 17728:tid 17752] [client 194.99.20.48:49190] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 07:11:26.196432 2026] [autoindex:error] [pid 17728:tid 17734] [client 35.185.121.134:57909] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 09:37:22.310442 2026] [autoindex:error] [pid 10815:tid 10882] [client 35.185.121.134:38877] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 12:16:06.302481 2026] [:error] [pid 54260:tid 54331] [client 43.165.190.5:38468] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aW8Bhtg7jS3jmpUN0WDeHQAAAVY"]
[Tue Jan 20 13:29:39.351264 2026] [:error] [pid 8455:tid 8464] [client 103.77.107.178:63487] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aW8Sw4JiHdPVtruynXBzcQAAA0c"]
[Tue Jan 20 13:29:39.724920 2026] [:error] [pid 56360:tid 56382] [client 103.77.107.178:51357] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW8Sw01J8CD1rR-wXXv8tQAAARQ"]
[Tue Jan 20 13:33:31.838742 2026] [autoindex:error] [pid 63647:tid 63671] [client 192.126.253.2:39996] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 14:07:23.308623 2026] [autoindex:error] [pid 56326:tid 56345] [client 64.15.129.122:58948] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 14:07:23.987040 2026] [autoindex:error] [pid 56360:tid 56368] [client 64.15.129.114:34696] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 14:07:25.280949 2026] [autoindex:error] [pid 56360:tid 56383] [client 64.15.129.119:61155] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 14:07:26.371226 2026] [autoindex:error] [pid 56360:tid 56385] [client 64.15.129.104:55140] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 14:07:27.060527 2026] [autoindex:error] [pid 56326:tid 56344] [client 64.15.129.101:17160] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 15:12:56.530139 2026] [autoindex:error] [pid 54260:tid 54328] [client 193.183.173.96:36377] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 18:11:37.219473 2026] [:error] [pid 8455:tid 8480] [client 117.33.163.216:48688] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW9U2YJiHdPVtruynXCQbgAAA1c"]
[Tue Jan 20 19:04:14.926565 2026] [autoindex:error] [pid 56360:tid 56380] [client 93.158.90.72:57059] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 20:52:56.810917 2026] [:error] [pid 56326:tid 56352] [client 64.225.8.2:62111] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW96qBA6mi8Uwf45Uy80bQAAANg"]
[Tue Jan 20 20:52:59.510114 2026] [:error] [pid 56291:tid 56303] [client 64.225.8.2:63977] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.json"] [unique_id "aW96q7XgW_1T5Nikxa31owAAAEg"]
[Tue Jan 20 20:53:01.658131 2026] [:error] [pid 54259:tid 54291] [client 64.225.8.2:60708] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.json"] [unique_id "aW96rQ2q1USrePnOoFTxWwAAAI4"]
[Tue Jan 20 20:53:03.502125 2026] [:error] [pid 56326:tid 56340] [client 64.225.8.2:53592] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp.json"] [unique_id "aW96rxA6mi8Uwf45Uy80dwAAAMw"]
[Tue Jan 20 20:53:05.403703 2026] [:error] [pid 54259:tid 54280] [client 64.225.8.2:62388] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp-config.json"] [unique_id "aW96sQ2q1USrePnOoFTxXwAAAIM"]
[Tue Jan 20 20:53:07.955492 2026] [:error] [pid 54382:tid 54393] [client 64.225.8.2:56888] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/ftp-config.json"] [unique_id "aW96s0TJlZ9SJ6sBOEuvawAAAAg"]
[Tue Jan 20 20:53:09.967367 2026] [:error] [pid 54382:tid 54395] [client 64.225.8.2:51816] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aW96tUTJlZ9SJ6sBOEuvbwAAAAo"]
[Tue Jan 20 21:39:49.305472 2026] [autoindex:error] [pid 56291:tid 56317] [client 74.7.227.175:59594] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 22:17:00.130827 2026] [autoindex:error] [pid 54382:tid 54390] [client 149.40.50.200:36188] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 22:24:57.322819 2026] [autoindex:error] [pid 56326:tid 56349] [client 74.7.242.57:33280] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 23:03:35.280944 2026] [autoindex:error] [pid 8455:tid 8457] [client 149.40.50.200:49334] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 23:17:36.761808 2026] [autoindex:error] [pid 54382:tid 54403] [client 144.217.73.102:52282] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 23:24:07.878431 2026] [:error] [pid 17295:tid 17319] [client 43.130.131.18:57406] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aW-eF_ZJhGdrcqZICT-i6gAAAZU"]
[Wed Jan 21 00:04:13.115519 2026] [autoindex:error] [pid 56326:tid 56335] [client 35.190.151.209:50317] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 00:22:57.389688 2026] [autoindex:error] [pid 54260:tid 54331] [client 66.56.82.17:52353] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 00:53:14.923762 2026] [:error] [pid 17295:tid 17307] [client 43.133.220.37:41926] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aW-y-vZJhGdrcqZICT_IuAAAAYk"]
[Wed Jan 21 01:19:54.664156 2026] [autoindex:error] [pid 54259:tid 54297] [client 35.243.217.19:52541] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 01:50:13.578983 2026] [autoindex:error] [pid 54382:tid 54395] [client 34.23.80.160:33011] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 04:39:30.645762 2026] [autoindex:error] [pid 21455:tid 21508] [client 34.23.80.160:52639] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 04:52:14.962402 2026] [proxy_fcgi:error] [pid 21454:tid 21482] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.074826 2026] [proxy_fcgi:error] [pid 21454:tid 21465] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.169694 2026] [proxy_fcgi:error] [pid 21454:tid 21471] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.275345 2026] [proxy_fcgi:error] [pid 21454:tid 21485] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.366250 2026] [proxy_fcgi:error] [pid 21454:tid 21467] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.464380 2026] [proxy_fcgi:error] [pid 21454:tid 21481] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.646109 2026] [proxy_fcgi:error] [pid 21454:tid 21479] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.753641 2026] [proxy_fcgi:error] [pid 21454:tid 21487] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.846488 2026] [proxy_fcgi:error] [pid 21454:tid 21476] [client 4.194.34.171:47961] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 04:52:15.933459 2026] [:error] [pid 21454:tid 21478] [client 4.194.34.171:47961] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aW_q_zwp5UZmMFzY2bpSGAAAAA4"]
[Wed Jan 21 04:52:16.286456 2026] [:error] [pid 21456:tid 21527] [client 4.194.34.171:47593] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aW_rAAKyVQ9Ob2YxRAp7RwAAAIk"]
[Wed Jan 21 04:52:16.637952 2026] [:error] [pid 21456:tid 21539] [client 4.194.34.171:47557] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aW_rAAKyVQ9Ob2YxRAp7SAAAAJU"]
[Wed Jan 21 04:52:16.989706 2026] [:error] [pid 21455:tid 21508] [client 4.194.34.171:41582] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aW_rAIpOKALCSo1URZE76QAAAFE"]
[Wed Jan 21 06:03:15.753391 2026] [:error] [pid 21454:tid 21487] [client 103.65.236.149:56958] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aW_7ozwp5UZmMFzY2bpfWgAAABc"]
[Wed Jan 21 06:03:16.292570 2026] [:error] [pid 21563:tid 21569] [client 103.65.236.149:57095] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW_7pBZq__dTorabEoyilwAAAMQ"]
[Wed Jan 21 07:40:05.061025 2026] [:error] [pid 59863:tid 59879] [client 49.51.166.228:52860] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXASVbHQ1zVZ4yLuI-wV2AAAAQw"]
[Wed Jan 21 08:43:16.775498 2026] [proxy_fcgi:error] [pid 21563:tid 21575] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.801221 2026] [proxy_fcgi:error] [pid 21563:tid 21587] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.821949 2026] [proxy_fcgi:error] [pid 21563:tid 21580] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.841194 2026] [proxy_fcgi:error] [pid 21563:tid 21588] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.860013 2026] [proxy_fcgi:error] [pid 21563:tid 21585] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.884695 2026] [proxy_fcgi:error] [pid 21563:tid 21576] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.926582 2026] [proxy_fcgi:error] [pid 21563:tid 21569] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.947961 2026] [proxy_fcgi:error] [pid 21563:tid 21574] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.965258 2026] [proxy_fcgi:error] [pid 21563:tid 21572] [client 4.197.162.185:12857] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 08:43:16.980162 2026] [:error] [pid 21563:tid 21567] [client 4.197.162.185:12857] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aXAhJBZq__dTorabEozU7gAAAMI"]
[Wed Jan 21 08:43:17.044624 2026] [:error] [pid 59863:tid 59878] [client 4.197.162.185:35129] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aXAhJbHQ1zVZ4yLuI-wsLwAAAQs"]
[Wed Jan 21 08:43:17.115100 2026] [:error] [pid 21563:tid 21581] [client 4.197.162.185:12329] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aXAhJRZq__dTorabEozU8AAAANA"]
[Wed Jan 21 08:43:17.184251 2026] [:error] [pid 56352:tid 56362] [client 4.197.162.185:27731] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aXAhJdWN6wYNPTU3efV5vgAAAUg"]
[Wed Jan 21 10:34:08.831228 2026] [autoindex:error] [pid 21454:tid 21471] [client 51.68.111.213:33419] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 11:33:46.654217 2026] [autoindex:error] [pid 21454:tid 21468] [client 34.139.168.98:51085] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 14:08:44.851668 2026] [autoindex:error] [pid 21563:tid 21586] [client 44.203.49.144:54674] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 14:20:37.928321 2026] [autoindex:error] [pid 21456:tid 21525] [client 34.139.168.98:43483] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 14:31:14.380673 2026] [:error] [pid 59863:tid 59873] [client 43.133.139.6:38344] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXBysrHQ1zVZ4yLuI-yBiwAAAQY"]
[Wed Jan 21 14:48:44.435721 2026] [:error] [pid 59863:tid 59875] [client 23.226.132.115:45286] [client 23.226.132.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXB2zLHQ1zVZ4yLuI-yFlgAAAQg"], referer: https://www.bing.com/
[Wed Jan 21 15:02:02.457131 2026] [autoindex:error] [pid 21456:tid 21538] [client 37.27.59.176:40420] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 17:38:19.835479 2026] [autoindex:error] [pid 21456:tid 21533] [client 100.26.199.13:50298] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 17:38:20.507220 2026] [autoindex:error] [pid 21563:tid 21581] [client 100.26.199.13:34194] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 18:29:19.786123 2026] [autoindex:error] [pid 21455:tid 21494] [client 34.23.155.42:51889] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 19:27:04.485226 2026] [:error] [pid 21456:tid 21538] [client 101.32.15.141:45138] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXC4CAKyVQ9Ob2YxRAp9VQAAAJQ"]
[Wed Jan 21 21:03:58.074403 2026] [autoindex:error] [pid 21563:tid 21571] [client 79.174.83.65:24232] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 21:03:59.376719 2026] [autoindex:error] [pid 56352:tid 56363] [client 79.174.83.65:10979] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 21:04:00.478267 2026] [autoindex:error] [pid 21455:tid 21494] [client 79.174.83.65:54658] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 21:04:01.776510 2026] [autoindex:error] [pid 59863:tid 59869] [client 79.174.83.65:38808] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 21:14:23.270257 2026] [autoindex:error] [pid 56352:tid 56377] [client 34.23.155.42:59221] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 23:34:03.937325 2026] [autoindex:error] [pid 56352:tid 56358] [client 223.29.151.142:8517] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 00:55:19.049184 2026] [autoindex:error] [pid 21454:tid 21473] [client 51.89.25.52:57154] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 01:39:50.685822 2026] [:error] [pid 4382:tid 4400] [client 110.166.71.39:53760] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXEPZpHg0falVG3JFbCOggAAAZA"]
[Thu Jan 22 02:40:09.542176 2026] [proxy_fcgi:error] [pid 21456:tid 21524] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:09.680836 2026] [proxy_fcgi:error] [pid 21456:tid 21535] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:09.829842 2026] [proxy_fcgi:error] [pid 21456:tid 21521] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:09.969074 2026] [proxy_fcgi:error] [pid 21456:tid 21541] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:10.108284 2026] [proxy_fcgi:error] [pid 21456:tid 21539] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:10.249154 2026] [proxy_fcgi:error] [pid 21456:tid 21519] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:10.390902 2026] [proxy_fcgi:error] [pid 21456:tid 21532] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:10.533078 2026] [proxy_fcgi:error] [pid 21456:tid 21534] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:10.673395 2026] [proxy_fcgi:error] [pid 21456:tid 21540] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:10.963829 2026] [proxy_fcgi:error] [pid 21456:tid 21542] [client 52.231.68.47:15817] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 02:40:11.103700 2026] [:error] [pid 21456:tid 21526] [client 52.231.68.47:15817] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXEdiwKyVQ9Ob2YxRArgHAAAAIg"]
[Thu Jan 22 02:40:11.653787 2026] [:error] [pid 59863:tid 59871] [client 52.231.68.47:33877] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXEdi7HQ1zVZ4yLuI-wctwAAAQQ"]
[Thu Jan 22 02:40:12.196359 2026] [:error] [pid 59863:tid 59885] [client 52.231.68.47:8578] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXEdjLHQ1zVZ4yLuI-wcuAAAARI"]
[Thu Jan 22 02:40:12.738679 2026] [:error] [pid 21563:tid 21568] [client 52.231.68.47:15825] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXEdjBZq__dTorabEozdZAAAAMM"]
[Thu Jan 22 02:54:35.848310 2026] [autoindex:error] [pid 56352:tid 56363] [client 66.249.68.134:60924] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 06:12:00.319004 2026] [autoindex:error] [pid 52556:tid 52566] [client 130.89.144.165:41729] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 06:15:18.772315 2026] [proxy_fcgi:error] [pid 52446:tid 52487] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:18.799842 2026] [proxy_fcgi:error] [pid 52446:tid 52482] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:18.837072 2026] [proxy_fcgi:error] [pid 52446:tid 52500] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:18.888372 2026] [proxy_fcgi:error] [pid 52446:tid 52491] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:18.953749 2026] [proxy_fcgi:error] [pid 52446:tid 52505] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:18.985141 2026] [proxy_fcgi:error] [pid 52446:tid 52501] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:19.007032 2026] [proxy_fcgi:error] [pid 52446:tid 52504] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:19.071960 2026] [proxy_fcgi:error] [pid 52446:tid 52493] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:19.102126 2026] [proxy_fcgi:error] [pid 52446:tid 52506] [client 13.70.106.199:45734] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 06:15:19.123979 2026] [:error] [pid 52446:tid 52503] [client 13.70.106.199:45734] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aXFP97J6clMw4kdrHYFWbAAAAFU"]
[Thu Jan 22 06:15:19.205165 2026] [:error] [pid 52447:tid 52515] [client 13.70.106.199:59761] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aXFP93RLA2NsdGqJzotEOwAAAIY"]
[Thu Jan 22 06:15:19.274532 2026] [:error] [pid 52447:tid 52525] [client 13.70.106.199:43566] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aXFP93RLA2NsdGqJzotEPAAAAJA"]
[Thu Jan 22 06:15:19.346360 2026] [:error] [pid 52447:tid 52513] [client 13.70.106.199:47583] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nc4.php"] [unique_id "aXFP93RLA2NsdGqJzotEPQAAAIQ"]
[Thu Jan 22 06:58:32.406890 2026] [autoindex:error] [pid 52446:tid 52505] [client 34.138.192.111:56451] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 07:50:47.228690 2026] [:error] [pid 36083:tid 36088] [client 182.42.111.156:55381] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXFmV5Cng2nQoR5iqwrQFAAAAUI"]
[Thu Jan 22 07:53:27.444057 2026] [autoindex:error] [pid 52446:tid 52505] [client 149.40.50.205:56846] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 07:58:41.697152 2026] [autoindex:error] [pid 27550:tid 27573] [client 35.196.74.253:39705] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 08:24:53.815941 2026] [autoindex:error] [pid 52446:tid 52502] [client 34.139.93.86:48121] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 08:43:26.780214 2026] [autoindex:error] [pid 52447:tid 52523] [client 149.40.50.205:55636] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 10:36:51.286112 2026] [:error] [pid 52447:tid 52523] [client 180.195.197.191:33354] [client 180.195.197.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.197.191, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXGNQ3RLA2NsdGqJzouu5wAAAI4"]
[Thu Jan 22 10:36:51.297900 2026] [proxy_fcgi:error] [pid 52447:tid 52523] [client 180.195.197.191:33354] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 10:37:14.715262 2026] [autoindex:error] [pid 52556:tid 52566] [client 34.26.159.224:50111] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:06:42.807649 2026] [autoindex:error] [pid 36083:tid 36087] [client 65.19.141.115:23464] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:06:43.590338 2026] [autoindex:error] [pid 36083:tid 36102] [client 65.19.141.115:23480] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:48:38.374223 2026] [autoindex:error] [pid 52445:tid 52470] [client 52.38.97.170:51321] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:48:39.777487 2026] [autoindex:error] [pid 52445:tid 52465] [client 52.38.97.170:64914] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:48:40.151503 2026] [autoindex:error] [pid 52556:tid 52569] [client 52.38.97.170:38658] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:48:40.526544 2026] [autoindex:error] [pid 27550:tid 27563] [client 52.38.97.170:52048] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 11:59:34.232635 2026] [autoindex:error] [pid 20418:tid 20443] [client 205.169.39.17:7525] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 12:38:11.195436 2026] [autoindex:error] [pid 20418:tid 20426] [client 37.19.195.82:59744] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 12:38:12.627152 2026] [autoindex:error] [pid 52447:tid 52513] [client 103.109.244.95:33016] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 12:38:14.037189 2026] [autoindex:error] [pid 52446:tid 52492] [client 37.28.159.236:37026] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 12:38:15.568313 2026] [autoindex:error] [pid 36083:tid 36098] [client 212.102.44.79:21524] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 13:03:02.347397 2026] [autoindex:error] [pid 52447:tid 52527] [client 34.26.159.224:33787] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 13:56:09.871384 2026] [autoindex:error] [pid 27550:tid 27571] [client 146.190.95.166:58213] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 14:14:18.742235 2026] [autoindex:error] [pid 20418:tid 20437] [client 194.59.205.56:35484] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 15:27:19.517262 2026] [autoindex:error] [pid 52556:tid 52566] [client 93.158.91.12:59923] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 15:27:50.386455 2026] [autoindex:error] [pid 52447:tid 52525] [client 66.249.68.135:38971] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 15:27:52.719961 2026] [autoindex:error] [pid 52447:tid 52516] [client 34.151.74.147:58332] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 15:28:20.649923 2026] [autoindex:error] [pid 36083:tid 36088] [client 51.68.111.199:25413] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 15:43:22.413392 2026] [autoindex:error] [pid 20418:tid 20424] [client 217.160.202.182:54586] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:04:26.214224 2026] [:error] [pid 52445:tid 52454] [client 170.106.160.90:54110] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXHaCuvMmsFgpSSb5L0jBgAAAAA"]
[Thu Jan 22 16:53:04.374312 2026] [autoindex:error] [pid 20418:tid 20424] [client 34.34.247.112:62830] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:04.683580 2026] [autoindex:error] [pid 20418:tid 20429] [client 34.34.247.112:62830] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:06.613091 2026] [autoindex:error] [pid 52446:tid 52489] [client 34.34.247.46:35410] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:12.010002 2026] [autoindex:error] [pid 52445:tid 52455] [client 101.190.51.161:32850] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:13.852247 2026] [autoindex:error] [pid 52447:tid 52528] [client 110.150.93.209:55792] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:15.596138 2026] [autoindex:error] [pid 52446:tid 52484] [client 120.151.3.196:42812] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:17.447564 2026] [autoindex:error] [pid 52446:tid 52499] [client 101.173.216.156:36702] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:20.736101 2026] [autoindex:error] [pid 52556:tid 52573] [client 203.194.10.31:47902] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:22.874943 2026] [autoindex:error] [pid 52445:tid 52474] [client 181.215.119.233:37885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:28.631458 2026] [autoindex:error] [pid 36083:tid 36092] [client 181.215.119.233:35703] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:34.728472 2026] [autoindex:error] [pid 36083:tid 36109] [client 149.143.144.168:52475] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 16:53:40.546635 2026] [autoindex:error] [pid 52445:tid 52464] [client 149.143.144.168:54925] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 19:23:53.662807 2026] [autoindex:error] [pid 52445:tid 52473] [client 35.196.160.43:52487] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 22:15:28.915530 2026] [:error] [pid 27550:tid 27562] [client 162.62.132.25:42604] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXIxAOOQDPzfV5R2LYRYVwAAAQo"]
[Thu Jan 22 22:20:44.293026 2026] [autoindex:error] [pid 34321:tid 34326] [client 35.196.160.43:55885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 22:35:10.134606 2026] [:error] [pid 52445:tid 52460] [client 95.216.63.67:65523] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI1nuvMmsFgpSSb5L2UEAAAAAY"], referer: www.google.com
[Thu Jan 22 22:53:08.610434 2026] [autoindex:error] [pid 20418:tid 20426] [client 217.113.196.100:11585] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 22 23:47:22.353531 2026] [:error] [pid 52556:tid 52582] [client 95.216.63.67:54224] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGiug4y1NKM4AgfjCRrwAAANg"], referer: www.google.com
[Thu Jan 22 23:48:10.053645 2026] [:error] [pid 52446:tid 52502] [client 43.159.144.16:52622] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXJGurJ6clMw4kdrHYE-tQAAAFQ"]
[Fri Jan 23 00:16:31.234353 2026] [autoindex:error] [pid 27550:tid 27576] [client 18.213.106.41:60881] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 01:04:58.527095 2026] [autoindex:error] [pid 34321:tid 34332] [client 146.174.167.45:58179] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 02:57:46.453888 2026] [:error] [pid 52556:tid 52580] [client 182.43.70.143:40433] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXJzKug4y1NKM4AgfjCx7wAAANY"]
[Fri Jan 23 05:11:55.484652 2026] [:error] [pid 11732:tid 11745] [client 43.133.14.237:52458] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXKSm-fd54xxq04JKuNCEwAAAMs"]
[Fri Jan 23 05:12:57.719260 2026] [autoindex:error] [pid 11606:tid 11623] [client 34.74.9.199:40353] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 06:02:38.772762 2026] [autoindex:error] [pid 11606:tid 11635] [client 3.221.201.55:5272] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 07:28:36.470797 2026] [proxy_fcgi:error] [pid 11607:tid 11659] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:36.716500 2026] [proxy_fcgi:error] [pid 11607:tid 11667] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:36.978276 2026] [proxy_fcgi:error] [pid 11607:tid 11647] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:37.276713 2026] [proxy_fcgi:error] [pid 11607:tid 11652] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:37.436631 2026] [proxy_fcgi:error] [pid 11607:tid 11644] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:37.741779 2026] [proxy_fcgi:error] [pid 11607:tid 11648] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:37.895755 2026] [proxy_fcgi:error] [pid 11607:tid 11653] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:38.231082 2026] [proxy_fcgi:error] [pid 11607:tid 11663] [client 20.219.130.224:4059] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:28:38.373755 2026] [:error] [pid 11607:tid 11657] [client 20.219.130.224:4059] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aXKypgucTAUsUUzKw5dH0gAAAE0"]
[Fri Jan 23 07:28:38.944509 2026] [:error] [pid 11732:tid 11757] [client 20.219.130.224:4047] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aXKypufd54xxq04JKuOX-gAAANc"]
[Fri Jan 23 07:28:39.496624 2026] [:error] [pid 11608:tid 11690] [client 20.219.130.224:4067] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aXKyp74alK6RZLlMctqitgAAAJI"]
[Fri Jan 23 07:28:40.051624 2026] [:error] [pid 11608:tid 11675] [client 20.219.130.224:3929] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/txets.php"] [unique_id "aXKyqL4alK6RZLlMctqiuAAAAIM"]
[Fri Jan 23 09:10:22.242609 2026] [:error] [pid 64912:tid 64938] [client 49.235.136.28:59802] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXLKfrem6jVGKqodwtIy5QAAAZg"]
[Fri Jan 23 10:34:49.576690 2026] [autoindex:error] [pid 11608:tid 11681] [client 66.249.68.135:54510] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 13:03:46.570251 2026] [:error] [pid 11607:tid 11664] [client 129.212.186.67:55728] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/administrator/index2.php"] [unique_id "aXMBMgucTAUsUUzKw5evHgAAAFM"]
[Fri Jan 23 13:03:46.952563 2026] [:error] [pid 11606:tid 11638] [client 129.212.186.67:56055] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/administrator/index3.php"] [unique_id "aXMBMlnjAJqfHEQLcsgeTQAAABc"]
[Fri Jan 23 13:03:47.350418 2026] [:error] [pid 62368:tid 62386] [client 129.212.186.67:56219] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/joomla/administrator/"] [unique_id "aXMBMyeMzKRnyYLMANMfsQAAAQ8"]
[Fri Jan 23 13:03:47.742592 2026] [:error] [pid 11607:tid 11668] [client 129.212.186.67:56341] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/administrator/"] [unique_id "aXMBMwucTAUsUUzKw5evIQAAAFc"]
[Fri Jan 23 13:03:48.318053 2026] [:error] [pid 11608:tid 11676] [client 129.212.186.67:56464] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/administrator/"] [unique_id "aXMBNL4alK6RZLlMcto-cwAAAIQ"]
[Fri Jan 23 13:03:48.703283 2026] [:error] [pid 64912:tid 64918] [client 129.212.186.67:56639] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/web/administrator/"] [unique_id "aXMBNLem6jVGKqodwtKCQAAAAYQ"]
[Fri Jan 23 13:03:49.097384 2026] [:error] [pid 64912:tid 64916] [client 129.212.186.67:56756] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/panel/administrator/"] [unique_id "aXMBNbem6jVGKqodwtKCRAAAAYI"]
[Fri Jan 23 14:04:19.763534 2026] [:error] [pid 11732:tid 11758] [client 43.135.144.126:35336] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXMPY-fd54xxq04JKuMc_gAAANg"]
[Fri Jan 23 15:23:05.882308 2026] [:error] [pid 64912:tid 64937] [client 106.54.62.156:58772] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXMh2bem6jVGKqodwtKzrgAAAZc"]
[Fri Jan 23 15:29:43.554122 2026] [:error] [pid 11732:tid 11741] [client 212.227.175.43:64474] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/userfuns.php"] [unique_id "aXMjZ-fd54xxq04JKuMw0gAAAMc"], referer: www.google.com
[Fri Jan 23 16:23:57.989313 2026] [autoindex:error] [pid 11732:tid 11734] [client 80.77.191.175:55252] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 16:48:12.367494 2026] [:error] [pid 11732:tid 11742] [client 58.65.202.67:43203] [client 58.65.202.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.65.202.67, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXM1zOfd54xxq04JKuNEHgAAAMg"]
[Fri Jan 23 16:48:12.379829 2026] [proxy_fcgi:error] [pid 11732:tid 11742] [client 58.65.202.67:43203] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 18:24:53.359288 2026] [autoindex:error] [pid 1517:tid 1541] [client 69.10.48.159:56484] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 19:11:22.461468 2026] [autoindex:error] [pid 11732:tid 11736] [client 150.129.44.171:38891] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 19:54:49.560872 2026] [autoindex:error] [pid 11606:tid 11626] [client 172.70.240.101:11022] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 21:23:18.972735 2026] [autoindex:error] [pid 1517:tid 1544] [client 157.245.223.184:48766] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 21:37:37.481245 2026] [:error] [pid 11606:tid 11625] [client 196.177.114.215:55970] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aXN5oVnjAJqfHEQLcsiOSAAAAAo"]
[Fri Jan 23 21:37:37.506544 2026] [:error] [pid 11608:tid 11692] [client 196.177.114.215:55971] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5ob4alK6RZLlMctrWiAAAAJQ"]
[Fri Jan 23 21:58:53.122806 2026] [:error] [pid 11732:tid 11746] [client 223.244.35.77:45988] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXN-nefd54xxq04JKuOVDgAAAMw"]
[Fri Jan 23 22:51:22.243267 2026] [autoindex:error] [pid 11607:tid 11658] [client 172.71.172.210:11157] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 00:34:06.108890 2026] [autoindex:error] [pid 11732:tid 11737] [client 150.129.44.131:58456] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 01:27:39.954636 2026] [autoindex:error] [pid 11607:tid 11654] [client 159.65.216.50:40033] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 03:10:44.104762 2026] [:error] [pid 37893:tid 37990] [client 43.130.31.17:43728] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXPHtN3x_rYbYaAS7K9tGAAAAEw"]
[Sat Jan 24 04:18:42.481606 2026] [autoindex:error] [pid 41009:tid 41020] [client 205.210.31.139:61076] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 04:36:14.922177 2026] [autoindex:error] [pid 40902:tid 40929] [client 37.114.63.5:58084] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: cientifica.com.au
[Sat Jan 24 04:45:58.536180 2026] [autoindex:error] [pid 41009:tid 41032] [client 64.225.22.191:43791] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 05:32:58.883909 2026] [:error] [pid 41009:tid 41011] [client 57.141.14.7:34483] [client 57.141.14.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.141.14.7, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXPpCmrewfoFUDD3TM1pCQAAAMA"]
[Sat Jan 24 05:32:58.895447 2026] [proxy_fcgi:error] [pid 41009:tid 41011] [client 57.141.14.7:34483] AH01071: Got error 'Primary script unknown'
[Sat Jan 24 08:16:34.543528 2026] [:error] [pid 22900:tid 22909] [client 105.157.126.159:64435] [client 105.157.126.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aXQPYlr6h1PpdlYV7gVUbwAAAQY"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Sat Jan 24 08:16:36.095804 2026] [:error] [pid 41009:tid 41033] [client 105.157.126.159:65299] [client 105.157.126.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.backup"] [unique_id "aXQPZGrewfoFUDD3TM2rSgAAANY"], referer: https://www.bing.com/search?q=latest+movies+2026&form=QBLH
[Sat Jan 24 08:16:37.643598 2026] [:error] [pid 40903:tid 40958] [client 105.157.126.159:50062] [client 105.157.126.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.old"] [unique_id "aXQPZRxw3xvyqXTcGl_emwAAAFM"], referer: https://www.youtube.com/results?search_query=
[Sat Jan 24 08:16:39.162681 2026] [:error] [pid 40902:tid 40913] [client 105.157.126.159:50976] [client 105.157.126.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env.local"] [unique_id "aXQPZwSCceZpurDgOesvJwAAAAE"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Sat Jan 24 08:16:42.179788 2026] [:error] [pid 40905:tid 40986] [client 105.157.126.159:53111] [client 105.157.126.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aXQPal3rUAneNkh7mXAilgAAAJQ"], referer: https://www.google.co.uk/
[Sat Jan 24 08:21:21.263747 2026] [autoindex:error] [pid 40903:tid 40956] [client 199.244.88.218:13250] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 09:53:16.103777 2026] [autoindex:error] [pid 40902:tid 40933] [client 185.117.225.49:56662] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 09:53:19.956627 2026] [autoindex:error] [pid 40902:tid 40925] [client 185.117.225.49:43916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 10:00:35.594704 2026] [:error] [pid 40905:tid 40978] [client 213.209.159.55:37712] [client 213.209.159.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aXQnw13rUAneNkh7mXBACAAAAIw"]
[Sat Jan 24 12:40:24.004341 2026] [autoindex:error] [pid 60761:tid 60777] [client 20.121.201.13:43767] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 14:25:25.884558 2026] [autoindex:error] [pid 40905:tid 40976] [client 146.174.174.255:39551] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 14:48:11.531512 2026] [:error] [pid 41009:tid 41022] [client 43.159.128.247:59710] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXRrK2rewfoFUDD3TM06HwAAAMs"]
[Sat Jan 24 15:50:07.659632 2026] [autoindex:error] [pid 40902:tid 40924] [client 66.249.68.136:38463] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 15:50:10.179746 2026] [autoindex:error] [pid 60761:tid 60778] [client 34.151.74.147:47176] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 16:09:22.638565 2026] [autoindex:error] [pid 40902:tid 40931] [client 100.24.208.151:46720] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 16:09:23.049467 2026] [autoindex:error] [pid 40902:tid 40913] [client 100.24.208.151:34414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 17:36:20.529443 2026] [autoindex:error] [pid 40903:tid 40946] [client 91.98.178.18:55182] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 18:08:06.432287 2026] [autoindex:error] [pid 60761:tid 60773] [client 182.3.47.213:62167] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 18:08:07.092445 2026] [autoindex:error] [pid 60761:tid 60770] [client 182.3.47.213:62207] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 18:30:40.553734 2026] [autoindex:error] [pid 41009:tid 41035] [client 187.53.74.126:60778] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 20:02:39.824056 2026] [autoindex:error] [pid 22900:tid 22904] [client 52.24.4.71:38094] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 21:46:05.640664 2026] [autoindex:error] [pid 22900:tid 22916] [client 77.238.251.237:52533] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 24 23:07:32.814107 2026] [:error] [pid 40903:tid 40953] [client 116.206.202.114:49975] [client 116.206.202.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.206.202.114, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXTgNBxw3xvyqXTcGl_E-wAAAE4"]
[Sat Jan 24 23:07:32.826073 2026] [proxy_fcgi:error] [pid 40903:tid 40953] [client 116.206.202.114:49975] AH01071: Got error 'Primary script unknown'
[Sun Jan 25 00:57:06.385107 2026] [:error] [pid 22900:tid 22909] [client 64.89.163.25:59049] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXT54lr6h1PpdlYV7gUxpAAAAQY"]
[Sun Jan 25 00:57:07.024927 2026] [:error] [pid 14976:tid 14988] [client 64.89.163.25:59265] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXT542vdigydYOB2KS-kYwAAAYo"]
[Sun Jan 25 00:57:07.656794 2026] [:error] [pid 60761:tid 60781] [client 64.89.163.25:59506] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXT541ZQvxLvEbXXh9KgsgAAAVE"]
[Sun Jan 25 00:57:08.294168 2026] [:error] [pid 60761:tid 60764] [client 64.89.163.25:59733] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXT55FZQvxLvEbXXh9KgywAAAUA"]
[Sun Jan 25 00:57:08.935332 2026] [:error] [pid 22900:tid 22918] [client 64.89.163.25:59939] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXT55Fr6h1PpdlYV7gUx7AAAAQ8"]
[Sun Jan 25 02:40:46.547806 2026] [:error] [pid 40902:tid 40913] [client 213.209.159.55:40284] [client 213.209.159.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/HEAD"] [unique_id "aXUSLgSCceZpurDgOeszigAAAAE"]
[Sun Jan 25 04:12:21.725326 2026] [proxy_fcgi:error] [pid 53419:tid 53446] [client 35.159.32.17:40189] AH01071: Got error 'Primary script unknown'
[Sun Jan 25 05:07:38.486731 2026] [autoindex:error] [pid 53521:tid 53549] [client 172.233.219.180:39792] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 06:15:37.208063 2026] [:error] [pid 33687:tid 33703] [client 43.166.244.251:47974] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXVEiYc6VUyZP5DZSy6puwAAAQ0"]
[Sun Jan 25 06:42:20.497297 2026] [autoindex:error] [pid 53420:tid 53476] [client 158.173.154.12:46556] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 06:42:21.092686 2026] [autoindex:error] [pid 33687:tid 33695] [client 158.173.154.12:46701] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 06:42:21.961919 2026] [autoindex:error] [pid 53420:tid 53457] [client 154.17.224.118:31808] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 07:31:00.086442 2026] [proxy_fcgi:error] [pid 53419:tid 53440] [client 212.193.3.246:51061] AH01071: Got error 'Primary script unknown'
[Sun Jan 25 08:35:25.680812 2026] [:error] [pid 53419:tid 53446] [client 43.157.153.236:60114] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXVlTSNxBUypy_ALgwNxXgAAABI"]
[Sun Jan 25 10:37:02.030621 2026] [:error] [pid 53419:tid 53440] [client 103.77.106.81:53960] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aXWBziNxBUypy_ALgwOTwwAAAAw"]
[Sun Jan 25 10:37:02.407301 2026] [:error] [pid 53419:tid 53441] [client 103.77.106.81:54174] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXWBziNxBUypy_ALgwOTxAAAAA0"]
[Sun Jan 25 12:11:23.291301 2026] [autoindex:error] [pid 9122:tid 9137] [client 202.76.167.116:35172] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 12:46:25.889514 2026] [autoindex:error] [pid 53419:tid 53428] [client 44.251.95.230:57240] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 13:56:54.607616 2026] [autoindex:error] [pid 33687:tid 33705] [client 192.71.224.240:37085] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 14:33:25.975073 2026] [autoindex:error] [pid 33687:tid 33699] [client 15.204.155.25:57771] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 15:56:41.512465 2026] [autoindex:error] [pid 53421:tid 53494] [client 92.255.85.73:53582] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 15:56:42.160050 2026] [autoindex:error] [pid 53419:tid 53449] [client 92.255.85.73:53970] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 15:56:42.809841 2026] [autoindex:error] [pid 53421:tid 53483] [client 92.255.85.73:54274] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 15:56:43.454270 2026] [autoindex:error] [pid 33687:tid 33694] [client 92.255.85.73:54907] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sun Jan 25 16:23:41.724132 2026] [autoindex:error] [pid 9070:tid 9088] [client 74.7.241.58:42742] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://sgpgrid.com
[Sun Jan 25 16:45:17.835673 2026] [autoindex:error] [pid 9070:tid 9089] [client 146.174.166.255:37506] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 17:00:58.492843 2026] [:error] [pid 9070:tid 9089] [client 170.106.140.110:50786] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXXbyrLNl7Vxe1mYetE64AAAAVE"]
[Sun Jan 25 17:07:46.164533 2026] [autoindex:error] [pid 33687:tid 33696] [client 13.223.79.93:60772] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 17:07:46.809141 2026] [autoindex:error] [pid 53521:tid 53544] [client 13.223.79.93:35528] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 17:54:03.832923 2026] [:error] [pid 53421:tid 53502] [client 117.33.163.216:36832] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXXoO5KP_6Rogdk6hdFy6QAAAJM"]
[Sun Jan 25 21:07:00.599346 2026] [autoindex:error] [pid 9122:tid 9148] [client 66.249.68.128:55200] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 21:52:52.555768 2026] [autoindex:error] [pid 53420:tid 53467] [client 45.138.16.159:51509] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 25 21:52:52.563208 2026] [proxy_fcgi:error] [pid 9070:tid 9088] [client 45.138.16.159:51510] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Jan 25 21:52:52.865000 2026] [proxy_fcgi:error] [pid 9070:tid 9093] [client 45.138.16.159:51512] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Jan 25 21:52:54.069381 2026] [proxy_fcgi:error] [pid 53420:tid 53457] [client 45.138.16.159:52021] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Jan 25 21:52:54.372224 2026] [proxy_fcgi:error] [pid 53420:tid 53467] [client 45.138.16.159:51805] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Jan 25 22:01:45.860761 2026] [:error] [pid 53419:tid 53436] [client 43.159.143.139:60698] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXYiSSNxBUypy_ALgwMcCgAAAAg"]
[Mon Jan 26 00:40:52.877405 2026] [autoindex:error] [pid 48918:tid 48942] [client 141.145.209.143:45508] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 00:40:53.762310 2026] [proxy_fcgi:error] [pid 48918:tid 48943] [client 141.145.209.143:45508] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:40:54.058170 2026] [proxy_fcgi:error] [pid 48918:tid 48949] [client 141.145.209.143:45508] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:40:54.354832 2026] [proxy_fcgi:error] [pid 48918:tid 48936] [client 141.145.209.143:45508] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:40:54.648513 2026] [proxy_fcgi:error] [pid 48918:tid 48934] [client 141.145.209.143:45508] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:40:54.938238 2026] [:error] [pid 48918:tid 48933] [client 141.145.209.143:45508] [client 141.145.209.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aXZHlrFdNV6RkULOt6EeEQAAAIU"]
[Mon Jan 26 00:40:56.095639 2026] [:error] [pid 48920:tid 48988] [client 141.145.209.143:45528] [client 141.145.209.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aXZHmJsnZS3G6U7VdJMHBAAAAQQ"]
[Mon Jan 26 00:40:57.251944 2026] [:error] [pid 49084:tid 49090] [client 141.145.209.143:45550] [client 141.145.209.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-json/"] [unique_id "aXZHmZHUOXll3XccoO4PPQAAAUQ"]
[Mon Jan 26 01:01:08.459785 2026] [autoindex:error] [pid 49084:tid 49099] [client 152.42.161.154:58026] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 01:01:09.106696 2026] [proxy_fcgi:error] [pid 49084:tid 49108] [client 152.42.161.154:58026] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:09.319754 2026] [proxy_fcgi:error] [pid 49084:tid 49102] [client 152.42.161.154:58026] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:09.528107 2026] [proxy_fcgi:error] [pid 49084:tid 49096] [client 152.42.161.154:58026] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:09.741860 2026] [proxy_fcgi:error] [pid 49084:tid 49089] [client 152.42.161.154:58026] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:09.947564 2026] [:error] [pid 49084:tid 49091] [client 152.42.161.154:58026] [client 152.42.161.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin/"] [unique_id "aXZMVZHUOXll3XccoO4aewAAAUU"]
[Mon Jan 26 01:01:10.967405 2026] [:error] [pid 48920:tid 49002] [client 152.42.161.154:58058] [client 152.42.161.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/admin/"] [unique_id "aXZMVpsnZS3G6U7VdJMR3wAAARI"]
[Mon Jan 26 01:01:11.781992 2026] [:error] [pid 6738:tid 6767] [client 152.42.161.154:58068] [client 152.42.161.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.cientifica.com.au"] [uri "/wp-json/"] [unique_id "aXZMV2xKUXbdUVtnLFZjKAAAAEU"]
[Mon Jan 26 02:07:55.372292 2026] [autoindex:error] [pid 49084:tid 49109] [client 159.69.74.13:28615] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 04:30:14.277403 2026] [:error] [pid 24557:tid 24609] [client 159.203.3.128:64539] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXZ9VurlG7Vm9pxV14xHRgAAAE8"]
[Mon Jan 26 04:30:14.713530 2026] [:error] [pid 24558:tid 24635] [client 159.203.3.128:64699] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXZ9Vgo1PXqeJqIMTQbsSgAAAI4"]
[Mon Jan 26 04:30:15.148668 2026] [:error] [pid 24557:tid 24601] [client 159.203.3.128:64864] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9V-rlG7Vm9pxV14xHTQAAAEc"]
[Mon Jan 26 08:28:47.905021 2026] [autoindex:error] [pid 24558:tid 24638] [client 37.19.223.107:33516] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 26 08:28:48.539629 2026] [autoindex:error] [pid 61286:tid 61300] [client 37.19.223.107:33641] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 26 08:28:49.766650 2026] [autoindex:error] [pid 61287:tid 61328] [client 202.55.67.194:34120] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 26 08:28:50.785245 2026] [autoindex:error] [pid 61286:tid 61313] [client 174.138.54.65:45098] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 26 08:28:51.697582 2026] [autoindex:error] [pid 61286:tid 61309] [client 133.18.234.13:36776] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 26 08:28:52.665665 2026] [autoindex:error] [pid 61286:tid 61296] [client 49.245.63.150:39034] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Jan 26 09:26:53.677237 2026] [autoindex:error] [pid 61287:tid 61317] [client 51.89.25.52:61699] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 10:53:17.924460 2026] [autoindex:error] [pid 61252:tid 61262] [client 202.76.173.145:56319] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 17:43:17.584879 2026] [autoindex:error] [pid 61287:tid 61333] [client 69.10.48.159:34578] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 17:55:00.633650 2026] [:error] [pid 24666:tid 24674] [client 43.130.150.80:51302] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXc59JmH-L0_jbK3i9GwxAAAAMY"]
[Mon Jan 26 18:54:09.977557 2026] [autoindex:error] [pid 61252:tid 61272] [client 52.167.144.185:59784] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 19:19:50.103981 2026] [:error] [pid 61286:tid 61302] [client 182.40.104.255:47458] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXdN1snVt687wYGMPn8T6QAAAUw"]
[Mon Jan 26 21:05:04.819190 2026] [autoindex:error] [pid 61286:tid 61300] [client 34.141.49.120:39200] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 22:21:31.366498 2026] [autoindex:error] [pid 24556:tid 24583] [client 195.29.176.175:58186] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 22:38:26.281135 2026] [autoindex:error] [pid 24666:tid 24680] [client 172.93.148.182:54420] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 22:50:54.698067 2026] [autoindex:error] [pid 24557:tid 24611] [client 65.21.195.20:38552] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 26 23:14:22.972446 2026] [:error] [pid 24558:tid 24638] [client 45.133.5.86:37607] [client 45.133.5.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.86, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXeEzgo1PXqeJqIMTQbCbQAAAJE"]
[Mon Jan 26 23:14:23.006421 2026] [proxy_fcgi:error] [pid 24558:tid 24638] [client 45.133.5.86:37607] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 23:28:02.306264 2026] [autoindex:error] [pid 24556:tid 24589] [client 172.93.148.182:40476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 01:23:28.503229 2026] [autoindex:error] [pid 44586:tid 44769] [client 108.62.0.165:57075] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 01:48:48.474417 2026] [:error] [pid 44588:tid 44827] [client 203.25.124.7:25291] [client 203.25.124.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.25.124.7, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXepADHRQD80UhqYrcAbsQAAAQc"]
[Tue Jan 27 01:48:48.489821 2026] [proxy_fcgi:error] [pid 44588:tid 44827] [client 203.25.124.7:25291] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 04:44:38.178306 2026] [autoindex:error] [pid 7452:tid 7481] [client 66.249.68.136:46780] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 04:50:57.170262 2026] [autoindex:error] [pid 7454:tid 7524] [client 47.128.19.33:39574] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 04:54:59.578436 2026] [autoindex:error] [pid 7453:tid 7512] [client 106.49.51.98:39955] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 04:58:59.867968 2026] [autoindex:error] [pid 41780:tid 41788] [client 1.41.51.47:48039] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Tue Jan 27 04:59:07.448187 2026] [autoindex:error] [pid 7453:tid 7512] [client 1.141.136.196:37455] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 09:47:27.249409 2026] [autoindex:error] [pid 48528:tid 48533] [client 74.7.241.58:46960] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 10:54:50.781813 2026] [autoindex:error] [pid 48662:tid 48693] [client 74.7.227.43:38092] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 11:40:51.770810 2026] [autoindex:error] [pid 7453:tid 7490] [client 34.78.224.123:53558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 11:40:52.648299 2026] [autoindex:error] [pid 7453:tid 7493] [client 34.78.224.123:53558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 11:40:53.613416 2026] [autoindex:error] [pid 7453:tid 7511] [client 34.78.224.123:53558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 11:40:55.333098 2026] [autoindex:error] [pid 7453:tid 7500] [client 34.78.224.123:53558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 11:43:30.399778 2026] [:error] [pid 48631:tid 48639] [client 64.225.49.30:51569] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aXg0YiN5eesHzEogX0z3CAAAAkY"], referer: binance.com
[Tue Jan 27 12:31:38.607962 2026] [proxy_fcgi:error] [pid 48528:tid 48547] [client 51.89.25.52:61522] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 12:34:58.854754 2026] [autoindex:error] [pid 48446:tid 48493] [client 51.89.25.52:52597] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 13:24:44.367329 2026] [:error] [pid 41780:tid 41806] [client 43.153.7.191:52318] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXhMHFvu-XLQ0TaZ4FHVQwAAARg"]
[Tue Jan 27 14:04:00.697813 2026] [autoindex:error] [pid 48446:tid 48498] [client 184.72.194.52:42208] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 14:08:14.667150 2026] [:error] [pid 7453:tid 7491] [client 121.229.185.160:35485] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXhWThfsyA2ws_ADquhIPgAAAEI"]
[Tue Jan 27 15:07:18.530185 2026] [:error] [pid 7561:tid 7576] [client 170.106.163.48:44762] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXhkJrXGI6mgvHQqkXyqWQAAAMw"]
[Tue Jan 27 15:08:32.010662 2026] [autoindex:error] [pid 48662:tid 48692] [client 129.150.36.137:65414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 15:08:32.201044 2026] [:error] [pid 48662:tid 48686] [client 129.150.36.137:65414] [client 129.150.36.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXhkcOD8iESUP9uRiRPOlwAAApI"]
[Tue Jan 27 15:08:32.566622 2026] [:error] [pid 48631:tid 48644] [client 129.150.36.137:51531] [client 129.150.36.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.150.36.137, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXhkcCN5eesHzEogX0wYRAAAAks"]
[Tue Jan 27 15:08:32.576564 2026] [proxy_fcgi:error] [pid 48631:tid 48644] [client 129.150.36.137:51531] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 16:17:44.295349 2026] [autoindex:error] [pid 48662:tid 48669] [client 131.181.68.50:40834] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 18:31:24.815486 2026] [autoindex:error] [pid 7453:tid 7496] [client 143.198.144.79:55990] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 18:31:25.861478 2026] [autoindex:error] [pid 7453:tid 7510] [client 143.198.144.79:52606] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 20:24:35.988707 2026] [:error] [pid 48528:tid 48531] [client 14.215.163.132:50693] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXiugwOGRrquT9N7CZp0wgAAAgE"]
[Tue Jan 27 20:25:51.524904 2026] [autoindex:error] [pid 48412:tid 48437] [client 107.172.180.205:60168] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 20:29:21.357104 2026] [autoindex:error] [pid 7453:tid 7508] [client 180.93.226.178:55228] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 21:49:14.707782 2026] [:error] [pid 39016:tid 39041] [client 49.51.233.46:53820] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXjCWvB6_y9crthwy8qz_AAAAtQ"]
[Tue Jan 27 21:59:47.132442 2026] [autoindex:error] [pid 39017:tid 39068] [client 178.156.183.166:54734] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 01:07:50.796463 2026] [autoindex:error] [pid 41678:tid 41702] [client 5.0.53.98:13447] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 02:02:53.634852 2026] [autoindex:error] [pid 24425:tid 24447] [client 43.225.189.77:59382] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 02:36:53.635292 2026] [:error] [pid 41678:tid 41708] [client 49.51.183.75:36484] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXkFxaja89ZyPVwMdihGjAAAAA8"]
[Wed Jan 28 02:54:54.634818 2026] [autoindex:error] [pid 24426:tid 24463] [client 43.225.189.77:58902] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 04:14:40.917945 2026] [:error] [pid 17426:tid 17509] [client 85.203.23.36:40157] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aXkcsE8zvf_03BnziRfVvAAAAJQ"]
[Wed Jan 28 04:14:41.325670 2026] [:error] [pid 17424:tid 17456] [client 85.203.23.26:53525] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aXkcsWRvtDRvGDe-pIsiKAAAABc"]
[Wed Jan 28 04:14:41.721965 2026] [:error] [pid 17535:tid 17552] [client 85.203.23.20:47951] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aXkcsa3QiSMgVscnN5LoVAAAAM4"]
[Wed Jan 28 04:14:42.122448 2026] [:error] [pid 17425:tid 17468] [client 85.203.23.41:43129] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/deepseek_d.php"] [unique_id "aXkcsqrcODKH1Dl7aZD9NAAAAEY"]
[Wed Jan 28 04:14:42.519893 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.35:51589] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aXkcsq3QiSMgVscnN5LoVwAAAMY"]
[Wed Jan 28 04:14:42.920135 2026] [:error] [pid 17425:tid 17464] [client 85.203.23.39:61529] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aXkcsqrcODKH1Dl7aZD9OAAAAEI"]
[Wed Jan 28 04:14:43.337906 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.12:53339] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aXkcs08zvf_03BnziRfVyQAAAIw"]
[Wed Jan 28 04:14:43.729485 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.2:55411] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/pu9.php"] [unique_id "aXkcs63QiSMgVscnN5LoXQAAANA"]
[Wed Jan 28 04:14:44.121837 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.21:60017] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aXkctGRvtDRvGDe-pIsiKgAAABg"]
[Wed Jan 28 04:14:44.519984 2026] [:error] [pid 17424:tid 17439] [client 85.203.23.43:42045] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp.php"] [unique_id "aXkctGRvtDRvGDe-pIsiKwAAAAY"]
[Wed Jan 28 04:14:44.924925 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.5:40513] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/hplfuns.php"] [unique_id "aXkctK3QiSMgVscnN5LoYgAAAMk"]
[Wed Jan 28 04:14:45.325327 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.18:23195] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/t.php"] [unique_id "aXkcta3QiSMgVscnN5LoZQAAANQ"]
[Wed Jan 28 04:14:45.726369 2026] [:error] [pid 17535:tid 17557] [client 85.203.23.51:25485] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aXkcta3QiSMgVscnN5LoZwAAANM"]
[Wed Jan 28 04:14:46.137025 2026] [:error] [pid 17424:tid 17433] [client 85.203.23.35:54469] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aXkctmRvtDRvGDe-pIsiLwAAAAA"]
[Wed Jan 28 04:14:46.618207 2026] [:error] [pid 17424:tid 17443] [client 85.203.23.3:26153] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/"] [unique_id "aXkctmRvtDRvGDe-pIsiMQAAAAo"]
[Wed Jan 28 04:14:47.021115 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.15:43687] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/edit.php"] [unique_id "aXkct08zvf_03BnziRfVzgAAAIw"]
[Wed Jan 28 04:14:47.421885 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.11:61631] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file_content_657f93f532f3b/"] [unique_id "aXkct63QiSMgVscnN5LoaQAAANA"]
[Wed Jan 28 04:14:47.825353 2026] [:error] [pid 17535:tid 17539] [client 85.203.23.5:56791] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/test.php"] [unique_id "aXkct63QiSMgVscnN5LoagAAAME"]
[Wed Jan 28 04:14:48.218429 2026] [:error] [pid 17425:tid 17482] [client 85.203.23.2:57359] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aXkcuKrcODKH1Dl7aZD9SQAAAFQ"]
[Wed Jan 28 04:14:48.614442 2026] [:error] [pid 17424:tid 17442] [client 85.203.23.20:44267] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aXkcuGRvtDRvGDe-pIsiOAAAAAk"]
[Wed Jan 28 04:14:49.013496 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.36:34819] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/"] [unique_id "aXkcuU8zvf_03BnziRfV0wAAAIE"]
[Wed Jan 28 04:14:49.428931 2026] [:error] [pid 17426:tid 17511] [client 85.203.23.20:26941] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aXkcuU8zvf_03BnziRfV1AAAAJY"]
[Wed Jan 28 04:14:49.822896 2026] [:error] [pid 17535:tid 17552] [client 85.203.23.41:37555] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ab.php"] [unique_id "aXkcua3QiSMgVscnN5LocAAAAM4"]
[Wed Jan 28 04:14:50.229594 2026] [:error] [pid 17425:tid 17467] [client 85.203.23.18:35413] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aXkcuqrcODKH1Dl7aZD9SwAAAEU"]
[Wed Jan 28 04:14:50.720158 2026] [:error] [pid 17425:tid 17477] [client 85.203.23.52:46783] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aXkcuqrcODKH1Dl7aZD9TAAAAE8"]
[Wed Jan 28 04:14:51.632924 2026] [:error] [pid 17425:tid 17464] [client 85.203.23.10:64003] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aXkcu6rcODKH1Dl7aZD9TgAAAEI"]
[Wed Jan 28 04:14:52.330060 2026] [:error] [pid 17424:tid 17441] [client 85.203.23.4:40525] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aXkcvGRvtDRvGDe-pIsiPwAAAAg"]
[Wed Jan 28 04:14:52.722917 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.8:20611] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aXkcvGRvtDRvGDe-pIsiQAAAABg"]
[Wed Jan 28 04:14:53.118624 2026] [:error] [pid 17424:tid 17442] [client 85.203.23.19:27691] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aXkcvWRvtDRvGDe-pIsiQgAAAAk"]
[Wed Jan 28 04:14:53.512438 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.34:45617] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXkcva3QiSMgVscnN5LoewAAAMg"]
[Wed Jan 28 04:14:53.932502 2026] [:error] [pid 17425:tid 17480] [client 85.203.23.26:46665] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aXkcvarcODKH1Dl7aZD9VwAAAFI"]
[Wed Jan 28 04:14:54.340100 2026] [:error] [pid 17424:tid 17456] [client 85.203.23.35:64213] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "aXkcvmRvtDRvGDe-pIsiQwAAABc"]
[Wed Jan 28 04:14:54.711675 2026] [:error] [pid 17425:tid 17464] [client 85.203.23.45:34933] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-confiq.php"] [unique_id "aXkcvqrcODKH1Dl7aZD9WQAAAEI"]
[Wed Jan 28 04:14:55.131708 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.41:61885] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aXkcv63QiSMgVscnN5LoggAAANc"]
[Wed Jan 28 04:14:55.525909 2026] [:error] [pid 17424:tid 17445] [client 85.203.23.39:46195] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aXkcv2RvtDRvGDe-pIsiRQAAAAw"]
[Wed Jan 28 04:14:56.328027 2026] [:error] [pid 17426:tid 17492] [client 85.203.23.53:25725] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/images/selam.php"] [unique_id "aXkcwE8zvf_03BnziRfV3QAAAIM"]
[Wed Jan 28 04:14:56.925432 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.10:58425] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXkcwKrcODKH1Dl7aZD9YwAAAEA"]
[Wed Jan 28 04:14:57.326219 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.45:57385] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aXkcwa3QiSMgVscnN5LohwAAAMk"]
[Wed Jan 28 04:14:57.722286 2026] [:error] [pid 17425:tid 17476] [client 85.203.23.48:53273] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/"] [unique_id "aXkcwarcODKH1Dl7aZD9ZAAAAE4"]
[Wed Jan 28 04:14:58.131112 2026] [:error] [pid 17535:tid 17540] [client 85.203.23.14:25437] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aXkcwq3QiSMgVscnN5LoiwAAAMI"]
[Wed Jan 28 04:14:58.518010 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.11:36143] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/"] [unique_id "aXkcwmRvtDRvGDe-pIsiSAAAABg"]
[Wed Jan 28 04:14:58.917442 2026] [:error] [pid 17424:tid 17442] [client 85.203.23.46:46595] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/upload/"] [unique_id "aXkcwmRvtDRvGDe-pIsiSQAAAAk"]
[Wed Jan 28 04:14:59.320853 2026] [:error] [pid 17424:tid 17439] [client 85.203.23.38:53553] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aXkcw2RvtDRvGDe-pIsiSgAAAAY"]
[Wed Jan 28 04:14:59.722706 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.29:54683] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aXkcw63QiSMgVscnN5LokgAAANI"]
[Wed Jan 28 04:15:00.118056 2026] [:error] [pid 17425:tid 17483] [client 85.203.23.25:36047] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXkcxKrcODKH1Dl7aZD9ZgAAAFU"]
[Wed Jan 28 04:15:00.518673 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.6:57103] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXkcxE8zvf_03BnziRfV5QAAAIA"]
[Wed Jan 28 04:15:00.923212 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.27:40817] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aXkcxKrcODKH1Dl7aZD9aAAAAEg"]
[Wed Jan 28 04:15:01.325789 2026] [:error] [pid 17426:tid 17498] [client 85.203.23.31:46723] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/class.api.php"] [unique_id "aXkcxU8zvf_03BnziRfV6wAAAIk"]
[Wed Jan 28 04:15:01.715844 2026] [:error] [pid 17424:tid 17440] [client 85.203.23.5:54689] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-good.php"] [unique_id "aXkcxWRvtDRvGDe-pIsiTwAAAAc"]
[Wed Jan 28 04:15:02.113607 2026] [:error] [pid 17426:tid 17509] [client 85.203.23.12:25123] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aXkcxk8zvf_03BnziRfV7wAAAJQ"]
[Wed Jan 28 04:15:02.519886 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.38:45129] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aXkcxq3QiSMgVscnN5LokwAAAMA"]
[Wed Jan 28 04:15:03.220681 2026] [:error] [pid 17425:tid 17487] [client 85.203.23.7:33387] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-config-sample.php"] [unique_id "aXkcx6rcODKH1Dl7aZD9bQAAAFg"]
[Wed Jan 28 04:15:03.612089 2026] [:error] [pid 17426:tid 17502] [client 85.203.23.23:20775] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aXkcx08zvf_03BnziRfV9QAAAI0"]
[Wed Jan 28 04:15:04.018363 2026] [:error] [pid 17426:tid 17499] [client 85.203.23.28:59531] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aXkcyE8zvf_03BnziRfV9gAAAIo"]
[Wed Jan 28 04:15:04.417832 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.51:32565] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aXkcyE8zvf_03BnziRfV-gAAAIE"]
[Wed Jan 28 04:15:04.823190 2026] [:error] [pid 17425:tid 17464] [client 85.203.23.9:37815] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/updates.php"] [unique_id "aXkcyKrcODKH1Dl7aZD9cAAAAEI"]
[Wed Jan 28 04:15:05.224856 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.24:28615] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/shell.php"] [unique_id "aXkcyU8zvf_03BnziRfWAAAAAIQ"]
[Wed Jan 28 04:15:05.622069 2026] [:error] [pid 17425:tid 17478] [client 85.203.23.21:46523] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aXkcyarcODKH1Dl7aZD9dAAAAFA"]
[Wed Jan 28 04:15:06.028038 2026] [:error] [pid 17426:tid 17502] [client 85.203.23.23:30115] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aXkcyk8zvf_03BnziRfWAQAAAI0"]
[Wed Jan 28 04:15:06.415859 2026] [:error] [pid 17425:tid 17467] [client 85.203.23.11:28291] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aXkcyqrcODKH1Dl7aZD9dwAAAEU"]
[Wed Jan 28 04:15:06.822447 2026] [:error] [pid 17424:tid 17450] [client 85.203.23.51:42019] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aXkcymRvtDRvGDe-pIsiUwAAABE"]
[Wed Jan 28 04:15:07.221257 2026] [:error] [pid 17426:tid 17497] [client 85.203.23.50:29905] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aXkcy08zvf_03BnziRfWCQAAAIg"]
[Wed Jan 28 04:15:07.620336 2026] [:error] [pid 17425:tid 17469] [client 85.203.23.45:47343] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aXkcy6rcODKH1Dl7aZD9fgAAAEc"]
[Wed Jan 28 04:15:08.016243 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.28:49377] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXkczGRvtDRvGDe-pIsiVQAAAAM"]
[Wed Jan 28 04:15:08.429505 2026] [:error] [pid 17535:tid 17552] [client 85.203.23.3:62515] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/"] [unique_id "aXkczK3QiSMgVscnN5LomAAAAM4"]
[Wed Jan 28 04:15:08.824482 2026] [:error] [pid 17425:tid 17478] [client 85.203.23.51:37897] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aXkczKrcODKH1Dl7aZD9hAAAAFA"]
[Wed Jan 28 04:15:10.724379 2026] [:error] [pid 17535:tid 17540] [client 85.203.23.27:61447] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aXkczq3QiSMgVscnN5LonQAAAMI"]
[Wed Jan 28 04:15:11.120518 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.15:54497] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aXkcz2RvtDRvGDe-pIsiXQAAABg"]
[Wed Jan 28 04:15:11.548480 2026] [:error] [pid 17535:tid 17543] [client 85.203.23.40:36219] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/bolt.php"] [unique_id "aXkcz63QiSMgVscnN5LooAAAAMU"]
[Wed Jan 28 04:15:11.966747 2026] [:error] [pid 17426:tid 17509] [client 85.203.23.18:23569] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aXkcz08zvf_03BnziRfWFQAAAJQ"]
[Wed Jan 28 04:15:12.328624 2026] [:error] [pid 17535:tid 17551] [client 85.203.23.39:32157] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aXkc0K3QiSMgVscnN5LoogAAAM0"]
[Wed Jan 28 04:15:13.014283 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.33:54847] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aXkc0a3QiSMgVscnN5LorAAAAMk"]
[Wed Jan 28 04:15:13.412328 2026] [:error] [pid 17424:tid 17453] [client 85.203.23.53:43165] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/"] [unique_id "aXkc0WRvtDRvGDe-pIsiYQAAABQ"]
[Wed Jan 28 04:15:13.811662 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.33:23799] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aXkc0arcODKH1Dl7aZD9kQAAAEo"]
[Wed Jan 28 04:15:14.214210 2026] [:error] [pid 17535:tid 17543] [client 85.203.23.25:56809] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aXkc0q3QiSMgVscnN5LosQAAAMU"]
[Wed Jan 28 04:15:14.613538 2026] [:error] [pid 17426:tid 17511] [client 85.203.23.26:48895] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aXkc0k8zvf_03BnziRfWHQAAAJY"]
[Wed Jan 28 04:15:15.021660 2026] [:error] [pid 17426:tid 17499] [client 85.203.23.43:43057] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aXkc008zvf_03BnziRfWIAAAAIo"]
[Wed Jan 28 04:15:15.435336 2026] [:error] [pid 17535:tid 17551] [client 85.203.23.32:46525] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aXkc063QiSMgVscnN5LosgAAAM0"]
[Wed Jan 28 04:15:15.819424 2026] [:error] [pid 17426:tid 17513] [client 85.203.23.31:61183] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aXkc008zvf_03BnziRfWIwAAAJg"]
[Wed Jan 28 04:15:16.216167 2026] [:error] [pid 17535:tid 17560] [client 85.203.23.4:25717] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/"] [unique_id "aXkc1K3QiSMgVscnN5LoswAAANY"]
[Wed Jan 28 04:15:16.614966 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.14:44055] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/"] [unique_id "aXkc1K3QiSMgVscnN5LotAAAANA"]
[Wed Jan 28 04:15:17.015129 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.30:29763] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content.php"] [unique_id "aXkc1arcODKH1Dl7aZD9mAAAAEg"]
[Wed Jan 28 04:15:17.423084 2026] [:error] [pid 17426:tid 17497] [client 85.203.23.29:29411] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aXkc1U8zvf_03BnziRfWKAAAAIg"]
[Wed Jan 28 04:15:17.819264 2026] [:error] [pid 17426:tid 17511] [client 85.203.23.20:50303] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/worksec.php"] [unique_id "aXkc1U8zvf_03BnziRfWKQAAAJY"]
[Wed Jan 28 04:15:18.219571 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.22:25323] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aXkc1k8zvf_03BnziRfWLAAAAIw"]
[Wed Jan 28 04:15:18.621648 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.44:52613] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aXkc1q3QiSMgVscnN5LouAAAANQ"]
[Wed Jan 28 04:15:19.023794 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.47:61655] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aXkc163QiSMgVscnN5LougAAANg"]
[Wed Jan 28 04:15:19.418106 2026] [:error] [pid 17424:tid 17437] [client 85.203.23.19:45311] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aXkc12RvtDRvGDe-pIsibwAAAAQ"]
[Wed Jan 28 04:15:19.825239 2026] [:error] [pid 17425:tid 17482] [client 85.203.23.7:61025] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aXkc16rcODKH1Dl7aZD9oQAAAFQ"]
[Wed Jan 28 04:15:20.221949 2026] [:error] [pid 17425:tid 17468] [client 85.203.23.8:22249] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aXkc2KrcODKH1Dl7aZD9ogAAAEY"]
[Wed Jan 28 04:15:20.624009 2026] [:error] [pid 17424:tid 17444] [client 85.203.23.38:35225] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/about.php"] [unique_id "aXkc2GRvtDRvGDe-pIsidAAAAAs"]
[Wed Jan 28 04:15:21.016601 2026] [:error] [pid 17426:tid 17512] [client 85.203.23.35:48439] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aXkc2U8zvf_03BnziRfWMgAAAJc"]
[Wed Jan 28 04:15:21.425401 2026] [:error] [pid 17426:tid 17491] [client 85.203.23.40:29049] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aXkc2U8zvf_03BnziRfWNgAAAII"]
[Wed Jan 28 04:15:21.829919 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.32:55879] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aXkc2a3QiSMgVscnN5LowAAAAMY"]
[Wed Jan 28 04:15:22.221862 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.29:36309] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aXkc2q3QiSMgVscnN5LowQAAANc"]
[Wed Jan 28 04:15:22.619566 2026] [:error] [pid 17426:tid 17500] [client 85.203.23.3:55493] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aXkc2k8zvf_03BnziRfWOQAAAIs"]
[Wed Jan 28 04:15:23.016926 2026] [:error] [pid 17425:tid 17473] [client 85.203.23.25:21225] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aXkc26rcODKH1Dl7aZD9pgAAAEs"]
[Wed Jan 28 04:15:23.427507 2026] [:error] [pid 17426:tid 17497] [client 85.203.23.40:28805] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aXkc208zvf_03BnziRfWPQAAAIg"]
[Wed Jan 28 04:15:23.921789 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.34:30297] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXkc263QiSMgVscnN5LoxwAAANg"]
[Wed Jan 28 04:15:24.325018 2026] [:error] [pid 17426:tid 17498] [client 85.203.23.5:48349] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aXkc3E8zvf_03BnziRfWPwAAAIk"]
[Wed Jan 28 04:15:24.730160 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.6:38267] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aXkc3K3QiSMgVscnN5LoywAAANI"]
[Wed Jan 28 04:15:25.113468 2026] [:error] [pid 17426:tid 17505] [client 85.203.23.11:61909] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/lock360.php"] [unique_id "aXkc3U8zvf_03BnziRfWQQAAAJA"]
[Wed Jan 28 04:15:25.521262 2026] [:error] [pid 17426:tid 17496] [client 85.203.23.46:38923] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/test1.php"] [unique_id "aXkc3U8zvf_03BnziRfWQgAAAIc"]
[Wed Jan 28 04:15:25.924947 2026] [:error] [pid 17535:tid 17542] [client 85.203.23.7:35843] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aXkc3a3QiSMgVscnN5LozgAAAMQ"]
[Wed Jan 28 04:15:26.327888 2026] [:error] [pid 17426:tid 17506] [client 85.203.23.43:32533] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aXkc3k8zvf_03BnziRfWRwAAAJE"]
[Wed Jan 28 04:15:26.715044 2026] [:error] [pid 17425:tid 17475] [client 85.203.23.40:35367] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aXkc3qrcODKH1Dl7aZD9qQAAAE0"]
[Wed Jan 28 04:15:27.119306 2026] [:error] [pid 17425:tid 17480] [client 85.203.23.28:47063] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/function/function.php"] [unique_id "aXkc36rcODKH1Dl7aZD9qgAAAFI"]
[Wed Jan 28 04:15:27.518995 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.31:20025] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aXkc363QiSMgVscnN5Lo0QAAANc"]
[Wed Jan 28 04:15:27.924213 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.2:54745] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aXkc308zvf_03BnziRfWSgAAAJM"]
[Wed Jan 28 04:15:28.315212 2026] [:error] [pid 17535:tid 17545] [client 85.203.23.10:47869] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/"] [unique_id "aXkc4K3QiSMgVscnN5Lo1AAAAMc"]
[Wed Jan 28 04:15:28.728291 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.52:40975] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aXkc4K3QiSMgVscnN5Lo1QAAANg"]
[Wed Jan 28 04:15:29.120335 2026] [:error] [pid 17426:tid 17505] [client 85.203.23.16:20695] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/"] [unique_id "aXkc4U8zvf_03BnziRfWTQAAAJA"]
[Wed Jan 28 04:15:29.524181 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.4:27161] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/system.php"] [unique_id "aXkc4arcODKH1Dl7aZD9rAAAAEo"]
[Wed Jan 28 04:15:29.923595 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.26:54155] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aXkc4a3QiSMgVscnN5Lo2QAAANA"]
[Wed Jan 28 04:15:30.324174 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.16:39651] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aXkc4q3QiSMgVscnN5Lo3AAAAMg"]
[Wed Jan 28 04:15:30.725443 2026] [:error] [pid 17425:tid 17471] [client 85.203.23.34:61613] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aXkc4qrcODKH1Dl7aZD9rwAAAEk"]
[Wed Jan 28 04:15:31.127071 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.35:61011] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aXkc463QiSMgVscnN5Lo5AAAAMA"]
[Wed Jan 28 04:15:31.520760 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.16:34943] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aXkc463QiSMgVscnN5Lo5gAAANU"]
[Wed Jan 28 04:15:31.914344 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.15:51299] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aXkc463QiSMgVscnN5Lo6QAAAMs"]
[Wed Jan 28 04:15:32.320120 2026] [:error] [pid 17424:tid 17435] [client 85.203.23.11:62077] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/system_log.php"] [unique_id "aXkc5GRvtDRvGDe-pIsieQAAAAI"]
[Wed Jan 28 04:15:32.712080 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.46:26411] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aXkc5K3QiSMgVscnN5Lo7AAAANQ"]
[Wed Jan 28 04:15:33.119523 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.10:47575] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-signin.php"] [unique_id "aXkc5a3QiSMgVscnN5Lo7wAAAMk"]
[Wed Jan 28 04:15:33.515791 2026] [:error] [pid 17424:tid 17447] [client 85.203.23.6:36937] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/packed.php"] [unique_id "aXkc5WRvtDRvGDe-pIsiewAAAA4"]
[Wed Jan 28 04:15:33.925457 2026] [:error] [pid 17425:tid 17469] [client 85.203.23.22:52143] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aXkc5arcODKH1Dl7aZD9tQAAAEc"]
[Wed Jan 28 04:15:34.327419 2026] [:error] [pid 17425:tid 17485] [client 85.203.23.41:62873] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aXkc5qrcODKH1Dl7aZD9uAAAAFY"]
[Wed Jan 28 04:15:34.715058 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.10:46401] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXkc5k8zvf_03BnziRfWUAAAAIE"]
[Wed Jan 28 04:15:35.225067 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.49:41145] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXkc56rcODKH1Dl7aZD9vAAAAEo"]
[Wed Jan 28 04:15:35.624446 2026] [:error] [pid 17426:tid 17511] [client 85.203.23.20:42267] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aXkc508zvf_03BnziRfWUwAAAJY"]
[Wed Jan 28 04:15:36.018902 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.29:58077] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aXkc6E8zvf_03BnziRfWVgAAAIQ"]
[Wed Jan 28 04:15:36.420149 2026] [:error] [pid 17425:tid 17473] [client 85.203.23.22:30481] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aXkc6KrcODKH1Dl7aZD9vgAAAEs"]
[Wed Jan 28 04:15:36.814122 2026] [:error] [pid 17425:tid 17469] [client 85.203.23.13:54443] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aXkc6KrcODKH1Dl7aZD9wQAAAEc"]
[Wed Jan 28 04:15:37.222194 2026] [:error] [pid 17424:tid 17438] [client 85.203.23.36:44601] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/zoom1.php"] [unique_id "aXkc6WRvtDRvGDe-pIsigQAAAAU"]
[Wed Jan 28 04:15:37.619185 2026] [:error] [pid 17425:tid 17477] [client 85.203.23.51:56335] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aXkc6arcODKH1Dl7aZD9wgAAAE8"]
[Wed Jan 28 04:15:38.022969 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.27:34997] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aXkc6q3QiSMgVscnN5Lo-AAAAMM"]
[Wed Jan 28 04:15:38.414095 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.5:53981] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aXkc6q3QiSMgVscnN5Lo-gAAANc"]
[Wed Jan 28 04:15:38.834513 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.11:49111] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/we.php"] [unique_id "aXkc6k8zvf_03BnziRfWVwAAAIw"]
[Wed Jan 28 04:15:39.210339 2026] [:error] [pid 17425:tid 17478] [client 85.203.23.42:23197] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/network_xo.php"] [unique_id "aXkc66rcODKH1Dl7aZD9xAAAAFA"]
[Wed Jan 28 04:15:39.715429 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.22:26301] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aXkc663QiSMgVscnN5LpAQAAANU"]
[Wed Jan 28 04:15:40.123021 2026] [:error] [pid 17425:tid 17480] [client 85.203.23.51:51491] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/222.php"] [unique_id "aXkc7KrcODKH1Dl7aZD9xQAAAFI"]
[Wed Jan 28 04:15:40.523823 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.41:60631] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/dofault.php"] [unique_id "aXkc7K3QiSMgVscnN5LpBAAAANg"]
[Wed Jan 28 04:15:40.929190 2026] [:error] [pid 17424:tid 17450] [client 85.203.23.13:30071] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aXkc7GRvtDRvGDe-pIsigwAAABE"]
[Wed Jan 28 04:15:41.637588 2026] [:error] [pid 17535:tid 17555] [client 85.203.23.31:55019] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aXkc7a3QiSMgVscnN5LpCgAAANE"]
[Wed Jan 28 04:15:42.221427 2026] [:error] [pid 17424:tid 17439] [client 85.203.23.31:60367] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aXkc7mRvtDRvGDe-pIsihAAAAAY"]
[Wed Jan 28 04:15:42.615652 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.31:29107] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aXkc7q3QiSMgVscnN5LpDQAAAMY"]
[Wed Jan 28 04:15:43.032040 2026] [:error] [pid 17425:tid 17473] [client 85.203.23.41:54285] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/"] [unique_id "aXkc76rcODKH1Dl7aZD9xwAAAEs"]
[Wed Jan 28 04:15:43.428443 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.30:49739] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aXkc72RvtDRvGDe-pIsihwAAAAM"]
[Wed Jan 28 04:15:43.818102 2026] [:error] [pid 17424:tid 17437] [client 85.203.23.49:22395] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aXkc72RvtDRvGDe-pIsiiAAAAAQ"]
[Wed Jan 28 04:15:44.234965 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.5:37237] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aXkc8K3QiSMgVscnN5LpFAAAANQ"]
[Wed Jan 28 04:15:44.614773 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.46:61941] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah/function.php"] [unique_id "aXkc8K3QiSMgVscnN5LpFgAAAMM"]
[Wed Jan 28 04:15:45.012416 2026] [:error] [pid 17426:tid 17506] [client 85.203.23.49:38745] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aXkc8U8zvf_03BnziRfWWwAAAJE"]
[Wed Jan 28 04:15:45.418813 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.37:34269] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aXkc8a3QiSMgVscnN5LpGgAAAMs"]
[Wed Jan 28 04:15:45.829379 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.52:59657] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aXkc8a3QiSMgVscnN5LpGwAAANU"]
[Wed Jan 28 04:15:46.219295 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.30:34429] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aXkc8q3QiSMgVscnN5LpHAAAANg"]
[Wed Jan 28 04:15:46.619436 2026] [:error] [pid 17535:tid 17539] [client 85.203.23.37:23785] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/man.php"] [unique_id "aXkc8q3QiSMgVscnN5LpIQAAAME"]
[Wed Jan 28 04:15:47.019883 2026] [:error] [pid 17426:tid 17509] [client 85.203.23.33:45567] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aXkc808zvf_03BnziRfWXAAAAJQ"]
[Wed Jan 28 04:15:47.423041 2026] [:error] [pid 17424:tid 17443] [client 85.203.23.5:53623] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s.php"] [unique_id "aXkc82RvtDRvGDe-pIsikgAAAAo"]
[Wed Jan 28 04:15:47.934637 2026] [:error] [pid 17535:tid 17540] [client 85.203.23.36:56375] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aXkc863QiSMgVscnN5LpJAAAAMI"]
[Wed Jan 28 04:15:48.325272 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.52:46035] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aXkc9K3QiSMgVscnN5LpJwAAAMs"]
[Wed Jan 28 04:15:48.720698 2026] [:error] [pid 17425:tid 17487] [client 85.203.23.18:48599] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aXkc9KrcODKH1Dl7aZD9yAAAAFg"]
[Wed Jan 28 04:15:49.117762 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.12:56619] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aXkc9a3QiSMgVscnN5LpKgAAANA"]
[Wed Jan 28 04:15:49.531657 2026] [:error] [pid 17535:tid 17557] [client 85.203.23.30:21887] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aXkc9a3QiSMgVscnN5LpLAAAANM"]
[Wed Jan 28 04:15:49.940296 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.5:28391] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aXkc9a3QiSMgVscnN5LpLgAAANc"]
[Wed Jan 28 04:15:50.332208 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.49:28905] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "aXkc9q3QiSMgVscnN5LpMAAAAMY"]
[Wed Jan 28 04:15:50.727913 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.51:31559] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aXkc9q3QiSMgVscnN5LpMQAAAMs"]
[Wed Jan 28 04:15:51.124270 2026] [:error] [pid 17424:tid 17450] [client 85.203.23.51:62935] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXkc92RvtDRvGDe-pIsilwAAABE"]
[Wed Jan 28 04:15:51.522579 2026] [:error] [pid 17425:tid 17466] [client 85.203.23.21:30557] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ufbngowues/main.php"] [unique_id "aXkc96rcODKH1Dl7aZD9ywAAAEQ"]
[Wed Jan 28 04:15:52.032324 2026] [:error] [pid 17426:tid 17498] [client 85.203.23.5:49831] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aXkc-E8zvf_03BnziRfWYQAAAIk"]
[Wed Jan 28 04:15:52.433468 2026] [:error] [pid 17426:tid 17505] [client 85.203.23.49:25771] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aXkc-E8zvf_03BnziRfWYgAAAJA"]
[Wed Jan 28 04:15:52.816493 2026] [:error] [pid 17425:tid 17479] [client 85.203.23.13:63899] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aXkc-KrcODKH1Dl7aZD90QAAAFE"]
[Wed Jan 28 04:15:53.229779 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.30:61609] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aXkc-arcODKH1Dl7aZD91AAAAEA"]
[Wed Jan 28 04:15:54.027669 2026] [:error] [pid 17426:tid 17495] [client 85.203.23.36:60873] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aXkc-k8zvf_03BnziRfWZAAAAIY"]
[Wed Jan 28 04:15:54.926595 2026] [:error] [pid 17426:tid 17492] [client 85.203.23.31:57359] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aXkc-k8zvf_03BnziRfWZwAAAIM"]
[Wed Jan 28 04:15:55.335240 2026] [:error] [pid 17426:tid 17507] [client 85.203.23.24:29233] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aXkc-08zvf_03BnziRfWbAAAAJI"]
[Wed Jan 28 04:15:55.717935 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.13:35257] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aXkc-08zvf_03BnziRfWbQAAAIE"]
[Wed Jan 28 04:15:56.126502 2026] [:error] [pid 17424:tid 17449] [client 85.203.23.26:56655] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/av.php"] [unique_id "aXkc_GRvtDRvGDe-pIsimgAAABA"]
[Wed Jan 28 04:15:56.522484 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.31:62939] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aXkc_K3QiSMgVscnN5LpNwAAAMY"]
[Wed Jan 28 04:15:56.927428 2026] [:error] [pid 17425:tid 17474] [client 85.203.23.7:52251] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aXkc_KrcODKH1Dl7aZD93QAAAEw"]
[Wed Jan 28 04:15:57.325776 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.50:60231] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aXkc_arcODKH1Dl7aZD94AAAAEg"]
[Wed Jan 28 04:15:57.724127 2026] [:error] [pid 17425:tid 17475] [client 85.203.23.36:36817] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/new.php"] [unique_id "aXkc_arcODKH1Dl7aZD94wAAAE0"]
[Wed Jan 28 04:15:58.122614 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.20:65505] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aXkc_k8zvf_03BnziRfWdQAAAJM"]
[Wed Jan 28 04:15:58.520250 2026] [:error] [pid 17425:tid 17487] [client 85.203.23.38:64339] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aXkc_qrcODKH1Dl7aZD97wAAAFg"]
[Wed Jan 28 04:15:58.916421 2026] [:error] [pid 17425:tid 17479] [client 85.203.23.22:39011] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aXkc_qrcODKH1Dl7aZD98AAAAFE"]
[Wed Jan 28 04:15:59.335507 2026] [:error] [pid 17425:tid 17473] [client 85.203.23.9:63605] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/"] [unique_id "aXkc_6rcODKH1Dl7aZD98gAAAEs"]
[Wed Jan 28 04:15:59.721155 2026] [:error] [pid 17425:tid 17477] [client 85.203.23.47:25261] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aXkc_6rcODKH1Dl7aZD98wAAAE8"]
[Wed Jan 28 04:16:00.118739 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.32:24101] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aXkdAKrcODKH1Dl7aZD99gAAAEo"]
[Wed Jan 28 04:16:00.525842 2026] [:error] [pid 17426:tid 17507] [client 85.203.23.53:44717] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aXkdAE8zvf_03BnziRfWegAAAJI"]
[Wed Jan 28 04:16:00.926502 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.53:23971] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/aa.php"] [unique_id "aXkdAE8zvf_03BnziRfWewAAAIE"]
[Wed Jan 28 04:16:01.336204 2026] [:error] [pid 17425:tid 17469] [client 85.203.23.47:28187] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aXkdAarcODKH1Dl7aZD9-gAAAEc"]
[Wed Jan 28 04:16:01.736547 2026] [:error] [pid 17535:tid 17548] [client 85.203.23.26:25271] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aXkdAa3QiSMgVscnN5LpPQAAAMo"]
[Wed Jan 28 04:16:02.129637 2026] [:error] [pid 17425:tid 17485] [client 85.203.23.48:26679] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aXkdAqrcODKH1Dl7aZD9_gAAAFY"]
[Wed Jan 28 04:16:02.524628 2026] [:error] [pid 17535:tid 17553] [client 85.203.23.2:63489] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aXkdAq3QiSMgVscnN5LpQAAAAM8"]
[Wed Jan 28 04:16:02.924031 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.15:54929] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aXkdAq3QiSMgVscnN5LpQgAAAMM"]
[Wed Jan 28 04:16:03.323079 2026] [:error] [pid 17426:tid 17495] [client 85.203.23.48:37955] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aXkdA08zvf_03BnziRfWfwAAAIY"]
[Wed Jan 28 04:16:03.730888 2026] [:error] [pid 17424:tid 17456] [client 85.203.23.2:64379] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aXkdA2RvtDRvGDe-pIsinwAAABc"]
[Wed Jan 28 04:16:04.125715 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.30:40563] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aXkdBK3QiSMgVscnN5LpRwAAAMY"]
[Wed Jan 28 04:16:04.629627 2026] [:error] [pid 17425:tid 17480] [client 85.203.23.23:57189] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/user.php"] [unique_id "aXkdBKrcODKH1Dl7aZD-AQAAAFI"]
[Wed Jan 28 04:16:05.240089 2026] [:error] [pid 17426:tid 17506] [client 85.203.23.47:57125] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aXkdBU8zvf_03BnziRfWgQAAAJE"]
[Wed Jan 28 04:16:05.614532 2026] [:error] [pid 17425:tid 17468] [client 85.203.23.38:56645] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aXkdBarcODKH1Dl7aZD-BAAAAEY"]
[Wed Jan 28 04:16:06.012872 2026] [:error] [pid 17426:tid 17510] [client 85.203.23.35:29393] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/shell3.php"] [unique_id "aXkdBk8zvf_03BnziRfWhQAAAJU"]
[Wed Jan 28 04:16:06.428747 2026] [:error] [pid 17426:tid 17503] [client 85.203.23.38:20833] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aXkdBk8zvf_03BnziRfWhwAAAI4"]
[Wed Jan 28 04:16:06.822096 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.43:50897] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/"] [unique_id "aXkdBmRvtDRvGDe-pIsiogAAAA8"]
[Wed Jan 28 04:16:07.313036 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.41:28105] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/xp.php"] [unique_id "aXkdB63QiSMgVscnN5LpTwAAAMM"]
[Wed Jan 28 04:16:07.718312 2026] [:error] [pid 17535:tid 17550] [client 85.203.23.47:27933] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aXkdB63QiSMgVscnN5LpUAAAAMw"]
[Wed Jan 28 04:16:08.137655 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.22:51073] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aXkdCE8zvf_03BnziRfWjgAAAIQ"]
[Wed Jan 28 04:16:08.524619 2026] [:error] [pid 17426:tid 17504] [client 85.203.23.3:50749] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aXkdCE8zvf_03BnziRfWjwAAAI8"]
[Wed Jan 28 04:16:08.927840 2026] [:error] [pid 17424:tid 17446] [client 85.203.23.3:33383] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aXkdCGRvtDRvGDe-pIsipAAAAA0"]
[Wed Jan 28 04:16:09.334381 2026] [:error] [pid 17426:tid 17497] [client 85.203.23.46:50735] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aXkdCU8zvf_03BnziRfWlAAAAIg"]
[Wed Jan 28 04:16:09.719360 2026] [:error] [pid 17424:tid 17435] [client 85.203.23.48:31923] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aXkdCWRvtDRvGDe-pIsipQAAAAI"]
[Wed Jan 28 04:16:10.119214 2026] [:error] [pid 17424:tid 17441] [client 85.203.23.28:53671] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aXkdCmRvtDRvGDe-pIsipwAAAAg"]
[Wed Jan 28 04:16:10.523750 2026] [:error] [pid 17424:tid 17434] [client 85.203.23.40:28343] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aXkdCmRvtDRvGDe-pIsiqAAAAAE"]
[Wed Jan 28 04:16:10.923523 2026] [:error] [pid 17535:tid 17543] [client 85.203.23.50:56713] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aXkdCq3QiSMgVscnN5LpUwAAAMU"]
[Wed Jan 28 04:16:11.316132 2026] [:error] [pid 17425:tid 17479] [client 85.203.23.5:35329] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "aXkdC6rcODKH1Dl7aZD-CgAAAFE"]
[Wed Jan 28 04:16:11.722467 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.30:58009] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aXkdC63QiSMgVscnN5LpVgAAAMg"]
[Wed Jan 28 04:16:12.124320 2026] [:error] [pid 17424:tid 17450] [client 85.203.23.35:50235] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aXkdDGRvtDRvGDe-pIsiqwAAABE"]
[Wed Jan 28 04:16:12.520411 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.20:26545] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aXkdDGRvtDRvGDe-pIsirQAAAAM"]
[Wed Jan 28 04:16:12.920767 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.47:28797] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXkdDK3QiSMgVscnN5LpVwAAANA"]
[Wed Jan 28 04:16:13.319796 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.44:23813] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aXkdDWRvtDRvGDe-pIsisAAAAA8"]
[Wed Jan 28 04:16:13.834082 2026] [:error] [pid 17426:tid 17510] [client 85.203.23.16:34831] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aXkdDU8zvf_03BnziRfWoAAAAJU"]
[Wed Jan 28 04:16:14.214443 2026] [:error] [pid 17535:tid 17551] [client 85.203.23.35:39605] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aXkdDq3QiSMgVscnN5LpWQAAAM0"]
[Wed Jan 28 04:16:14.622663 2026] [:error] [pid 17535:tid 17545] [client 85.203.23.7:47185] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aXkdDq3QiSMgVscnN5LpWgAAAMc"]
[Wed Jan 28 04:16:15.024004 2026] [:error] [pid 17535:tid 17553] [client 85.203.23.12:47581] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aXkdD63QiSMgVscnN5LpWwAAAM8"]
[Wed Jan 28 04:16:15.423374 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.33:60007] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXkdD63QiSMgVscnN5LpXgAAAMg"]
[Wed Jan 28 04:16:15.814581 2026] [:error] [pid 17425:tid 17477] [client 85.203.23.2:48947] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-domain.php"] [unique_id "aXkdD6rcODKH1Dl7aZD-EQAAAE8"]
[Wed Jan 28 04:16:16.230869 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.10:26477] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aXkdEK3QiSMgVscnN5LpYQAAANg"]
[Wed Jan 28 04:16:16.622205 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.32:42725] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aXkdEKrcODKH1Dl7aZD-EgAAAEg"]
[Wed Jan 28 04:16:17.027616 2026] [:error] [pid 17535:tid 17560] [client 85.203.23.47:38963] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aXkdEa3QiSMgVscnN5LpZAAAANY"]
[Wed Jan 28 04:16:17.422192 2026] [:error] [pid 17424:tid 17440] [client 85.203.23.43:37085] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aXkdEWRvtDRvGDe-pIsitAAAAAc"]
[Wed Jan 28 04:16:17.826163 2026] [:error] [pid 17426:tid 17510] [client 85.203.23.3:33433] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/click.php"] [unique_id "aXkdEU8zvf_03BnziRfWpgAAAJU"]
[Wed Jan 28 04:16:18.215654 2026] [:error] [pid 17426:tid 17500] [client 85.203.23.3:56779] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aXkdEk8zvf_03BnziRfWqAAAAIs"]
[Wed Jan 28 04:16:18.626079 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.37:24967] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aXkdEmRvtDRvGDe-pIsitQAAABU"]
[Wed Jan 28 04:16:19.033087 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.39:56107] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aXkdE2RvtDRvGDe-pIsitgAAAAM"]
[Wed Jan 28 04:16:19.421656 2026] [:error] [pid 17425:tid 17487] [client 85.203.23.25:35469] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXkdE6rcODKH1Dl7aZD-FgAAAFg"]
[Wed Jan 28 04:16:19.821656 2026] [:error] [pid 17424:tid 17433] [client 85.203.23.15:53893] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aXkdE2RvtDRvGDe-pIsiuAAAAAA"]
[Wed Jan 28 04:16:20.221025 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.26:59459] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aXkdFK3QiSMgVscnN5LpagAAAMg"]
[Wed Jan 28 04:16:20.623634 2026] [:error] [pid 17425:tid 17476] [client 85.203.23.20:41605] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aXkdFKrcODKH1Dl7aZD-GAAAAE4"]
[Wed Jan 28 04:16:21.025606 2026] [:error] [pid 17424:tid 17439] [client 85.203.23.31:65505] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aXkdFWRvtDRvGDe-pIsiuQAAAAY"]
[Wed Jan 28 04:16:21.424715 2026] [:error] [pid 17425:tid 17486] [client 85.203.23.28:42173] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aXkdFarcODKH1Dl7aZD-GgAAAFc"]
[Wed Jan 28 04:16:21.813584 2026] [:error] [pid 17426:tid 17511] [client 85.203.23.7:36877] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aXkdFU8zvf_03BnziRfWrwAAAJY"]
[Wed Jan 28 04:16:22.222850 2026] [:error] [pid 17426:tid 17492] [client 85.203.23.13:61631] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aXkdFk8zvf_03BnziRfWsQAAAIM"]
[Wed Jan 28 04:16:22.631338 2026] [:error] [pid 17426:tid 17497] [client 85.203.23.37:34051] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aXkdFk8zvf_03BnziRfWtAAAAIg"]
[Wed Jan 28 04:16:23.022918 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.22:34665] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aXkdF63QiSMgVscnN5LpcQAAANc"]
[Wed Jan 28 04:16:23.430622 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.26:33063] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aXkdF63QiSMgVscnN5LpdQAAAMs"]
[Wed Jan 28 04:16:23.935192 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.34:51025] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aXkdF63QiSMgVscnN5LpdwAAAMk"]
[Wed Jan 28 04:16:24.327176 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.43:56899] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aXkdGE8zvf_03BnziRfWtwAAAIA"]
[Wed Jan 28 04:16:24.715792 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.30:38323] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/datate.php"] [unique_id "aXkdGKrcODKH1Dl7aZD-HAAAAEo"]
[Wed Jan 28 04:16:25.132356 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.5:57355] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aXkdGWRvtDRvGDe-pIsivgAAABU"]
[Wed Jan 28 04:16:25.518080 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.18:22873] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aXkdGU8zvf_03BnziRfWuQAAAJM"]
[Wed Jan 28 04:16:25.916263 2026] [:error] [pid 17426:tid 17494] [client 85.203.23.33:64595] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aXkdGU8zvf_03BnziRfWvAAAAIU"]
[Wed Jan 28 04:16:27.711257 2026] [:error] [pid 17426:tid 17500] [client 85.203.23.15:43049] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aXkdG08zvf_03BnziRfWwQAAAIs"]
[Wed Jan 28 04:16:28.115545 2026] [:error] [pid 17425:tid 17465] [client 85.203.23.24:27425] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/comments/"] [unique_id "aXkdHKrcODKH1Dl7aZD-HQAAAEM"]
[Wed Jan 28 04:16:28.523653 2026] [:error] [pid 17425:tid 17487] [client 85.203.23.46:47651] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aXkdHKrcODKH1Dl7aZD-HgAAAFg"]
[Wed Jan 28 04:16:28.936004 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.53:23663] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aXkdHE8zvf_03BnziRfWxAAAAJM"]
[Wed Jan 28 04:16:29.327039 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.11:45827] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aXkdHa3QiSMgVscnN5LpfQAAAMk"]
[Wed Jan 28 04:16:29.723528 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.40:34427] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wpr-addons/forms//file_content_657f93f532f3b/"] [unique_id "aXkdHWRvtDRvGDe-pIsiwgAAABg"]
[Wed Jan 28 04:16:30.121644 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.39:44349] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/cgi-bin/"] [unique_id "aXkdHqrcODKH1Dl7aZD-IAAAAEA"]
[Wed Jan 28 04:16:30.521763 2026] [:error] [pid 17424:tid 17445] [client 85.203.23.41:62559] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXkdHmRvtDRvGDe-pIsixAAAAAw"]
[Wed Jan 28 04:16:30.928369 2026] [:error] [pid 17535:tid 17548] [client 85.203.23.50:50181] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aXkdHq3QiSMgVscnN5LpfgAAAMo"]
[Wed Jan 28 04:16:31.326292 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.17:52155] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aXkdH63QiSMgVscnN5LpfwAAANc"]
[Wed Jan 28 04:16:31.837180 2026] [:error] [pid 17425:tid 17480] [client 85.203.23.33:46287] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aXkdH6rcODKH1Dl7aZD-JAAAAFI"]
[Wed Jan 28 04:16:32.421400 2026] [:error] [pid 17535:tid 17542] [client 85.203.23.2:27587] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aXkdIK3QiSMgVscnN5LpgQAAAMQ"]
[Wed Jan 28 04:16:32.820936 2026] [:error] [pid 17424:tid 17442] [client 85.203.23.26:38343] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aXkdIGRvtDRvGDe-pIsixQAAAAk"]
[Wed Jan 28 04:16:33.220617 2026] [:error] [pid 17426:tid 17499] [client 85.203.23.7:55799] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/gv0eai61i0kwhxf2w28z/nrhogjyecktixbal0fnt5Cdefault.php"] [unique_id "aXkdIU8zvf_03BnziRfWywAAAIo"]
[Wed Jan 28 04:16:33.625452 2026] [:error] [pid 17425:tid 17474] [client 85.203.23.14:62849] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gecko.php"] [unique_id "aXkdIarcODKH1Dl7aZD-JgAAAEw"]
[Wed Jan 28 04:16:34.024846 2026] [:error] [pid 17425:tid 17481] [client 85.203.23.42:59557] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css.php"] [unique_id "aXkdIqrcODKH1Dl7aZD-JwAAAFM"]
[Wed Jan 28 04:16:34.419643 2026] [:error] [pid 17425:tid 17483] [client 85.203.23.30:29249] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/images/"] [unique_id "aXkdIqrcODKH1Dl7aZD-KQAAAFU"]
[Wed Jan 28 04:16:34.830208 2026] [:error] [pid 17426:tid 17503] [client 85.203.23.29:35409] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp.php"] [unique_id "aXkdIk8zvf_03BnziRfWzgAAAI4"]
[Wed Jan 28 04:16:35.218314 2026] [:error] [pid 17426:tid 17504] [client 85.203.23.35:38995] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dvi1suj7vbijhcni3sCakc.php"] [unique_id "aXkdI08zvf_03BnziRfW0QAAAI8"]
[Wed Jan 28 04:16:35.638169 2026] [:error] [pid 17424:tid 17440] [client 85.203.23.23:40309] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aXkdI2RvtDRvGDe-pIsiyQAAAAc"]
[Wed Jan 28 04:16:36.036320 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.9:49699] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/index.html"] [unique_id "aXkdJGRvtDRvGDe-pIsiygAAABU"]
[Wed Jan 28 04:16:36.415965 2026] [:error] [pid 17425:tid 17487] [client 85.203.23.36:20897] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXkdJKrcODKH1Dl7aZD-LAAAAFg"]
[Wed Jan 28 04:16:36.812639 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.47:54887] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aXkdJKrcODKH1Dl7aZD-LQAAAEA"]
[Wed Jan 28 04:16:37.217157 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.26:48427] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gel4y.php"] [unique_id "aXkdJWRvtDRvGDe-pIsiywAAAAM"]
[Wed Jan 28 04:16:37.629995 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.31:38967] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/hplfuns.php"] [unique_id "aXkdJU8zvf_03BnziRfW4AAAAIw"]
[Wed Jan 28 04:16:38.028878 2026] [:error] [pid 17425:tid 17468] [client 85.203.23.38:29915] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/classsmtps.php"] [unique_id "aXkdJqrcODKH1Dl7aZD-MgAAAEY"]
[Wed Jan 28 04:16:38.419632 2026] [:error] [pid 17426:tid 17510] [client 85.203.23.10:20853] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah/function.php"] [unique_id "aXkdJk8zvf_03BnziRfW5AAAAJU"]
[Wed Jan 28 04:16:38.829493 2026] [:error] [pid 17426:tid 17513] [client 85.203.23.36:24377] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/123.php"] [unique_id "aXkdJk8zvf_03BnziRfW5gAAAJg"]
[Wed Jan 28 04:16:39.224608 2026] [:error] [pid 17424:tid 17433] [client 85.203.23.22:35131] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aXkdJ2RvtDRvGDe-pIsizgAAAAA"]
[Wed Jan 28 04:16:39.621746 2026] [:error] [pid 17426:tid 17494] [client 85.203.23.33:60251] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aXkdJ08zvf_03BnziRfW6gAAAIU"]
[Wed Jan 28 04:16:40.027617 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.22:63751] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aXkdKK3QiSMgVscnN5LphAAAAMM"]
[Wed Jan 28 04:16:40.532465 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.43:38123] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/css/"] [unique_id "aXkdKE8zvf_03BnziRfW7gAAAIE"]
[Wed Jan 28 04:16:41.114810 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.5:53955] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aXkdKU8zvf_03BnziRfW8AAAAIQ"]
[Wed Jan 28 04:16:41.516178 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.39:31569] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXkdKarcODKH1Dl7aZD-OgAAAEA"]
[Wed Jan 28 04:16:41.922689 2026] [:error] [pid 17425:tid 17467] [client 85.203.23.50:38205] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aXkdKarcODKH1Dl7aZD-PAAAAEU"]
[Wed Jan 28 04:16:42.328378 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.30:62499] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/php.php"] [unique_id "aXkdKq3QiSMgVscnN5LphgAAANI"]
[Wed Jan 28 04:16:42.716444 2026] [:error] [pid 17425:tid 17468] [client 85.203.23.51:58717] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aXkdKqrcODKH1Dl7aZD-PgAAAEY"]
[Wed Jan 28 04:16:43.133253 2026] [:error] [pid 17425:tid 17485] [client 85.203.23.39:26089] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aXkdK6rcODKH1Dl7aZD-PwAAAFY"]
[Wed Jan 28 04:16:43.521393 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.2:38145] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "aXkdK08zvf_03BnziRfW-AAAAIQ"]
[Wed Jan 28 04:16:44.027374 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.52:35409] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aXkdLKrcODKH1Dl7aZD-QQAAAEg"]
[Wed Jan 28 04:16:44.616140 2026] [:error] [pid 17425:tid 17469] [client 85.203.23.22:23021] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ahax.php"] [unique_id "aXkdLKrcODKH1Dl7aZD-QwAAAEc"]
[Wed Jan 28 04:16:45.106318 2026] [:error] [pid 17425:tid 17475] [client 85.203.23.13:63319] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aXkdLarcODKH1Dl7aZD-RAAAAE0"]
[Wed Jan 28 04:16:45.521399 2026] [:error] [pid 17425:tid 17473] [client 85.203.23.36:34245] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aXkdLarcODKH1Dl7aZD-RQAAAEs"]
[Wed Jan 28 04:16:45.916458 2026] [:error] [pid 17426:tid 17492] [client 85.203.23.14:48159] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/help.php"] [unique_id "aXkdLU8zvf_03BnziRfXAAAAAIM"]
[Wed Jan 28 04:16:46.315634 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.27:56015] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/num.php"] [unique_id "aXkdLq3QiSMgVscnN5LpiQAAAMY"]
[Wed Jan 28 04:16:46.812896 2026] [:error] [pid 17535:tid 17560] [client 85.203.23.38:61591] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin"] [unique_id "aXkdLq3QiSMgVscnN5LpiwAAANY"]
[Wed Jan 28 04:16:47.240270 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.21:23023] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXkdL63QiSMgVscnN5LpjAAAANU"]
[Wed Jan 28 04:16:47.634909 2026] [:error] [pid 17535:tid 17553] [client 85.203.23.15:50709] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXkdL63QiSMgVscnN5LpjgAAAM8"]
[Wed Jan 28 04:16:48.038809 2026] [:error] [pid 17426:tid 17495] [client 85.203.23.13:42899] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue"] [unique_id "aXkdME8zvf_03BnziRfXBQAAAIY"]
[Wed Jan 28 04:16:48.434593 2026] [:error] [pid 17424:tid 17437] [client 85.203.23.3:50091] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/options-reading.php"] [unique_id "aXkdMGRvtDRvGDe-pIsi1wAAAAQ"]
[Wed Jan 28 04:16:48.839596 2026] [:error] [pid 17535:tid 17551] [client 85.203.23.14:45113] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aXkdMK3QiSMgVscnN5LpkQAAAM0"]
[Wed Jan 28 04:16:49.227739 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.8:50395] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aXkdMa3QiSMgVscnN5LpkwAAAMs"]
[Wed Jan 28 04:16:49.626180 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.5:20191] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/files.php"] [unique_id "aXkdMU8zvf_03BnziRfXBwAAAJM"]
[Wed Jan 28 04:16:50.018612 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.48:28417] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aXkdMmRvtDRvGDe-pIsi2wAAABg"]
[Wed Jan 28 04:16:50.415684 2026] [:error] [pid 17424:tid 17445] [client 85.203.23.18:48101] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aXkdMmRvtDRvGDe-pIsi3QAAAAw"]
[Wed Jan 28 04:16:50.826198 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.28:21667] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aXkdMq3QiSMgVscnN5LplgAAAMA"]
[Wed Jan 28 04:16:51.234473 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.35:52917] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aXkdM63QiSMgVscnN5LplwAAANQ"]
[Wed Jan 28 04:16:51.628676 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.30:53333] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images/"] [unique_id "aXkdM63QiSMgVscnN5LpmQAAANA"]
[Wed Jan 28 04:16:52.017980 2026] [:error] [pid 17424:tid 17439] [client 85.203.23.45:23209] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-editor.php"] [unique_id "aXkdNGRvtDRvGDe-pIsi4gAAAAY"]
[Wed Jan 28 04:16:52.429048 2026] [:error] [pid 17535:tid 17543] [client 85.203.23.42:61125] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aXkdNK3QiSMgVscnN5LpnQAAAMU"]
[Wed Jan 28 04:16:52.817357 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.31:64963] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aXkdNGRvtDRvGDe-pIsi5AAAABU"]
[Wed Jan 28 04:16:53.214372 2026] [:error] [pid 17535:tid 17557] [client 85.203.23.49:26557] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/g3brivy5d2ox733srcpl/4z5enevnessqqjdcxuCdefault.php"] [unique_id "aXkdNa3QiSMgVscnN5LpoAAAANM"]
[Wed Jan 28 04:16:53.617341 2026] [:error] [pid 17424:tid 17452] [client 85.203.23.21:41659] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aXkdNWRvtDRvGDe-pIsi6AAAABM"]
[Wed Jan 28 04:16:54.025325 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.25:26019] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aXkdNq3QiSMgVscnN5LpoQAAANQ"]
[Wed Jan 28 04:16:54.427203 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.16:63755] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wa/"] [unique_id "aXkdNq3QiSMgVscnN5LpogAAAMY"]
[Wed Jan 28 04:16:54.860491 2026] [:error] [pid 17535:tid 17562] [client 85.203.23.25:57457] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aXkdNq3QiSMgVscnN5LpowAAANg"]
[Wed Jan 28 04:16:55.716106 2026] [:error] [pid 17535:tid 17548] [client 85.203.23.2:36145] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aXkdN63QiSMgVscnN5LppAAAAMo"]
[Wed Jan 28 04:16:56.218683 2026] [:error] [pid 17535:tid 17539] [client 85.203.23.31:56771] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aXkdOK3QiSMgVscnN5LppwAAAME"]
[Wed Jan 28 04:16:56.618836 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.14:62081] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aXkdOK3QiSMgVscnN5LpqAAAAMA"]
[Wed Jan 28 04:16:57.016016 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.37:37385] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-update.php"] [unique_id "aXkdOU8zvf_03BnziRfXDQAAAIA"]
[Wed Jan 28 04:16:57.420773 2026] [:error] [pid 17426:tid 17496] [client 85.203.23.2:28219] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXkdOU8zvf_03BnziRfXDgAAAIc"]
[Wed Jan 28 04:16:57.816159 2026] [:error] [pid 17426:tid 17507] [client 85.203.23.14:61283] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/pwhb0t2cy9txbiga4ckhfrdsCakc.php"] [unique_id "aXkdOU8zvf_03BnziRfXEQAAAJI"]
[Wed Jan 28 04:16:58.215569 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.27:49621] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXkdOq3QiSMgVscnN5LpqgAAANA"]
[Wed Jan 28 04:16:58.618385 2026] [:error] [pid 17424:tid 17450] [client 85.203.23.28:33393] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sf.php"] [unique_id "aXkdOmRvtDRvGDe-pIsi9QAAABE"]
[Wed Jan 28 04:16:59.019280 2026] [:error] [pid 17535:tid 17552] [client 85.203.23.49:21357] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aXkdO63QiSMgVscnN5LpqwAAAM4"]
[Wed Jan 28 04:16:59.425931 2026] [:error] [pid 17425:tid 17466] [client 85.203.23.8:31781] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/link.php"] [unique_id "aXkdO6rcODKH1Dl7aZD-TQAAAEQ"]
[Wed Jan 28 04:16:59.820391 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.39:48157] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.tresh/"] [unique_id "aXkdO6rcODKH1Dl7aZD-TwAAAEg"]
[Wed Jan 28 04:17:00.223827 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.48:34571] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/files/"] [unique_id "aXkdPK3QiSMgVscnN5LpswAAAMs"]
[Wed Jan 28 04:17:00.637018 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.13:36337] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets"] [unique_id "aXkdPKrcODKH1Dl7aZD-UAAAAEA"]
[Wed Jan 28 04:17:01.023731 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.12:48229] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/config.php"] [unique_id "aXkdPU8zvf_03BnziRfXGQAAAIA"]
[Wed Jan 28 04:17:01.415947 2026] [:error] [pid 17426:tid 17494] [client 85.203.23.11:59851] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/css/admin.php"] [unique_id "aXkdPU8zvf_03BnziRfXGgAAAIU"]
[Wed Jan 28 04:17:01.823162 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.12:34389] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aXkdPWRvtDRvGDe-pIsi-wAAAAM"]
[Wed Jan 28 04:17:02.223375 2026] [:error] [pid 17425:tid 17464] [client 85.203.23.43:37987] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/gecko-new.php"] [unique_id "aXkdPqrcODKH1Dl7aZD-UwAAAEI"]
[Wed Jan 28 04:17:02.619968 2026] [:error] [pid 17425:tid 17467] [client 85.203.23.28:49653] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/file5.php"] [unique_id "aXkdPqrcODKH1Dl7aZD-VAAAAEU"]
[Wed Jan 28 04:17:03.016336 2026] [:error] [pid 17424:tid 17449] [client 85.203.23.29:36967] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aXkdP2RvtDRvGDe-pIsjAAAAABA"]
[Wed Jan 28 04:17:03.422157 2026] [:error] [pid 17426:tid 17505] [client 85.203.23.25:51583] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ioxi002.PhP7"] [unique_id "aXkdP08zvf_03BnziRfXHwAAAJA"]
[Wed Jan 28 04:17:03.815460 2026] [:error] [pid 17424:tid 17435] [client 85.203.23.31:49989] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings"] [unique_id "aXkdP2RvtDRvGDe-pIsjAQAAAAI"]
[Wed Jan 28 04:17:04.222975 2026] [:error] [pid 17535:tid 17540] [client 85.203.23.34:40739] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aXkdQK3QiSMgVscnN5LptgAAAMI"]
[Wed Jan 28 04:17:04.619632 2026] [:error] [pid 17426:tid 17513] [client 85.203.23.45:42437] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXkdQE8zvf_03BnziRfXIQAAAJg"]
[Wed Jan 28 04:17:05.026297 2026] [:error] [pid 17426:tid 17502] [client 85.203.23.44:30913] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aXkdQU8zvf_03BnziRfXIwAAAI0"]
[Wed Jan 28 04:17:05.428997 2026] [:error] [pid 17424:tid 17433] [client 85.203.23.18:44327] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/leafmailer.php"] [unique_id "aXkdQWRvtDRvGDe-pIsjBgAAAAA"]
[Wed Jan 28 04:17:05.826888 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.46:30679] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wso.php"] [unique_id "aXkdQarcODKH1Dl7aZD-WAAAAEo"]
[Wed Jan 28 04:17:06.221687 2026] [:error] [pid 17425:tid 17463] [client 85.203.23.20:24277] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/log.php"] [unique_id "aXkdQqrcODKH1Dl7aZD-WwAAAEE"]
[Wed Jan 28 04:17:06.621385 2026] [:error] [pid 17535:tid 17539] [client 85.203.23.24:30599] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ava.php"] [unique_id "aXkdQq3QiSMgVscnN5LpuQAAAME"]
[Wed Jan 28 04:17:07.031668 2026] [:error] [pid 17425:tid 17467] [client 85.203.23.49:35757] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aXkdQ6rcODKH1Dl7aZD-XgAAAEU"]
[Wed Jan 28 04:17:07.430163 2026] [:error] [pid 17426:tid 17494] [client 85.203.23.45:40231] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aXkdQ08zvf_03BnziRfXKAAAAIU"]
[Wed Jan 28 04:17:07.813945 2026] [:error] [pid 17425:tid 17471] [client 85.203.23.42:29495] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/man.php"] [unique_id "aXkdQ6rcODKH1Dl7aZD-YgAAAEk"]
[Wed Jan 28 04:17:08.217608 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.53:46761] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aXkdRK3QiSMgVscnN5LpugAAANI"]
[Wed Jan 28 04:17:08.724415 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.13:44859] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/"] [unique_id "aXkdRK3QiSMgVscnN5LpvQAAAMM"]
[Wed Jan 28 04:17:09.407132 2026] [:error] [pid 17535:tid 17540] [client 85.203.23.6:24207] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/"] [unique_id "aXkdRa3QiSMgVscnN5LpvgAAAMI"]
[Wed Jan 28 04:17:09.821332 2026] [:error] [pid 17424:tid 17443] [client 85.203.23.42:53841] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aXkdRWRvtDRvGDe-pIsjCgAAAAo"]
[Wed Jan 28 04:17:10.222827 2026] [:error] [pid 17424:tid 17456] [client 85.203.23.12:53231] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aXkdRmRvtDRvGDe-pIsjCwAAABc"]
[Wed Jan 28 04:17:10.618052 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.9:32837] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/modules/"] [unique_id "aXkdRq3QiSMgVscnN5LpwQAAANc"]
[Wed Jan 28 04:17:11.019622 2026] [:error] [pid 17426:tid 17513] [client 85.203.23.51:39165] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aXkdR08zvf_03BnziRfXLQAAAJg"]
[Wed Jan 28 04:17:11.418889 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.50:64053] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/dist"] [unique_id "aXkdR08zvf_03BnziRfXLgAAAJM"]
[Wed Jan 28 04:17:11.814450 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.9:27203] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXkdR2RvtDRvGDe-pIsjDQAAABg"]
[Wed Jan 28 04:17:12.227437 2026] [:error] [pid 17535:tid 17543] [client 85.203.23.47:59567] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXkdSK3QiSMgVscnN5LpwwAAAMU"]
[Wed Jan 28 04:17:12.618303 2026] [:error] [pid 17424:tid 17437] [client 85.203.23.12:45987] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXkdSGRvtDRvGDe-pIsjDgAAAAQ"]
[Wed Jan 28 04:17:13.020997 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.39:32265] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/js"] [unique_id "aXkdSWRvtDRvGDe-pIsjDwAAAA8"]
[Wed Jan 28 04:17:13.417132 2026] [:error] [pid 17424:tid 17444] [client 85.203.23.25:60523] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/.well-known/rk2.php"] [unique_id "aXkdSWRvtDRvGDe-pIsjEAAAAAs"]
[Wed Jan 28 04:17:13.821196 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.19:36527] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin-header.php"] [unique_id "aXkdSWRvtDRvGDe-pIsjEQAAAAM"]
[Wed Jan 28 04:17:14.223989 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.8:29137] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/0.php"] [unique_id "aXkdSq3QiSMgVscnN5LpxwAAAMA"]
[Wed Jan 28 04:17:14.614369 2026] [:error] [pid 17535:tid 17555] [client 85.203.23.3:61423] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aXkdSq3QiSMgVscnN5LpyQAAANE"]
[Wed Jan 28 04:17:15.021284 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.34:62553] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aXkdS63QiSMgVscnN5LpywAAANU"]
[Wed Jan 28 04:17:15.432684 2026] [:error] [pid 17424:tid 17441] [client 85.203.23.51:24943] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aXkdS2RvtDRvGDe-pIsjEgAAAAg"]
[Wed Jan 28 04:17:15.818114 2026] [:error] [pid 17535:tid 17561] [client 85.203.23.10:33479] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/bk/"] [unique_id "aXkdS63QiSMgVscnN5LpzwAAANc"]
[Wed Jan 28 04:17:16.238637 2026] [:error] [pid 17425:tid 17482] [client 85.203.23.7:44371] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aXkdTKrcODKH1Dl7aZD-aAAAAFQ"]
[Wed Jan 28 04:17:16.623668 2026] [:error] [pid 17424:tid 17443] [client 85.203.23.5:42873] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/private/"] [unique_id "aXkdTGRvtDRvGDe-pIsjFQAAAAo"]
[Wed Jan 28 04:17:17.019456 2026] [:error] [pid 17535:tid 17553] [client 85.203.23.23:42931] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aXkdTa3QiSMgVscnN5Lp0wAAAM8"]
[Wed Jan 28 04:17:17.419768 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.24:38173] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-themes.php"] [unique_id "aXkdTWRvtDRvGDe-pIsjGAAAABU"]
[Wed Jan 28 04:17:17.820924 2026] [:error] [pid 17535:tid 17547] [client 85.203.23.52:37175] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXkdTa3QiSMgVscnN5Lp1QAAAMk"]
[Wed Jan 28 04:17:18.222164 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.25:63673] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aXkdTq3QiSMgVscnN5Lp1wAAANU"]
[Wed Jan 28 04:17:18.622613 2026] [:error] [pid 17535:tid 17540] [client 85.203.23.33:23115] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/1m5mvlb6d1iq7yog17r4/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aXkdTq3QiSMgVscnN5Lp2gAAAMI"]
[Wed Jan 28 04:17:19.123286 2026] [:error] [pid 17424:tid 17444] [client 85.203.23.4:53143] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content"] [unique_id "aXkdT2RvtDRvGDe-pIsjHgAAAAs"]
[Wed Jan 28 04:17:19.732526 2026] [:error] [pid 17424:tid 17442] [client 85.203.23.50:38669] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee"] [unique_id "aXkdT2RvtDRvGDe-pIsjIAAAAAk"]
[Wed Jan 28 04:17:20.115565 2026] [:error] [pid 17535:tid 17549] [client 85.203.23.27:36847] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aXkdUK3QiSMgVscnN5Lp3gAAAMs"]
[Wed Jan 28 04:17:20.525128 2026] [:error] [pid 17425:tid 17462] [client 85.203.23.26:44049] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/api.php"] [unique_id "aXkdUKrcODKH1Dl7aZD-bAAAAEA"]
[Wed Jan 28 04:17:20.915014 2026] [:error] [pid 17424:tid 17446] [client 85.203.23.24:63951] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-2019.php"] [unique_id "aXkdUGRvtDRvGDe-pIsjJQAAAA0"]
[Wed Jan 28 04:17:21.325538 2026] [:error] [pid 17424:tid 17433] [client 85.203.23.53:62865] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/users.php"] [unique_id "aXkdUWRvtDRvGDe-pIsjJwAAAAA"]
[Wed Jan 28 04:17:21.723130 2026] [:error] [pid 17425:tid 17481] [client 85.203.23.8:46691] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/images"] [unique_id "aXkdUarcODKH1Dl7aZD-bQAAAFM"]
[Wed Jan 28 04:17:22.128161 2026] [:error] [pid 17424:tid 17453] [client 85.203.23.42:20309] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/ma.php"] [unique_id "aXkdUmRvtDRvGDe-pIsjKgAAABQ"]
[Wed Jan 28 04:17:22.518482 2026] [:error] [pid 17425:tid 17479] [client 85.203.23.41:46651] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors"] [unique_id "aXkdUqrcODKH1Dl7aZD-bwAAAFE"]
[Wed Jan 28 04:17:22.911171 2026] [:error] [pid 17424:tid 17450] [client 85.203.23.41:38405] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads"] [unique_id "aXkdUmRvtDRvGDe-pIsjLAAAABE"]
[Wed Jan 28 04:17:23.315607 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.36:29685] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/asasx.php"] [unique_id "aXkdU08zvf_03BnziRfXOAAAAIA"]
[Wed Jan 28 04:17:23.927942 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.22:46685] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aXkdU2RvtDRvGDe-pIsjLwAAABU"]
[Wed Jan 28 04:17:24.424882 2026] [:error] [pid 17424:tid 17435] [client 85.203.23.7:31447] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aXkdVGRvtDRvGDe-pIsjNQAAAAI"]
[Wed Jan 28 04:17:24.815068 2026] [:error] [pid 17426:tid 17496] [client 85.203.23.53:23737] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin.php"] [unique_id "aXkdVE8zvf_03BnziRfXOgAAAIc"]
[Wed Jan 28 04:17:25.219564 2026] [:error] [pid 17424:tid 17452] [client 85.203.23.23:30037] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aXkdVWRvtDRvGDe-pIsjOQAAABM"]
[Wed Jan 28 04:17:25.613629 2026] [:error] [pid 17535:tid 17543] [client 85.203.23.4:54675] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aXkdVa3QiSMgVscnN5Lp4gAAAMU"]
[Wed Jan 28 04:17:26.012391 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.43:32439] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/dropdown.php"] [unique_id "aXkdVmRvtDRvGDe-pIsjPAAAAAM"]
[Wed Jan 28 04:17:26.455359 2026] [:error] [pid 17426:tid 17500] [client 85.203.23.41:36915] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aXkdVk8zvf_03BnziRfXPQAAAIs"]
[Wed Jan 28 04:17:26.861332 2026] [:error] [pid 17424:tid 17447] [client 85.203.23.38:21043] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/phpinfo.php"] [unique_id "aXkdVmRvtDRvGDe-pIsjPQAAAA4"]
[Wed Jan 28 04:17:27.261488 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.37:53817] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/assets/css/"] [unique_id "aXkdV63QiSMgVscnN5Lp5AAAAMA"]
[Wed Jan 28 04:17:27.725299 2026] [:error] [pid 17425:tid 17482] [client 85.203.23.6:24055] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/WSO.php"] [unique_id "aXkdV6rcODKH1Dl7aZD-cQAAAFQ"]
[Wed Jan 28 04:17:28.118076 2026] [:error] [pid 17425:tid 17470] [client 85.203.23.13:33945] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "aXkdWKrcODKH1Dl7aZD-cgAAAEg"]
[Wed Jan 28 04:17:28.523900 2026] [:error] [pid 17535:tid 17559] [client 85.203.23.14:31155] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-user.php"] [unique_id "aXkdWK3QiSMgVscnN5Lp5gAAANU"]
[Wed Jan 28 04:17:28.933563 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.4:47423] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/sql.php"] [unique_id "aXkdWK3QiSMgVscnN5Lp6AAAANA"]
[Wed Jan 28 04:17:29.326616 2026] [:error] [pid 17535:tid 17560] [client 85.203.23.44:48527] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/file.php"] [unique_id "aXkdWa3QiSMgVscnN5Lp6QAAANY"]
[Wed Jan 28 04:17:29.715638 2026] [:error] [pid 17424:tid 17434] [client 85.203.23.9:59985] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/file-manager.php"] [unique_id "aXkdWWRvtDRvGDe-pIsjRQAAAAE"]
[Wed Jan 28 04:17:30.214886 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.47:26443] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "aXkdWq3QiSMgVscnN5Lp7QAAAMg"]
[Wed Jan 28 04:17:30.616954 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.14:59035] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/zz.php"] [unique_id "aXkdWq3QiSMgVscnN5Lp7gAAANI"]
[Wed Jan 28 04:17:31.045692 2026] [:error] [pid 17535:tid 17553] [client 85.203.23.31:23811] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/sx.php"] [unique_id "aXkdW63QiSMgVscnN5Lp8AAAAM8"]
[Wed Jan 28 04:17:31.425066 2026] [:error] [pid 17425:tid 17479] [client 85.203.23.6:43809] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aXkdW6rcODKH1Dl7aZD-eQAAAFE"]
[Wed Jan 28 04:17:31.822169 2026] [:error] [pid 17424:tid 17439] [client 85.203.23.39:53849] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/gettest.php"] [unique_id "aXkdW2RvtDRvGDe-pIsjRwAAAAY"]
[Wed Jan 28 04:17:32.221857 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.7:42579] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cache/gfhfv.php"] [unique_id "aXkdXK3QiSMgVscnN5Lp8gAAAMA"]
[Wed Jan 28 04:17:32.637429 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.45:20105] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/gfhfv.php"] [unique_id "aXkdXGRvtDRvGDe-pIsjSQAAAAM"]
[Wed Jan 28 04:17:33.027673 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.47:35385] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/config.php"] [unique_id "aXkdXa3QiSMgVscnN5Lp9gAAANQ"]
[Wed Jan 28 04:17:33.422444 2026] [:error] [pid 17425:tid 17468] [client 85.203.23.52:24223] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-mails.php"] [unique_id "aXkdXarcODKH1Dl7aZD-fwAAAEY"]
[Wed Jan 28 04:17:33.821707 2026] [:error] [pid 17535:tid 17541] [client 85.203.23.32:52601] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aXkdXa3QiSMgVscnN5Lp-AAAAMM"]
[Wed Jan 28 04:17:34.235510 2026] [:error] [pid 17535:tid 17546] [client 85.203.23.32:62601] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "aXkdXq3QiSMgVscnN5Lp-QAAAMg"]
[Wed Jan 28 04:17:36.024547 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.36:57045] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/000.php"] [unique_id "aXkdYGRvtDRvGDe-pIsjSgAAAA8"]
[Wed Jan 28 04:17:36.429384 2026] [:error] [pid 17425:tid 17474] [client 85.203.23.6:51291] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "aXkdYKrcODKH1Dl7aZD-gwAAAEw"]
[Wed Jan 28 04:17:36.829476 2026] [:error] [pid 17425:tid 17478] [client 85.203.23.7:21525] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/anskrit.php"] [unique_id "aXkdYKrcODKH1Dl7aZD-hgAAAFA"]
[Wed Jan 28 04:17:37.432374 2026] [:error] [pid 17424:tid 17452] [client 85.203.23.24:52095] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/abilities-api/about.php"] [unique_id "aXkdYWRvtDRvGDe-pIsjSwAAABM"]
[Wed Jan 28 04:17:37.922713 2026] [:error] [pid 17425:tid 17482] [client 85.203.23.45:38595] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aXkdYarcODKH1Dl7aZD-jAAAAFQ"]
[Wed Jan 28 04:17:38.322761 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.25:53395] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-wp-widget-table.php"] [unique_id "aXkdYk8zvf_03BnziRfXQgAAAIQ"]
[Wed Jan 28 04:17:38.836082 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.3:45203] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/back.php"] [unique_id "aXkdYk8zvf_03BnziRfXQwAAAIA"]
[Wed Jan 28 04:17:39.320934 2026] [:error] [pid 17424:tid 17443] [client 85.203.23.44:39299] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/2025/index.php"] [unique_id "aXkdY2RvtDRvGDe-pIsjUgAAAAo"]
[Wed Jan 28 04:17:39.724059 2026] [:error] [pid 17425:tid 17479] [client 85.203.23.19:24537] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/revslider/templates/brutal-menu/index.php"] [unique_id "aXkdY6rcODKH1Dl7aZD-jQAAAFE"]
[Wed Jan 28 04:17:40.122592 2026] [:error] [pid 17424:tid 17447] [client 85.203.23.32:53057] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/revslider/templates/rockable-lineup-2/index.php"] [unique_id "aXkdZGRvtDRvGDe-pIsjVAAAAA4"]
[Wed Jan 28 04:17:40.623590 2026] [:error] [pid 17425:tid 17486] [client 85.203.23.39:20643] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php"] [unique_id "aXkdZKrcODKH1Dl7aZD-jwAAAFc"]
[Wed Jan 28 04:17:41.219997 2026] [:error] [pid 17426:tid 17494] [client 85.203.23.37:44635] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cpo_temp/services.php"] [unique_id "aXkdZU8zvf_03BnziRfXRgAAAIU"]
[Wed Jan 28 04:17:41.632831 2026] [:error] [pid 17425:tid 17476] [client 85.203.23.24:22419] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wpvivid_uploads/wp-conflg.php"] [unique_id "aXkdZarcODKH1Dl7aZD-lAAAAE4"]
[Wed Jan 28 04:17:42.024723 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.31:51807] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/wpvivid_uploads/Isolate/error/index.php"] [unique_id "aXkdZk8zvf_03BnziRfXSAAAAIw"]
[Wed Jan 28 04:17:42.425431 2026] [:error] [pid 17535:tid 17548] [client 85.203.23.27:34351] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/updraft/emptydir/index.php"] [unique_id "aXkdZq3QiSMgVscnN5LqDQAAAMo"]
[Wed Jan 28 04:17:42.820657 2026] [:error] [pid 17535:tid 17539] [client 85.203.23.41:44721] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/index.php"] [unique_id "aXkdZq3QiSMgVscnN5LqDwAAAME"]
[Wed Jan 28 04:17:43.222361 2026] [:error] [pid 17425:tid 17472] [client 85.203.23.7:33457] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/wp-file-manager/file.php"] [unique_id "aXkdZ6rcODKH1Dl7aZD-lwAAAEo"]
[Wed Jan 28 04:17:43.618756 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.29:51999] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aXkdZ08zvf_03BnziRfXSgAAAIE"]
[Wed Jan 28 04:17:44.030697 2026] [:error] [pid 17426:tid 17511] [client 85.203.23.46:33831] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aXkdaE8zvf_03BnziRfXSwAAAJY"]
[Wed Jan 28 04:17:44.417908 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.37:65159] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/akismet/views/cmd.php"] [unique_id "aXkdaK3QiSMgVscnN5LqGQAAANA"]
[Wed Jan 28 04:17:44.931210 2026] [:error] [pid 17424:tid 17442] [client 85.203.23.45:22353] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aXkdaGRvtDRvGDe-pIsjVwAAAAk"]
[Wed Jan 28 04:17:45.716735 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.6:25231] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/x/wp-fm.php"] [unique_id "aXkdaU8zvf_03BnziRfXTQAAAJM"]
[Wed Jan 28 04:17:46.212075 2026] [:error] [pid 17425:tid 17475] [client 85.203.23.17:26855] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "aXkdaqrcODKH1Dl7aZD-nwAAAE0"]
[Wed Jan 28 04:17:46.623382 2026] [:error] [pid 17426:tid 17496] [client 85.203.23.4:31379] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/acucozo/file.php"] [unique_id "aXkdak8zvf_03BnziRfXTgAAAIc"]
[Wed Jan 28 04:17:47.031452 2026] [:error] [pid 17535:tid 17557] [client 85.203.23.25:64433] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/sccrbel/index.php"] [unique_id "aXkda63QiSMgVscnN5LqJgAAANM"]
[Wed Jan 28 04:17:47.434910 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.14:52869] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/tilnzqc/index.php"] [unique_id "aXkda63QiSMgVscnN5LqJwAAANI"]
[Wed Jan 28 04:17:47.822981 2026] [:error] [pid 17424:tid 17435] [client 85.203.23.15:27543] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/akses.php"] [unique_id "aXkda2RvtDRvGDe-pIsjXgAAAAI"]
[Wed Jan 28 04:17:48.223963 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.26:45339] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aXkdbGRvtDRvGDe-pIsjYQAAAA8"]
[Wed Jan 28 04:17:48.628610 2026] [:error] [pid 17424:tid 17446] [client 85.203.23.17:38215] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/ftde.php"] [unique_id "aXkdbGRvtDRvGDe-pIsjYwAAAA0"]
[Wed Jan 28 04:17:49.134020 2026] [:error] [pid 17424:tid 17445] [client 85.203.23.33:48313] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aXkdbWRvtDRvGDe-pIsjZwAAAAw"]
[Wed Jan 28 04:17:49.536619 2026] [:error] [pid 17425:tid 17486] [client 85.203.23.16:46059] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aXkdbarcODKH1Dl7aZD-pgAAAFc"]
[Wed Jan 28 04:17:49.925641 2026] [:error] [pid 17426:tid 17501] [client 85.203.23.53:59469] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "aXkdbU8zvf_03BnziRfXUAAAAIw"]
[Wed Jan 28 04:17:50.323290 2026] [:error] [pid 17426:tid 17490] [client 85.203.23.32:39621] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aXkdbk8zvf_03BnziRfXUwAAAIE"]
[Wed Jan 28 04:17:50.723533 2026] [:error] [pid 17425:tid 17467] [client 85.203.23.34:26079] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aXkdbqrcODKH1Dl7aZD-qQAAAEU"]
[Wed Jan 28 04:17:51.216080 2026] [:error] [pid 17426:tid 17493] [client 85.203.23.11:34917] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentynineteen/sass/mixins/scss.php"] [unique_id "aXkdb08zvf_03BnziRfXVQAAAIQ"]
[Wed Jan 28 04:17:51.620937 2026] [:error] [pid 17426:tid 17488] [client 85.203.23.28:32755] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/news-portal/network.php"] [unique_id "aXkdb08zvf_03BnziRfXVwAAAIA"]
[Wed Jan 28 04:17:52.013870 2026] [:error] [pid 17425:tid 17476] [client 85.203.23.25:34189] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aXkdcKrcODKH1Dl7aZD-rAAAAE4"]
[Wed Jan 28 04:17:52.531991 2026] [:error] [pid 17424:tid 17436] [client 85.203.23.44:43825] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/asf.php"] [unique_id "aXkdcGRvtDRvGDe-pIsjcAAAAAM"]
[Wed Jan 28 04:17:52.925342 2026] [:error] [pid 17426:tid 17502] [client 85.203.23.51:26819] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aXkdcE8zvf_03BnziRfXWQAAAI0"]
[Wed Jan 28 04:17:53.407808 2026] [:error] [pid 17426:tid 17507] [client 85.203.23.30:51841] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-differ1.php"] [unique_id "aXkdcU8zvf_03BnziRfXXAAAAJI"]
[Wed Jan 28 04:17:53.932350 2026] [:error] [pid 17535:tid 17556] [client 85.203.23.49:61829] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/revealability.php"] [unique_id "aXkdca3QiSMgVscnN5LqLwAAANI"]
[Wed Jan 28 04:17:54.324236 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.43:28911] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/drive.php"] [unique_id "aXkdcq3QiSMgVscnN5LqMgAAANA"]
[Wed Jan 28 04:17:54.823127 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.49:20751] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aXkdcq3QiSMgVscnN5LqPQAAAMA"]
[Wed Jan 28 04:17:55.225504 2026] [:error] [pid 17424:tid 17437] [client 85.203.23.16:35775] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/image/chosen.php"] [unique_id "aXkdc2RvtDRvGDe-pIsjcwAAAAQ"]
[Wed Jan 28 04:17:55.622126 2026] [:error] [pid 17535:tid 17551] [client 85.203.23.49:51985] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/google-feed/pki-validation/index.php"] [unique_id "aXkdc63QiSMgVscnN5LqQAAAAM0"]
[Wed Jan 28 04:17:57.029366 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.18:26039] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/investor-relations/block-directory/index.php"] [unique_id "aXkddWRvtDRvGDe-pIsjdQAAAA8"]
[Wed Jan 28 04:17:57.429998 2026] [:error] [pid 17425:tid 17481] [client 85.203.23.51:21363] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/wp-content/plugins/file52.php"] [unique_id "aXkddarcODKH1Dl7aZD-tQAAAFM"]
[Wed Jan 28 04:17:57.833097 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.27:40325] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/wp-content/uploads/rank-math/about.php"] [unique_id "aXkddWRvtDRvGDe-pIsjdgAAABg"]
[Wed Jan 28 04:17:58.220247 2026] [:error] [pid 17424:tid 17456] [client 85.203.23.17:36261] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/wp-content/mu-plugins/ID3/index.php"] [unique_id "aXkddmRvtDRvGDe-pIsjdwAAABc"]
[Wed Jan 28 04:17:58.624249 2026] [:error] [pid 17424:tid 17455] [client 85.203.23.10:54383] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/bk/wp-admin/includes/media1.php"] [unique_id "aXkddmRvtDRvGDe-pIsjeQAAABY"]
[Wed Jan 28 04:17:59.024793 2026] [:error] [pid 17424:tid 17454] [client 85.203.23.3:45867] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/bk/wp-admin/network/about.php"] [unique_id "aXkdd2RvtDRvGDe-pIsjegAAABU"]
[Wed Jan 28 04:17:59.416930 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.39:33731] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/bk/wp-includes/fonts/maint/index.php"] [unique_id "aXkdd63QiSMgVscnN5LqSgAAAMY"]
[Wed Jan 28 04:17:59.821406 2026] [:error] [pid 17425:tid 17463] [client 85.203.23.44:26887] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/bk/wp-includes/PHPMailer/widgets/index.php"] [unique_id "aXkdd6rcODKH1Dl7aZD-twAAAEE"]
[Wed Jan 28 04:18:00.225508 2026] [:error] [pid 17424:tid 17435] [client 85.203.23.27:53025] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/wp-admin/network/icons/index.php"] [unique_id "aXkdeGRvtDRvGDe-pIsjfAAAAAI"]
[Wed Jan 28 04:18:02.140863 2026] [:error] [pid 17426:tid 17509] [client 85.203.23.15:35213] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/wp-admin/user/colors/index.php"] [unique_id "aXkdek8zvf_03BnziRfXZQAAAJQ"]
[Wed Jan 28 04:18:02.622762 2026] [:error] [pid 17426:tid 17499] [client 85.203.23.14:62011] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/s/wp-content/litespeed/debug/maint/index.php"] [unique_id "aXkdek8zvf_03BnziRfXZwAAAIo"]
[Wed Jan 28 04:18:03.262699 2026] [:error] [pid 17425:tid 17482] [client 85.203.23.25:25725] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aXkde6rcODKH1Dl7aZD-uwAAAFQ"]
[Wed Jan 28 04:18:03.962525 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.5:54415] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/comments/feed/index.php"] [unique_id "aXkde63QiSMgVscnN5LqUQAAAMY"]
[Wed Jan 28 04:18:04.692414 2026] [:error] [pid 17535:tid 17558] [client 85.203.23.24:55915] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/admin/uploads/fm.php"] [unique_id "aXkdfK3QiSMgVscnN5LqUgAAANQ"]
[Wed Jan 28 04:18:05.612829 2026] [:error] [pid 17424:tid 17457] [client 85.203.23.5:39669] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXkdfWRvtDRvGDe-pIsjggAAABg"]
[Wed Jan 28 04:18:06.871410 2026] [:error] [pid 17535:tid 17552] [client 85.203.23.47:65085] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/webp-express/radio.php"] [unique_id "aXkdfq3QiSMgVscnN5LqWgAAAM4"]
[Wed Jan 28 04:18:07.663774 2026] [:error] [pid 17535:tid 17548] [client 85.203.23.14:47017] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/index.php"] [unique_id "aXkdf63QiSMgVscnN5LqXwAAAMo"]
[Wed Jan 28 04:18:08.131730 2026] [:error] [pid 17424:tid 17455] [client 85.203.23.18:61739] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/settings/gfhfv.php"] [unique_id "aXkdgGRvtDRvGDe-pIsjhgAAABY"]
[Wed Jan 28 04:18:09.148015 2026] [:error] [pid 17426:tid 17499] [client 85.203.23.14:33995] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/drive.php"] [unique_id "aXkdgU8zvf_03BnziRfXcQAAAIo"]
[Wed Jan 28 04:18:09.721532 2026] [:error] [pid 17425:tid 17466] [client 85.203.23.46:62755] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/ws29.php"] [unique_id "aXkdgarcODKH1Dl7aZD-wQAAAEQ"]
[Wed Jan 28 04:18:10.127810 2026] [:error] [pid 17426:tid 17506] [client 85.203.23.7:36107] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/v3.php"] [unique_id "aXkdgk8zvf_03BnziRfXdQAAAJE"]
[Wed Jan 28 04:18:10.531874 2026] [:error] [pid 17425:tid 17480] [client 85.203.23.44:53873] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aXkdgqrcODKH1Dl7aZD-wgAAAFI"]
[Wed Jan 28 04:18:10.923653 2026] [:error] [pid 17535:tid 17554] [client 85.203.23.13:60623] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aXkdgq3QiSMgVscnN5LqaAAAANA"]
[Wed Jan 28 04:18:11.321657 2026] [:error] [pid 17424:tid 17444] [client 85.203.23.48:26323] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aXkdg2RvtDRvGDe-pIsjigAAAAs"]
[Wed Jan 28 04:18:11.732821 2026] [:error] [pid 17426:tid 17507] [client 85.203.23.19:59017] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aXkdg08zvf_03BnziRfXdwAAAJI"]
[Wed Jan 28 04:18:12.125148 2026] [:error] [pid 17424:tid 17443] [client 85.203.23.53:29487] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aXkdhGRvtDRvGDe-pIsjjAAAAAo"]
[Wed Jan 28 04:18:12.527289 2026] [:error] [pid 17426:tid 17494] [client 85.203.23.37:36699] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aXkdhE8zvf_03BnziRfXeQAAAIU"]
[Wed Jan 28 04:18:12.919528 2026] [:error] [pid 17535:tid 17538] [client 85.203.23.51:40791] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aXkdhK3QiSMgVscnN5LqawAAAMA"]
[Wed Jan 28 04:18:13.334640 2026] [:error] [pid 17535:tid 17560] [client 85.203.23.26:48449] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/database.php"] [unique_id "aXkdha3QiSMgVscnN5LqbAAAANY"]
[Wed Jan 28 04:18:14.031754 2026] [:error] [pid 17426:tid 17500] [client 85.203.23.16:42039] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/000.php"] [unique_id "aXkdhk8zvf_03BnziRfXfAAAAIs"]
[Wed Jan 28 04:18:14.620961 2026] [:error] [pid 17425:tid 17473] [client 85.203.23.18:43429] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/buy.php"] [unique_id "aXkdhqrcODKH1Dl7aZD-xwAAAEs"]
[Wed Jan 28 04:18:15.108620 2026] [:error] [pid 17426:tid 17499] [client 85.203.23.40:37229] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/wp-content/gettest.php"] [unique_id "aXkdh08zvf_03BnziRfXfwAAAIo"]
[Wed Jan 28 04:18:15.533534 2026] [:error] [pid 17425:tid 17465] [client 85.203.23.7:59997] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/gettest.php"] [unique_id "aXkdh6rcODKH1Dl7aZD-ywAAAEM"]
[Wed Jan 28 04:18:15.916678 2026] [:error] [pid 17535:tid 17544] [client 85.203.23.2:64685] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp-good.php"] [unique_id "aXkdh63QiSMgVscnN5LqbwAAAMY"]
[Wed Jan 28 04:18:16.321682 2026] [:error] [pid 17424:tid 17448] [client 85.203.23.24:60513] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aXkdiGRvtDRvGDe-pIsjjwAAAA8"]
[Wed Jan 28 04:18:16.724140 2026] [:error] [pid 17424:tid 17434] [client 85.203.23.4:64867] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Renderer/user/index.php"] [unique_id "aXkdiGRvtDRvGDe-pIsjkQAAAAE"]
[Wed Jan 28 04:18:17.232688 2026] [:error] [pid 17426:tid 17491] [client 85.203.23.27:35167] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/includ.php"] [unique_id "aXkdiU8zvf_03BnziRfXgQAAAII"]
[Wed Jan 28 04:18:17.720477 2026] [:error] [pid 17426:tid 17508] [client 85.203.23.40:58571] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-modules-xxx.php"] [unique_id "aXkdiU8zvf_03BnziRfXhAAAAJM"]
[Wed Jan 28 05:26:18.324402 2026] [autoindex:error] [pid 64842:tid 64866] [client 45.154.138.44:33687] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:26:20.191601 2026] [:error] [pid 64842:tid 64856] [client 45.154.138.44:33687] [client 45.154.138.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aXktfFuAAQZ5AN_SnDYSjwAAAUw"]
[Wed Jan 28 05:26:22.120485 2026] [:error] [pid 58254:tid 58280] [client 45.154.138.22:44111] [client 45.154.138.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/"] [unique_id "aXktfvF8nSyBg9wOsa8rOwAAARg"]
[Wed Jan 28 05:26:24.989890 2026] [:error] [pid 17424:tid 17446] [client 45.154.138.1:52805] [client 45.154.138.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aXktgGRvtDRvGDe-pItfQQAAAA0"]
[Wed Jan 28 06:01:26.299252 2026] [autoindex:error] [pid 17424:tid 17440] [client 192.36.173.21:35893] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 07:09:04.451370 2026] [:error] [pid 17424:tid 17457] [client 141.98.11.239:57610] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXlFkGRvtDRvGDe-pIuBxQAAABg"]
[Wed Jan 28 07:09:04.451443 2026] [:error] [pid 17424:tid 17457] [client 141.98.11.239:57610] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 159"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aXlFkGRvtDRvGDe-pIuBxQAAABg"]
[Wed Jan 28 09:02:28.413275 2026] [:error] [pid 58254:tid 58266] [client 122.51.236.174:45626] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXlgJPF8nSyBg9wOsa9kXwAAAQo"]
[Wed Jan 28 09:47:19.124165 2026] [autoindex:error] [pid 26993:tid 27020] [client 54.204.108.115:52566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 09:47:50.633339 2026] [autoindex:error] [pid 58254:tid 58269] [client 38.132.116.156:59936] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 10:12:45.393086 2026] [autoindex:error] [pid 64842:tid 64866] [client 3.212.177.255:47822] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 10:13:30.342614 2026] [autoindex:error] [pid 2454:tid 2477] [client 38.202.2.133:57455] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 11:13:30.168186 2026] [autoindex:error] [pid 42740:tid 42750] [client 202.76.168.165:60877] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 11:32:46.176090 2026] [autoindex:error] [pid 33636:tid 33651] [client 46.45.185.177:57155] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 11:56:18.468304 2026] [autoindex:error] [pid 33490:tid 33541] [client 3.25.234.171:53822] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 13:54:08.574628 2026] [autoindex:error] [pid 24482:tid 24510] [client 15.204.155.25:62051] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 14:59:55.411020 2026] [autoindex:error] [pid 33489:tid 33494] [client 92.253.195.26:16208] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 14:59:56.942492 2026] [autoindex:error] [pid 42740:tid 42766] [client 92.253.195.26:21372] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 14:59:58.322946 2026] [autoindex:error] [pid 33491:tid 33553] [client 92.253.195.26:28624] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:12.847577 2026] [autoindex:error] [pid 33490:tid 33538] [client 92.253.195.26:21850] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:15.289529 2026] [autoindex:error] [pid 33580:tid 33593] [client 92.253.195.26:20911] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:16.775101 2026] [autoindex:error] [pid 33489:tid 33512] [client 92.253.195.26:27820] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:31.796514 2026] [autoindex:error] [pid 33636:tid 33644] [client 92.253.195.26:3002] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:32.517642 2026] [autoindex:error] [pid 24452:tid 24478] [client 92.253.195.26:7392] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:33.253793 2026] [autoindex:error] [pid 33490:tid 33535] [client 92.253.195.26:28626] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:46.674909 2026] [autoindex:error] [pid 33636:tid 33658] [client 92.253.195.26:7162] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:47.409232 2026] [autoindex:error] [pid 33489:tid 33517] [client 92.253.195.26:1301] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:00:48.116633 2026] [autoindex:error] [pid 33636:tid 33651] [client 92.253.195.26:26067] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 15:34:03.146561 2026] [:error] [pid 33636:tid 33657] [client 192.144.148.122:56180] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXm769IVZAudQH0BSC7_HQAAAhM"]
[Wed Jan 28 17:57:22.815195 2026] [:error] [pid 42740:tid 42747] [client 49.51.73.183:59514] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXndglnjAS34srJlXgSAPAAAAIU"]
[Wed Jan 28 23:04:41.299804 2026] [autoindex:error] [pid 33489:tid 33503] [client 43.225.189.113:34480] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 23:15:50.789993 2026] [:error] [pid 24482:tid 24500] [client 213.209.159.151:45576] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXooJqLaUZr_xWekSHPH5QAAAc4"]
[Wed Jan 28 23:16:24.202662 2026] [:error] [pid 33580:tid 33599] [client 213.209.159.151:34252] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXooSJlb0QJtwfka8l55-gAAAQw"]
[Wed Jan 28 23:48:48.069844 2026] [autoindex:error] [pid 42740:tid 42766] [client 43.225.189.113:51468] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 23:55:45.850855 2026] [autoindex:error] [pid 33580:tid 33606] [client 66.249.79.195:55323] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 00:06:55.087958 2026] [:error] [pid 24452:tid 24467] [client 43.153.10.13:44836] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXo0H_0RQOh_GmqmVyatygAAAY0"]
[Thu Jan 29 03:11:35.779533 2026] [proxy_fcgi:error] [pid 32598:tid 32607] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:35.801694 2026] [proxy_fcgi:error] [pid 32598:tid 32602] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:35.824315 2026] [proxy_fcgi:error] [pid 32598:tid 32618] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:35.844017 2026] [proxy_fcgi:error] [pid 32598:tid 32608] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:35.874665 2026] [proxy_fcgi:error] [pid 32598:tid 32619] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:35.895698 2026] [proxy_fcgi:error] [pid 32598:tid 32615] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:35.915869 2026] [proxy_fcgi:error] [pid 32598:tid 32623] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:36.033696 2026] [proxy_fcgi:error] [pid 32598:tid 32622] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:36.101783 2026] [proxy_fcgi:error] [pid 32598:tid 32617] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:36.122656 2026] [proxy_fcgi:error] [pid 32598:tid 32604] [client 20.53.232.94:59151] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:11:36.153457 2026] [:error] [pid 32598:tid 32609] [client 20.53.232.94:59151] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXpfaFY4u2FXFuCu0C4kswAAAYk"]
[Thu Jan 29 03:11:36.524946 2026] [:error] [pid 64139:tid 64151] [client 20.53.232.94:11164] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXpfaE8_llMXywnNBzhXpQAAAwo"]
[Thu Jan 29 03:11:37.029110 2026] [:error] [pid 32895:tid 32921] [client 20.53.232.94:12237] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXpfaXQ85pgihG9SXurZqwAAAhg"]
[Thu Jan 29 03:11:38.070928 2026] [:error] [pid 33151:tid 33215] [client 20.53.232.94:25367] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXpfamtRH8LcJJ0AyU7FFQAAAlE"]
[Thu Jan 29 03:11:38.289529 2026] [:error] [pid 32747:tid 32754] [client 20.53.232.94:4048] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ph33w.php"] [unique_id "aXpfav0et-wQsmVMWlkzvwAAAcU"]
[Thu Jan 29 03:11:38.501361 2026] [:error] [pid 33151:tid 33204] [client 20.53.232.94:12768] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ph33w.php"] [unique_id "aXpfamtRH8LcJJ0AyU7FFgAAAkc"]
[Thu Jan 29 03:11:38.824692 2026] [:error] [pid 32451:tid 32465] [client 20.53.232.94:11182] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ph33w.php"] [unique_id "aXpfahnhmSN6e0P4d6tZTgAAAUw"]
[Thu Jan 29 03:11:39.313233 2026] [:error] [pid 33151:tid 33209] [client 20.53.232.94:59136] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ph33w.php"] [unique_id "aXpfa2tRH8LcJJ0AyU7FFwAAAkw"]
[Thu Jan 29 03:11:39.543701 2026] [:error] [pid 30817:tid 30831] [client 20.53.232.94:59195] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aXpfa5kL00co11SGgypJigAAAIs"]
[Thu Jan 29 03:11:40.309111 2026] [:error] [pid 30817:tid 30822] [client 20.53.232.94:12260] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aXpfbJkL00co11SGgypJjAAAAII"]
[Thu Jan 29 03:11:40.683917 2026] [:error] [pid 30817:tid 30820] [client 20.53.232.94:13215] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aXpfbJkL00co11SGgypJkAAAAIA"]
[Thu Jan 29 03:11:41.302325 2026] [:error] [pid 32451:tid 32475] [client 20.53.232.94:14305] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/styll.php"] [unique_id "aXpfbRnhmSN6e0P4d6tZTwAAAVY"]
[Thu Jan 29 03:11:42.420355 2026] [:error] [pid 33151:tid 33202] [client 20.53.232.94:4064] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/it.php"] [unique_id "aXpfbmtRH8LcJJ0AyU7FIAAAAkU"]
[Thu Jan 29 03:11:43.126443 2026] [:error] [pid 32598:tid 32613] [client 20.53.232.94:4045] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/it.php"] [unique_id "aXpfb1Y4u2FXFuCu0C4ktwAAAY0"]
[Thu Jan 29 03:11:43.997657 2026] [:error] [pid 32598:tid 32612] [client 20.53.232.94:12747] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/it.php"] [unique_id "aXpfb1Y4u2FXFuCu0C4kuAAAAYw"]
[Thu Jan 29 03:11:44.692662 2026] [:error] [pid 30817:tid 30824] [client 20.53.232.94:12751] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/it.php"] [unique_id "aXpfcJkL00co11SGgypJmgAAAIQ"]
[Thu Jan 29 03:11:45.024967 2026] [:error] [pid 30817:tid 30820] [client 20.53.232.94:11190] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wwx.php"] [unique_id "aXpfcZkL00co11SGgypJmwAAAIA"]
[Thu Jan 29 03:11:45.753772 2026] [:error] [pid 33151:tid 33200] [client 20.53.232.94:4036] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wwx.php"] [unique_id "aXpfcWtRH8LcJJ0AyU7FKwAAAkM"]
[Thu Jan 29 03:11:46.087596 2026] [:error] [pid 30727:tid 30753] [client 20.53.232.94:23514] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wwx.php"] [unique_id "aXpfcp6XAsWrB4DloY_cpgAAABY"]
[Thu Jan 29 03:11:46.729903 2026] [:error] [pid 30817:tid 30829] [client 20.53.232.94:4040] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wwx.php"] [unique_id "aXpfcpkL00co11SGgypJoAAAAIk"]
[Thu Jan 29 03:11:47.078158 2026] [:error] [pid 32451:tid 32454] [client 20.53.232.94:4061] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x7.php"] [unique_id "aXpfcxnhmSN6e0P4d6tZUwAAAUE"]
[Thu Jan 29 03:11:47.614917 2026] [:error] [pid 30817:tid 30825] [client 20.53.232.94:4033] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x7.php"] [unique_id "aXpfc5kL00co11SGgypJoQAAAIU"]
[Thu Jan 29 03:11:48.752423 2026] [:error] [pid 64076:tid 64097] [client 20.53.232.94:12484] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x7.php"] [unique_id "aXpfdMgWS9sk7GfiNFebmQAAApM"]
[Thu Jan 29 03:11:50.093039 2026] [:error] [pid 33151:tid 33201] [client 20.53.232.94:23546] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x7.php"] [unique_id "aXpfdmtRH8LcJJ0AyU7FOAAAAkQ"]
[Thu Jan 29 03:11:50.390679 2026] [:error] [pid 33151:tid 33212] [client 20.53.232.94:11194] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/413.php"] [unique_id "aXpfdmtRH8LcJJ0AyU7FOQAAAk4"]
[Thu Jan 29 03:11:51.653895 2026] [:error] [pid 32451:tid 32466] [client 20.53.232.94:59138] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/413.php"] [unique_id "aXpfdxnhmSN6e0P4d6tZVQAAAU0"]
[Thu Jan 29 03:11:52.192516 2026] [:error] [pid 30817:tid 30832] [client 20.53.232.94:17565] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/413.php"] [unique_id "aXpfeJkL00co11SGgypJpQAAAIw"]
[Thu Jan 29 03:11:52.295487 2026] [:error] [pid 30727:tid 30735] [client 20.53.232.94:12789] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/413.php"] [unique_id "aXpfeJ6XAsWrB4DloY_csAAAAAQ"]
[Thu Jan 29 03:11:52.423662 2026] [:error] [pid 32598:tid 32616] [client 20.53.232.94:4037] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aXpfeFY4u2FXFuCu0C4kvgAAAZA"]
[Thu Jan 29 03:11:53.066596 2026] [:error] [pid 30727:tid 30731] [client 20.53.232.94:12248] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aXpfeZ6XAsWrB4DloY_cswAAAAA"]
[Thu Jan 29 03:11:53.717205 2026] [:error] [pid 30817:tid 30833] [client 20.53.232.94:12257] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aXpfeZkL00co11SGgypJpgAAAI0"]
[Thu Jan 29 03:11:54.326971 2026] [:error] [pid 30817:tid 30827] [client 20.53.232.94:17552] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1a.php"] [unique_id "aXpfepkL00co11SGgypJpwAAAIc"]
[Thu Jan 29 03:11:55.609791 2026] [:error] [pid 32747:tid 32761] [client 20.53.232.94:3207] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z9v.php"] [unique_id "aXpfe_0et-wQsmVMWlkzyAAAAcw"]
[Thu Jan 29 03:11:55.919901 2026] [:error] [pid 32895:tid 32902] [client 20.53.232.94:3320] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z9v.php"] [unique_id "aXpfe3Q85pgihG9SXurZswAAAgU"]
[Thu Jan 29 03:11:56.072447 2026] [:error] [pid 32895:tid 32911] [client 20.53.232.94:25369] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z9v.php"] [unique_id "aXpffHQ85pgihG9SXurZtAAAAg4"]
[Thu Jan 29 03:11:56.352087 2026] [:error] [pid 64139:tid 64152] [client 20.53.232.94:17581] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z9v.php"] [unique_id "aXpffE8_llMXywnNBzhXuQAAAws"]
[Thu Jan 29 03:11:57.114936 2026] [:error] [pid 30817:tid 30828] [client 20.53.232.94:12749] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thebe.php"] [unique_id "aXpffZkL00co11SGgypJrgAAAIg"]
[Thu Jan 29 03:11:57.397062 2026] [:error] [pid 32747:tid 32769] [client 20.53.232.94:20733] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thebe.php"] [unique_id "aXpfff0et-wQsmVMWlkzygAAAdQ"]
[Thu Jan 29 03:11:57.776094 2026] [:error] [pid 32598:tid 32621] [client 20.53.232.94:12233] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thebe.php"] [unique_id "aXpffVY4u2FXFuCu0C4kwgAAAZU"]
[Thu Jan 29 03:11:58.108217 2026] [:error] [pid 32598:tid 32608] [client 20.53.232.94:59594] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/thebe.php"] [unique_id "aXpfflY4u2FXFuCu0C4kxAAAAYg"]
[Thu Jan 29 03:11:58.504836 2026] [:error] [pid 32598:tid 32605] [client 20.53.232.94:3307] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ddd.php"] [unique_id "aXpfflY4u2FXFuCu0C4kyQAAAYU"]
[Thu Jan 29 03:11:58.608222 2026] [:error] [pid 32747:tid 32764] [client 20.53.232.94:25402] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ddd.php"] [unique_id "aXpffv0et-wQsmVMWlkzzAAAAc8"]
[Thu Jan 29 03:11:58.836319 2026] [:error] [pid 64139:tid 64161] [client 20.53.232.94:25366] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ddd.php"] [unique_id "aXpffk8_llMXywnNBzhXuwAAAxQ"]
[Thu Jan 29 03:11:59.074100 2026] [:error] [pid 64139:tid 64147] [client 20.53.232.94:12794] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ddd.php"] [unique_id "aXpff08_llMXywnNBzhXvAAAAwY"]
[Thu Jan 29 03:11:59.545157 2026] [:error] [pid 64139:tid 64154] [client 20.53.232.94:24103] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccs.php"] [unique_id "aXpff08_llMXywnNBzhXvwAAAw0"]
[Thu Jan 29 03:12:00.756044 2026] [:error] [pid 64139:tid 64150] [client 20.53.232.94:3301] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccs.php"] [unique_id "aXpfgE8_llMXywnNBzhXxwAAAwk"]
[Thu Jan 29 03:12:00.970563 2026] [:error] [pid 30727:tid 30751] [client 20.53.232.94:12228] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccs.php"] [unique_id "aXpfgJ6XAsWrB4DloY_cuwAAABQ"]
[Thu Jan 29 03:12:01.705750 2026] [:error] [pid 30817:tid 30833] [client 20.53.232.94:3510] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccs.php"] [unique_id "aXpfgZkL00co11SGgypJsgAAAI0"]
[Thu Jan 29 03:12:02.786560 2026] [:error] [pid 32895:tid 32909] [client 20.53.232.94:12247] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sad5.php"] [unique_id "aXpfgnQ85pgihG9SXurZtwAAAgw"]
[Thu Jan 29 03:12:03.483420 2026] [:error] [pid 64076:tid 64081] [client 20.53.232.94:20692] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sad5.php"] [unique_id "aXpfg8gWS9sk7GfiNFebngAAAoM"]
[Thu Jan 29 03:12:04.290460 2026] [:error] [pid 30727:tid 30749] [client 20.53.232.94:4072] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sad5.php"] [unique_id "aXpfhJ6XAsWrB4DloY_cvgAAABI"]
[Thu Jan 29 03:12:04.665625 2026] [:error] [pid 64076:tid 64089] [client 20.53.232.94:3308] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sad5.php"] [unique_id "aXpfhMgWS9sk7GfiNFeboAAAAos"]
[Thu Jan 29 03:12:05.037823 2026] [:error] [pid 30817:tid 30837] [client 20.53.232.94:12285] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xvde.php"] [unique_id "aXpfhZkL00co11SGgypJuAAAAJE"]
[Thu Jan 29 03:12:06.498322 2026] [:error] [pid 30727:tid 30750] [client 20.53.232.94:59593] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xvde.php"] [unique_id "aXpfhp6XAsWrB4DloY_cvwAAABM"]
[Thu Jan 29 03:12:07.451134 2026] [:error] [pid 30817:tid 30827] [client 20.53.232.94:3305] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xvde.php"] [unique_id "aXpfh5kL00co11SGgypJvQAAAIc"]
[Thu Jan 29 03:12:07.707539 2026] [:error] [pid 30727:tid 30755] [client 20.53.232.94:12757] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xvde.php"] [unique_id "aXpfh56XAsWrB4DloY_cwwAAABg"]
[Thu Jan 29 03:12:08.213502 2026] [:error] [pid 30729:tid 30803] [client 20.53.232.94:12748] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXpfiIHlkRFkYwysACdAFQAAAM8"]
[Thu Jan 29 03:12:08.678673 2026] [:error] [pid 30817:tid 30829] [client 20.53.232.94:59640] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXpfiJkL00co11SGgypJwAAAAIk"]
[Thu Jan 29 03:12:08.996825 2026] [:error] [pid 30727:tid 30753] [client 20.53.232.94:12281] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXpfiJ6XAsWrB4DloY_cxgAAABY"]
[Thu Jan 29 03:12:09.798924 2026] [:error] [pid 33151:tid 33219] [client 20.53.232.94:3319] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXpfiWtRH8LcJJ0AyU7FWAAAAlU"]
[Thu Jan 29 03:12:10.612485 2026] [:error] [pid 30729:tid 30789] [client 20.53.232.94:11151] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f355.php"] [unique_id "aXpfioHlkRFkYwysACdAGQAAAME"]
[Thu Jan 29 03:12:11.137422 2026] [:error] [pid 32747:tid 32765] [client 20.53.232.94:12244] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f355.php"] [unique_id "aXpfi_0et-wQsmVMWlkz0QAAAdA"]
[Thu Jan 29 03:12:11.665961 2026] [:error] [pid 30817:tid 30820] [client 20.53.232.94:13227] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f355.php"] [unique_id "aXpfi5kL00co11SGgypJxAAAAIA"]
[Thu Jan 29 03:12:12.386899 2026] [:error] [pid 33151:tid 33205] [client 20.53.232.94:25391] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f355.php"] [unique_id "aXpfjGtRH8LcJJ0AyU7FXwAAAkg"]
[Thu Jan 29 03:12:13.194646 2026] [:error] [pid 30817:tid 30833] [client 20.53.232.94:12250] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bgymj.php"] [unique_id "aXpfjZkL00co11SGgypJxgAAAI0"]
[Thu Jan 29 03:12:13.506664 2026] [:error] [pid 30727:tid 30745] [client 20.53.232.94:4058] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bgymj.php"] [unique_id "aXpfjZ6XAsWrB4DloY_cyQAAAA4"]
[Thu Jan 29 03:12:14.054497 2026] [:error] [pid 30727:tid 30755] [client 20.53.232.94:12788] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bgymj.php"] [unique_id "aXpfjp6XAsWrB4DloY_czAAAABg"]
[Thu Jan 29 03:12:14.697579 2026] [:error] [pid 30817:tid 30844] [client 20.53.232.94:12784] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bgymj.php"] [unique_id "aXpfjpkL00co11SGgypJygAAAJg"]
[Thu Jan 29 03:12:16.432391 2026] [:error] [pid 32598:tid 32616] [client 20.53.232.94:25353] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mt.php"] [unique_id "aXpfkFY4u2FXFuCu0C4k2QAAAZA"]
[Thu Jan 29 03:12:16.955972 2026] [:error] [pid 30817:tid 30838] [client 20.53.232.94:11141] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mt.php"] [unique_id "aXpfkJkL00co11SGgypJ0AAAAJI"]
[Thu Jan 29 03:12:18.074772 2026] [:error] [pid 64139:tid 64149] [client 20.53.232.94:3495] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mt.php"] [unique_id "aXpfkk8_llMXywnNBzhX2gAAAwg"]
[Thu Jan 29 03:12:18.548153 2026] [:error] [pid 30817:tid 30841] [client 20.53.232.94:3460] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-mt.php"] [unique_id "aXpfkpkL00co11SGgypJ1gAAAJU"]
[Thu Jan 29 03:12:18.932147 2026] [:error] [pid 32598:tid 32622] [client 20.53.232.94:59599] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpfklY4u2FXFuCu0C4k3AAAAZY"]
[Thu Jan 29 03:12:19.586070 2026] [:error] [pid 30727:tid 30748] [client 20.53.232.94:25401] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpfk56XAsWrB4DloY_czwAAABE"]
[Thu Jan 29 03:12:19.962747 2026] [:error] [pid 33151:tid 33213] [client 20.53.232.94:17586] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpfk2tRH8LcJJ0AyU7FZAAAAk8"]
[Thu Jan 29 03:12:20.634698 2026] [:error] [pid 30727:tid 30741] [client 20.53.232.94:4067] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpflJ6XAsWrB4DloY_c0QAAAAo"]
[Thu Jan 29 03:12:21.526374 2026] [:error] [pid 64139:tid 64156] [client 20.53.232.94:59630] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3r.php"] [unique_id "aXpflU8_llMXywnNBzhX4AAAAw8"]
[Thu Jan 29 03:12:24.390260 2026] [:error] [pid 30817:tid 30833] [client 20.53.232.94:20728] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3r.php"] [unique_id "aXpfmJkL00co11SGgypJ3QAAAI0"]
[Thu Jan 29 03:12:24.756201 2026] [:error] [pid 33151:tid 33218] [client 20.53.232.94:25376] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3r.php"] [unique_id "aXpfmGtRH8LcJJ0AyU7FbAAAAlQ"]
[Thu Jan 29 03:12:25.152331 2026] [:error] [pid 64139:tid 64159] [client 20.53.232.94:20700] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/3r.php"] [unique_id "aXpfmU8_llMXywnNBzhX5QAAAxI"]
[Thu Jan 29 03:12:25.418608 2026] [:error] [pid 64139:tid 64147] [client 20.53.232.94:11149] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xyz.php"] [unique_id "aXpfmU8_llMXywnNBzhX5wAAAwY"]
[Thu Jan 29 03:12:25.516560 2026] [:error] [pid 33151:tid 33212] [client 20.53.232.94:23516] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xyz.php"] [unique_id "aXpfmWtRH8LcJJ0AyU7FbQAAAk4"]
[Thu Jan 29 03:12:25.750915 2026] [:error] [pid 33151:tid 33207] [client 20.53.232.94:25373] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xyz.php"] [unique_id "aXpfmWtRH8LcJJ0AyU7FbgAAAko"]
[Thu Jan 29 03:12:28.152134 2026] [:error] [pid 33151:tid 33213] [client 20.53.232.94:25394] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/8xyz.php"] [unique_id "aXpfnGtRH8LcJJ0AyU7FcgAAAk8"]
[Thu Jan 29 03:12:28.284795 2026] [:error] [pid 32747:tid 32770] [client 20.53.232.94:12752] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXpfnP0et-wQsmVMWlkz3AAAAdU"]
[Thu Jan 29 03:12:28.918258 2026] [:error] [pid 64139:tid 64142] [client 20.53.232.94:17590] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXpfnE8_llMXywnNBzhX7wAAAwE"]
[Thu Jan 29 03:12:29.371133 2026] [:error] [pid 64139:tid 64157] [client 20.53.232.94:12743] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXpfnU8_llMXywnNBzhX8QAAAxA"]
[Thu Jan 29 03:12:29.603482 2026] [:error] [pid 32598:tid 32612] [client 20.53.232.94:11136] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXpfnVY4u2FXFuCu0C4k5gAAAYw"]
[Thu Jan 29 03:12:30.786196 2026] [:error] [pid 30729:tid 30800] [client 20.53.232.94:4086] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi.php"] [unique_id "aXpfnoHlkRFkYwysACdAGgAAAMw"]
[Thu Jan 29 03:12:31.440737 2026] [:error] [pid 33151:tid 33197] [client 20.53.232.94:25389] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi.php"] [unique_id "aXpfn2tRH8LcJJ0AyU7FdgAAAkA"]
[Thu Jan 29 03:12:32.135082 2026] [:error] [pid 64076:tid 64093] [client 20.53.232.94:59157] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi.php"] [unique_id "aXpfoMgWS9sk7GfiNFebuQAAAo8"]
[Thu Jan 29 03:12:33.184815 2026] [:error] [pid 64076:tid 64092] [client 20.53.232.94:12738] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi.php"] [unique_id "aXpfocgWS9sk7GfiNFebvQAAAo4"]
[Thu Jan 29 03:12:34.279950 2026] [:error] [pid 33151:tid 33202] [client 20.53.232.94:4092] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpwer1.php"] [unique_id "aXpfomtRH8LcJJ0AyU7FeQAAAkU"]
[Thu Jan 29 03:12:34.776290 2026] [:error] [pid 64139:tid 64158] [client 20.53.232.94:12267] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpwer1.php"] [unique_id "aXpfok8_llMXywnNBzhX_wAAAxE"]
[Thu Jan 29 03:12:35.299300 2026] [:error] [pid 32747:tid 32769] [client 20.53.232.94:13202] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xpwer1.php"] [unique_id "aXpfo_0et-wQsmVMWlkz3gAAAdQ"]
[Thu Jan 29 03:12:36.408153 2026] [proxy_fcgi:error] [pid 64076:tid 64080] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.669219 2026] [proxy_fcgi:error] [pid 64076:tid 64099] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.704124 2026] [proxy_fcgi:error] [pid 64076:tid 64098] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.739980 2026] [proxy_fcgi:error] [pid 64076:tid 64087] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.773972 2026] [proxy_fcgi:error] [pid 64076:tid 64078] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.794729 2026] [proxy_fcgi:error] [pid 64076:tid 64100] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.830671 2026] [proxy_fcgi:error] [pid 64076:tid 64092] [client 20.53.232.94:11140] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:12:36.852589 2026] [:error] [pid 64076:tid 64088] [client 20.53.232.94:11140] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/css/index.php"] [unique_id "aXpfpMgWS9sk7GfiNFeb1QAAAoo"]
[Thu Jan 29 03:12:37.321527 2026] [:error] [pid 32895:tid 32906] [client 20.53.232.94:13197] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/css/index.php"] [unique_id "aXpfpXQ85pgihG9SXurZxgAAAgk"]
[Thu Jan 29 03:12:37.788346 2026] [:error] [pid 30817:tid 30842] [client 20.53.232.94:4087] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/css/index.php"] [unique_id "aXpfpZkL00co11SGgypJ5wAAAJY"]
[Thu Jan 29 03:12:38.378647 2026] [:error] [pid 32895:tid 32903] [client 20.53.232.94:25403] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/css/index.php"] [unique_id "aXpfpnQ85pgihG9SXurZyAAAAgY"]
[Thu Jan 29 03:12:40.928429 2026] [:error] [pid 64139:tid 64155] [client 20.53.232.94:11179] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aXpfqE8_llMXywnNBzhYCQAAAw4"]
[Thu Jan 29 03:12:41.315391 2026] [:error] [pid 32451:tid 32468] [client 20.53.232.94:13221] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aXpfqRnhmSN6e0P4d6tZagAAAU8"]
[Thu Jan 29 03:12:41.788325 2026] [:error] [pid 32747:tid 32750] [client 20.53.232.94:13212] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aXpfqf0et-wQsmVMWlkz5gAAAcE"]
[Thu Jan 29 03:12:42.444048 2026] [:error] [pid 64076:tid 64084] [client 20.53.232.94:23505] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goods.php"] [unique_id "aXpfqsgWS9sk7GfiNFeb3AAAAoY"]
[Thu Jan 29 03:12:43.359037 2026] [:error] [pid 30727:tid 30750] [client 20.53.232.94:12754] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXpfq56XAsWrB4DloY_c3wAAABM"]
[Thu Jan 29 03:12:45.401792 2026] [:error] [pid 64076:tid 64100] [client 20.53.232.94:11173] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXpfrcgWS9sk7GfiNFeb3wAAApY"]
[Thu Jan 29 03:12:45.925559 2026] [:error] [pid 32747:tid 32766] [client 20.53.232.94:59188] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXpfrf0et-wQsmVMWlkz6AAAAdE"]
[Thu Jan 29 03:12:47.382091 2026] [:error] [pid 30727:tid 30746] [client 20.53.232.94:12793] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXpfr56XAsWrB4DloY_c5QAAAA8"]
[Thu Jan 29 03:12:48.651492 2026] [:error] [pid 30727:tid 30753] [client 20.53.232.94:11184] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aXpfsJ6XAsWrB4DloY_c5wAAABY"]
[Thu Jan 29 03:12:51.269206 2026] [:error] [pid 33151:tid 33222] [client 20.53.232.94:23500] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aXpfs2tRH8LcJJ0AyU7FiwAAAlg"]
[Thu Jan 29 03:12:51.405804 2026] [:error] [pid 33151:tid 33219] [client 20.53.232.94:4068] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aXpfs2tRH8LcJJ0AyU7FjQAAAlU"]
[Thu Jan 29 03:12:52.267792 2026] [:error] [pid 33151:tid 33207] [client 20.53.232.94:11145] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aXpftGtRH8LcJJ0AyU7FkAAAAko"]
[Thu Jan 29 03:12:54.057679 2026] [:error] [pid 32598:tid 32603] [client 20.53.232.94:12276] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXpftlY4u2FXFuCu0C4k9wAAAYM"]
[Thu Jan 29 03:12:55.756849 2026] [:error] [pid 33151:tid 33219] [client 20.53.232.94:12272] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXpft2tRH8LcJJ0AyU7FmAAAAlU"]
[Thu Jan 29 03:12:58.401300 2026] [:error] [pid 64139:tid 64156] [client 20.53.232.94:17576] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXpfuk8_llMXywnNBzhYFgAAAw8"]
[Thu Jan 29 03:12:59.504673 2026] [:error] [pid 30817:tid 30829] [client 20.53.232.94:23532] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXpfu5kL00co11SGgypKAQAAAIk"]
[Thu Jan 29 03:12:59.815804 2026] [:error] [pid 33151:tid 33203] [client 20.53.232.94:13236] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aXpfu2tRH8LcJJ0AyU7FoAAAAkY"]
[Thu Jan 29 03:13:00.733802 2026] [:error] [pid 30727:tid 30741] [client 20.53.232.94:17566] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aXpfvJ6XAsWrB4DloY_c7QAAAAo"]
[Thu Jan 29 03:13:01.135246 2026] [:error] [pid 30729:tid 30812] [client 20.53.232.94:12766] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aXpfvYHlkRFkYwysACdAIQAAANg"]
[Thu Jan 29 03:13:02.176250 2026] [:error] [pid 32451:tid 32469] [client 20.53.232.94:11197] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php"] [unique_id "aXpfvhnhmSN6e0P4d6tZdgAAAVA"]
[Thu Jan 29 03:13:05.505838 2026] [:error] [pid 32451:tid 32472] [client 20.53.232.94:11148] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aXpfwRnhmSN6e0P4d6tZfAAAAVM"]
[Thu Jan 29 03:13:07.594727 2026] [:error] [pid 33151:tid 33219] [client 20.53.232.94:59161] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aXpfw2tRH8LcJJ0AyU7FtQAAAlU"]
[Thu Jan 29 03:13:08.295915 2026] [:error] [pid 33151:tid 33218] [client 20.53.232.94:12265] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aXpfxGtRH8LcJJ0AyU7FuAAAAlQ"]
[Thu Jan 29 03:13:08.844675 2026] [:error] [pid 33151:tid 33207] [client 20.53.232.94:14290] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o.php"] [unique_id "aXpfxGtRH8LcJJ0AyU7FuwAAAko"]
[Thu Jan 29 03:13:09.619910 2026] [:error] [pid 32451:tid 32468] [client 20.53.232.94:17541] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aXpfxRnhmSN6e0P4d6tZgQAAAU8"]
[Thu Jan 29 03:13:10.932567 2026] [:error] [pid 30729:tid 30791] [client 20.53.232.94:12535] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aXpfxoHlkRFkYwysACdAJAAAAMM"]
[Thu Jan 29 03:13:11.800861 2026] [:error] [pid 30817:tid 30837] [client 20.53.232.94:12252] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aXpfx5kL00co11SGgypKCAAAAJE"]
[Thu Jan 29 03:13:12.550090 2026] [:error] [pid 30817:tid 30844] [client 20.53.232.94:13195] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/"] [unique_id "aXpfyJkL00co11SGgypKCQAAAJg"]
[Thu Jan 29 03:13:13.472963 2026] [:error] [pid 30817:tid 30829] [client 20.53.232.94:23534] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aXpfyZkL00co11SGgypKCgAAAIk"]
[Thu Jan 29 03:13:13.791226 2026] [:error] [pid 30817:tid 30835] [client 20.53.232.94:17562] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aXpfyZkL00co11SGgypKCwAAAI8"]
[Thu Jan 29 03:13:14.798350 2026] [:error] [pid 64076:tid 64084] [client 20.53.232.94:14306] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aXpfysgWS9sk7GfiNFeb8AAAAoY"]
[Thu Jan 29 03:13:15.179823 2026] [:error] [pid 30729:tid 30807] [client 20.53.232.94:23521] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/goat.php"] [unique_id "aXpfy4HlkRFkYwysACdAKAAAANM"]
[Thu Jan 29 03:13:16.580152 2026] [:error] [pid 64139:tid 64151] [client 20.53.232.94:14327] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXpfzE8_llMXywnNBzhYIQAAAwo"]
[Thu Jan 29 03:13:17.272675 2026] [:error] [pid 64139:tid 64155] [client 20.53.232.94:3692] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXpfzU8_llMXywnNBzhYIgAAAw4"]
[Thu Jan 29 03:13:17.746593 2026] [:error] [pid 64076:tid 64087] [client 20.53.232.94:17542] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXpfzcgWS9sk7GfiNFeb8wAAAok"]
[Thu Jan 29 03:13:18.751422 2026] [:error] [pid 30817:tid 30842] [client 20.53.232.94:23523] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXpfzpkL00co11SGgypKFAAAAJY"]
[Thu Jan 29 03:13:19.123528 2026] [:error] [pid 64076:tid 64093] [client 20.53.232.94:13235] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aXpfz8gWS9sk7GfiNFeb9QAAAo8"]
[Thu Jan 29 03:13:19.444749 2026] [:error] [pid 32598:tid 32606] [client 20.53.232.94:4074] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aXpfz1Y4u2FXFuCu0C4lBwAAAYY"]
[Thu Jan 29 03:13:20.282496 2026] [:error] [pid 33151:tid 33203] [client 20.53.232.94:13241] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aXpf0GtRH8LcJJ0AyU7FxwAAAkY"]
[Thu Jan 29 03:13:21.067002 2026] [:error] [pid 32747:tid 32771] [client 20.53.232.94:12261] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xx.php"] [unique_id "aXpf0f0et-wQsmVMWlkz_wAAAdY"]
[Thu Jan 29 03:13:21.614806 2026] [:error] [pid 32598:tid 32624] [client 20.53.232.94:14281] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aXpf0VY4u2FXFuCu0C4lCQAAAZg"]
[Thu Jan 29 03:13:22.760198 2026] [:error] [pid 32598:tid 32601] [client 20.53.232.94:17599] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aXpf0lY4u2FXFuCu0C4lCgAAAYE"]
[Thu Jan 29 03:13:23.037292 2026] [:error] [pid 32747:tid 32756] [client 20.53.232.94:23504] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aXpf0_0et-wQsmVMWlk0AQAAAcc"]
[Thu Jan 29 03:13:24.131441 2026] [:error] [pid 33151:tid 33199] [client 20.53.232.94:3726] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/"] [unique_id "aXpf1GtRH8LcJJ0AyU7FygAAAkI"]
[Thu Jan 29 03:13:24.496644 2026] [:error] [pid 33151:tid 33218] [client 20.53.232.94:22461] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXpf1GtRH8LcJJ0AyU7FywAAAlQ"]
[Thu Jan 29 03:13:25.488891 2026] [:error] [pid 32598:tid 32612] [client 20.53.232.94:4090] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXpf1VY4u2FXFuCu0C4lDQAAAYw"]
[Thu Jan 29 03:13:26.548045 2026] [:error] [pid 64076:tid 64094] [client 20.53.232.94:22459] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXpf1sgWS9sk7GfiNFeb-QAAApA"]
[Thu Jan 29 03:13:29.658207 2026] [:error] [pid 30729:tid 30811] [client 20.53.232.94:12745] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXpf2YHlkRFkYwysACdANAAAANc"]
[Thu Jan 29 03:13:30.593605 2026] [:error] [pid 32747:tid 32771] [client 20.53.232.94:13242] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aXpf2v0et-wQsmVMWlk0CQAAAdY"]
[Thu Jan 29 03:13:31.009826 2026] [:error] [pid 32895:tid 32906] [client 20.53.232.94:59192] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aXpf23Q85pgihG9SXurZ5gAAAgk"]
[Thu Jan 29 03:13:31.629473 2026] [:error] [pid 32598:tid 32610] [client 20.53.232.94:12741] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aXpf21Y4u2FXFuCu0C4lFAAAAYo"]
[Thu Jan 29 03:13:31.802105 2026] [:error] [pid 64139:tid 64153] [client 20.53.232.94:13216] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f5.php"] [unique_id "aXpf208_llMXywnNBzhYKQAAAww"]
[Thu Jan 29 03:13:32.710525 2026] [:error] [pid 32598:tid 32612] [client 20.53.232.94:22412] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aXpf3FY4u2FXFuCu0C4lFgAAAYw"]
[Thu Jan 29 03:13:33.517864 2026] [:error] [pid 32747:tid 32762] [client 20.53.232.94:12274] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aXpf3f0et-wQsmVMWlk0CwAAAc0"]
[Thu Jan 29 03:13:34.851148 2026] [:error] [pid 64139:tid 64160] [client 20.53.232.94:23527] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aXpf3k8_llMXywnNBzhYKgAAAxM"]
[Thu Jan 29 03:13:35.032386 2026] [:error] [pid 30727:tid 30737] [client 20.53.232.94:11195] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aXpf356XAsWrB4DloY_dBQAAAAY"]
[Thu Jan 29 03:13:36.532720 2026] [proxy_fcgi:error] [pid 64076:tid 64101] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:36.559512 2026] [proxy_fcgi:error] [pid 64076:tid 64102] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:36.590654 2026] [proxy_fcgi:error] [pid 64076:tid 64079] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:36.609374 2026] [proxy_fcgi:error] [pid 64076:tid 64090] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:36.635076 2026] [proxy_fcgi:error] [pid 64076:tid 64097] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:36.655255 2026] [proxy_fcgi:error] [pid 64076:tid 64096] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:36.691613 2026] [proxy_fcgi:error] [pid 64076:tid 64082] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:37.009147 2026] [proxy_fcgi:error] [pid 64076:tid 64080] [client 20.53.232.94:59148] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:37.024647 2026] [:error] [pid 64076:tid 64084] [client 20.53.232.94:59148] [client 20.53.232.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aXpf4cgWS9sk7GfiNFecDAAAAoY"]
[Thu Jan 29 03:13:37.223337 2026] [proxy_fcgi:error] [pid 64076:tid 64086] [client 20.53.232.94:13231] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:13:37.238928 2026] [:error] [pid 64076:tid 64099] [client 20.53.232.94:13231] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jane.php"] [unique_id "aXpf4cgWS9sk7GfiNFecDwAAApU"]
[Thu Jan 29 03:13:37.517916 2026] [:error] [pid 32451:tid 32477] [client 20.53.232.94:23499] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jane.php"] [unique_id "aXpf4RnhmSN6e0P4d6tZoAAAAVg"]
[Thu Jan 29 03:13:39.117350 2026] [:error] [pid 32747:tid 32757] [client 20.53.232.94:23494] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jane.php"] [unique_id "aXpf4_0et-wQsmVMWlk0DQAAAcg"]
[Thu Jan 29 03:13:39.597941 2026] [:error] [pid 30729:tid 30793] [client 20.53.232.94:3672] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jane.php"] [unique_id "aXpf44HlkRFkYwysACdAPAAAAMU"]
[Thu Jan 29 03:13:40.623077 2026] [:error] [pid 32895:tid 32914] [client 20.53.232.94:3727] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aXpf5HQ85pgihG9SXurZ6gAAAhE"]
[Thu Jan 29 03:13:41.847088 2026] [:error] [pid 30729:tid 30788] [client 20.53.232.94:14276] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aXpf5YHlkRFkYwysACdAQQAAAMA"]
[Thu Jan 29 03:13:42.738424 2026] [:error] [pid 32747:tid 32764] [client 20.53.232.94:22440] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aXpf5v0et-wQsmVMWlk0EAAAAc8"]
[Thu Jan 29 03:13:43.056007 2026] [:error] [pid 30817:tid 30836] [client 20.53.232.94:61661] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aXpf55kL00co11SGgypKJgAAAJA"]
[Thu Jan 29 03:13:44.486510 2026] [:error] [pid 32451:tid 32464] [client 20.53.232.94:3759] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXpf6BnhmSN6e0P4d6tZpwAAAUs"]
[Thu Jan 29 03:13:45.216264 2026] [:error] [pid 32747:tid 32753] [client 20.53.232.94:3773] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXpf6f0et-wQsmVMWlk0FgAAAcQ"]
[Thu Jan 29 03:13:45.599970 2026] [:error] [pid 32747:tid 32750] [client 20.53.232.94:18104] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXpf6f0et-wQsmVMWlk0GAAAAcE"]
[Thu Jan 29 03:13:47.562022 2026] [:error] [pid 64139:tid 64165] [client 20.53.232.94:15813] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXpf608_llMXywnNBzhYNQAAAxg"]
[Thu Jan 29 03:13:49.359513 2026] [:error] [pid 64139:tid 64157] [client 20.53.232.94:3744] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aXpf7U8_llMXywnNBzhYNgAAAxA"]
[Thu Jan 29 03:13:50.023603 2026] [:error] [pid 33151:tid 33198] [client 20.53.232.94:61662] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aXpf7mtRH8LcJJ0AyU7F9AAAAkE"]
[Thu Jan 29 03:13:50.941216 2026] [:error] [pid 30729:tid 30803] [client 20.53.232.94:14467] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aXpf7oHlkRFkYwysACdASgAAAM8"]
[Thu Jan 29 03:13:51.895682 2026] [:error] [pid 64076:tid 64080] [client 20.53.232.94:15290] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aXpf78gWS9sk7GfiNFecFgAAAoI"]
[Thu Jan 29 03:13:52.544628 2026] [:error] [pid 32598:tid 32609] [client 20.53.232.94:15291] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aXpf8FY4u2FXFuCu0C4lIAAAAYk"]
[Thu Jan 29 03:13:52.941440 2026] [:error] [pid 32598:tid 32622] [client 20.53.232.94:3766] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aXpf8FY4u2FXFuCu0C4lJAAAAZY"]
[Thu Jan 29 03:13:53.700835 2026] [:error] [pid 30729:tid 30792] [client 20.53.232.94:3709] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aXpf8YHlkRFkYwysACdATQAAAMQ"]
[Thu Jan 29 03:13:54.601098 2026] [:error] [pid 30817:tid 30835] [client 20.53.232.94:18069] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aXpf8pkL00co11SGgypKOQAAAI8"]
[Thu Jan 29 03:13:55.204804 2026] [:error] [pid 32598:tid 32600] [client 20.53.232.94:61688] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aXpf81Y4u2FXFuCu0C4lJQAAAYA"]
[Thu Jan 29 03:13:55.966759 2026] [:error] [pid 33151:tid 33208] [client 20.53.232.94:61682] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aXpf82tRH8LcJJ0AyU7F-wAAAks"]
[Thu Jan 29 03:13:56.577463 2026] [:error] [pid 33151:tid 33206] [client 20.53.232.94:15256] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aXpf9GtRH8LcJJ0AyU7F_AAAAkk"]
[Thu Jan 29 03:13:56.939159 2026] [:error] [pid 33151:tid 33215] [client 20.53.232.94:13814] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wen.php"] [unique_id "aXpf9GtRH8LcJJ0AyU7F_QAAAlE"]
[Thu Jan 29 03:13:58.177833 2026] [:error] [pid 32747:tid 32762] [client 20.53.232.94:15285] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aXpf9v0et-wQsmVMWlk0KwAAAc0"]
[Thu Jan 29 03:13:59.521430 2026] [:error] [pid 32895:tid 32901] [client 20.53.232.94:23012] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aXpf93Q85pgihG9SXurZ9wAAAgQ"]
[Thu Jan 29 03:14:00.413438 2026] [:error] [pid 30729:tid 30812] [client 20.53.232.94:13802] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aXpf-IHlkRFkYwysACdAUQAAANg"]
[Thu Jan 29 03:14:01.209682 2026] [:error] [pid 33151:tid 33213] [client 20.53.232.94:15251] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x.php"] [unique_id "aXpf-WtRH8LcJJ0AyU7GBAAAAk8"]
[Thu Jan 29 03:14:01.739662 2026] [:error] [pid 30817:tid 30837] [client 20.53.232.94:3677] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aXpf-ZkL00co11SGgypKTQAAAJE"]
[Thu Jan 29 03:14:02.236592 2026] [:error] [pid 32747:tid 32771] [client 20.53.232.94:14489] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aXpf-v0et-wQsmVMWlk0LgAAAdY"]
[Thu Jan 29 03:14:03.332846 2026] [:error] [pid 33151:tid 33197] [client 20.53.232.94:3775] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aXpf-2tRH8LcJJ0AyU7GCAAAAkA"]
[Thu Jan 29 03:14:04.842115 2026] [:error] [pid 30729:tid 30788] [client 20.53.232.94:13776] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xxxx.php"] [unique_id "aXpf_IHlkRFkYwysACdAVQAAAMA"]
[Thu Jan 29 03:14:05.636092 2026] [:error] [pid 32451:tid 32459] [client 20.53.232.94:25457] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aXpf_RnhmSN6e0P4d6tZtgAAAUY"]
[Thu Jan 29 03:14:06.186780 2026] [:error] [pid 30727:tid 30736] [client 20.53.232.94:61637] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aXpf_p6XAsWrB4DloY_dFgAAAAU"]
[Thu Jan 29 03:14:06.536314 2026] [:error] [pid 32598:tid 32603] [client 20.53.232.94:25462] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aXpf_lY4u2FXFuCu0C4lMAAAAYM"]
[Thu Jan 29 03:14:06.864483 2026] [:error] [pid 32598:tid 32604] [client 20.53.232.94:14503] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aXpf_lY4u2FXFuCu0C4lMQAAAYQ"]
[Thu Jan 29 03:14:07.865885 2026] [:error] [pid 32895:tid 32915] [client 20.53.232.94:15856] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXpf_3Q85pgihG9SXuraAAAAAhI"]
[Thu Jan 29 03:14:08.665825 2026] [:error] [pid 64139:tid 64145] [client 20.53.232.94:23516] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXpgAE8_llMXywnNBzhYUwAAAwQ"]
[Thu Jan 29 03:14:10.019133 2026] [:error] [pid 33151:tid 33212] [client 20.53.232.94:23013] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXpgAmtRH8LcJJ0AyU7GFgAAAk4"]
[Thu Jan 29 03:14:10.985988 2026] [:error] [pid 64139:tid 64150] [client 20.53.232.94:15289] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXpgAk8_llMXywnNBzhYVwAAAwk"]
[Thu Jan 29 03:14:11.829003 2026] [:error] [pid 64139:tid 64157] [client 20.53.232.94:61675] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aXpgA08_llMXywnNBzhYWAAAAxA"]
[Thu Jan 29 03:14:12.674500 2026] [:error] [pid 30817:tid 30843] [client 20.53.232.94:12020] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aXpgBJkL00co11SGgypKXQAAAJc"]
[Thu Jan 29 03:14:13.481662 2026] [:error] [pid 32747:tid 32762] [client 20.53.232.94:3708] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aXpgBf0et-wQsmVMWlk0OQAAAc0"]
[Thu Jan 29 03:14:14.918408 2026] [:error] [pid 33151:tid 33200] [client 20.53.232.94:18090] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gec.php"] [unique_id "aXpgBmtRH8LcJJ0AyU7GIQAAAkM"]
[Thu Jan 29 03:14:15.644269 2026] [:error] [pid 30817:tid 30840] [client 20.53.232.94:13260] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aXpgB5kL00co11SGgypKYgAAAJQ"]
[Thu Jan 29 03:14:16.289216 2026] [:error] [pid 32747:tid 32767] [client 20.53.232.94:12008] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aXpgCP0et-wQsmVMWlk0PwAAAdI"]
[Thu Jan 29 03:14:17.952871 2026] [:error] [pid 30729:tid 30806] [client 20.53.232.94:25427] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aXpgCYHlkRFkYwysACdAZAAAANI"]
[Thu Jan 29 03:14:18.695061 2026] [:error] [pid 32895:tid 32899] [client 20.53.232.94:25432] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/f35.php"] [unique_id "aXpgCnQ85pgihG9SXuraCAAAAgI"]
[Thu Jan 29 03:14:18.864839 2026] [:error] [pid 32747:tid 32751] [client 20.53.232.94:25453] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXpgCv0et-wQsmVMWlk0QwAAAcI"]
[Thu Jan 29 03:14:19.302180 2026] [:error] [pid 64076:tid 64100] [client 20.53.232.94:18085] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXpgC8gWS9sk7GfiNFecKQAAApY"]
[Thu Jan 29 03:14:19.871912 2026] [:error] [pid 32747:tid 32750] [client 20.53.232.94:25421] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXpgC_0et-wQsmVMWlk0RAAAAcE"]
[Thu Jan 29 03:14:20.085779 2026] [:error] [pid 32451:tid 32460] [client 20.53.232.94:15850] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXpgDBnhmSN6e0P4d6tZwAAAAUc"]
[Thu Jan 29 03:14:20.612639 2026] [:error] [pid 30727:tid 30747] [client 20.53.232.94:22981] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aXpgDJ6XAsWrB4DloY_dHwAAABA"]
[Thu Jan 29 03:14:21.442006 2026] [:error] [pid 30727:tid 30739] [client 20.53.232.94:12170] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aXpgDZ6XAsWrB4DloY_dIAAAAAg"]
[Thu Jan 29 03:14:22.674417 2026] [:error] [pid 32598:tid 32605] [client 20.53.232.94:25413] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aXpgDlY4u2FXFuCu0C4lSAAAAYU"]
[Thu Jan 29 03:14:23.404445 2026] [:error] [pid 30817:tid 30831] [client 20.53.232.94:23001] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pp.php"] [unique_id "aXpgD5kL00co11SGgypKaQAAAIs"]
[Thu Jan 29 03:14:24.981131 2026] [:error] [pid 32451:tid 32454] [client 20.53.232.94:61656] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aXpgEBnhmSN6e0P4d6tZxAAAAUE"]
[Thu Jan 29 03:14:25.640071 2026] [:error] [pid 33151:tid 33209] [client 20.53.232.94:61666] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aXpgEWtRH8LcJJ0AyU7GLQAAAkw"]
[Thu Jan 29 03:14:26.158429 2026] [:error] [pid 33151:tid 33201] [client 20.53.232.94:19655] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aXpgEmtRH8LcJJ0AyU7GMQAAAkQ"]
[Thu Jan 29 03:14:26.708381 2026] [:error] [pid 32895:tid 32918] [client 20.53.232.94:15258] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/update/f35.php"] [unique_id "aXpgEnQ85pgihG9SXuraDgAAAhU"]
[Thu Jan 29 03:14:27.422720 2026] [:error] [pid 30729:tid 30810] [client 20.53.232.94:23005] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgE4HlkRFkYwysACdAagAAANY"]
[Thu Jan 29 03:14:28.088016 2026] [:error] [pid 33151:tid 33203] [client 20.53.232.94:15252] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgFGtRH8LcJJ0AyU7GNwAAAkY"]
[Thu Jan 29 03:14:28.640572 2026] [:error] [pid 32598:tid 32622] [client 20.53.232.94:12274] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgFFY4u2FXFuCu0C4lUQAAAZY"]
[Thu Jan 29 03:14:29.655931 2026] [:error] [pid 32598:tid 32609] [client 20.53.232.94:13783] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgFVY4u2FXFuCu0C4lVgAAAYk"]
[Thu Jan 29 03:14:30.268096 2026] [:error] [pid 32451:tid 32458] [client 20.53.232.94:15273] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgFhnhmSN6e0P4d6tZxwAAAUU"]
[Thu Jan 29 03:14:30.526286 2026] [:error] [pid 64139:tid 64158] [client 20.53.232.94:11173] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgFk8_llMXywnNBzhYYwAAAxE"]
[Thu Jan 29 03:14:31.696244 2026] [:error] [pid 30727:tid 30751] [client 20.53.232.94:15808] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgF56XAsWrB4DloY_dIQAAABQ"]
[Thu Jan 29 03:14:32.072000 2026] [:error] [pid 33151:tid 33221] [client 20.53.232.94:13253] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgGGtRH8LcJJ0AyU7GQAAAAlc"]
[Thu Jan 29 03:14:32.942724 2026] [:error] [pid 30727:tid 30743] [client 20.53.232.94:12176] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aXpgGJ6XAsWrB4DloY_dIgAAAAw"]
[Thu Jan 29 03:14:34.232720 2026] [:error] [pid 30817:tid 30822] [client 20.53.232.94:14495] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aXpgGpkL00co11SGgypKcQAAAII"]
[Thu Jan 29 03:14:34.703627 2026] [:error] [pid 32747:tid 32758] [client 20.53.232.94:19663] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aXpgGv0et-wQsmVMWlk0TwAAAck"]
[Thu Jan 29 03:14:35.187161 2026] [:error] [pid 32747:tid 32761] [client 20.53.232.94:16459] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aXpgG_0et-wQsmVMWlk0UgAAAcw"]
[Thu Jan 29 03:14:35.846933 2026] [:error] [pid 32895:tid 32903] [client 20.53.232.94:23024] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aXpgG3Q85pgihG9SXuraGAAAAgY"]
[Thu Jan 29 03:14:36.723719 2026] [:error] [pid 32895:tid 32916] [client 20.53.232.94:12221] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-t.api.php"] [unique_id "aXpgHHQ85pgihG9SXuraHAAAAhM"]
[Thu Jan 29 03:14:37.650513 2026] [proxy_fcgi:error] [pid 30727:tid 30738] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:37.901858 2026] [proxy_fcgi:error] [pid 30727:tid 30750] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:37.925288 2026] [proxy_fcgi:error] [pid 30727:tid 30752] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:37.972830 2026] [proxy_fcgi:error] [pid 30727:tid 30733] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.062635 2026] [proxy_fcgi:error] [pid 30727:tid 30731] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.081364 2026] [proxy_fcgi:error] [pid 30727:tid 30747] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.101671 2026] [proxy_fcgi:error] [pid 30727:tid 30739] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.134463 2026] [proxy_fcgi:error] [pid 30727:tid 30736] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.261835 2026] [proxy_fcgi:error] [pid 30727:tid 30737] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.281983 2026] [proxy_fcgi:error] [pid 30727:tid 30753] [client 20.53.232.94:24182] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:14:38.317809 2026] [:error] [pid 30727:tid 30734] [client 20.53.232.94:24182] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXpgHp6XAsWrB4DloY_dMwAAAAM"]
[Thu Jan 29 03:14:38.577084 2026] [:error] [pid 30729:tid 30803] [client 20.53.232.94:12213] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXpgHoHlkRFkYwysACdAdQAAAM8"]
[Thu Jan 29 03:14:40.794237 2026] [:error] [pid 32747:tid 32759] [client 20.53.232.94:11970] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXpgIP0et-wQsmVMWlk0UwAAAco"]
[Thu Jan 29 03:14:41.217698 2026] [:error] [pid 64139:tid 64148] [client 20.53.232.94:13275] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXpgIU8_llMXywnNBzhYaQAAAwc"]
[Thu Jan 29 03:14:41.959668 2026] [:error] [pid 32598:tid 32617] [client 20.53.232.94:14769] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXpgIVY4u2FXFuCu0C4lXwAAAZE"]
[Thu Jan 29 03:14:42.941418 2026] [:error] [pid 33151:tid 33207] [client 20.53.232.94:15855] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXpgImtRH8LcJJ0AyU7GTwAAAko"]
[Thu Jan 29 03:14:43.589071 2026] [:error] [pid 32895:tid 32897] [client 20.53.232.94:12185] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXpgI3Q85pgihG9SXuraHwAAAgA"]
[Thu Jan 29 03:14:46.479098 2026] [:error] [pid 64139:tid 64141] [client 20.53.232.94:14739] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXpgJk8_llMXywnNBzhYcQAAAwA"]
[Thu Jan 29 03:14:47.377486 2026] [:error] [pid 32747:tid 32753] [client 20.53.232.94:11416] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aXpgJ_0et-wQsmVMWlk0VgAAAcQ"]
[Thu Jan 29 03:14:48.043178 2026] [:error] [pid 30817:tid 30832] [client 20.53.232.94:12005] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aXpgKJkL00co11SGgypKfAAAAIw"]
[Thu Jan 29 03:14:48.394227 2026] [:error] [pid 33151:tid 33221] [client 20.53.232.94:14749] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aXpgKGtRH8LcJJ0AyU7GYAAAAlc"]
[Thu Jan 29 03:14:48.876407 2026] [:error] [pid 64076:tid 64080] [client 20.53.232.94:11243] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aXpgKMgWS9sk7GfiNFecNgAAAoI"]
[Thu Jan 29 03:14:49.520147 2026] [:error] [pid 30729:tid 30809] [client 20.53.232.94:12200] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXpgKYHlkRFkYwysACdAegAAANU"]
[Thu Jan 29 03:14:50.700875 2026] [:error] [pid 64076:tid 64095] [client 20.53.232.94:14736] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXpgKsgWS9sk7GfiNFecNwAAApE"]
[Thu Jan 29 03:14:51.598852 2026] [:error] [pid 30729:tid 30789] [client 20.53.232.94:16488] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXpgK4HlkRFkYwysACdAfwAAAME"]
[Thu Jan 29 03:14:52.801945 2026] [:error] [pid 30729:tid 30806] [client 20.53.232.94:25431] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXpgLIHlkRFkYwysACdAhQAAANI"]
[Thu Jan 29 03:14:54.363713 2026] [:error] [pid 32747:tid 32749] [client 20.53.232.94:14783] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXpgLv0et-wQsmVMWlk0XAAAAcA"]
[Thu Jan 29 03:14:55.937831 2026] [:error] [pid 30817:tid 30842] [client 20.53.232.94:62517] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXpgL5kL00co11SGgypKfwAAAJY"]
[Thu Jan 29 03:14:58.020538 2026] [:error] [pid 32895:tid 32915] [client 20.53.232.94:14765] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXpgMnQ85pgihG9SXuraKgAAAhI"]
[Thu Jan 29 03:14:59.517740 2026] [:error] [pid 32598:tid 32605] [client 20.53.232.94:13294] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXpgM1Y4u2FXFuCu0C4lZgAAAYU"]
[Thu Jan 29 03:14:59.766589 2026] [:error] [pid 30817:tid 30833] [client 20.53.232.94:13281] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/init.php"] [unique_id "aXpgM5kL00co11SGgypKgAAAAI0"]
[Thu Jan 29 03:15:00.233939 2026] [:error] [pid 32598:tid 32604] [client 20.53.232.94:12177] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/init.php"] [unique_id "aXpgNFY4u2FXFuCu0C4laAAAAYQ"]
[Thu Jan 29 03:15:00.785631 2026] [:error] [pid 30817:tid 30837] [client 20.53.232.94:18603] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/init.php"] [unique_id "aXpgNJkL00co11SGgypKgQAAAJE"]
[Thu Jan 29 03:15:01.129166 2026] [:error] [pid 64139:tid 64154] [client 20.53.232.94:25440] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/init.php"] [unique_id "aXpgNU8_llMXywnNBzhYfgAAAw0"]
[Thu Jan 29 03:15:01.394412 2026] [:error] [pid 30817:tid 30823] [client 20.53.232.94:13262] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXpgNZkL00co11SGgypKhAAAAIM"]
[Thu Jan 29 03:15:02.533361 2026] [:error] [pid 30729:tid 30807] [client 20.53.232.94:23013] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXpgNoHlkRFkYwysACdAkwAAANM"]
[Thu Jan 29 03:15:02.727336 2026] [:error] [pid 30727:tid 30745] [client 20.53.232.94:25458] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXpgNp6XAsWrB4DloY_dTgAAAA4"]
[Thu Jan 29 03:15:03.482899 2026] [:error] [pid 33151:tid 33204] [client 20.53.232.94:62487] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXpgN2tRH8LcJJ0AyU7GaQAAAkc"]
[Thu Jan 29 03:15:03.876663 2026] [:error] [pid 30817:tid 30826] [client 20.53.232.94:62498] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXpgN5kL00co11SGgypKhQAAAIY"]
[Thu Jan 29 03:15:04.797825 2026] [:error] [pid 64139:tid 64155] [client 20.53.232.94:62483] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXpgOE8_llMXywnNBzhYhAAAAw4"]
[Thu Jan 29 03:15:06.049496 2026] [:error] [pid 30727:tid 30736] [client 20.53.232.94:12023] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXpgOp6XAsWrB4DloY_dUgAAAAU"]
[Thu Jan 29 03:15:07.078975 2026] [:error] [pid 32895:tid 32897] [client 20.53.232.94:62476] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXpgO3Q85pgihG9SXuraMQAAAgA"]
[Thu Jan 29 03:15:07.837992 2026] [:error] [pid 32598:tid 32613] [client 20.53.232.94:62524] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aXpgO1Y4u2FXFuCu0C4lcwAAAY0"]
[Thu Jan 29 03:15:08.244088 2026] [:error] [pid 32895:tid 32903] [client 20.53.232.94:62513] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aXpgPHQ85pgihG9SXuraNgAAAgY"]
[Thu Jan 29 03:15:08.795973 2026] [:error] [pid 32598:tid 32607] [client 20.53.232.94:23477] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aXpgPFY4u2FXFuCu0C4ldgAAAYc"]
[Thu Jan 29 03:15:09.295004 2026] [:error] [pid 32598:tid 32621] [client 20.53.232.94:3857] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/k.php"] [unique_id "aXpgPVY4u2FXFuCu0C4leAAAAZU"]
[Thu Jan 29 03:15:10.050879 2026] [:error] [pid 33151:tid 33222] [client 20.53.232.94:3864] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aXpgPmtRH8LcJJ0AyU7GcgAAAlg"]
[Thu Jan 29 03:15:11.527319 2026] [:error] [pid 32451:tid 32469] [client 20.53.232.94:62510] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aXpgPxnhmSN6e0P4d6tZ3AAAAVA"]
[Thu Jan 29 03:15:12.451605 2026] [:error] [pid 30727:tid 30735] [client 20.53.232.94:12463] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aXpgQJ6XAsWrB4DloY_dWgAAAAQ"]
[Thu Jan 29 03:15:13.259800 2026] [:error] [pid 64076:tid 64094] [client 20.53.232.94:24813] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless.php"] [unique_id "aXpgQcgWS9sk7GfiNFecPwAAApA"]
[Thu Jan 29 03:15:14.531744 2026] [:error] [pid 64076:tid 64085] [client 20.53.232.94:21124] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aXpgQsgWS9sk7GfiNFecRAAAAoc"]
[Thu Jan 29 03:15:15.817512 2026] [:error] [pid 30727:tid 30755] [client 20.53.232.94:21144] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aXpgQ56XAsWrB4DloY_dXwAAABg"]
[Thu Jan 29 03:15:16.222683 2026] [:error] [pid 32598:tid 32618] [client 20.53.232.94:13502] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aXpgRFY4u2FXFuCu0C4lhAAAAZI"]
[Thu Jan 29 03:15:16.640942 2026] [:error] [pid 30817:tid 30838] [client 20.53.232.94:13003] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/X7x.php"] [unique_id "aXpgRJkL00co11SGgypKhwAAAJI"]
[Thu Jan 29 03:15:17.129452 2026] [:error] [pid 64076:tid 64093] [client 20.53.232.94:3814] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aXpgRcgWS9sk7GfiNFecSAAAAo8"]
[Thu Jan 29 03:15:17.926639 2026] [:error] [pid 64076:tid 64092] [client 20.53.232.94:15545] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aXpgRcgWS9sk7GfiNFecSQAAAo4"]
[Thu Jan 29 03:15:19.549263 2026] [:error] [pid 32747:tid 32752] [client 20.53.232.94:12720] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aXpgR_0et-wQsmVMWlk0YgAAAcM"]
[Thu Jan 29 03:15:20.189766 2026] [:error] [pid 33151:tid 33205] [client 20.53.232.94:15510] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class20.php"] [unique_id "aXpgSGtRH8LcJJ0AyU7GdgAAAkg"]
[Thu Jan 29 03:15:20.537682 2026] [:error] [pid 32895:tid 32906] [client 20.53.232.94:21122] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgSHQ85pgihG9SXuraPgAAAgk"]
[Thu Jan 29 03:15:21.785333 2026] [:error] [pid 32895:tid 32917] [client 20.53.232.94:3799] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgSXQ85pgihG9SXuraPwAAAhQ"]
[Thu Jan 29 03:15:23.200142 2026] [:error] [pid 64139:tid 64162] [client 20.53.232.94:13726] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgS08_llMXywnNBzhYhwAAAxU"]
[Thu Jan 29 03:15:23.645661 2026] [:error] [pid 64139:tid 64165] [client 20.53.232.94:13732] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aXpgS08_llMXywnNBzhYiAAAAxg"]
[Thu Jan 29 03:15:24.387613 2026] [:error] [pid 32747:tid 32763] [client 20.53.232.94:15523] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgTP0et-wQsmVMWlk0YwAAAc4"]
[Thu Jan 29 03:15:25.376172 2026] [:error] [pid 33151:tid 33207] [client 20.53.232.94:24770] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgTWtRH8LcJJ0AyU7GgQAAAko"]
[Thu Jan 29 03:15:26.351811 2026] [:error] [pid 32598:tid 32620] [client 20.53.232.94:13014] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgTlY4u2FXFuCu0C4lkwAAAZQ"]
[Thu Jan 29 03:15:26.939100 2026] [:error] [pid 32747:tid 32754] [client 20.53.232.94:21861] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXpgTv0et-wQsmVMWlk0ZgAAAcU"]
[Thu Jan 29 03:15:27.342335 2026] [:error] [pid 64139:tid 64151] [client 20.53.232.94:11753] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aXpgT08_llMXywnNBzhYjgAAAwo"]
[Thu Jan 29 03:15:27.660325 2026] [:error] [pid 30727:tid 30747] [client 20.53.232.94:11734] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aXpgT56XAsWrB4DloY_dZAAAABA"]
[Thu Jan 29 03:15:28.016039 2026] [:error] [pid 30817:tid 30843] [client 20.53.232.94:3829] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aXpgUJkL00co11SGgypKlgAAAJc"]
[Thu Jan 29 03:15:28.257607 2026] [:error] [pid 64076:tid 64093] [client 20.53.232.94:3780] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aXpgUMgWS9sk7GfiNFecTwAAAo8"]
[Thu Jan 29 03:15:28.679376 2026] [:error] [pid 32747:tid 32770] [client 20.53.232.94:11774] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aXpgUP0et-wQsmVMWlk0aQAAAdU"]
[Thu Jan 29 03:15:29.149101 2026] [:error] [pid 64076:tid 64083] [client 20.53.232.94:11773] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aXpgUcgWS9sk7GfiNFecUQAAAoU"]
[Thu Jan 29 03:15:30.854064 2026] [:error] [pid 64076:tid 64097] [client 20.53.232.94:12440] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aXpgUsgWS9sk7GfiNFecVQAAApM"]
[Thu Jan 29 03:15:31.374602 2026] [:error] [pid 30727:tid 30755] [client 20.53.232.94:15521] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass4.php"] [unique_id "aXpgU56XAsWrB4DloY_dZQAAABg"]
[Thu Jan 29 03:15:32.046346 2026] [:error] [pid 32747:tid 32760] [client 20.53.232.94:12471] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wag.php"] [unique_id "aXpgVP0et-wQsmVMWlk0bQAAAcs"]
[Thu Jan 29 03:15:32.287033 2026] [:error] [pid 64139:tid 64141] [client 20.53.232.94:12455] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wag.php"] [unique_id "aXpgVE8_llMXywnNBzhYkAAAAwA"]
[Thu Jan 29 03:15:32.936501 2026] [:error] [pid 32747:tid 32766] [client 20.53.232.94:3895] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wag.php"] [unique_id "aXpgVP0et-wQsmVMWlk0bwAAAdE"]
[Thu Jan 29 03:15:33.117666 2026] [:error] [pid 32747:tid 32763] [client 20.53.232.94:13019] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wag.php"] [unique_id "aXpgVf0et-wQsmVMWlk0cAAAAc4"]
[Thu Jan 29 03:15:34.808565 2026] [:error] [pid 32451:tid 32458] [client 20.53.232.94:3840] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xvent.php"] [unique_id "aXpgVhnhmSN6e0P4d6tZ6gAAAUU"]
[Thu Jan 29 03:15:35.207290 2026] [:error] [pid 32747:tid 32765] [client 20.53.232.94:13044] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xvent.php"] [unique_id "aXpgV_0et-wQsmVMWlk0dAAAAdA"]
[Thu Jan 29 03:15:38.293442 2026] [proxy_fcgi:error] [pid 64076:tid 64092] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.315130 2026] [proxy_fcgi:error] [pid 64076:tid 64088] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.334915 2026] [proxy_fcgi:error] [pid 64076:tid 64089] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.353629 2026] [proxy_fcgi:error] [pid 64076:tid 64079] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.382565 2026] [proxy_fcgi:error] [pid 64076:tid 64090] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.404039 2026] [proxy_fcgi:error] [pid 64076:tid 64097] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.687780 2026] [proxy_fcgi:error] [pid 64076:tid 64096] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.711470 2026] [proxy_fcgi:error] [pid 64076:tid 64094] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.732447 2026] [proxy_fcgi:error] [pid 64076:tid 64078] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.757244 2026] [proxy_fcgi:error] [pid 64076:tid 64080] [client 20.53.232.94:3859] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 03:15:38.801605 2026] [:error] [pid 64076:tid 64085] [client 20.53.232.94:3859] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geck.php"] [unique_id "aXpgWsgWS9sk7GfiNFecZgAAAoc"]
[Thu Jan 29 03:15:39.487365 2026] [:error] [pid 30727:tid 30743] [client 20.53.232.94:3867] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geck.php"] [unique_id "aXpgW56XAsWrB4DloY_dbQAAAAw"]
[Thu Jan 29 03:15:40.729462 2026] [:error] [pid 32895:tid 32899] [client 20.53.232.94:13705] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geck.php"] [unique_id "aXpgXHQ85pgihG9SXuraUAAAAgI"]
[Thu Jan 29 03:15:40.964233 2026] [:error] [pid 33151:tid 33214] [client 20.53.232.94:12447] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geck.php"] [unique_id "aXpgXGtRH8LcJJ0AyU7GhwAAAlA"]
[Thu Jan 29 03:15:41.258821 2026] [:error] [pid 32895:tid 32903] [client 20.53.232.94:23453] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-update.php"] [unique_id "aXpgXXQ85pgihG9SXuraUQAAAgY"]
[Thu Jan 29 03:15:41.709472 2026] [:error] [pid 32895:tid 32898] [client 20.53.232.94:13720] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-update.php"] [unique_id "aXpgXXQ85pgihG9SXuraUwAAAgE"]
[Thu Jan 29 03:15:42.222564 2026] [:error] [pid 30729:tid 30808] [client 20.53.232.94:13010] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-update.php"] [unique_id "aXpgXoHlkRFkYwysACdArQAAANQ"]
[Thu Jan 29 03:15:42.763558 2026] [:error] [pid 30729:tid 30812] [client 20.53.232.94:13756] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-update.php"] [unique_id "aXpgXoHlkRFkYwysACdAsAAAANg"]
[Thu Jan 29 03:15:43.014532 2026] [:error] [pid 30817:tid 30834] [client 20.53.232.94:12432] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aXpgX5kL00co11SGgypKpwAAAI4"]
[Thu Jan 29 03:15:43.143361 2026] [:error] [pid 33151:tid 33219] [client 20.53.232.94:12466] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aXpgX2tRH8LcJJ0AyU7GiQAAAlU"]
[Thu Jan 29 03:15:43.336283 2026] [:error] [pid 30817:tid 30823] [client 20.53.232.94:3843] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aXpgX5kL00co11SGgypKqAAAAIM"]
[Thu Jan 29 03:15:45.546110 2026] [:error] [pid 33151:tid 33202] [client 20.53.232.94:13028] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a.php"] [unique_id "aXpgYWtRH8LcJJ0AyU7GjQAAAkU"]
[Thu Jan 29 03:15:47.164164 2026] [:error] [pid 30729:tid 30793] [client 20.53.232.94:12446] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admins.php"] [unique_id "aXpgY4HlkRFkYwysACdAtAAAAMU"]
[Thu Jan 29 03:15:48.200143 2026] [:error] [pid 64076:tid 64092] [client 20.53.232.94:21173] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admins.php"] [unique_id "aXpgZMgWS9sk7GfiNFecbQAAAo4"]
[Thu Jan 29 03:15:48.679031 2026] [:error] [pid 30817:tid 30830] [client 20.53.232.94:3894] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admins.php"] [unique_id "aXpgZJkL00co11SGgypKqwAAAIo"]
[Thu Jan 29 03:15:49.294488 2026] [:error] [pid 30817:tid 30820] [client 20.53.232.94:24706] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admins.php"] [unique_id "aXpgZZkL00co11SGgypKrQAAAIA"]
[Thu Jan 29 03:15:50.099858 2026] [:error] [pid 64076:tid 64094] [client 20.53.232.94:24810] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aXpgZsgWS9sk7GfiNFeccQAAApA"]
[Thu Jan 29 03:15:51.921525 2026] [:error] [pid 30729:tid 30810] [client 20.53.232.94:12430] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aXpgZ4HlkRFkYwysACdAtQAAANY"]
[Thu Jan 29 03:15:52.675301 2026] [:error] [pid 30817:tid 30832] [client 20.53.232.94:23466] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aXpgaJkL00co11SGgypKsgAAAIw"]
[Thu Jan 29 03:15:53.858866 2026] [:error] [pid 30727:tid 30744] [client 20.53.232.94:13267] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-configs.php"] [unique_id "aXpgaZ6XAsWrB4DloY_degAAAA0"]
[Thu Jan 29 03:15:54.214980 2026] [:error] [pid 30817:tid 30821] [client 20.53.232.94:23458] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXpgapkL00co11SGgypKtQAAAIE"]
[Thu Jan 29 03:15:54.528685 2026] [:error] [pid 30727:tid 30749] [client 20.53.232.94:14572] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXpgap6XAsWrB4DloY_dewAAABI"]
[Thu Jan 29 03:15:54.711343 2026] [:error] [pid 32895:tid 32901] [client 20.53.232.94:24726] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXpganQ85pgihG9SXuraXwAAAgQ"]
[Thu Jan 29 03:15:55.069230 2026] [:error] [pid 30729:tid 30805] [client 20.53.232.94:3899] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXpga4HlkRFkYwysACdAuAAAANE"]
[Thu Jan 29 03:15:55.561934 2026] [:error] [pid 30729:tid 30788] [client 20.53.232.94:25412] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aXpga4HlkRFkYwysACdAugAAAMA"]
[Thu Jan 29 03:15:55.964091 2026] [:error] [pid 32598:tid 32613] [client 20.53.232.94:21133] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aXpga1Y4u2FXFuCu0C4loQAAAY0"]
[Thu Jan 29 03:15:57.278015 2026] [:error] [pid 32598:tid 32612] [client 20.53.232.94:21163] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aXpgbVY4u2FXFuCu0C4lqAAAAYw"]
[Thu Jan 29 03:15:57.931596 2026] [:error] [pid 32451:tid 32459] [client 20.53.232.94:16503] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp.php"] [unique_id "aXpgbRnhmSN6e0P4d6taBgAAAUY"]
[Thu Jan 29 03:15:58.901830 2026] [:error] [pid 30817:tid 30830] [client 20.53.232.94:24825] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aXpgbpkL00co11SGgypKuQAAAIo"]
[Thu Jan 29 03:15:59.348412 2026] [:error] [pid 32747:tid 32754] [client 20.53.232.94:24828] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aXpgb_0et-wQsmVMWlk0gwAAAcU"]
[Thu Jan 29 03:16:00.022215 2026] [:error] [pid 30817:tid 30840] [client 20.53.232.94:3877] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aXpgcJkL00co11SGgypKuwAAAJQ"]
[Thu Jan 29 03:16:00.993410 2026] [:error] [pid 33151:tid 33210] [client 20.53.232.94:62515] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aXpgcGtRH8LcJJ0AyU7GmQAAAk0"]
[Thu Jan 29 03:16:02.072212 2026] [:error] [pid 32598:tid 32617] [client 20.53.232.94:24742] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a1.php"] [unique_id "aXpgclY4u2FXFuCu0C4lswAAAZE"]
[Thu Jan 29 03:16:02.768103 2026] [:error] [pid 32747:tid 32771] [client 20.53.232.94:23424] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a1.php"] [unique_id "aXpgcv0et-wQsmVMWlk0iAAAAdY"]
[Thu Jan 29 03:16:03.063408 2026] [:error] [pid 30729:tid 30800] [client 20.53.232.94:12449] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a1.php"] [unique_id "aXpgc4HlkRFkYwysACdAvwAAAMw"]
[Thu Jan 29 03:16:03.803668 2026] [:error] [pid 30729:tid 30809] [client 20.53.232.94:23441] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a1.php"] [unique_id "aXpgc4HlkRFkYwysACdAwAAAANU"]
[Thu Jan 29 03:16:04.037110 2026] [:error] [pid 33151:tid 33214] [client 20.53.232.94:3217] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aXpgdGtRH8LcJJ0AyU7GoAAAAlA"]
[Thu Jan 29 03:16:04.472462 2026] [:error] [pid 64076:tid 64084] [client 20.53.232.94:12995] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aXpgdMgWS9sk7GfiNFecdgAAAoY"]
[Thu Jan 29 03:16:05.400543 2026] [:error] [pid 30729:tid 30789] [client 20.53.232.94:3227] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aXpgdYHlkRFkYwysACdAwwAAAME"]
[Thu Jan 29 03:16:06.403849 2026] [:error] [pid 33151:tid 33209] [client 20.53.232.94:24745] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.1.php"] [unique_id "aXpgdmtRH8LcJJ0AyU7GowAAAkw"]
[Thu Jan 29 03:16:07.128701 2026] [:error] [pid 32598:tid 32613] [client 20.53.232.94:62512] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpgd1Y4u2FXFuCu0C4lvQAAAY0"]
[Thu Jan 29 03:16:07.417194 2026] [:error] [pid 33151:tid 33198] [client 20.53.232.94:24805] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpgd2tRH8LcJJ0AyU7GpAAAAkE"]
[Thu Jan 29 03:16:08.974553 2026] [:error] [pid 64076:tid 64088] [client 20.53.232.94:24727] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpgeMgWS9sk7GfiNFecewAAAoo"]
[Thu Jan 29 03:16:09.348270 2026] [:error] [pid 30817:tid 30827] [client 20.53.232.94:24078] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lala.php"] [unique_id "aXpgeZkL00co11SGgypKwgAAAIc"]
[Thu Jan 29 03:16:09.709532 2026] [:error] [pid 30817:tid 30820] [client 20.53.232.94:16506] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tox.php"] [unique_id "aXpgeZkL00co11SGgypKxAAAAIA"]
[Thu Jan 29 03:16:10.422620 2026] [:error] [pid 33151:tid 33205] [client 20.53.232.94:13023] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tox.php"] [unique_id "aXpgemtRH8LcJJ0AyU7GqAAAAkg"]
[Thu Jan 29 03:16:11.241746 2026] [:error] [pid 32747:tid 32770] [client 20.53.232.94:12180] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tox.php"] [unique_id "aXpge_0et-wQsmVMWlk0kgAAAdU"]
[Thu Jan 29 03:16:11.525337 2026] [:error] [pid 32451:tid 32462] [client 20.53.232.94:14537] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tox.php"] [unique_id "aXpgexnhmSN6e0P4d6taDAAAAUk"]
[Thu Jan 29 03:16:11.998814 2026] [:error] [pid 33151:tid 33218] [client 20.53.232.94:3248] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXpge2tRH8LcJJ0AyU7GrAAAAlQ"]
[Thu Jan 29 03:16:12.853022 2026] [:error] [pid 30727:tid 30754] [client 20.53.232.94:3255] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXpgfJ6XAsWrB4DloY_dhgAAABc"]
[Thu Jan 29 03:16:13.547805 2026] [:error] [pid 32598:tid 32601] [client 20.53.232.94:23456] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXpgfVY4u2FXFuCu0C4lxQAAAYE"]
[Thu Jan 29 03:16:13.975507 2026] [:error] [pid 30729:tid 30809] [client 20.53.232.94:62473] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXpgfYHlkRFkYwysACdAygAAANU"]
[Thu Jan 29 03:16:14.779345 2026] [:error] [pid 30727:tid 30741] [client 20.53.232.94:12461] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aaa.php"] [unique_id "aXpgfp6XAsWrB4DloY_digAAAAo"]
[Thu Jan 29 03:16:15.284376 2026] [:error] [pid 30817:tid 30831] [client 20.53.232.94:23486] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aaa.php"] [unique_id "aXpgf5kL00co11SGgypKxwAAAIs"]
[Thu Jan 29 03:16:15.637464 2026] [:error] [pid 30817:tid 30825] [client 20.53.232.94:25460] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aaa.php"] [unique_id "aXpgf5kL00co11SGgypKyAAAAIU"]
[Thu Jan 29 03:16:16.309646 2026] [:error] [pid 33151:tid 33202] [client 20.53.232.94:13046] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/aaa.php"] [unique_id "aXpggGtRH8LcJJ0AyU7GswAAAkU"]
[Thu Jan 29 03:16:16.717603 2026] [:error] [pid 33151:tid 33208] [client 20.53.232.94:23430] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aXpggGtRH8LcJJ0AyU7GtwAAAks"]
[Thu Jan 29 03:16:16.841433 2026] [:error] [pid 33151:tid 33215] [client 20.53.232.94:24101] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aXpggGtRH8LcJJ0AyU7GuAAAAlE"]
[Thu Jan 29 03:16:17.412121 2026] [:error] [pid 30727:tid 30740] [client 20.53.232.94:23480] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aXpggZ6XAsWrB4DloY_djwAAAAk"]
[Thu Jan 29 03:16:17.982864 2026] [:error] [pid 30727:tid 30731] [client 20.53.232.94:3200] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/a2.php"] [unique_id "aXpggZ6XAsWrB4DloY_dkAAAAAA"]
[Thu Jan 29 03:16:18.228440 2026] [:error] [pid 32598:tid 32614] [client 20.53.232.94:24783] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXpgglY4u2FXFuCu0C4lzAAAAY4"]
[Thu Jan 29 03:16:18.777977 2026] [:error] [pid 30817:tid 30833] [client 20.53.232.94:3866] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXpggpkL00co11SGgypKywAAAI0"]
[Thu Jan 29 03:16:19.468490 2026] [:error] [pid 30817:tid 30827] [client 20.53.232.94:3888] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXpgg5kL00co11SGgypKzQAAAIc"]
[Thu Jan 29 03:16:20.334324 2026] [:error] [pid 30729:tid 30810] [client 20.53.232.94:3901] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXpghIHlkRFkYwysACdAzAAAANY"]
[Thu Jan 29 03:16:20.876094 2026] [:error] [pid 30727:tid 30754] [client 20.53.232.94:24762] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aXpghJ6XAsWrB4DloY_dlAAAABc"]
[Thu Jan 29 03:16:21.405827 2026] [:error] [pid 32598:tid 32601] [client 20.53.232.94:3881] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aXpghVY4u2FXFuCu0C4lzwAAAYE"]
[Thu Jan 29 03:16:21.748145 2026] [:error] [pid 30727:tid 30732] [client 20.53.232.94:24819] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aXpghZ6XAsWrB4DloY_dlgAAAAE"]
[Thu Jan 29 03:16:22.818196 2026] [:error] [pid 33151:tid 33206] [client 20.53.232.94:24748] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aXpghmtRH8LcJJ0AyU7GxAAAAkk"]
[Thu Jan 29 03:16:23.099488 2026] [:error] [pid 30727:tid 30734] [client 20.53.232.94:13016] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aXpgh56XAsWrB4DloY_dmgAAAAM"]
[Thu Jan 29 03:16:25.135462 2026] [:error] [pid 30727:tid 30742] [client 20.53.232.94:62494] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aXpgiZ6XAsWrB4DloY_dnAAAAAs"]
[Thu Jan 29 03:16:25.609686 2026] [:error] [pid 32747:tid 32760] [client 20.53.232.94:13018] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aXpgif0et-wQsmVMWlk0oAAAAcs"]
[Thu Jan 29 03:16:26.207822 2026] [:error] [pid 33151:tid 33214] [client 20.53.232.94:3851] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aXpgimtRH8LcJJ0AyU7GxQAAAlA"]
[Thu Jan 29 03:16:26.850722 2026] [:error] [pid 30817:tid 30821] [client 20.53.232.94:24749] [client 20.53.232.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXpgipkL00co11SGgypK1wAAAIE"]
[Thu Jan 29 03:16:27.868596 2026] [:error] [pid 32451:tid 32457] [client 20.53.232.94:11987] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXpgixnhmSN6e0P4d6taGQAAAUQ"]
[Thu Jan 29 03:16:28.452792 2026] [:error] [pid 32451:tid 32466] [client 20.53.232.94:3511] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXpgjBnhmSN6e0P4d6taGgAAAU0"]
[Thu Jan 29 03:16:29.344499 2026] [:error] [pid 32451:tid 32471] [client 20.53.232.94:23483] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXpgjRnhmSN6e0P4d6taHAAAAVI"]
[Thu Jan 29 03:16:30.387691 2026] [:error] [pid 32747:tid 32773] [client 20.53.232.94:23481] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/to.php"] [unique_id "aXpgjv0et-wQsmVMWlk0qQAAAdg"]
[Thu Jan 29 03:16:30.870180 2026] [:error] [pid 32747:tid 32767] [client 20.53.232.94:3482] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/to.php"] [unique_id "aXpgjv0et-wQsmVMWlk0qgAAAdI"]
[Thu Jan 29 03:16:31.655358 2026] [:error] [pid 30817:tid 30841] [client 20.53.232.94:3233] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/to.php"] [unique_id "aXpgj5kL00co11SGgypK2gAAAJU"]
[Thu Jan 29 03:16:32.102379 2026] [:error] [pid 32747:tid 32758] [client 20.53.232.94:24084] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/to.php"] [unique_id "aXpgkP0et-wQsmVMWlk0rwAAAck"]
[Thu Jan 29 03:16:33.057699 2026] [:error] [pid 32451:tid 32470] [client 20.53.232.94:24717] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-admin.php"] [unique_id "aXpgkRnhmSN6e0P4d6taIQAAAVE"]
[Thu Jan 29 03:16:33.823272 2026] [:error] [pid 30729:tid 30792] [client 20.53.232.94:3485] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-admin.php"] [unique_id "aXpgkYHlkRFkYwysACdA0QAAAMQ"]
[Thu Jan 29 03:16:33.967169 2026] [:error] [pid 32451:tid 32476] [client 20.53.232.94:3468] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-admin.php"] [unique_id "aXpgkRnhmSN6e0P4d6taJQAAAVc"]
[Thu Jan 29 03:16:34.404220 2026] [:error] [pid 32598:tid 32602] [client 20.53.232.94:24774] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-admin.php"] [unique_id "aXpgklY4u2FXFuCu0C4l3wAAAYI"]
[Thu Jan 29 03:16:35.182063 2026] [:error] [pid 32747:tid 32765] [client 20.53.232.94:3219] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nyan.php"] [unique_id "aXpgk_0et-wQsmVMWlk0tQAAAdA"]
[Thu Jan 29 03:16:35.642031 2026] [:error] [pid 64139:tid 64158] [client 20.53.232.94:3495] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nyan.php"] [unique_id "aXpgk08_llMXywnNBzhYvAAAAxE"]
[Thu Jan 29 03:16:35.861272 2026] [:error] [pid 32747:tid 32764] [client 20.53.232.94:24067] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nyan.php"] [unique_id "aXpgk_0et-wQsmVMWlk0twAAAc8"]
[Thu Jan 29 03:16:36.248292 2026] [:error] [pid 32895:tid 32917] [client 20.53.232.94:13047] [client 20.53.232.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nyan.php"] [unique_id "aXpglHQ85pgihG9SXuradwAAAhQ"]
[Thu Jan 29 03:33:33.771437 2026] [:error] [pid 15949:tid 16000] [client 47.90.227.150:39378] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXpkjSUUtCw0-hDUhapMwwAAAEg"]
[Thu Jan 29 03:33:34.420722 2026] [:error] [pid 15949:tid 16011] [client 47.90.227.150:45450] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXpkjiUUtCw0-hDUhapMxwAAAFM"]
[Thu Jan 29 03:48:39.293803 2026] [autoindex:error] [pid 19070:tid 19113] [client 192.71.23.211:60791] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 04:13:10.502786 2026] [autoindex:error] [pid 20486:tid 20502] [client 69.160.160.58:50460] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au
[Thu Jan 29 07:35:25.041642 2026] [autoindex:error] [pid 20486:tid 20503] [client 149.40.53.3:35754] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 07:35:25.201535 2026] [autoindex:error] [pid 20486:tid 20498] [client 149.40.53.3:35754] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 07:35:25.516914 2026] [:error] [pid 20486:tid 20496] [client 149.40.53.3:35754] [client 149.40.53.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.40.53.3, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXqdPXgqSZb6GBx5nnMMVAAAAQc"]
[Thu Jan 29 07:35:25.528507 2026] [proxy_fcgi:error] [pid 20486:tid 20496] [client 149.40.53.3:35754] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 07:35:25.687785 2026] [autoindex:error] [pid 20486:tid 20511] [client 149.40.53.3:35754] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 07:35:27.943852 2026] [:error] [pid 20486:tid 20491] [client 149.40.53.3:35754] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXqdP3gqSZb6GBx5nnMMZQAAAQI"]
[Thu Jan 29 07:35:28.253026 2026] [:error] [pid 19069:tid 19092] [client 149.40.53.3:35768] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXqdQPDHsRM4BJ9a4QtzHAAAAA4"]
[Thu Jan 29 07:35:28.562618 2026] [:error] [pid 19069:tid 19091] [client 149.40.53.3:53168] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXqdQPDHsRM4BJ9a4QtzHgAAAA0"]
[Thu Jan 29 07:35:28.872146 2026] [:error] [pid 19071:tid 19136] [client 149.40.53.3:53172] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXqdQJfa8Ix5wWmtmJy81wAAAIM"]
[Thu Jan 29 07:35:29.182283 2026] [:error] [pid 19177:tid 19183] [client 149.40.53.3:53188] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXqdQXipGz0PT8TrQv4C1wAAAMQ"]
[Thu Jan 29 07:35:29.492466 2026] [:error] [pid 20580:tid 20672] [client 149.40.53.3:53198] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXqdQZCZ5HHdXPmeL59k8AAAAoQ"]
[Thu Jan 29 07:35:29.801206 2026] [:error] [pid 20578:tid 20622] [client 149.40.53.3:53210] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXqdQQ6UX7yOMwQFiyeYTgAAAgk"]
[Thu Jan 29 12:43:22.057654 2026] [:error] [pid 20580:tid 20691] [client 150.109.230.210:54226] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXrlapCZ5HHdXPmeL5-pdwAAApc"]
[Thu Jan 29 13:59:57.565282 2026] [autoindex:error] [pid 19177:tid 19187] [client 100.24.208.151:46805] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 13:59:57.979501 2026] [autoindex:error] [pid 20580:tid 20686] [client 100.24.208.151:63549] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 14:19:55.070973 2026] [autoindex:error] [pid 19070:tid 19124] [client 34.228.165.99:40118] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 14:19:55.893195 2026] [autoindex:error] [pid 19071:tid 19157] [client 34.228.165.99:48416] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 14:20:52.840924 2026] [:error] [pid 20519:tid 20551] [client 43.166.244.251:45080] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXr8RAo4s4fyROrkyRmfTwAAAYM"]
[Thu Jan 29 14:54:39.241967 2026] [autoindex:error] [pid 19069:tid 19092] [client 64.227.130.236:58696] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 14:54:40.576688 2026] [autoindex:error] [pid 19071:tid 19136] [client 64.227.130.236:60960] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 16:31:03.224978 2026] [autoindex:error] [pid 20576:tid 20591] [client 66.249.79.194:57869] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 16:31:04.881780 2026] [autoindex:error] [pid 19069:tid 19081] [client 34.151.74.153:45252] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 17:15:14.129504 2026] [autoindex:error] [pid 19070:tid 19124] [client 100.27.3.11:45602] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 17:15:14.537473 2026] [autoindex:error] [pid 20578:tid 20634] [client 100.27.3.11:50944] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 19:07:31.937969 2026] [autoindex:error] [pid 20579:tid 20654] [client 205.169.39.0:8648] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:06:29.546154 2026] [autoindex:error] [pid 19069:tid 19082] [client 44.245.162.72:65354] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:23.470255 2026] [autoindex:error] [pid 20519:tid 20549] [client 3.12.151.66:43308] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:24.840666 2026] [autoindex:error] [pid 20580:tid 20689] [client 3.12.151.66:43324] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:27.247587 2026] [autoindex:error] [pid 20580:tid 20674] [client 3.12.151.66:50152] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:27.247597 2026] [autoindex:error] [pid 20486:tid 20503] [client 3.12.151.66:50146] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:27.856029 2026] [autoindex:error] [pid 20579:tid 20645] [client 3.12.151.66:50158] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:31.731136 2026] [autoindex:error] [pid 20486:tid 20508] [client 3.12.151.66:43342] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:15:32.757333 2026] [autoindex:error] [pid 19071:tid 19156] [client 3.12.151.66:58712] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:28.729687 2026] [autoindex:error] [pid 40273:tid 40284] [client 3.142.198.122:53372] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:30.426140 2026] [autoindex:error] [pid 19071:tid 19150] [client 3.142.198.122:53376] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:32.872348 2026] [autoindex:error] [pid 40273:tid 40294] [client 3.142.198.122:36046] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:32.877234 2026] [autoindex:error] [pid 19069:tid 19086] [client 3.142.198.122:36062] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:33.519913 2026] [autoindex:error] [pid 40273:tid 40282] [client 3.142.198.122:36064] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:37.271139 2026] [autoindex:error] [pid 20580:tid 20672] [client 3.142.198.122:44684] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 21:46:38.361971 2026] [autoindex:error] [pid 20580:tid 20665] [client 3.142.198.122:44690] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Jan 29 22:28:10.652257 2026] [:error] [pid 20579:tid 20668] [client 47.90.227.150:52016] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXtuejVXNopcNyjJc9UxsQAAAlg"]
[Thu Jan 29 22:28:11.062095 2026] [:error] [pid 19069:tid 19085] [client 47.90.227.150:50008] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXtue_DHsRM4BJ9a4QuBowAAAAc"]
[Thu Jan 29 23:46:30.231935 2026] [:error] [pid 20519:tid 20558] [client 120.71.59.24:39451] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXuA1go4s4fyROrkyRkRdwAAAYo"]
[Fri Jan 30 00:32:31.774850 2026] [autoindex:error] [pid 39783:tid 39794] [client 66.249.79.200:38810] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 01:09:23.571913 2026] [autoindex:error] [pid 39783:tid 39794] [client 146.70.186.206:40566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 01:14:32.004646 2026] [:error] [pid 39813:tid 39834] [client 20.63.210.115:2139] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ms-blogs-query.php"] [unique_id "aXuVeN_AaZSBkqpNK03eNwAAAVM"]
[Fri Jan 30 01:14:32.460831 2026] [:error] [pid 39813:tid 39828] [client 20.63.210.115:2174] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/tGFvoEn.php"] [unique_id "aXuVeN_AaZSBkqpNK03eOQAAAU0"]
[Fri Jan 30 01:14:32.726005 2026] [:error] [pid 39783:tid 39798] [client 20.63.210.115:2142] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/tGFvoEn.php"] [unique_id "aXuVeK51RNfzhKG5ppPBTwAAAE0"]
[Fri Jan 30 01:14:33.055634 2026] [:error] [pid 39503:tid 39584] [client 20.63.210.115:2123] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/tGFvoEn.php"] [unique_id "aXuVeTzoHqvQcupFdnbxgwAAARU"]
[Fri Jan 30 01:14:33.323071 2026] [:error] [pid 39502:tid 39553] [client 20.63.210.115:2079] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/tGFvoEn.php"] [unique_id "aXuVeQCUcXwXieepEYjsPAAAAJE"]
[Fri Jan 30 01:14:33.589500 2026] [:error] [pid 39813:tid 39837] [client 20.63.210.115:2071] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/bo.php"] [unique_id "aXuVed_AaZSBkqpNK03eOwAAAVY"]
[Fri Jan 30 01:14:33.847889 2026] [:error] [pid 39501:tid 39517] [client 20.63.210.115:2163] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/bo.php"] [unique_id "aXuVeS_BLgXFo3daaZi7wAAAAAg"]
[Fri Jan 30 01:14:34.128443 2026] [:error] [pid 39503:tid 39587] [client 20.63.210.115:2148] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/bo.php"] [unique_id "aXuVejzoHqvQcupFdnbxhAAAARg"]
[Fri Jan 30 01:14:34.380293 2026] [:error] [pid 39813:tid 39826] [client 20.63.210.115:2075] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/bo.php"] [unique_id "aXuVet_AaZSBkqpNK03ePgAAAUs"]
[Fri Jan 30 01:14:34.666066 2026] [:error] [pid 39501:tid 39532] [client 20.63.210.115:2064] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/she.php"] [unique_id "aXuVei_BLgXFo3daaZi7xQAAABc"]
[Fri Jan 30 01:14:34.988251 2026] [:error] [pid 39783:tid 39797] [client 20.63.210.115:2116] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/she.php"] [unique_id "aXuVeq51RNfzhKG5ppPBWgAAAEw"]
[Fri Jan 30 01:14:35.247919 2026] [:error] [pid 39503:tid 39568] [client 20.63.210.115:2055] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/she.php"] [unique_id "aXuVezzoHqvQcupFdnbxhQAAAQU"]
[Fri Jan 30 01:14:35.515696 2026] [:error] [pid 39813:tid 39836] [client 20.63.210.115:2073] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/she.php"] [unique_id "aXuVe9_AaZSBkqpNK03eSgAAAVU"]
[Fri Jan 30 01:14:35.863014 2026] [:error] [pid 39502:tid 39547] [client 20.63.210.115:2121] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/jlvhys97/milo.php"] [unique_id "aXuVewCUcXwXieepEYjsQgAAAIs"]
[Fri Jan 30 01:14:36.141327 2026] [:error] [pid 39503:tid 39564] [client 20.63.210.115:2119] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/jlvhys97/milo.php"] [unique_id "aXuVfDzoHqvQcupFdnbxiAAAAQE"]
[Fri Jan 30 01:14:36.429403 2026] [:error] [pid 39503:tid 39570] [client 20.63.210.115:2074] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/jlvhys97/milo.php"] [unique_id "aXuVfDzoHqvQcupFdnbxiQAAAQc"]
[Fri Jan 30 01:14:36.763085 2026] [:error] [pid 39503:tid 39577] [client 20.63.210.115:2068] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/jlvhys97/milo.php"] [unique_id "aXuVfDzoHqvQcupFdnbxigAAAQ4"]
[Fri Jan 30 01:14:37.203449 2026] [:error] [pid 39502:tid 39540] [client 20.63.210.115:2070] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlvhys97.php"] [unique_id "aXuVfQCUcXwXieepEYjsRQAAAIQ"]
[Fri Jan 30 01:14:37.444869 2026] [:error] [pid 39502:tid 39550] [client 20.63.210.115:2129] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlvhys97.php"] [unique_id "aXuVfQCUcXwXieepEYjsSAAAAI4"]
[Fri Jan 30 01:14:37.799714 2026] [:error] [pid 39592:tid 39598] [client 20.63.210.115:2053] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlvhys97.php"] [unique_id "aXuVfZlnGYODSsJUyHlAEgAAAME"]
[Fri Jan 30 01:14:38.211180 2026] [:error] [pid 39813:tid 39816] [client 20.63.210.115:2133] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/jlvhys97.php"] [unique_id "aXuVft_AaZSBkqpNK03eYgAAAUE"]
[Fri Jan 30 01:14:38.494404 2026] [:error] [pid 39503:tid 39585] [client 20.63.210.115:2134] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/gw9hpuea/milo.php"] [unique_id "aXuVfjzoHqvQcupFdnbxkQAAARY"]
[Fri Jan 30 01:14:38.831645 2026] [:error] [pid 39502:tid 39557] [client 20.63.210.115:2008] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/gw9hpuea/milo.php"] [unique_id "aXuVfgCUcXwXieepEYjsSgAAAJU"]
[Fri Jan 30 01:14:39.168831 2026] [:error] [pid 39813:tid 39829] [client 20.63.210.115:2132] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/gw9hpuea/milo.php"] [unique_id "aXuVf9_AaZSBkqpNK03eYwAAAU4"]
[Fri Jan 30 01:14:39.433458 2026] [:error] [pid 39501:tid 39514] [client 20.63.210.115:2066] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/gw9hpuea/milo.php"] [unique_id "aXuVfy_BLgXFo3daaZi74AAAAAU"]
[Fri Jan 30 01:14:39.730012 2026] [:error] [pid 39503:tid 39584] [client 20.63.210.115:1990] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/gw9hpuea/milo.php"] [unique_id "aXuVfzzoHqvQcupFdnbxlgAAARU"]
[Fri Jan 30 01:14:40.058084 2026] [:error] [pid 39783:tid 39798] [client 20.63.210.115:2164] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/gw9hpuea/milo.php"] [unique_id "aXuVgK51RNfzhKG5ppPBawAAAE0"]
[Fri Jan 30 01:14:40.377987 2026] [:error] [pid 39783:tid 39795] [client 20.63.210.115:2092] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/gw9hpuea/milo.php"] [unique_id "aXuVgK51RNfzhKG5ppPBbgAAAEo"]
[Fri Jan 30 01:14:40.650315 2026] [:error] [pid 39503:tid 39567] [client 20.63.210.115:2173] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/gw9hpuea/milo.php"] [unique_id "aXuVgDzoHqvQcupFdnbxmAAAAQQ"]
[Fri Jan 30 01:14:40.993311 2026] [:error] [pid 39783:tid 39790] [client 20.63.210.115:2062] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gw9hpuea.php"] [unique_id "aXuVgK51RNfzhKG5ppPBcAAAAEU"]
[Fri Jan 30 01:14:41.321702 2026] [:error] [pid 39501:tid 39533] [client 20.63.210.115:2106] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gw9hpuea.php"] [unique_id "aXuVgS_BLgXFo3daaZi75AAAABg"]
[Fri Jan 30 01:14:41.622909 2026] [:error] [pid 39502:tid 39556] [client 20.63.210.115:2065] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gw9hpuea.php"] [unique_id "aXuVgQCUcXwXieepEYjsVQAAAJQ"]
[Fri Jan 30 01:14:41.897109 2026] [:error] [pid 39502:tid 39552] [client 20.63.210.115:2077] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gw9hpuea.php"] [unique_id "aXuVgQCUcXwXieepEYjsVgAAAJA"]
[Fri Jan 30 01:14:42.171584 2026] [:error] [pid 39503:tid 39564] [client 20.63.210.115:2157] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pt2o2j0b/milo.php"] [unique_id "aXuVgjzoHqvQcupFdnbxmwAAAQE"]
[Fri Jan 30 01:14:42.440334 2026] [:error] [pid 39813:tid 39825] [client 20.63.210.115:2114] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pt2o2j0b/milo.php"] [unique_id "aXuVgt_AaZSBkqpNK03ebAAAAUo"]
[Fri Jan 30 01:14:42.806255 2026] [:error] [pid 39502:tid 39538] [client 20.63.210.115:2138] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pt2o2j0b/milo.php"] [unique_id "aXuVggCUcXwXieepEYjsVwAAAII"]
[Fri Jan 30 01:14:43.153492 2026] [:error] [pid 39503:tid 39575] [client 20.63.210.115:2010] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/pt2o2j0b/milo.php"] [unique_id "aXuVgzzoHqvQcupFdnbxnQAAAQw"]
[Fri Jan 30 01:14:43.444027 2026] [:error] [pid 39783:tid 39805] [client 20.63.210.115:2124] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/5undryfb/milo.php"] [unique_id "aXuVg651RNfzhKG5ppPBdwAAAFQ"]
[Fri Jan 30 01:14:43.718111 2026] [:error] [pid 39592:tid 39621] [client 20.63.210.115:2054] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/5undryfb/milo.php"] [unique_id "aXuVg5lnGYODSsJUyHlAHQAAANg"]
[Fri Jan 30 01:14:44.048199 2026] [:error] [pid 39592:tid 39597] [client 20.63.210.115:2057] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/5undryfb/milo.php"] [unique_id "aXuVhJlnGYODSsJUyHlAHgAAAMA"]
[Fri Jan 30 01:14:44.322827 2026] [:error] [pid 39503:tid 39566] [client 20.63.210.115:2128] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/5undryfb/milo.php"] [unique_id "aXuVhDzoHqvQcupFdnbxoQAAAQM"]
[Fri Jan 30 01:14:44.578893 2026] [:error] [pid 39502:tid 39536] [client 20.63.210.115:2170] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/5undryfb/milo.php"] [unique_id "aXuVhACUcXwXieepEYjsXgAAAIA"]
[Fri Jan 30 01:14:44.823790 2026] [:error] [pid 39503:tid 39565] [client 20.63.210.115:2159] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/5undryfb/milo.php"] [unique_id "aXuVhDzoHqvQcupFdnbxowAAAQI"]
[Fri Jan 30 01:14:45.114816 2026] [:error] [pid 39813:tid 39820] [client 20.63.210.115:2063] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/5undryfb/milo.php"] [unique_id "aXuVhd_AaZSBkqpNK03ecgAAAUU"]
[Fri Jan 30 01:14:45.473998 2026] [:error] [pid 39502:tid 39539] [client 20.63.210.115:2168] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/5undryfb/milo.php"] [unique_id "aXuVhQCUcXwXieepEYjsYQAAAIM"]
[Fri Jan 30 01:14:45.789951 2026] [:error] [pid 39502:tid 39548] [client 20.63.210.115:1994] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5undryfb.php"] [unique_id "aXuVhQCUcXwXieepEYjsYwAAAIw"]
[Fri Jan 30 01:14:46.032406 2026] [:error] [pid 39813:tid 39839] [client 20.63.210.115:2161] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5undryfb.php"] [unique_id "aXuVht_AaZSBkqpNK03edgAAAVg"]
[Fri Jan 30 01:14:46.382161 2026] [:error] [pid 39813:tid 39838] [client 20.63.210.115:2117] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5undryfb.php"] [unique_id "aXuVht_AaZSBkqpNK03eeQAAAVc"]
[Fri Jan 30 01:14:46.742421 2026] [:error] [pid 39502:tid 39541] [client 20.63.210.115:2015] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/5undryfb.php"] [unique_id "aXuVhgCUcXwXieepEYjsZwAAAIU"]
[Fri Jan 30 01:14:47.280365 2026] [:error] [pid 39813:tid 39824] [client 20.63.210.115:2049] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/template/"] [unique_id "aXuVh9_AaZSBkqpNK03efgAAAUk"]
[Fri Jan 30 01:14:47.744024 2026] [:error] [pid 39502:tid 39547] [client 20.63.210.115:2171] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/template/"] [unique_id "aXuVhwCUcXwXieepEYjsagAAAIs"]
[Fri Jan 30 01:14:48.114832 2026] [:error] [pid 39592:tid 39601] [client 20.63.210.115:2061] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/template/"] [unique_id "aXuViJlnGYODSsJUyHlAJwAAAMQ"]
[Fri Jan 30 01:14:48.475018 2026] [:error] [pid 39813:tid 39835] [client 20.63.210.115:2125] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/template/"] [unique_id "aXuViN_AaZSBkqpNK03ehwAAAVQ"]
[Fri Jan 30 01:14:48.794517 2026] [:error] [pid 39813:tid 39815] [client 20.63.210.115:2144] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/themes.php"] [unique_id "aXuViN_AaZSBkqpNK03eigAAAUA"]
[Fri Jan 30 01:14:49.056388 2026] [:error] [pid 39813:tid 39816] [client 20.63.210.115:2060] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/themes.php"] [unique_id "aXuVid_AaZSBkqpNK03ejAAAAUE"]
[Fri Jan 30 01:14:49.513610 2026] [:error] [pid 39501:tid 39523] [client 20.63.210.115:2101] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/themes.php"] [unique_id "aXuViS_BLgXFo3daaZi78QAAAA4"]
[Fri Jan 30 01:14:50.056142 2026] [:error] [pid 39783:tid 39792] [client 20.63.210.115:2162] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/themes.php"] [unique_id "aXuViq51RNfzhKG5ppPBgwAAAEc"]
[Fri Jan 30 01:14:50.354740 2026] [:error] [pid 39783:tid 39800] [client 20.63.210.115:2030] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/file.php"] [unique_id "aXuViq51RNfzhKG5ppPBhQAAAE8"]
[Fri Jan 30 01:14:50.753150 2026] [:error] [pid 39592:tid 39602] [client 20.63.210.115:2108] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/file.php"] [unique_id "aXuViplnGYODSsJUyHlALgAAAMU"]
[Fri Jan 30 01:14:51.059631 2026] [:error] [pid 39592:tid 39613] [client 20.63.210.115:2113] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/file.php"] [unique_id "aXuVi5lnGYODSsJUyHlAMAAAANA"]
[Fri Jan 30 01:14:51.377347 2026] [:error] [pid 39783:tid 39790] [client 20.63.210.115:2166] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/file.php"] [unique_id "aXuVi651RNfzhKG5ppPBiQAAAEU"]
[Fri Jan 30 01:14:51.796012 2026] [:error] [pid 39813:tid 39822] [client 20.63.210.115:2135] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php"] [unique_id "aXuVi9_AaZSBkqpNK03elgAAAUc"]
[Fri Jan 30 01:14:52.415079 2026] [:error] [pid 39783:tid 39788] [client 20.63.210.115:2067] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php"] [unique_id "aXuVjK51RNfzhKG5ppPBjQAAAEM"]
[Fri Jan 30 01:14:53.093811 2026] [:error] [pid 39502:tid 39548] [client 20.63.210.115:2076] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php"] [unique_id "aXuVjQCUcXwXieepEYjscwAAAIw"]
[Fri Jan 30 01:14:53.432069 2026] [:error] [pid 39501:tid 39513] [client 20.63.210.115:2002] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php"] [unique_id "aXuVjS_BLgXFo3daaZi7_wAAAAQ"]
[Fri Jan 30 01:14:53.883572 2026] [:error] [pid 39503:tid 39574] [client 20.63.210.115:2103] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/classsmtps.php"] [unique_id "aXuVjTzoHqvQcupFdnbxswAAAQs"]
[Fri Jan 30 01:14:54.303138 2026] [:error] [pid 39783:tid 39793] [client 20.63.210.115:2122] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/classsmtps.php"] [unique_id "aXuVjq51RNfzhKG5ppPBkgAAAEg"]
[Fri Jan 30 01:14:54.709131 2026] [:error] [pid 39501:tid 39528] [client 20.63.210.115:2130] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/classsmtps.php"] [unique_id "aXuVji_BLgXFo3daaZi8BAAAABM"]
[Fri Jan 30 01:14:54.959702 2026] [:error] [pid 39783:tid 39801] [client 20.63.210.115:2083] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/classsmtps.php"] [unique_id "aXuVjq51RNfzhKG5ppPBlAAAAFA"]
[Fri Jan 30 01:14:55.277728 2026] [:error] [pid 39502:tid 39550] [client 20.63.210.115:2147] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aXuVjwCUcXwXieepEYjseQAAAI4"]
[Fri Jan 30 01:14:55.594909 2026] [:error] [pid 39501:tid 39526] [client 20.63.210.115:2007] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aXuVjy_BLgXFo3daaZi8CgAAABE"]
[Fri Jan 30 01:14:55.931872 2026] [:error] [pid 39502:tid 39536] [client 20.63.210.115:2104] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aXuVjwCUcXwXieepEYjsfAAAAIA"]
[Fri Jan 30 01:14:56.340697 2026] [:error] [pid 39502:tid 39539] [client 20.63.210.115:1985] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aXuVkACUcXwXieepEYjsfgAAAIM"]
[Fri Jan 30 01:14:56.723450 2026] [:error] [pid 39592:tid 39615] [client 20.63.210.115:1986] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class-flitert.php"] [unique_id "aXuVkJlnGYODSsJUyHlATgAAANI"]
[Fri Jan 30 01:14:57.118488 2026] [:error] [pid 39501:tid 39533] [client 20.63.210.115:2150] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwso.php"] [unique_id "aXuVkS_BLgXFo3daaZi8DgAAABg"]
[Fri Jan 30 01:14:57.434635 2026] [:error] [pid 39501:tid 39523] [client 20.63.210.115:2024] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwso.php"] [unique_id "aXuVkS_BLgXFo3daaZi8DwAAAA4"]
[Fri Jan 30 01:14:57.842643 2026] [:error] [pid 39813:tid 39835] [client 20.63.210.115:2078] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwso.php"] [unique_id "aXuVkd_AaZSBkqpNK03esQAAAVQ"]
[Fri Jan 30 01:14:58.437067 2026] [:error] [pid 39783:tid 39804] [client 20.63.210.115:2082] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwso.php"] [unique_id "aXuVkq51RNfzhKG5ppPBoQAAAFM"]
[Fri Jan 30 01:14:59.409481 2026] [:error] [pid 39502:tid 39550] [client 20.63.210.115:2018] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php525"] [unique_id "aXuVkwCUcXwXieepEYjshgAAAI4"]
[Fri Jan 30 01:15:00.208786 2026] [:error] [pid 39813:tid 39836] [client 20.63.210.115:2020] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php525"] [unique_id "aXuVlN_AaZSBkqpNK03evQAAAVU"]
[Fri Jan 30 01:15:00.669213 2026] [:error] [pid 39783:tid 39798] [client 20.63.210.115:2126] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php525"] [unique_id "aXuVlK51RNfzhKG5ppPBpgAAAE0"]
[Fri Jan 30 01:15:00.966050 2026] [:error] [pid 39592:tid 39600] [client 20.63.210.115:1947] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php525"] [unique_id "aXuVlJlnGYODSsJUyHlAXQAAAMM"]
[Fri Jan 30 01:15:01.221757 2026] [:error] [pid 39813:tid 39819] [client 20.63.210.115:2127] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aXuVld_AaZSBkqpNK03ewQAAAUQ"]
[Fri Jan 30 01:15:01.564013 2026] [:error] [pid 39503:tid 39580] [client 20.63.210.115:2152] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aXuVlTzoHqvQcupFdnbxvQAAARE"]
[Fri Jan 30 01:15:02.056762 2026] [:error] [pid 39592:tid 39598] [client 20.63.210.115:2089] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aXuVlplnGYODSsJUyHlAXwAAAME"]
[Fri Jan 30 01:15:02.417644 2026] [:error] [pid 39592:tid 39597] [client 20.63.210.115:2069] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aXuVlplnGYODSsJUyHlAYAAAAMA"]
[Fri Jan 30 01:15:02.723928 2026] [:error] [pid 39502:tid 39558] [client 20.63.210.115:2158] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/think.php"] [unique_id "aXuVlgCUcXwXieepEYjsigAAAJY"]
[Fri Jan 30 01:15:03.028581 2026] [:error] [pid 39592:tid 39612] [client 20.63.210.115:2109] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/think.php"] [unique_id "aXuVl5lnGYODSsJUyHlAYgAAAM8"]
[Fri Jan 30 01:15:03.281476 2026] [:error] [pid 39592:tid 39618] [client 20.63.210.115:1955] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/think.php"] [unique_id "aXuVl5lnGYODSsJUyHlAYwAAANU"]
[Fri Jan 30 01:15:03.619231 2026] [:error] [pid 39501:tid 39523] [client 20.63.210.115:2050] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/think.php"] [unique_id "aXuVly_BLgXFo3daaZi8GgAAAA4"]
[Fri Jan 30 01:15:03.939009 2026] [:error] [pid 39503:tid 39571] [client 20.63.210.115:2115] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aXuVlzzoHqvQcupFdnbxwgAAAQg"]
[Fri Jan 30 01:15:04.252654 2026] [:error] [pid 39502:tid 39548] [client 20.63.210.115:2056] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aXuVmACUcXwXieepEYjsjgAAAIw"]
[Fri Jan 30 01:15:04.518837 2026] [:error] [pid 39592:tid 39600] [client 20.63.210.115:2048] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aXuVmJlnGYODSsJUyHlAawAAAMM"]
[Fri Jan 30 01:15:04.808743 2026] [:error] [pid 39592:tid 39614] [client 20.63.210.115:2140] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aXuVmJlnGYODSsJUyHlAbAAAANE"]
[Fri Jan 30 01:15:05.162610 2026] [:error] [pid 39502:tid 39541] [client 20.63.210.115:2032] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aXuVmQCUcXwXieepEYjskAAAAIU"]
[Fri Jan 30 01:15:05.539573 2026] [:error] [pid 39503:tid 39563] [client 20.63.210.115:2151] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aXuVmTzoHqvQcupFdnbxxwAAAQA"]
[Fri Jan 30 01:15:05.941069 2026] [:error] [pid 39783:tid 39798] [client 20.63.210.115:2040] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aXuVma51RNfzhKG5ppPBsgAAAE0"]
[Fri Jan 30 01:15:06.199013 2026] [:error] [pid 39503:tid 39575] [client 20.63.210.115:1976] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/date.php"] [unique_id "aXuVmjzoHqvQcupFdnbxyQAAAQw"]
[Fri Jan 30 01:15:06.664625 2026] [:error] [pid 39813:tid 39821] [client 20.63.210.115:1996] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aXuVmt_AaZSBkqpNK03ezAAAAUY"]
[Fri Jan 30 01:15:06.912492 2026] [:error] [pid 39783:tid 39794] [client 20.63.210.115:2026] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aXuVmq51RNfzhKG5ppPBuQAAAEk"]
[Fri Jan 30 01:15:07.381685 2026] [:error] [pid 39813:tid 39820] [client 20.63.210.115:2099] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aXuVm9_AaZSBkqpNK03e0QAAAUU"]
[Fri Jan 30 01:15:07.791145 2026] [:error] [pid 39813:tid 39826] [client 20.63.210.115:2156] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aXuVm9_AaZSBkqpNK03e1gAAAUs"]
[Fri Jan 30 01:15:08.146467 2026] [:error] [pid 39502:tid 39539] [client 20.63.210.115:1939] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/autoload_classmap.php"] [unique_id "aXuVnACUcXwXieepEYjskwAAAIM"]
[Fri Jan 30 01:15:08.483504 2026] [:error] [pid 39783:tid 39796] [client 20.63.210.115:2105] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/autoload_classmap.php"] [unique_id "aXuVnK51RNfzhKG5ppPBvAAAAEs"]
[Fri Jan 30 01:15:08.784209 2026] [:error] [pid 39813:tid 39819] [client 20.63.210.115:2072] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/autoload_classmap.php"] [unique_id "aXuVnN_AaZSBkqpNK03e2wAAAUQ"]
[Fri Jan 30 01:15:09.062392 2026] [:error] [pid 39503:tid 39572] [client 20.63.210.115:2120] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/autoload_classmap.php"] [unique_id "aXuVnTzoHqvQcupFdnbxzgAAAQk"]
[Fri Jan 30 01:15:09.459906 2026] [:error] [pid 39501:tid 39529] [client 20.63.210.115:2019] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LA.php"] [unique_id "aXuVnS_BLgXFo3daaZi8IwAAABQ"]
[Fri Jan 30 01:15:09.999632 2026] [:error] [pid 39813:tid 39820] [client 20.63.210.115:1938] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LA.php"] [unique_id "aXuVnd_AaZSBkqpNK03e3gAAAUU"]
[Fri Jan 30 01:15:10.322160 2026] [:error] [pid 39592:tid 39599] [client 20.63.210.115:2088] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LA.php"] [unique_id "aXuVnplnGYODSsJUyHlAdAAAAMI"]
[Fri Jan 30 01:15:10.604361 2026] [:error] [pid 39501:tid 39525] [client 20.63.210.115:2100] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/LA.php"] [unique_id "aXuVni_BLgXFo3daaZi8JwAAABA"]
[Fri Jan 30 01:15:10.950006 2026] [:error] [pid 39813:tid 39835] [client 20.63.210.115:2112] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/ethwwuzd.php"] [unique_id "aXuVnt_AaZSBkqpNK03e5AAAAVQ"]
[Fri Jan 30 01:15:11.202711 2026] [:error] [pid 39502:tid 39538] [client 20.63.210.115:2154] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/ethwwuzd.php"] [unique_id "aXuVnwCUcXwXieepEYjsmwAAAII"]
[Fri Jan 30 01:15:11.543405 2026] [:error] [pid 39502:tid 39548] [client 20.63.210.115:2149] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/ethwwuzd.php"] [unique_id "aXuVnwCUcXwXieepEYjsnAAAAIw"]
[Fri Jan 30 01:15:11.930410 2026] [:error] [pid 39501:tid 39510] [client 20.63.210.115:2025] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/ethwwuzd.php"] [unique_id "aXuVny_BLgXFo3daaZi8MAAAAAE"]
[Fri Jan 30 01:15:12.291992 2026] [:error] [pid 39592:tid 39606] [client 20.63.210.115:2146] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media-new.php"] [unique_id "aXuVoJlnGYODSsJUyHlAewAAAMk"]
[Fri Jan 30 01:15:12.740480 2026] [:error] [pid 39783:tid 39796] [client 20.63.210.115:2095] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media-new.php"] [unique_id "aXuVoK51RNfzhKG5ppPB0AAAAEs"]
[Fri Jan 30 01:15:13.190796 2026] [:error] [pid 39592:tid 39620] [client 20.63.210.115:1999] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media-new.php"] [unique_id "aXuVoZlnGYODSsJUyHlAggAAANc"]
[Fri Jan 30 01:15:13.463190 2026] [:error] [pid 39813:tid 39839] [client 20.63.210.115:1923] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media-new.php"] [unique_id "aXuVod_AaZSBkqpNK03e6gAAAVg"]
[Fri Jan 30 01:15:13.772757 2026] [:error] [pid 39592:tid 39597] [client 20.63.210.115:1995] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gallery_upload.php"] [unique_id "aXuVoZlnGYODSsJUyHlAigAAAMA"]
[Fri Jan 30 01:15:14.114561 2026] [:error] [pid 39501:tid 39522] [client 20.63.210.115:1921] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gallery_upload.php"] [unique_id "aXuVoi_BLgXFo3daaZi8SAAAAA0"]
[Fri Jan 30 01:15:14.496909 2026] [:error] [pid 39503:tid 39585] [client 20.63.210.115:2169] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gallery_upload.php"] [unique_id "aXuVojzoHqvQcupFdnbx1AAAARY"]
[Fri Jan 30 01:15:14.769412 2026] [:error] [pid 39503:tid 39566] [client 20.63.210.115:2085] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gallery_upload.php"] [unique_id "aXuVojzoHqvQcupFdnbx1gAAAQM"]
[Fri Jan 30 01:15:15.022847 2026] [:error] [pid 39502:tid 39553] [client 20.63.210.115:2016] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/vjgtd8LW.php"] [unique_id "aXuVowCUcXwXieepEYjsrwAAAJE"]
[Fri Jan 30 01:15:15.271120 2026] [:error] [pid 39813:tid 39816] [client 20.63.210.115:2153] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa1.php"] [unique_id "aXuVo9_AaZSBkqpNK03e7gAAAUE"]
[Fri Jan 30 01:15:15.547095 2026] [:error] [pid 39813:tid 39836] [client 20.63.210.115:2093] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa1.php"] [unique_id "aXuVo9_AaZSBkqpNK03e8AAAAVU"]
[Fri Jan 30 01:15:15.878509 2026] [:error] [pid 39783:tid 39800] [client 20.63.210.115:2143] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa1.php"] [unique_id "aXuVo651RNfzhKG5ppPB3QAAAE8"]
[Fri Jan 30 01:15:16.175021 2026] [:error] [pid 39592:tid 39612] [client 20.63.210.115:2137] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/meta.php"] [unique_id "aXuVpJlnGYODSsJUyHlAngAAAM8"]
[Fri Jan 30 01:15:16.446528 2026] [:error] [pid 39813:tid 39827] [client 20.63.210.115:2051] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/meta.php"] [unique_id "aXuVpN_AaZSBkqpNK03e9AAAAUw"]
[Fri Jan 30 01:15:16.742865 2026] [:error] [pid 39813:tid 39822] [client 20.63.210.115:2013] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/meta.php"] [unique_id "aXuVpN_AaZSBkqpNK03e9gAAAUc"]
[Fri Jan 30 01:15:17.093357 2026] [:error] [pid 39503:tid 39571] [client 20.63.210.115:2091] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/meta.php"] [unique_id "aXuVpTzoHqvQcupFdnbx2gAAAQg"]
[Fri Jan 30 01:15:17.577367 2026] [:error] [pid 39813:tid 39829] [client 20.63.210.115:1958] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aXuVpd_AaZSBkqpNK03e-gAAAU4"]
[Fri Jan 30 01:15:18.341488 2026] [:error] [pid 39503:tid 39574] [client 20.63.210.115:1933] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aXuVpjzoHqvQcupFdnbx3gAAAQs"]
[Fri Jan 30 01:15:18.898882 2026] [:error] [pid 39592:tid 39614] [client 20.63.210.115:2035] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aXuVpplnGYODSsJUyHlAnwAAANE"]
[Fri Jan 30 01:15:19.317603 2026] [:error] [pid 39813:tid 39816] [client 20.63.210.115:2087] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aXuVp9_AaZSBkqpNK03e_gAAAUE"]
[Fri Jan 30 01:15:20.058702 2026] [:error] [pid 39813:tid 39835] [client 20.63.210.115:2081] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/acp.php"] [unique_id "aXuVqN_AaZSBkqpNK03fAAAAAVQ"]
[Fri Jan 30 01:15:20.374333 2026] [:error] [pid 39592:tid 39607] [client 20.63.210.115:2165] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aXuVqJlnGYODSsJUyHlAogAAAMo"]
[Fri Jan 30 01:15:20.702482 2026] [:error] [pid 39501:tid 39530] [client 20.63.210.115:2053] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aXuVqC_BLgXFo3daaZi8agAAABU"]
[Fri Jan 30 01:15:20.961599 2026] [:error] [pid 39503:tid 39572] [client 20.63.210.115:2094] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aXuVqDzoHqvQcupFdnbx5QAAAQk"]
[Fri Jan 30 01:15:21.202943 2026] [:error] [pid 39813:tid 39825] [client 20.63.210.115:1932] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/13.php"] [unique_id "aXuVqd_AaZSBkqpNK03fAQAAAUo"]
[Fri Jan 30 01:15:21.514990 2026] [:error] [pid 39813:tid 39834] [client 20.63.210.115:1997] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXuVqd_AaZSBkqpNK03fAgAAAVM"]
[Fri Jan 30 01:15:21.867075 2026] [:error] [pid 39501:tid 39513] [client 20.63.210.115:2096] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/xt/"] [unique_id "aXuVqS_BLgXFo3daaZi8bgAAAAQ"]
[Fri Jan 30 01:15:22.203524 2026] [:error] [pid 39503:tid 39569] [client 20.63.210.115:2036] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/xt/"] [unique_id "aXuVqjzoHqvQcupFdnbx6AAAAQY"]
[Fri Jan 30 01:15:22.669889 2026] [:error] [pid 39501:tid 39523] [client 20.63.210.115:2086] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/xt/"] [unique_id "aXuVqi_BLgXFo3daaZi8cAAAAA4"]
[Fri Jan 30 01:15:22.920753 2026] [:error] [pid 39783:tid 39785] [client 20.63.210.115:2052] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/xt/"] [unique_id "aXuVqq51RNfzhKG5ppPB8gAAAEA"]
[Fri Jan 30 01:15:23.333801 2026] [:error] [pid 39783:tid 39789] [client 20.63.210.115:1928] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/index.php"] [unique_id "aXuVq651RNfzhKG5ppPB8wAAAEQ"]
[Fri Jan 30 01:15:23.852864 2026] [:error] [pid 39502:tid 39560] [client 20.63.210.115:1984] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/index.php"] [unique_id "aXuVqwCUcXwXieepEYjsywAAAJg"]
[Fri Jan 30 01:15:24.241226 2026] [:error] [pid 39592:tid 39604] [client 20.63.210.115:1991] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/index.php"] [unique_id "aXuVrJlnGYODSsJUyHlArAAAAMc"]
[Fri Jan 30 01:15:25.022478 2026] [:error] [pid 39502:tid 39557] [client 20.63.210.115:2028] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/index.php"] [unique_id "aXuVrQCUcXwXieepEYjs0AAAAJU"]
[Fri Jan 30 01:15:25.516306 2026] [:error] [pid 39783:tid 39807] [client 20.63.210.115:1948] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP8"] [unique_id "aXuVra51RNfzhKG5ppPB-gAAAFY"]
[Fri Jan 30 01:15:26.602902 2026] [:error] [pid 39592:tid 39616] [client 20.63.210.115:2090] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP8"] [unique_id "aXuVrplnGYODSsJUyHlArwAAANM"]
[Fri Jan 30 01:15:27.546211 2026] [:error] [pid 39783:tid 39804] [client 20.63.210.115:2009] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP8"] [unique_id "aXuVr651RNfzhKG5ppPB-wAAAFM"]
[Fri Jan 30 01:15:29.264120 2026] [:error] [pid 39501:tid 39530] [client 20.63.210.115:1942] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP8"] [unique_id "aXuVsS_BLgXFo3daaZi8hQAAABU"]
[Fri Jan 30 01:15:30.503967 2026] [:error] [pid 39503:tid 39570] [client 20.63.210.115:2118] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ALFADATA/alfacgiapi/perl.alfa"] [unique_id "aXuVsjzoHqvQcupFdnbx-AAAAQc"]
[Fri Jan 30 01:15:30.963790 2026] [:error] [pid 39503:tid 39564] [client 20.63.210.115:1972] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ALFADATA/alfacgiapi/perl.alfa"] [unique_id "aXuVsjzoHqvQcupFdnbx-wAAAQE"]
[Fri Jan 30 01:15:31.421288 2026] [:error] [pid 39813:tid 39825] [client 20.63.210.115:2058] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ALFADATA/alfacgiapi/perl.alfa"] [unique_id "aXuVs9_AaZSBkqpNK03fGgAAAUo"]
[Fri Jan 30 01:15:31.765395 2026] [:error] [pid 39813:tid 39838] [client 20.63.210.115:2172] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/ALFADATA/alfacgiapi/perl.alfa"] [unique_id "aXuVs9_AaZSBkqpNK03fGwAAAVc"]
[Fri Jan 30 01:15:32.146755 2026] [proxy_fcgi:error] [pid 39813:tid 39824] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:32.741981 2026] [proxy_fcgi:error] [pid 39813:tid 39821] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:32.989259 2026] [proxy_fcgi:error] [pid 39813:tid 39818] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:33.145283 2026] [proxy_fcgi:error] [pid 39813:tid 39825] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:33.280371 2026] [proxy_fcgi:error] [pid 39813:tid 39838] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:33.408021 2026] [proxy_fcgi:error] [pid 39813:tid 39820] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:33.532370 2026] [proxy_fcgi:error] [pid 39813:tid 39828] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:33.659848 2026] [proxy_fcgi:error] [pid 39813:tid 39832] [client 20.63.210.115:1881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 01:15:33.785409 2026] [:error] [pid 39813:tid 39826] [client 20.63.210.115:1881] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXuVtd_AaZSBkqpNK03fLgAAAUs"]
[Fri Jan 30 01:15:34.109063 2026] [:error] [pid 39501:tid 39533] [client 20.63.210.115:1868] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXuVti_BLgXFo3daaZi8lQAAABg"]
[Fri Jan 30 01:15:34.632834 2026] [:error] [pid 39592:tid 39615] [client 20.63.210.115:2141] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXuVtplnGYODSsJUyHlAvgAAANI"]
[Fri Jan 30 01:15:34.942635 2026] [:error] [pid 39502:tid 39559] [client 20.63.210.115:2027] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aXuVtgCUcXwXieepEYjs5gAAAJc"]
[Fri Jan 30 01:15:35.282941 2026] [:error] [pid 39783:tid 39785] [client 20.63.210.115:2038] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dashboard.php"] [unique_id "aXuVt651RNfzhKG5ppPCEwAAAEA"]
[Fri Jan 30 01:15:35.815205 2026] [:error] [pid 39503:tid 39587] [client 20.63.210.115:2041] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dashboard.php"] [unique_id "aXuVtzzoHqvQcupFdnbyBAAAARg"]
[Fri Jan 30 01:15:36.109450 2026] [:error] [pid 39813:tid 39823] [client 20.63.210.115:2136] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dashboard.php"] [unique_id "aXuVuN_AaZSBkqpNK03fNwAAAUg"]
[Fri Jan 30 01:15:36.571197 2026] [:error] [pid 39501:tid 39532] [client 20.63.210.115:1998] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dashboard.php"] [unique_id "aXuVuC_BLgXFo3daaZi8mQAAABc"]
[Fri Jan 30 01:15:36.961457 2026] [:error] [pid 39783:tid 39802] [client 20.63.210.115:1968] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/millo.php"] [unique_id "aXuVuK51RNfzhKG5ppPCGQAAAFE"]
[Fri Jan 30 01:15:37.397793 2026] [:error] [pid 39813:tid 39828] [client 20.63.210.115:1924] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/millo.php"] [unique_id "aXuVud_AaZSBkqpNK03fPAAAAU0"]
[Fri Jan 30 01:15:37.732245 2026] [:error] [pid 39813:tid 39829] [client 20.63.210.115:1949] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/millo.php"] [unique_id "aXuVud_AaZSBkqpNK03fQAAAAU4"]
[Fri Jan 30 01:15:38.076587 2026] [:error] [pid 39503:tid 39569] [client 20.63.210.115:1967] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/millo.php"] [unique_id "aXuVujzoHqvQcupFdnbyCAAAAQY"]
[Fri Jan 30 01:15:38.449014 2026] [:error] [pid 39501:tid 39510] [client 20.63.210.115:2098] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new/millo.php"] [unique_id "aXuVui_BLgXFo3daaZi8oQAAAAE"]
[Fri Jan 30 01:15:38.724004 2026] [:error] [pid 39503:tid 39576] [client 20.63.210.115:1937] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new/millo.php"] [unique_id "aXuVujzoHqvQcupFdnbyCQAAAQ0"]
[Fri Jan 30 01:15:38.995513 2026] [:error] [pid 39592:tid 39604] [client 20.63.210.115:2017] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new/millo.php"] [unique_id "aXuVuplnGYODSsJUyHlA5AAAAMc"]
[Fri Jan 30 01:15:39.405051 2026] [:error] [pid 39783:tid 39786] [client 20.63.210.115:1926] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/new/millo.php"] [unique_id "aXuVu651RNfzhKG5ppPCHQAAAEE"]
[Fri Jan 30 01:15:39.654077 2026] [:error] [pid 39813:tid 39820] [client 20.63.210.115:1977] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wordpress/dashboard.php"] [unique_id "aXuVu9_AaZSBkqpNK03fSQAAAUU"]
[Fri Jan 30 01:15:39.981484 2026] [:error] [pid 39813:tid 39817] [client 20.63.210.115:2155] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wordpress/dashboard.php"] [unique_id "aXuVu9_AaZSBkqpNK03fTAAAAUI"]
[Fri Jan 30 01:15:40.387720 2026] [:error] [pid 39813:tid 39837] [client 20.63.210.115:1908] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wordpress/dashboard.php"] [unique_id "aXuVvN_AaZSBkqpNK03fTwAAAVY"]
[Fri Jan 30 01:15:40.637665 2026] [:error] [pid 39813:tid 39816] [client 20.63.210.115:1965] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wordpress/dashboard.php"] [unique_id "aXuVvN_AaZSBkqpNK03fUwAAAUE"]
[Fri Jan 30 01:15:40.973182 2026] [:error] [pid 39502:tid 39553] [client 20.63.210.115:2105] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gank.php"] [unique_id "aXuVvACUcXwXieepEYjs8AAAAJE"]
[Fri Jan 30 01:15:41.333017 2026] [:error] [pid 39783:tid 39800] [client 20.63.210.115:1963] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gank.php"] [unique_id "aXuVva51RNfzhKG5ppPCHwAAAE8"]
[Fri Jan 30 01:15:41.630653 2026] [:error] [pid 39783:tid 39799] [client 20.63.210.115:2023] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gank.php"] [unique_id "aXuVva51RNfzhKG5ppPCIwAAAE4"]
[Fri Jan 30 01:15:41.927703 2026] [:error] [pid 39783:tid 39793] [client 20.63.210.115:1989] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gank.php"] [unique_id "aXuVva51RNfzhKG5ppPCJwAAAEg"]
[Fri Jan 30 01:15:42.339171 2026] [:error] [pid 39813:tid 39818] [client 20.63.210.115:1951] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/plugins"] [unique_id "aXuVvt_AaZSBkqpNK03fWAAAAUM"]
[Fri Jan 30 01:15:42.665886 2026] [:error] [pid 39813:tid 39830] [client 20.63.210.115:2006] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/plugins"] [unique_id "aXuVvt_AaZSBkqpNK03fWQAAAU8"]
[Fri Jan 30 01:15:42.959042 2026] [:error] [pid 39783:tid 39795] [client 20.63.210.115:1682] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/plugins"] [unique_id "aXuVvq51RNfzhKG5ppPCLAAAAEo"]
[Fri Jan 30 01:15:43.307550 2026] [:error] [pid 39592:tid 39610] [client 20.63.210.115:2004] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/plugins"] [unique_id "aXuVv5lnGYODSsJUyHlA7wAAAM0"]
[Fri Jan 30 01:15:43.700057 2026] [:error] [pid 39502:tid 39539] [client 20.63.210.115:1979] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/production.php"] [unique_id "aXuVvwCUcXwXieepEYjs8gAAAIM"]
[Fri Jan 30 01:15:44.052827 2026] [:error] [pid 39783:tid 39787] [client 20.63.210.115:2042] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/production.php"] [unique_id "aXuVwK51RNfzhKG5ppPCLwAAAEI"]
[Fri Jan 30 01:15:44.307660 2026] [:error] [pid 39783:tid 39801] [client 20.63.210.115:1992] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/production.php"] [unique_id "aXuVwK51RNfzhKG5ppPCMAAAAFA"]
[Fri Jan 30 01:15:44.638064 2026] [:error] [pid 39813:tid 39824] [client 20.63.210.115:1943] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/production.php"] [unique_id "aXuVwN_AaZSBkqpNK03fXgAAAUk"]
[Fri Jan 30 01:15:44.913463 2026] [:error] [pid 39813:tid 39821] [client 20.63.210.115:1879] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h.php"] [unique_id "aXuVwN_AaZSBkqpNK03fXwAAAUY"]
[Fri Jan 30 01:15:45.181356 2026] [:error] [pid 39502:tid 39551] [client 20.63.210.115:2080] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h.php"] [unique_id "aXuVwQCUcXwXieepEYjs9gAAAI8"]
[Fri Jan 30 01:15:45.496173 2026] [:error] [pid 39502:tid 39545] [client 20.63.210.115:2022] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h.php"] [unique_id "aXuVwQCUcXwXieepEYjs9wAAAIk"]
[Fri Jan 30 01:15:45.808528 2026] [:error] [pid 39813:tid 39818] [client 20.63.210.115:2003] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/h.php"] [unique_id "aXuVwd_AaZSBkqpNK03fYQAAAUM"]
[Fri Jan 30 01:15:46.071665 2026] [:error] [pid 39502:tid 39536] [client 20.63.210.115:2167] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/editor/engine.php"] [unique_id "aXuVwgCUcXwXieepEYjs-gAAAIA"]
[Fri Jan 30 01:15:46.412691 2026] [:error] [pid 39592:tid 39598] [client 20.63.210.115:1895] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/editor/engine.php"] [unique_id "aXuVwplnGYODSsJUyHlA9QAAAME"]
[Fri Jan 30 01:15:46.729953 2026] [:error] [pid 39502:tid 39552] [client 20.63.210.115:2045] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/editor/engine.php"] [unique_id "aXuVwgCUcXwXieepEYjs_QAAAJA"]
[Fri Jan 30 01:15:47.005373 2026] [:error] [pid 39501:tid 39516] [client 20.63.210.115:1920] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/editor/engine.php"] [unique_id "aXuVwy_BLgXFo3daaZi8sAAAAAc"]
[Fri Jan 30 01:15:47.322742 2026] [:error] [pid 39501:tid 39528] [client 20.63.210.115:1946] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/leaf.php"] [unique_id "aXuVwy_BLgXFo3daaZi8sQAAABM"]
[Fri Jan 30 01:15:47.581518 2026] [:error] [pid 39783:tid 39805] [client 20.63.210.115:2160] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/leaf.php"] [unique_id "aXuVw651RNfzhKG5ppPCNgAAAFQ"]
[Fri Jan 30 01:15:47.951640 2026] [:error] [pid 39592:tid 39619] [client 20.63.210.115:2097] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/leaf.php"] [unique_id "aXuVw5lnGYODSsJUyHlA9wAAANY"]
[Fri Jan 30 01:15:48.323047 2026] [:error] [pid 39783:tid 39786] [client 20.63.210.115:1957] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/leaf.php"] [unique_id "aXuVxK51RNfzhKG5ppPCOwAAAEE"]
[Fri Jan 30 01:15:48.624630 2026] [:error] [pid 39783:tid 39795] [client 20.63.210.115:2014] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cli.php"] [unique_id "aXuVxK51RNfzhKG5ppPCPQAAAEo"]
[Fri Jan 30 01:15:48.975330 2026] [:error] [pid 39783:tid 39806] [client 20.63.210.115:2046] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cli.php"] [unique_id "aXuVxK51RNfzhKG5ppPCQAAAAFU"]
[Fri Jan 30 01:15:49.325429 2026] [:error] [pid 39592:tid 39601] [client 20.63.210.115:1875] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cli.php"] [unique_id "aXuVxZlnGYODSsJUyHlA_QAAAMQ"]
[Fri Jan 30 01:15:49.590703 2026] [:error] [pid 39813:tid 39827] [client 20.63.210.115:1953] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-cli.php"] [unique_id "aXuVxd_AaZSBkqpNK03fbAAAAUw"]
[Fri Jan 30 01:15:49.880308 2026] [:error] [pid 39501:tid 39514] [client 20.63.210.115:1861] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php.php"] [unique_id "aXuVxS_BLgXFo3daaZi8tAAAAAU"]
[Fri Jan 30 01:15:50.441502 2026] [:error] [pid 39813:tid 39819] [client 20.63.210.115:1898] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php.php"] [unique_id "aXuVxt_AaZSBkqpNK03fbwAAAUQ"]
[Fri Jan 30 01:15:50.880979 2026] [:error] [pid 39502:tid 39538] [client 20.63.210.115:1866] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php.php"] [unique_id "aXuVxgCUcXwXieepEYjtAgAAAII"]
[Fri Jan 30 01:15:51.242242 2026] [:error] [pid 39813:tid 39834] [client 20.63.210.115:2021] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php.php"] [unique_id "aXuVx9_AaZSBkqpNK03fcQAAAVM"]
[Fri Jan 30 01:15:51.543534 2026] [:error] [pid 39592:tid 39615] [client 20.63.210.115:1936] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/vuln.php"] [unique_id "aXuVx5lnGYODSsJUyHlBBgAAANI"]
[Fri Jan 30 01:15:51.858229 2026] [:error] [pid 39592:tid 39598] [client 20.63.210.115:2031] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/vuln.php"] [unique_id "aXuVx5lnGYODSsJUyHlBBwAAAME"]
[Fri Jan 30 01:15:52.166971 2026] [:error] [pid 39813:tid 39835] [client 20.63.210.115:1952] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/vuln.php"] [unique_id "aXuVyN_AaZSBkqpNK03fdAAAAVQ"]
[Fri Jan 30 01:15:52.506301 2026] [:error] [pid 39783:tid 39786] [client 20.63.210.115:1931] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/vuln.php"] [unique_id "aXuVyK51RNfzhKG5ppPCTwAAAEE"]
[Fri Jan 30 01:15:52.909738 2026] [:error] [pid 39592:tid 39603] [client 20.63.210.115:1944] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/plugins/setup"] [unique_id "aXuVyJlnGYODSsJUyHlBDwAAAMY"]
[Fri Jan 30 01:15:53.191764 2026] [:error] [pid 39592:tid 39610] [client 20.63.210.115:1980] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/plugins/setup"] [unique_id "aXuVyZlnGYODSsJUyHlBEAAAAM0"]
[Fri Jan 30 01:15:53.446620 2026] [:error] [pid 39592:tid 39608] [client 20.63.210.115:1919] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/plugins/setup"] [unique_id "aXuVyZlnGYODSsJUyHlBEQAAAMs"]
[Fri Jan 30 01:15:53.707629 2026] [:error] [pid 39502:tid 39556] [client 20.63.210.115:2175] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/plugins/setup"] [unique_id "aXuVyQCUcXwXieepEYjtCgAAAJQ"]
[Fri Jan 30 01:15:53.991150 2026] [:error] [pid 39783:tid 39785] [client 20.63.210.115:1891] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/woh.php"] [unique_id "aXuVya51RNfzhKG5ppPCVQAAAEA"]
[Fri Jan 30 01:15:54.501588 2026] [:error] [pid 39592:tid 39614] [client 20.63.210.115:1954] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/woh.php"] [unique_id "aXuVyplnGYODSsJUyHlBEwAAANE"]
[Fri Jan 30 01:15:54.787862 2026] [:error] [pid 39502:tid 39542] [client 20.63.210.115:1903] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/woh.php"] [unique_id "aXuVygCUcXwXieepEYjtDAAAAIY"]
[Fri Jan 30 01:15:55.172094 2026] [:error] [pid 39813:tid 39837] [client 20.63.210.115:1877] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/woh.php"] [unique_id "aXuVy9_AaZSBkqpNK03fewAAAVY"]
[Fri Jan 30 01:15:55.644174 2026] [:error] [pid 39592:tid 39621] [client 20.63.210.115:1940] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/sgd.php"] [unique_id "aXuVy5lnGYODSsJUyHlBFgAAANg"]
[Fri Jan 30 01:15:55.975860 2026] [:error] [pid 39503:tid 39563] [client 20.63.210.115:2044] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/sgd.php"] [unique_id "aXuVyzzoHqvQcupFdnbyKgAAAQA"]
[Fri Jan 30 01:15:56.267308 2026] [:error] [pid 39501:tid 39512] [client 20.63.210.115:2012] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/sgd.php"] [unique_id "aXuVzC_BLgXFo3daaZi8vgAAAAM"]
[Fri Jan 30 01:15:56.649976 2026] [:error] [pid 39813:tid 39832] [client 20.63.210.115:1856] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/sgd.php"] [unique_id "aXuVzN_AaZSBkqpNK03fgAAAAVE"]
[Fri Jan 30 01:15:57.003310 2026] [:error] [pid 39592:tid 39617] [client 20.63.210.115:1680] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php7"] [unique_id "aXuVzZlnGYODSsJUyHlBGQAAANQ"]
[Fri Jan 30 01:15:57.539452 2026] [:error] [pid 39503:tid 39582] [client 20.63.210.115:1871] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php7"] [unique_id "aXuVzTzoHqvQcupFdnbyMAAAARM"]
[Fri Jan 30 01:15:58.069385 2026] [:error] [pid 39502:tid 39536] [client 20.63.210.115:1883] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php7"] [unique_id "aXuVzgCUcXwXieepEYjtFgAAAIA"]
[Fri Jan 30 01:15:58.575979 2026] [:error] [pid 39503:tid 39577] [client 20.63.210.115:1983] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php7"] [unique_id "aXuVzjzoHqvQcupFdnbyMgAAAQ4"]
[Fri Jan 30 01:15:58.968161 2026] [:error] [pid 39813:tid 39825] [client 20.63.210.115:2145] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aXuVzt_AaZSBkqpNK03fiAAAAUo"]
[Fri Jan 30 01:15:59.446828 2026] [:error] [pid 39501:tid 39524] [client 20.63.210.115:1993] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aXuVzy_BLgXFo3daaZi8wwAAAA8"]
[Fri Jan 30 01:15:59.796156 2026] [:error] [pid 39503:tid 39563] [client 20.63.210.115:1665] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aXuVzzzoHqvQcupFdnbyNgAAAQA"]
[Fri Jan 30 01:16:00.047187 2026] [:error] [pid 39502:tid 39540] [client 20.63.210.115:1678] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aXuV0ACUcXwXieepEYjtGwAAAIQ"]
[Fri Jan 30 01:16:00.333845 2026] [:error] [pid 39501:tid 39532] [client 20.63.210.115:1945] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aXuV0C_BLgXFo3daaZi8xgAAABc"]
[Fri Jan 30 01:16:00.618780 2026] [:error] [pid 39503:tid 39569] [client 20.63.210.115:2011] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aXuV0DzoHqvQcupFdnbyOgAAAQY"]
[Fri Jan 30 01:16:00.964334 2026] [:error] [pid 39502:tid 39548] [client 20.63.210.115:1964] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aXuV0ACUcXwXieepEYjtHgAAAIw"]
[Fri Jan 30 01:16:01.301374 2026] [:error] [pid 39503:tid 39568] [client 20.63.210.115:1901] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-load.php"] [unique_id "aXuV0TzoHqvQcupFdnbyQQAAAQU"]
[Fri Jan 30 01:16:01.664499 2026] [:error] [pid 39813:tid 39838] [client 20.63.210.115:1868] [client 20.63.210.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aXuV0d_AaZSBkqpNK03fjQAAAVc"]
[Fri Jan 30 01:16:02.423959 2026] [:error] [pid 39813:tid 39816] [client 20.63.210.115:2005] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/staging.php"] [unique_id "aXuV0t_AaZSBkqpNK03fkAAAAUE"]
[Fri Jan 30 01:16:02.928191 2026] [:error] [pid 39783:tid 39796] [client 20.63.210.115:1867] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/staging.php"] [unique_id "aXuV0q51RNfzhKG5ppPCXwAAAEs"]
[Fri Jan 30 01:16:03.436879 2026] [:error] [pid 39783:tid 39793] [client 20.63.210.115:1941] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/staging.php"] [unique_id "aXuV0651RNfzhKG5ppPCYgAAAEg"]
[Fri Jan 30 01:16:03.767759 2026] [:error] [pid 39501:tid 39512] [client 20.63.210.115:1917] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/staging.php"] [unique_id "aXuV0y_BLgXFo3daaZi8ygAAAAM"]
[Fri Jan 30 01:16:04.102917 2026] [:error] [pid 39501:tid 39523] [client 20.63.210.115:1956] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aXuV1C_BLgXFo3daaZi8ywAAAA4"]
[Fri Jan 30 01:16:04.524599 2026] [:error] [pid 39813:tid 39838] [client 20.63.210.115:1689] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aXuV1N_AaZSBkqpNK03fmwAAAVc"]
[Fri Jan 30 01:16:04.934116 2026] [:error] [pid 39501:tid 39513] [client 20.63.210.115:2001] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aXuV1C_BLgXFo3daaZi8zgAAAAQ"]
[Fri Jan 30 01:16:05.620813 2026] [:error] [pid 39501:tid 39533] [client 20.63.210.115:2111] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xml.php"] [unique_id "aXuV1S_BLgXFo3daaZi80AAAABg"]
[Fri Jan 30 01:16:06.067114 2026] [:error] [pid 39501:tid 39518] [client 20.63.210.115:2107] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fix/sx.php"] [unique_id "aXuV1i_BLgXFo3daaZi80gAAAAk"]
[Fri Jan 30 01:16:06.715497 2026] [:error] [pid 39501:tid 39509] [client 20.63.210.115:1988] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fix/sx.php"] [unique_id "aXuV1i_BLgXFo3daaZi81AAAAAA"]
[Fri Jan 30 01:16:07.208404 2026] [:error] [pid 39501:tid 39532] [client 20.63.210.115:1934] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fix/sx.php"] [unique_id "aXuV1y_BLgXFo3daaZi81QAAABc"]
[Fri Jan 30 01:16:07.479295 2026] [:error] [pid 39503:tid 39579] [client 20.63.210.115:1863] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/fix/sx.php"] [unique_id "aXuV1zzoHqvQcupFdnbyTAAAARA"]
[Fri Jan 30 01:16:07.851600 2026] [:error] [pid 39813:tid 39827] [client 20.63.210.115:1721] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1index.php"] [unique_id "aXuV19_AaZSBkqpNK03fqwAAAUw"]
[Fri Jan 30 01:16:08.193360 2026] [:error] [pid 39592:tid 39617] [client 20.63.210.115:1966] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1index.php"] [unique_id "aXuV2JlnGYODSsJUyHlBIgAAANQ"]
[Fri Jan 30 01:16:08.473216 2026] [:error] [pid 39503:tid 39583] [client 20.63.210.115:1925] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1index.php"] [unique_id "aXuV2DzoHqvQcupFdnbyTgAAARQ"]
[Fri Jan 30 01:16:08.773248 2026] [:error] [pid 39592:tid 39620] [client 20.63.210.115:1905] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1index.php"] [unique_id "aXuV2JlnGYODSsJUyHlBJwAAANc"]
[Fri Jan 30 01:16:09.046255 2026] [:error] [pid 39503:tid 39573] [client 20.63.210.115:1927] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php7"] [unique_id "aXuV2TzoHqvQcupFdnbyTwAAAQo"]
[Fri Jan 30 01:16:09.315635 2026] [:error] [pid 39592:tid 39605] [client 20.63.210.115:1970] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php7"] [unique_id "aXuV2ZlnGYODSsJUyHlBKQAAAMg"]
[Fri Jan 30 01:16:09.611923 2026] [:error] [pid 39502:tid 39543] [client 20.63.210.115:1886] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php7"] [unique_id "aXuV2QCUcXwXieepEYjtLQAAAIc"]
[Fri Jan 30 01:16:09.966336 2026] [:error] [pid 39502:tid 39538] [client 20.63.210.115:1971] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php7"] [unique_id "aXuV2QCUcXwXieepEYjtLwAAAII"]
[Fri Jan 30 01:16:10.302014 2026] [:error] [pid 39501:tid 39511] [client 20.63.210.115:2102] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/shapes.php"] [unique_id "aXuV2i_BLgXFo3daaZi82gAAAAI"]
[Fri Jan 30 01:16:10.619137 2026] [:error] [pid 39502:tid 39551] [client 20.63.210.115:1950] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/shapes.php"] [unique_id "aXuV2gCUcXwXieepEYjtMAAAAI8"]
[Fri Jan 30 01:16:11.001677 2026] [:error] [pid 39592:tid 39601] [client 20.63.210.115:1915] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/shapes.php"] [unique_id "aXuV25lnGYODSsJUyHlBLAAAAMQ"]
[Fri Jan 30 01:16:11.287028 2026] [:error] [pid 39592:tid 39597] [client 20.63.210.115:1668] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/shapes.php"] [unique_id "aXuV25lnGYODSsJUyHlBLgAAAMA"]
[Fri Jan 30 01:16:11.563955 2026] [:error] [pid 39503:tid 39571] [client 20.63.210.115:1981] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXuV2zzoHqvQcupFdnbyVQAAAQg"]
[Fri Jan 30 01:16:11.875599 2026] [:error] [pid 39813:tid 39834] [client 20.63.210.115:2170] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXuV29_AaZSBkqpNK03fuQAAAVM"]
[Fri Jan 30 01:16:12.121160 2026] [:error] [pid 39502:tid 39544] [client 20.63.210.115:1929] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXuV3ACUcXwXieepEYjtMwAAAIg"]
[Fri Jan 30 01:16:12.395326 2026] [:error] [pid 39502:tid 39542] [client 20.63.210.115:2033] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXuV3ACUcXwXieepEYjtNAAAAIY"]
[Fri Jan 30 01:16:12.668765 2026] [:error] [pid 39503:tid 39577] [client 20.63.210.115:1922] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/radio.php"] [unique_id "aXuV3DzoHqvQcupFdnbyVwAAAQ4"]
[Fri Jan 30 01:16:12.932690 2026] [:error] [pid 39813:tid 39830] [client 20.63.210.115:1918] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/radio.php"] [unique_id "aXuV3N_AaZSBkqpNK03fvQAAAU8"]
[Fri Jan 30 01:16:13.260184 2026] [:error] [pid 39502:tid 39559] [client 20.63.210.115:1870] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/radio.php"] [unique_id "aXuV3QCUcXwXieepEYjtNgAAAJc"]
[Fri Jan 30 01:16:13.637638 2026] [:error] [pid 39592:tid 39615] [client 20.63.210.115:1693] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/radio.php"] [unique_id "aXuV3ZlnGYODSsJUyHlBLwAAANI"]
[Fri Jan 30 01:16:13.957038 2026] [:error] [pid 39592:tid 39600] [client 20.63.210.115:1864] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/edit.php"] [unique_id "aXuV3ZlnGYODSsJUyHlBMQAAAMM"]
[Fri Jan 30 01:16:14.307365 2026] [:error] [pid 39503:tid 39583] [client 20.63.210.115:1930] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/edit.php"] [unique_id "aXuV3jzoHqvQcupFdnbyWwAAARQ"]
[Fri Jan 30 01:16:14.558591 2026] [:error] [pid 39592:tid 39602] [client 20.63.210.115:1911] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/edit.php"] [unique_id "aXuV3plnGYODSsJUyHlBNAAAAMU"]
[Fri Jan 30 01:16:14.942586 2026] [:error] [pid 39501:tid 39520] [client 20.63.210.115:1872] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/edit.php"] [unique_id "aXuV3i_BLgXFo3daaZi85AAAAAs"]
[Fri Jan 30 01:16:15.226016 2026] [:error] [pid 39813:tid 39819] [client 20.63.210.115:1878] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/atomlib.php"] [unique_id "aXuV39_AaZSBkqpNK03fwwAAAUQ"]
[Fri Jan 30 01:16:15.495269 2026] [:error] [pid 39813:tid 39828] [client 20.63.210.115:1858] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/atomlib.php"] [unique_id "aXuV39_AaZSBkqpNK03fxwAAAU0"]
[Fri Jan 30 01:16:15.774630 2026] [:error] [pid 39813:tid 39826] [client 20.63.210.115:2084] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/atomlib.php"] [unique_id "aXuV39_AaZSBkqpNK03fyQAAAUs"]
[Fri Jan 30 01:16:16.042512 2026] [:error] [pid 39813:tid 39817] [client 20.63.210.115:1731] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/atomlib.php"] [unique_id "aXuV4N_AaZSBkqpNK03fywAAAUI"]
[Fri Jan 30 01:16:16.370909 2026] [:error] [pid 39502:tid 39538] [client 20.63.210.115:2000] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/apikey/mar.php"] [unique_id "aXuV4ACUcXwXieepEYjtOgAAAII"]
[Fri Jan 30 01:16:16.750842 2026] [:error] [pid 39592:tid 39614] [client 20.63.210.115:1679] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/apikey/mar.php"] [unique_id "aXuV4JlnGYODSsJUyHlBPAAAANE"]
[Fri Jan 30 01:16:17.081895 2026] [:error] [pid 39502:tid 39549] [client 20.63.210.115:1709] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/apikey/mar.php"] [unique_id "aXuV4QCUcXwXieepEYjtPQAAAI0"]
[Fri Jan 30 01:16:17.493833 2026] [:error] [pid 39813:tid 39829] [client 20.63.210.115:1960] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/apikey/mar.php"] [unique_id "aXuV4d_AaZSBkqpNK03f0AAAAU4"]
[Fri Jan 30 01:16:17.829963 2026] [:error] [pid 39503:tid 39568] [client 20.63.210.115:1802] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/cloud.php"] [unique_id "aXuV4TzoHqvQcupFdnbyYQAAAQU"]
[Fri Jan 30 01:16:18.196827 2026] [:error] [pid 39501:tid 39519] [client 20.63.210.115:1906] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/cloud.php"] [unique_id "aXuV4i_BLgXFo3daaZi85wAAAAo"]
[Fri Jan 30 01:16:18.463404 2026] [:error] [pid 39501:tid 39523] [client 20.63.210.115:1975] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/cloud.php"] [unique_id "aXuV4i_BLgXFo3daaZi86AAAAA4"]
[Fri Jan 30 01:16:18.820932 2026] [:error] [pid 39503:tid 39579] [client 20.63.210.115:1673] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/home/cloud.php"] [unique_id "aXuV4jzoHqvQcupFdnbyYwAAARA"]
[Fri Jan 30 01:16:19.256390 2026] [:error] [pid 39502:tid 39560] [client 20.63.210.115:1890] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer.php"] [unique_id "aXuV4wCUcXwXieepEYjtRAAAAJg"]
[Fri Jan 30 01:16:19.713989 2026] [:error] [pid 39592:tid 39612] [client 20.63.210.115:1724] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer.php"] [unique_id "aXuV45lnGYODSsJUyHlBPwAAAM8"]
[Fri Jan 30 01:16:19.952964 2026] [:error] [pid 39783:tid 39808] [client 20.63.210.115:1684] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer.php"] [unique_id "aXuV4651RNfzhKG5ppPChgAAAFc"]
[Fri Jan 30 01:16:20.199414 2026] [:error] [pid 39502:tid 39552] [client 20.63.210.115:1681] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminer.php"] [unique_id "aXuV5ACUcXwXieepEYjtRQAAAJA"]
[Fri Jan 30 01:16:20.440952 2026] [:error] [pid 39592:tid 39602] [client 20.63.210.115:1893] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/logout.php"] [unique_id "aXuV5JlnGYODSsJUyHlBQQAAAMU"]
[Fri Jan 30 01:16:20.783624 2026] [:error] [pid 39502:tid 39555] [client 20.63.210.115:1859] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/logout.php"] [unique_id "aXuV5ACUcXwXieepEYjtSAAAAJM"]
[Fri Jan 30 01:16:21.073854 2026] [:error] [pid 39813:tid 39836] [client 20.63.210.115:2043] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/logout.php"] [unique_id "aXuV5d_AaZSBkqpNK03f2QAAAVU"]
[Fri Jan 30 01:16:21.367842 2026] [:error] [pid 39813:tid 39834] [client 20.63.210.115:1669] [client 20.63.210.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/logout.php"] [unique_id "aXuV5d_AaZSBkqpNK03f3QAAAVM"]
[Fri Jan 30 02:55:15.303294 2026] [autoindex:error] [pid 13828:tid 13837] [client 146.70.186.206:53638] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 03:27:47.050389 2026] [proxy_fcgi:error] [pid 43029:tid 43070] [client 20.24.219.65:9589] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:27:47.187942 2026] [proxy_fcgi:error] [pid 43029:tid 43072] [client 20.24.219.65:9589] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:27:47.748719 2026] [proxy_fcgi:error] [pid 43029:tid 43076] [client 20.24.219.65:9589] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:27:52.445125 2026] [proxy_fcgi:error] [pid 43029:tid 43078] [client 20.24.219.65:9589] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:27:52.579741 2026] [:error] [pid 43029:tid 43063] [client 20.24.219.65:9589] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidfile.php"] [unique_id "aXu0uCT0EHX4Yhs_55WM6QAAAEQ"]
[Fri Jan 30 03:27:56.851591 2026] [:error] [pid 43271:tid 43287] [client 20.24.219.65:9489] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidfile.php"] [unique_id "aXu0vOzZOTwaysmOSIttSgAAAAw"]
[Fri Jan 30 03:27:58.187880 2026] [:error] [pid 43271:tid 43295] [client 20.24.219.65:9500] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidfile.php"] [unique_id "aXu0vuzZOTwaysmOSIttVQAAABQ"]
[Fri Jan 30 03:27:59.252968 2026] [:error] [pid 43272:tid 43305] [client 20.24.219.65:9494] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidfile.php"] [unique_id "aXu0v0wZXU-UKoVoNE2UkgAAAEM"]
[Fri Jan 30 03:28:00.163700 2026] [:error] [pid 43357:tid 43369] [client 20.24.219.65:9481] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rum.php"] [unique_id "aXu0wPnCI2XDrOIlEOFRGAAAAMY"]
[Fri Jan 30 03:28:01.973732 2026] [:error] [pid 43273:tid 43338] [client 20.24.219.65:9539] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rum.php"] [unique_id "aXu0wQXzRsTHYU_M7FqUpAAAAIk"]
[Fri Jan 30 03:28:02.924909 2026] [:error] [pid 43272:tid 43316] [client 20.24.219.65:9545] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rum.php"] [unique_id "aXu0wkwZXU-UKoVoNE2UmgAAAE4"]
[Fri Jan 30 03:28:06.959213 2026] [:error] [pid 43467:tid 43478] [client 20.24.219.65:9562] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rum.php"] [unique_id "aXu0xiRAXOBnFEdq-kMkFwAAAAc"]
[Fri Jan 30 03:28:07.549695 2026] [:error] [pid 43469:tid 43526] [client 20.24.219.65:9592] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aXu0x1TYrLd7qqhkwbgwiwAAAIA"]
[Fri Jan 30 03:28:16.337181 2026] [:error] [pid 43790:tid 43827] [client 20.24.219.65:9474] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php8.php"] [unique_id "aXu00GyGfEFoz5YpzV4M2QAAAAU"]
[Fri Jan 30 03:28:16.976480 2026] [:error] [pid 43800:tid 43878] [client 20.24.219.65:9575] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php8.php"] [unique_id "aXu00DwctX9p2lVX6idozgAAAIE"]
[Fri Jan 30 03:28:17.649287 2026] [:error] [pid 43795:tid 43851] [client 20.24.219.65:9541] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php8.php"] [unique_id "aXu00XhtdWDWBxwQkT7LHwAAAEE"]
[Fri Jan 30 03:28:18.113851 2026] [:error] [pid 43795:tid 43852] [client 20.24.219.65:9577] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/php8.php"] [unique_id "aXu00nhtdWDWBxwQkT7LIQAAAEI"]
[Fri Jan 30 03:28:18.487304 2026] [:error] [pid 43907:tid 43917] [client 20.24.219.65:9508] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aoisuki.php"] [unique_id "aXu00sgwTaRBDpPM1eha7gAAAMY"]
[Fri Jan 30 03:28:19.910001 2026] [:error] [pid 43790:tid 43824] [client 20.24.219.65:9478] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aoisuki.php"] [unique_id "aXu002yGfEFoz5YpzV4M7QAAAAI"]
[Fri Jan 30 03:28:20.448983 2026] [:error] [pid 43795:tid 43857] [client 20.24.219.65:9549] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aoisuki.php"] [unique_id "aXu01HhtdWDWBxwQkT7LJQAAAEc"]
[Fri Jan 30 03:28:20.995283 2026] [:error] [pid 43790:tid 43842] [client 20.24.219.65:9593] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-aoisuki.php"] [unique_id "aXu01GyGfEFoz5YpzV4M9AAAABQ"]
[Fri Jan 30 03:28:22.800565 2026] [:error] [pid 43790:tid 43841] [client 20.24.219.65:9540] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naritai.php"] [unique_id "aXu01myGfEFoz5YpzV4M-gAAABM"]
[Fri Jan 30 03:28:23.423681 2026] [:error] [pid 43800:tid 43891] [client 20.24.219.65:9569] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naritai.php"] [unique_id "aXu01zwctX9p2lVX6ido2AAAAI4"]
[Fri Jan 30 03:28:24.435650 2026] [:error] [pid 43790:tid 43828] [client 20.24.219.65:3035] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naritai.php"] [unique_id "aXu02GyGfEFoz5YpzV4NAQAAAAY"]
[Fri Jan 30 03:28:25.464616 2026] [:error] [pid 43790:tid 43841] [client 20.24.219.65:9585] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/naritai.php"] [unique_id "aXu02WyGfEFoz5YpzV4NBAAAABM"]
[Fri Jan 30 03:28:26.501223 2026] [:error] [pid 43800:tid 43882] [client 20.24.219.65:3059] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aXu02jwctX9p2lVX6ido4QAAAIU"]
[Fri Jan 30 03:28:27.295673 2026] [:error] [pid 43800:tid 43881] [client 20.24.219.65:9586] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aXu02zwctX9p2lVX6ido5AAAAIQ"]
[Fri Jan 30 03:28:28.331840 2026] [:error] [pid 43790:tid 43823] [client 20.24.219.65:9536] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aXu03GyGfEFoz5YpzV4NDAAAAAE"]
[Fri Jan 30 03:28:29.138608 2026] [:error] [pid 43790:tid 43846] [client 20.24.219.65:9576] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w2025.php"] [unique_id "aXu03WyGfEFoz5YpzV4NFAAAABg"]
[Fri Jan 30 03:28:30.380710 2026] [:error] [pid 43790:tid 43823] [client 20.24.219.65:9504] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/app.php"] [unique_id "aXu03myGfEFoz5YpzV4NGQAAAAE"]
[Fri Jan 30 03:28:31.547137 2026] [:error] [pid 43907:tid 43926] [client 20.24.219.65:9487] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/app.php"] [unique_id "aXu038gwTaRBDpPM1ehbAAAAAM8"]
[Fri Jan 30 03:28:32.246301 2026] [:error] [pid 43907:tid 43914] [client 20.24.219.65:3016] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/app.php"] [unique_id "aXu04MgwTaRBDpPM1ehbAQAAAMM"]
[Fri Jan 30 03:28:32.791090 2026] [:error] [pid 43795:tid 43874] [client 20.24.219.65:9557] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/app.php"] [unique_id "aXu04HhtdWDWBxwQkT7LOgAAAFg"]
[Fri Jan 30 03:28:33.285332 2026] [:error] [pid 43795:tid 43851] [client 20.24.219.65:9572] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aXu04XhtdWDWBxwQkT7LPQAAAEE"]
[Fri Jan 30 03:28:33.974443 2026] [:error] [pid 43907:tid 43915] [client 20.24.219.65:9596] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aXu04cgwTaRBDpPM1ehbBQAAAMQ"]
[Fri Jan 30 03:28:34.307301 2026] [:error] [pid 43907:tid 43921] [client 20.24.219.65:9538] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aXu04sgwTaRBDpPM1ehbBwAAAMo"]
[Fri Jan 30 03:28:35.170481 2026] [:error] [pid 43907:tid 43929] [client 20.24.219.65:9479] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lib.php"] [unique_id "aXu048gwTaRBDpPM1ehbDAAAANE"]
[Fri Jan 30 03:28:36.595169 2026] [:error] [pid 43795:tid 43871] [client 20.24.219.65:9507] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geaitasa.php"] [unique_id "aXu05HhtdWDWBxwQkT7LSQAAAFU"]
[Fri Jan 30 03:28:37.273025 2026] [:error] [pid 43907:tid 43923] [client 20.24.219.65:9477] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geaitasa.php"] [unique_id "aXu05cgwTaRBDpPM1ehbEgAAAMw"]
[Fri Jan 30 03:28:39.143995 2026] [:error] [pid 43907:tid 43929] [client 20.24.219.65:9496] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geaitasa.php"] [unique_id "aXu058gwTaRBDpPM1ehbHAAAANE"]
[Fri Jan 30 03:28:41.095624 2026] [:error] [pid 43800:tid 43898] [client 20.24.219.65:9498] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/geaitasa.php"] [unique_id "aXu06TwctX9p2lVX6idpAAAAAJU"]
[Fri Jan 30 03:28:41.599772 2026] [:error] [pid 43790:tid 43837] [client 20.24.219.65:9551] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-cc.php"] [unique_id "aXu06WyGfEFoz5YpzV4NLQAAAA8"]
[Fri Jan 30 03:28:42.919523 2026] [:error] [pid 43790:tid 43830] [client 20.24.219.65:9583] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-cc.php"] [unique_id "aXu06myGfEFoz5YpzV4NMAAAAAg"]
[Fri Jan 30 03:28:43.260096 2026] [:error] [pid 43795:tid 43850] [client 20.24.219.65:3018] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-cc.php"] [unique_id "aXu063htdWDWBxwQkT7LWAAAAEA"]
[Fri Jan 30 03:28:44.445886 2026] [:error] [pid 43907:tid 43932] [client 20.24.219.65:9476] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class-cc.php"] [unique_id "aXu07MgwTaRBDpPM1ehbKgAAANQ"]
[Fri Jan 30 03:28:45.874918 2026] [:error] [pid 43795:tid 43863] [client 20.24.219.65:9472] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXu07XhtdWDWBxwQkT7LXwAAAE0"]
[Fri Jan 30 03:28:47.040842 2026] [:error] [pid 43800:tid 43888] [client 20.24.219.65:9527] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXu07zwctX9p2lVX6idpDQAAAIs"]
[Fri Jan 30 03:28:47.845677 2026] [:error] [pid 43800:tid 43898] [client 20.24.219.65:9482] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXu07zwctX9p2lVX6idpDwAAAJU"]
[Fri Jan 30 03:28:48.762957 2026] [:error] [pid 43907:tid 43917] [client 20.24.219.65:9542] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/reze.php"] [unique_id "aXu08MgwTaRBDpPM1ehbMwAAAMY"]
[Fri Jan 30 03:28:49.392943 2026] [:error] [pid 43907:tid 43937] [client 20.24.219.65:9493] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11092null.php"] [unique_id "aXu08cgwTaRBDpPM1ehbOAAAANg"]
[Fri Jan 30 03:28:50.124018 2026] [:error] [pid 43795:tid 43856] [client 20.24.219.65:9594] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11092null.php"] [unique_id "aXu08nhtdWDWBxwQkT7LZQAAAEY"]
[Fri Jan 30 03:28:51.366298 2026] [:error] [pid 43795:tid 43865] [client 20.24.219.65:9525] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/11092null.php"] [unique_id "aXu083htdWDWBxwQkT7LbAAAAE8"]
[Fri Jan 30 03:28:53.057928 2026] [proxy_fcgi:error] [pid 43790:tid 43834] [client 20.24.219.65:9537] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:28:53.456451 2026] [proxy_fcgi:error] [pid 43790:tid 43827] [client 20.24.219.65:9537] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:28:53.576426 2026] [:error] [pid 43790:tid 43833] [client 20.24.219.65:9537] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/166.php"] [unique_id "aXu09WyGfEFoz5YpzV4NRwAAAAs"]
[Fri Jan 30 03:28:54.263203 2026] [:error] [pid 43800:tid 43891] [client 20.24.219.65:3045] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/166.php"] [unique_id "aXu09jwctX9p2lVX6idpFwAAAI4"]
[Fri Jan 30 03:28:55.540077 2026] [:error] [pid 43800:tid 43899] [client 20.24.219.65:9486] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/166.php"] [unique_id "aXu09zwctX9p2lVX6idpHgAAAJY"]
[Fri Jan 30 03:28:56.518443 2026] [:error] [pid 43795:tid 43861] [client 20.24.219.65:3014] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/166.php"] [unique_id "aXu0-HhtdWDWBxwQkT7LcAAAAEs"]
[Fri Jan 30 03:28:57.755590 2026] [:error] [pid 43800:tid 43888] [client 20.24.219.65:9570] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/by.php"] [unique_id "aXu0-TwctX9p2lVX6idpLQAAAIs"]
[Fri Jan 30 03:28:58.201823 2026] [:error] [pid 43800:tid 43901] [client 20.24.219.65:3039] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/by.php"] [unique_id "aXu0-jwctX9p2lVX6idpMgAAAJg"]
[Fri Jan 30 03:28:58.771917 2026] [:error] [pid 43800:tid 43877] [client 20.24.219.65:3050] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/by.php"] [unique_id "aXu0-jwctX9p2lVX6idpNgAAAIA"]
[Fri Jan 30 03:28:59.921317 2026] [:error] [pid 43790:tid 43822] [client 20.24.219.65:3038] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/by.php"] [unique_id "aXu0-2yGfEFoz5YpzV4NVQAAAAA"]
[Fri Jan 30 03:29:01.131904 2026] [:error] [pid 43795:tid 43867] [client 20.24.219.65:9504] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zz8.php"] [unique_id "aXu0_XhtdWDWBxwQkT7LeQAAAFE"]
[Fri Jan 30 03:29:01.711088 2026] [:error] [pid 43907:tid 43929] [client 20.24.219.65:3066] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zz8.php"] [unique_id "aXu0_cgwTaRBDpPM1ehbWQAAANE"]
[Fri Jan 30 03:29:02.537964 2026] [:error] [pid 43800:tid 43901] [client 20.24.219.65:9473] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zz8.php"] [unique_id "aXu0_jwctX9p2lVX6idpQwAAAJg"]
[Fri Jan 30 03:29:04.281168 2026] [:error] [pid 43800:tid 43893] [client 20.24.219.65:9518] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zz8.php"] [unique_id "aXu1ADwctX9p2lVX6idpSgAAAJA"]
[Fri Jan 30 03:29:05.902354 2026] [:error] [pid 43907:tid 43929] [client 20.24.219.65:9501] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aXu1AcgwTaRBDpPM1ehbZQAAANE"]
[Fri Jan 30 03:29:07.579934 2026] [:error] [pid 43800:tid 43884] [client 20.24.219.65:9512] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aXu1AzwctX9p2lVX6idpVAAAAIc"]
[Fri Jan 30 03:29:09.532794 2026] [:error] [pid 43907:tid 43925] [client 20.24.219.65:3031] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aXu1BcgwTaRBDpPM1ehbagAAAM4"]
[Fri Jan 30 03:29:10.461326 2026] [:error] [pid 43907:tid 43914] [client 20.24.219.65:2985] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/s1.php"] [unique_id "aXu1BsgwTaRBDpPM1ehbbAAAAMM"]
[Fri Jan 30 03:29:11.207047 2026] [:error] [pid 43800:tid 43886] [client 20.24.219.65:9491] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah21.php"] [unique_id "aXu1BzwctX9p2lVX6idpYwAAAIk"]
[Fri Jan 30 03:29:11.832371 2026] [:error] [pid 43907:tid 43916] [client 20.24.219.65:9548] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah21.php"] [unique_id "aXu1B8gwTaRBDpPM1ehbcQAAAMU"]
[Fri Jan 30 03:29:12.510480 2026] [:error] [pid 43907:tid 43912] [client 20.24.219.65:9579] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah21.php"] [unique_id "aXu1CMgwTaRBDpPM1ehbcwAAAME"]
[Fri Jan 30 03:29:13.607508 2026] [:error] [pid 43795:tid 43856] [client 20.24.219.65:3033] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah21.php"] [unique_id "aXu1CXhtdWDWBxwQkT7LiQAAAEY"]
[Fri Jan 30 03:29:15.935898 2026] [:error] [pid 43907:tid 43918] [client 20.24.219.65:2975] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah22.php"] [unique_id "aXu1C8gwTaRBDpPM1ehbggAAAMc"]
[Fri Jan 30 03:29:16.699115 2026] [:error] [pid 43907:tid 43924] [client 20.24.219.65:2954] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah22.php"] [unique_id "aXu1DMgwTaRBDpPM1ehbhQAAAM0"]
[Fri Jan 30 03:29:18.711015 2026] [:error] [pid 43907:tid 43922] [client 20.24.219.65:3014] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah22.php"] [unique_id "aXu1DsgwTaRBDpPM1ehbjAAAAMs"]
[Fri Jan 30 03:29:19.600371 2026] [:error] [pid 43795:tid 43867] [client 20.24.219.65:2967] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ah22.php"] [unique_id "aXu1D3htdWDWBxwQkT7LkwAAAFE"]
[Fri Jan 30 03:29:23.842618 2026] [:error] [pid 43795:tid 43862] [client 20.24.219.65:9555] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws38.php"] [unique_id "aXu1E3htdWDWBxwQkT7LlgAAAEw"]
[Fri Jan 30 03:29:24.623325 2026] [:error] [pid 43907:tid 43911] [client 20.24.219.65:9558] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws38.php"] [unique_id "aXu1FMgwTaRBDpPM1ehbnAAAAMA"]
[Fri Jan 30 03:29:27.318333 2026] [:error] [pid 43795:tid 43863] [client 20.24.219.65:3032] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws38.php"] [unique_id "aXu1F3htdWDWBxwQkT7LmgAAAE0"]
[Fri Jan 30 03:29:28.963787 2026] [:error] [pid 43907:tid 43919] [client 20.24.219.65:3037] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws38.php"] [unique_id "aXu1GMgwTaRBDpPM1ehbowAAAMg"]
[Fri Jan 30 03:29:30.362365 2026] [:error] [pid 43907:tid 43937] [client 20.24.219.65:2968] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXu1GsgwTaRBDpPM1ehbpgAAANg"]
[Fri Jan 30 03:29:31.118155 2026] [:error] [pid 43907:tid 43932] [client 20.24.219.65:9522] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXu1G8gwTaRBDpPM1ehbqAAAANQ"]
[Fri Jan 30 03:29:33.416471 2026] [:error] [pid 43907:tid 43916] [client 20.24.219.65:3054] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXu1HcgwTaRBDpPM1ehbrwAAAMU"]
[Fri Jan 30 03:29:34.154010 2026] [:error] [pid 43800:tid 43891] [client 20.24.219.65:2955] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXu1HjwctX9p2lVX6idpsQAAAI4"]
[Fri Jan 30 03:29:34.848125 2026] [:error] [pid 43790:tid 43838] [client 20.24.219.65:9514] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploaxa1.php"] [unique_id "aXu1HmyGfEFoz5YpzV4NswAAABA"]
[Fri Jan 30 03:29:35.277819 2026] [:error] [pid 43800:tid 43892] [client 20.24.219.65:3011] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploaxa1.php"] [unique_id "aXu1HzwctX9p2lVX6idptQAAAI8"]
[Fri Jan 30 03:29:35.784894 2026] [:error] [pid 43800:tid 43895] [client 20.24.219.65:9584] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploaxa1.php"] [unique_id "aXu1HzwctX9p2lVX6idpuAAAAJI"]
[Fri Jan 30 03:29:37.217473 2026] [:error] [pid 43907:tid 43917] [client 20.24.219.65:9595] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploaxa1.php"] [unique_id "aXu1IcgwTaRBDpPM1ehbtgAAAMY"]
[Fri Jan 30 03:29:37.932739 2026] [:error] [pid 43795:tid 43862] [client 20.24.219.65:3058] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-su.php"] [unique_id "aXu1IXhtdWDWBxwQkT7LrQAAAEw"]
[Fri Jan 30 03:29:39.517328 2026] [:error] [pid 43790:tid 43829] [client 20.24.219.65:3069] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-su.php"] [unique_id "aXu1I2yGfEFoz5YpzV4NwQAAAAc"]
[Fri Jan 30 03:29:41.209046 2026] [:error] [pid 43795:tid 43850] [client 20.24.219.65:3044] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-su.php"] [unique_id "aXu1JXhtdWDWBxwQkT7LsQAAAEA"]
[Fri Jan 30 03:29:46.591455 2026] [:error] [pid 43795:tid 43860] [client 20.24.219.65:2944] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-su.php"] [unique_id "aXu1KnhtdWDWBxwQkT7LvgAAAEo"]
[Fri Jan 30 03:29:48.603206 2026] [:error] [pid 43790:tid 43832] [client 20.24.219.65:2973] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzzaq.php"] [unique_id "aXu1LGyGfEFoz5YpzV4N1gAAAAo"]
[Fri Jan 30 03:29:51.341944 2026] [:error] [pid 43795:tid 43874] [client 20.24.219.65:3020] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rzzaq.php"] [unique_id "aXu1L3htdWDWBxwQkT7L0QAAAFg"]
[Fri Jan 30 03:29:53.095647 2026] [proxy_fcgi:error] [pid 43800:tid 43888] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:29:53.233122 2026] [proxy_fcgi:error] [pid 43800:tid 43889] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:29:53.366328 2026] [proxy_fcgi:error] [pid 43800:tid 43891] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:29:53.507943 2026] [proxy_fcgi:error] [pid 43800:tid 43901] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:29:54.270985 2026] [proxy_fcgi:error] [pid 43800:tid 43887] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:29:54.403248 2026] [proxy_fcgi:error] [pid 43800:tid 43882] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 03:29:54.536272 2026] [proxy_fcgi:error] [pid 43800:tid 43886] [client 20.24.219.65:2984] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:20:30.429175 2026] [:error] [pid 46912:tid 46945] [client 20.212.62.230:10332] [client 20.212.62.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXvBDj6yiVW7A9NwFFnsQQAAABU"]
[Fri Jan 30 04:20:33.368878 2026] [proxy_fcgi:error] [pid 46914:tid 46978] [client 20.212.62.230:11245] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:20:33.471520 2026] [proxy_fcgi:error] [pid 46914:tid 46981] [client 20.212.62.230:11245] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:20:33.593916 2026] [:error] [pid 46914:tid 46995] [client 20.212.62.230:11245] [client 20.212.62.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aXvBEVgSfJ4kZxNKlb-btgAAAJE"]
[Fri Jan 30 04:20:34.825176 2026] [:error] [pid 46912:tid 46948] [client 20.212.62.230:19538] [client 20.212.62.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aXvBEj6yiVW7A9NwFFnsRAAAABg"]
[Fri Jan 30 04:20:36.334995 2026] [proxy_fcgi:error] [pid 46912:tid 46944] [client 20.212.62.230:7769] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:20:36.422626 2026] [:error] [pid 46912:tid 46945] [client 20.212.62.230:7769] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXvBFD6yiVW7A9NwFFnsSgAAABU"]
[Fri Jan 30 04:20:38.407796 2026] [:error] [pid 46914:tid 47001] [client 20.212.62.230:3867] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXvBFlgSfJ4kZxNKlb-bvgAAAJc"]
[Fri Jan 30 04:20:40.141802 2026] [:error] [pid 46914:tid 46990] [client 20.212.62.230:3893] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXvBGFgSfJ4kZxNKlb-bxAAAAIw"]
[Fri Jan 30 04:20:42.186415 2026] [:error] [pid 46914:tid 46994] [client 20.212.62.230:26612] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXvBGlgSfJ4kZxNKlb-bzQAAAJA"]
[Fri Jan 30 04:20:45.016277 2026] [:error] [pid 46912:tid 46946] [client 20.212.62.230:17508] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aXvBHT6yiVW7A9NwFFnsYAAAABY"]
[Fri Jan 30 04:20:45.731933 2026] [:error] [pid 46914:tid 46979] [client 20.212.62.230:11220] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aXvBHVgSfJ4kZxNKlb-b2wAAAIE"]
[Fri Jan 30 04:20:47.187777 2026] [:error] [pid 46914:tid 46981] [client 20.212.62.230:26588] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aXvBH1gSfJ4kZxNKlb-b4gAAAIM"]
[Fri Jan 30 04:20:48.208448 2026] [:error] [pid 46913:tid 46973] [client 20.212.62.230:26004] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/juuuu.php"] [unique_id "aXvBIDMWmKL8hOfC3uT2SwAAAFY"]
[Fri Jan 30 04:20:49.597194 2026] [:error] [pid 47021:tid 47039] [client 20.212.62.230:26003] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aXvBIdap1k13UdZUNSQdRAAAANA"]
[Fri Jan 30 04:20:52.463436 2026] [:error] [pid 46914:tid 46993] [client 20.212.62.230:3132] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aXvBJFgSfJ4kZxNKlb-b6gAAAI8"]
[Fri Jan 30 04:20:53.161983 2026] [:error] [pid 47021:tid 47035] [client 20.212.62.230:11230] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aXvBJdap1k13UdZUNSQdTwAAAMw"]
[Fri Jan 30 04:20:54.319292 2026] [:error] [pid 47021:tid 47026] [client 20.212.62.230:29703] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ha.php"] [unique_id "aXvBJtap1k13UdZUNSQdUwAAAMM"]
[Fri Jan 30 04:20:56.028018 2026] [:error] [pid 46914:tid 46992] [client 20.212.62.230:3084] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXvBKFgSfJ4kZxNKlb-b8AAAAI4"]
[Fri Jan 30 04:20:57.934520 2026] [:error] [pid 46912:tid 46944] [client 20.212.62.230:3552] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXvBKT6yiVW7A9NwFFnsewAAABQ"]
[Fri Jan 30 04:20:59.568607 2026] [:error] [pid 46913:tid 46964] [client 20.212.62.230:13003] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXvBKzMWmKL8hOfC3uT2YQAAAE0"]
[Fri Jan 30 04:21:00.263648 2026] [:error] [pid 46914:tid 46978] [client 20.212.62.230:13043] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gg.php"] [unique_id "aXvBLFgSfJ4kZxNKlb-cBAAAAIA"]
[Fri Jan 30 04:21:03.672830 2026] [:error] [pid 47021:tid 47027] [client 20.212.62.230:29722] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aXvBL9ap1k13UdZUNSQdYgAAAMQ"]
[Fri Jan 30 04:21:06.068317 2026] [:error] [pid 46913:tid 46971] [client 20.212.62.230:19355] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aXvBMjMWmKL8hOfC3uT2cQAAAFQ"]
[Fri Jan 30 04:21:06.988663 2026] [:error] [pid 46913:tid 46974] [client 20.212.62.230:24282] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aXvBMjMWmKL8hOfC3uT2dAAAAFc"]
[Fri Jan 30 04:21:08.668505 2026] [:error] [pid 47021:tid 47039] [client 20.212.62.230:12687] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/we2.php"] [unique_id "aXvBNNap1k13UdZUNSQdbwAAANA"]
[Fri Jan 30 04:21:11.725940 2026] [:error] [pid 47021:tid 47032] [client 20.212.62.230:14762] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aXvBN9ap1k13UdZUNSQdeQAAAMk"]
[Fri Jan 30 04:21:14.032804 2026] [:error] [pid 46913:tid 46960] [client 20.212.62.230:19519] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aXvBOjMWmKL8hOfC3uT2ggAAAEk"]
[Fri Jan 30 04:21:15.010364 2026] [:error] [pid 46913:tid 46951] [client 20.212.62.230:27214] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aXvBOzMWmKL8hOfC3uT2iQAAAEA"]
[Fri Jan 30 04:21:17.826127 2026] [:error] [pid 47021:tid 47042] [client 20.212.62.230:24816] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/04.php"] [unique_id "aXvBPdap1k13UdZUNSQdjQAAANM"]
[Fri Jan 30 04:21:22.017050 2026] [:error] [pid 46914:tid 46981] [client 20.212.62.230:12698] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aXvBQlgSfJ4kZxNKlb-cJQAAAIM"]
[Fri Jan 30 04:21:28.046463 2026] [:error] [pid 46912:tid 46932] [client 20.212.62.230:14747] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aXvBSD6yiVW7A9NwFFnsoQAAAAg"]
[Fri Jan 30 04:21:30.914341 2026] [:error] [pid 46913:tid 46958] [client 20.212.62.230:15703] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aXvBSjMWmKL8hOfC3uT2rAAAAEc"]
[Fri Jan 30 04:21:32.904071 2026] [:error] [pid 46912:tid 46931] [client 20.212.62.230:19472] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/333.php"] [unique_id "aXvBTD6yiVW7A9NwFFnssQAAAAc"]
[Fri Jan 30 04:21:34.349835 2026] [:error] [pid 47021:tid 47034] [client 20.212.62.230:23755] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/520.php"] [unique_id "aXvBTtap1k13UdZUNSQduwAAAMs"]
[Fri Jan 30 04:21:36.834690 2026] [proxy_fcgi:error] [pid 47021:tid 47047] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:36.953319 2026] [proxy_fcgi:error] [pid 47021:tid 47024] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.044916 2026] [proxy_fcgi:error] [pid 47021:tid 47030] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.137315 2026] [proxy_fcgi:error] [pid 47021:tid 47040] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.261675 2026] [proxy_fcgi:error] [pid 47021:tid 47027] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.352478 2026] [proxy_fcgi:error] [pid 47021:tid 47026] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.445210 2026] [proxy_fcgi:error] [pid 47021:tid 47037] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.544843 2026] [proxy_fcgi:error] [pid 47021:tid 47029] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.646332 2026] [proxy_fcgi:error] [pid 47021:tid 47045] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.744470 2026] [proxy_fcgi:error] [pid 47021:tid 47038] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.839009 2026] [proxy_fcgi:error] [pid 47021:tid 47023] [client 20.212.62.230:18053] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:21:37.943212 2026] [:error] [pid 47021:tid 47025] [client 20.212.62.230:18053] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aXvBUdap1k13UdZUNSQd0QAAAMI"]
[Fri Jan 30 04:21:40.711977 2026] [:error] [pid 46913:tid 46970] [client 20.212.62.230:17040] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aXvBVDMWmKL8hOfC3uT2vAAAAFM"]
[Fri Jan 30 04:21:42.067280 2026] [:error] [pid 46913:tid 46955] [client 20.212.62.230:15732] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aXvBVjMWmKL8hOfC3uT2vwAAAEQ"]
[Fri Jan 30 04:21:43.973756 2026] [:error] [pid 46913:tid 46963] [client 20.212.62.230:24666] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file7.php"] [unique_id "aXvBVzMWmKL8hOfC3uT2zAAAAEw"]
[Fri Jan 30 04:21:46.669652 2026] [:error] [pid 46913:tid 46954] [client 20.212.62.230:22891] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aXvBWjMWmKL8hOfC3uT21wAAAEM"]
[Fri Jan 30 04:21:47.748372 2026] [:error] [pid 46912:tid 46941] [client 20.212.62.230:3192] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aXvBWz6yiVW7A9NwFFnsugAAABE"]
[Fri Jan 30 04:21:48.248703 2026] [:error] [pid 46912:tid 46940] [client 20.212.62.230:22885] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aXvBXD6yiVW7A9NwFFnsvAAAABA"]
[Fri Jan 30 04:21:48.959672 2026] [:error] [pid 46914:tid 46985] [client 20.212.62.230:3507] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gifclass.php"] [unique_id "aXvBXFgSfJ4kZxNKlb-cOgAAAIc"]
[Fri Jan 30 04:21:50.542180 2026] [:error] [pid 46912:tid 46943] [client 20.212.62.230:3184] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXvBXj6yiVW7A9NwFFnswQAAABM"]
[Fri Jan 30 04:21:51.367376 2026] [:error] [pid 46914:tid 46988] [client 20.212.62.230:15939] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXvBX1gSfJ4kZxNKlb-cQAAAAIo"]
[Fri Jan 30 04:21:52.741058 2026] [:error] [pid 47021:tid 47039] [client 20.212.62.230:3166] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXvBYNap1k13UdZUNSQd-QAAANA"]
[Fri Jan 30 04:21:53.867074 2026] [:error] [pid 46913:tid 46962] [client 20.212.62.230:22909] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXvBYTMWmKL8hOfC3uT26gAAAEs"]
[Fri Jan 30 04:21:54.609320 2026] [:error] [pid 46912:tid 46926] [client 20.212.62.230:12367] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aXvBYj6yiVW7A9NwFFnszAAAAAI"]
[Fri Jan 30 04:21:55.464156 2026] [:error] [pid 46912:tid 46922] [client 20.212.62.230:22888] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aXvBYz6yiVW7A9NwFFns1gAAAAA"]
[Fri Jan 30 04:21:57.071773 2026] [:error] [pid 46912:tid 46948] [client 20.212.62.230:14219] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aXvBZT6yiVW7A9NwFFns2QAAABg"]
[Fri Jan 30 04:21:58.084742 2026] [:error] [pid 46913:tid 46974] [client 20.212.62.230:12369] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/nox.php"] [unique_id "aXvBZjMWmKL8hOfC3uT29wAAAFc"]
[Fri Jan 30 04:21:59.797164 2026] [:error] [pid 46913:tid 46965] [client 20.212.62.230:19592] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aXvBZzMWmKL8hOfC3uT2_QAAAE4"]
[Fri Jan 30 04:22:01.211646 2026] [:error] [pid 46914:tid 46993] [client 20.212.62.230:12377] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aXvBaVgSfJ4kZxNKlb-cTgAAAI8"]
[Fri Jan 30 04:22:04.065508 2026] [:error] [pid 47021:tid 47029] [client 20.212.62.230:4065] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aXvBbNap1k13UdZUNSQeEQAAAMY"]
[Fri Jan 30 04:22:05.233061 2026] [:error] [pid 46912:tid 46946] [client 20.212.62.230:14263] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file48.php"] [unique_id "aXvBbT6yiVW7A9NwFFns5gAAABY"]
[Fri Jan 30 04:22:05.878073 2026] [:error] [pid 47021:tid 47030] [client 20.212.62.230:14251] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aXvBbdap1k13UdZUNSQeGAAAAMc"]
[Fri Jan 30 04:22:07.520351 2026] [:error] [pid 46913:tid 46974] [client 20.212.62.230:22855] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aXvBbzMWmKL8hOfC3uT3BAAAAFc"]
[Fri Jan 30 04:22:08.806450 2026] [:error] [pid 47021:tid 47037] [client 20.212.62.230:22767] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aXvBcNap1k13UdZUNSQeJAAAAM4"]
[Fri Jan 30 04:22:10.323715 2026] [:error] [pid 46913:tid 46956] [client 20.212.62.230:28972] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/info.php"] [unique_id "aXvBcjMWmKL8hOfC3uT3DAAAAEU"]
[Fri Jan 30 04:22:11.819321 2026] [:error] [pid 46913:tid 46955] [client 20.212.62.230:28982] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aXvBczMWmKL8hOfC3uT3EAAAAEQ"]
[Fri Jan 30 04:22:13.327907 2026] [:error] [pid 47021:tid 47027] [client 20.212.62.230:19634] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aXvBddap1k13UdZUNSQeLgAAAMQ"]
[Fri Jan 30 04:22:15.644035 2026] [:error] [pid 46912:tid 46933] [client 20.212.62.230:22868] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aXvBdz6yiVW7A9NwFFns_QAAAAk"]
[Fri Jan 30 04:22:17.502315 2026] [:error] [pid 46912:tid 46946] [client 20.212.62.230:11420] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class9.php"] [unique_id "aXvBeT6yiVW7A9NwFFns_wAAABY"]
[Fri Jan 30 04:22:19.870379 2026] [:error] [pid 46913:tid 46971] [client 20.212.62.230:16244] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXvBezMWmKL8hOfC3uT3HwAAAFQ"]
[Fri Jan 30 04:22:21.450847 2026] [:error] [pid 47021:tid 47029] [client 20.212.62.230:16217] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXvBfdap1k13UdZUNSQeRAAAAMY"]
[Fri Jan 30 04:22:22.382580 2026] [:error] [pid 47021:tid 47025] [client 20.212.62.230:12135] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXvBftap1k13UdZUNSQeTwAAAMI"]
[Fri Jan 30 04:22:23.318012 2026] [:error] [pid 46912:tid 46922] [client 20.212.62.230:16203] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/la.php"] [unique_id "aXvBfz6yiVW7A9NwFFntBAAAAAA"]
[Fri Jan 30 04:22:24.886446 2026] [:error] [pid 47021:tid 47042] [client 20.212.62.230:16474] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aXvBgNap1k13UdZUNSQedwAAANM"]
[Fri Jan 30 04:22:26.636286 2026] [:error] [pid 47021:tid 47038] [client 20.212.62.230:12097] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aXvBgtap1k13UdZUNSQefwAAAM8"]
[Fri Jan 30 04:22:28.818324 2026] [:error] [pid 46914:tid 47002] [client 20.212.62.230:19297] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aXvBhFgSfJ4kZxNKlb-cdwAAAJg"]
[Fri Jan 30 04:22:31.151917 2026] [:error] [pid 46913:tid 46971] [client 20.212.62.230:17786] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless11.php"] [unique_id "aXvBhzMWmKL8hOfC3uT3MwAAAFQ"]
[Fri Jan 30 04:22:33.862809 2026] [:error] [pid 46913:tid 46975] [client 20.212.62.230:10554] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aXvBiTMWmKL8hOfC3uT3OgAAAFg"]
[Fri Jan 30 04:22:35.527811 2026] [:error] [pid 47021:tid 47034] [client 20.212.62.230:16504] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ccou.php"] [unique_id "aXvBi9ap1k13UdZUNSQelAAAAMs"]
[Fri Jan 30 04:22:37.733566 2026] [proxy_fcgi:error] [pid 47021:tid 47032] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:37.830055 2026] [proxy_fcgi:error] [pid 47021:tid 47027] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:37.933629 2026] [proxy_fcgi:error] [pid 47021:tid 47036] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:38.638864 2026] [proxy_fcgi:error] [pid 47021:tid 47034] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:38.730658 2026] [proxy_fcgi:error] [pid 47021:tid 47046] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:38.826463 2026] [proxy_fcgi:error] [pid 47021:tid 47030] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:38.918175 2026] [proxy_fcgi:error] [pid 47021:tid 47029] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:39.013023 2026] [proxy_fcgi:error] [pid 47021:tid 47025] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:39.105949 2026] [proxy_fcgi:error] [pid 47021:tid 47040] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:39.197628 2026] [proxy_fcgi:error] [pid 47021:tid 47037] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:39.301028 2026] [proxy_fcgi:error] [pid 47021:tid 47026] [client 20.212.62.230:20678] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 04:22:40.071246 2026] [:error] [pid 47021:tid 47034] [client 20.212.62.230:20678] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXvBkNap1k13UdZUNSQesAAAAMs"]
[Fri Jan 30 04:22:42.520376 2026] [:error] [pid 46914:tid 46987] [client 20.212.62.230:25910] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXvBklgSfJ4kZxNKlb-clQAAAIk"]
[Fri Jan 30 04:22:45.774038 2026] [:error] [pid 47021:tid 47040] [client 20.212.62.230:10505] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXvBldap1k13UdZUNSQeuwAAANE"]
[Fri Jan 30 04:22:48.260565 2026] [:error] [pid 46913:tid 46954] [client 20.212.62.230:15184] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/elp.php"] [unique_id "aXvBmDMWmKL8hOfC3uT3UAAAAEM"]
[Fri Jan 30 04:22:50.047650 2026] [:error] [pid 46914:tid 46994] [client 20.212.62.230:10524] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aXvBmlgSfJ4kZxNKlb-cnQAAAJA"]
[Fri Jan 30 04:22:50.848301 2026] [:error] [pid 47021:tid 47039] [client 20.212.62.230:9765] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aXvBmtap1k13UdZUNSQexwAAANA"]
[Fri Jan 30 04:22:51.891416 2026] [:error] [pid 46912:tid 46934] [client 20.212.62.230:11027] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aXvBmz6yiVW7A9NwFFntLAAAAAo"]
[Fri Jan 30 04:22:52.901186 2026] [:error] [pid 47021:tid 47046] [client 20.212.62.230:11864] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wtz.php"] [unique_id "aXvBnNap1k13UdZUNSQeygAAANc"]
[Fri Jan 30 04:22:54.184258 2026] [:error] [pid 47021:tid 47031] [client 20.212.62.230:9770] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aXvBntap1k13UdZUNSQezQAAAMg"]
[Fri Jan 30 04:22:55.593882 2026] [:error] [pid 46914:tid 46979] [client 20.212.62.230:11039] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aXvBn1gSfJ4kZxNKlb-cowAAAIE"]
[Fri Jan 30 04:22:57.094345 2026] [:error] [pid 46914:tid 46995] [client 20.212.62.230:10621] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aXvBoVgSfJ4kZxNKlb-cpgAAAJE"]
[Fri Jan 30 04:22:58.314627 2026] [:error] [pid 46914:tid 46984] [client 20.212.62.230:10617] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/galex.php"] [unique_id "aXvBolgSfJ4kZxNKlb-cqAAAAIY"]
[Fri Jan 30 04:23:00.214977 2026] [:error] [pid 46913:tid 46956] [client 20.212.62.230:18477] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aXvBpDMWmKL8hOfC3uT3agAAAEU"]
[Fri Jan 30 04:23:01.939116 2026] [:error] [pid 46912:tid 46926] [client 20.212.62.230:15542] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aXvBpT6yiVW7A9NwFFntPAAAAAI"]
[Fri Jan 30 04:23:02.860290 2026] [:error] [pid 46913:tid 46973] [client 20.212.62.230:10607] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aXvBpjMWmKL8hOfC3uT3bgAAAFY"]
[Fri Jan 30 04:23:03.638593 2026] [:error] [pid 46913:tid 46966] [client 20.212.62.230:13508] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xb.php"] [unique_id "aXvBpzMWmKL8hOfC3uT3cAAAAE8"]
[Fri Jan 30 04:23:04.810491 2026] [:error] [pid 46913:tid 46956] [client 20.212.62.230:18840] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aXvBqDMWmKL8hOfC3uT3dgAAAEU"]
[Fri Jan 30 04:23:05.474095 2026] [:error] [pid 46913:tid 46967] [client 20.212.62.230:7653] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aXvBqTMWmKL8hOfC3uT3egAAAFA"]
[Fri Jan 30 04:23:06.018394 2026] [:error] [pid 47021:tid 47032] [client 20.212.62.230:12347] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aXvBqtap1k13UdZUNSQe4AAAAMk"]
[Fri Jan 30 04:23:06.381878 2026] [:error] [pid 46912:tid 46946] [client 20.212.62.230:12313] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova.php"] [unique_id "aXvBqj6yiVW7A9NwFFntQwAAABY"]
[Fri Jan 30 04:23:07.393429 2026] [:error] [pid 46912:tid 46928] [client 20.212.62.230:11887] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aXvBqz6yiVW7A9NwFFntSAAAAAQ"]
[Fri Jan 30 04:23:08.632770 2026] [:error] [pid 47021:tid 47042] [client 20.212.62.230:7624] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aXvBrNap1k13UdZUNSQe6AAAANM"]
[Fri Jan 30 04:23:09.743246 2026] [:error] [pid 46913:tid 46965] [client 20.212.62.230:24435] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aXvBrTMWmKL8hOfC3uT3hAAAAE4"]
[Fri Jan 30 04:23:11.105641 2026] [:error] [pid 47021:tid 47036] [client 20.212.62.230:10614] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/vx.php"] [unique_id "aXvBr9ap1k13UdZUNSQe9AAAAM0"]
[Fri Jan 30 04:23:12.445307 2026] [:error] [pid 46914:tid 46986] [client 20.212.62.230:11012] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aXvBsFgSfJ4kZxNKlb-cwwAAAIg"]
[Fri Jan 30 04:23:13.201109 2026] [:error] [pid 46913:tid 46975] [client 20.212.62.230:11059] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aXvBsTMWmKL8hOfC3uT3hwAAAFg"]
[Fri Jan 30 04:23:14.200443 2026] [:error] [pid 47021:tid 47024] [client 20.212.62.230:11032] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aXvBstap1k13UdZUNSQe-gAAAME"]
[Fri Jan 30 04:23:14.972731 2026] [:error] [pid 46914:tid 46978] [client 20.212.62.230:15492] [client 20.212.62.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rh.php"] [unique_id "aXvBslgSfJ4kZxNKlb-c0AAAAIA"]
[Fri Jan 30 05:32:53.504340 2026] [proxy_fcgi:error] [pid 46913:tid 46960] [client 217.154.172.107:60315] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 05:32:59.004305 2026] [proxy_fcgi:error] [pid 24711:tid 24732] [client 217.154.172.107:54965] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 05:33:06.976360 2026] [proxy_fcgi:error] [pid 38686:tid 38707] [client 217.154.172.107:58552] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 05:33:14.820130 2026] [proxy_fcgi:error] [pid 47021:tid 47025] [client 217.154.172.107:57643] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 07:11:09.105505 2026] [autoindex:error] [pid 46912:tid 46938] [client 35.209.68.128:38400] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Jan 30 07:11:09.506068 2026] [autoindex:error] [pid 47021:tid 47034] [client 35.209.68.128:38400] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Jan 30 08:04:20.076577 2026] [proxy_fcgi:error] [pid 46912:tid 46930] [client 4.193.184.23:4302] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:54:34.136862 2026] [:error] [pid 24711:tid 24731] [client 170.106.163.48:56592] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXwBSq5Gwh4var6T23J2UQAAAVE"]
[Fri Jan 30 09:19:22.552397 2026] [autoindex:error] [pid 46912:tid 46942] [client 34.40.68.132:42502] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 10:21:45.218486 2026] [autoindex:error] [pid 47021:tid 47029] [client 74.7.243.204:54248] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 11:02:25.007475 2026] [autoindex:error] [pid 46914:tid 46999] [client 34.195.71.120:51768] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 11:03:21.269341 2026] [autoindex:error] [pid 38980:tid 39000] [client 23.82.168.13:51355] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 12:32:37.163166 2026] [:error] [pid 46912:tid 46948] [client 182.42.105.144:57231] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXw0ZT6yiVW7A9NwFFl2FAAAABg"]
[Fri Jan 30 12:53:41.335770 2026] [autoindex:error] [pid 38686:tid 38708] [client 69.10.48.159:39206] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 14:37:10.400057 2026] [autoindex:error] [pid 38980:tid 38987] [client 192.36.119.194:36777] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 16:31:14.346733 2026] [:error] [pid 46912:tid 46941] [client 43.166.244.192:48978] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aXxsUj6yiVW7A9NwFFmtpQAAABE"]
[Fri Jan 30 16:55:46.574538 2026] [autoindex:error] [pid 46914:tid 46989] [client 192.36.198.147:60761] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 18:05:28.112656 2026] [:error] [pid 24711:tid 24727] [client 43.166.247.82:53224] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXyCaK5Gwh4var6T23JeawAAAU0"]
[Fri Jan 30 19:12:36.041530 2026] [autoindex:error] [pid 46913:tid 46969] [client 74.7.241.29:53798] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 20:56:55.764962 2026] [autoindex:error] [pid 47663:tid 47687] [client 54.39.210.123:20402] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 21:31:27.271031 2026] [autoindex:error] [pid 24711:tid 24714] [client 13.221.87.249:60634] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:25.254625 2026] [proxy_fcgi:error] [pid 38686:tid 38706] [client 45.137.126.14:32853] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:25.822615 2026] [proxy_fcgi:error] [pid 38686:tid 38714] [client 45.137.126.14:32853] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:26.391685 2026] [:error] [pid 38686:tid 38699] [client 45.137.126.14:32853] [client 45.137.126.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/O-Simple.php"] [unique_id "aXy8wgoE8BAjgw1_sAV_RQAAAck"]
[Fri Jan 30 22:14:27.488827 2026] [:error] [pid 24681:tid 24685] [client 45.137.126.14:58817] [client 45.137.126.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/O-Simple.php"] [unique_id "aXy8w4E368IXQpahn0KWLQAAAQI"]
[Fri Jan 30 22:14:28.596323 2026] [proxy_fcgi:error] [pid 24681:tid 24702] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:29.154607 2026] [proxy_fcgi:error] [pid 24681:tid 24695] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:29.738989 2026] [proxy_fcgi:error] [pid 24681:tid 24707] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:30.306420 2026] [proxy_fcgi:error] [pid 24681:tid 24687] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:31.022599 2026] [proxy_fcgi:error] [pid 24681:tid 24705] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:31.609330 2026] [proxy_fcgi:error] [pid 24681:tid 24698] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:32.768661 2026] [proxy_fcgi:error] [pid 24681:tid 24703] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:33.900031 2026] [proxy_fcgi:error] [pid 24681:tid 24692] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:34.478638 2026] [proxy_fcgi:error] [pid 24681:tid 24705] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:35.056850 2026] [proxy_fcgi:error] [pid 24681:tid 24703] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:41.110733 2026] [proxy_fcgi:error] [pid 24681:tid 24691] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:41.700669 2026] [proxy_fcgi:error] [pid 24681:tid 24683] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:42.294617 2026] [proxy_fcgi:error] [pid 24681:tid 24693] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:42.865748 2026] [proxy_fcgi:error] [pid 24681:tid 24707] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:43.460694 2026] [proxy_fcgi:error] [pid 24681:tid 24694] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:44.024690 2026] [proxy_fcgi:error] [pid 24681:tid 24687] [client 45.137.126.30:34711] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:51.790607 2026] [:error] [pid 24681:tid 24690] [client 45.137.126.30:34711] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy824E368IXQpahn0KW5AAAAQc"]
[Fri Jan 30 22:14:54.556404 2026] [:error] [pid 46913:tid 46952] [client 45.137.126.29:60779] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy83jMWmKL8hOfC3uTkPAAAAEE"]
[Fri Jan 30 22:14:57.351623 2026] [proxy_fcgi:error] [pid 46914:tid 46993] [client 45.137.126.4:21343] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:59.041311 2026] [:error] [pid 46914:tid 46991] [client 45.137.126.4:21343] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aXy841gSfJ4kZxNKlb_nQAAAAI0"]
[Fri Jan 30 22:15:01.275627 2026] [proxy_fcgi:error] [pid 46914:tid 46993] [client 45.137.126.3:46395] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:01.841723 2026] [:error] [pid 46914:tid 46987] [client 45.137.126.3:46395] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXy85VgSfJ4kZxNKlb_nUgAAAIk"]
[Fri Jan 30 22:15:07.233607 2026] [proxy_fcgi:error] [pid 38686:tid 38703] [client 45.137.126.34:31747] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:10.142832 2026] [:error] [pid 38686:tid 38703] [client 45.137.126.34:31747] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy87goE8BAjgw1_sAWA2AAAAc0"]
[Fri Jan 30 22:15:11.817475 2026] [:error] [pid 46912:tid 46936] [client 45.137.126.43:56461] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy87z6yiVW7A9NwFFn81gAAAAw"]
[Fri Jan 30 22:15:12.912728 2026] [:error] [pid 24712:tid 24761] [client 45.137.126.50:31617] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy88IRLQrFiQF3h9-tlSwAAAZM"]
[Fri Jan 30 22:15:14.014659 2026] [:error] [pid 38686:tid 38694] [client 45.137.126.37:49501] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy88goE8BAjgw1_sAWA7AAAAcQ"]
[Fri Jan 30 22:15:15.131928 2026] [:error] [pid 38980:tid 38992] [client 45.137.126.48:56807] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy887YByxUZEaKXdHq8LgAAAgU"]
[Fri Jan 30 22:15:16.234654 2026] [:error] [pid 47021:tid 47044] [client 45.137.126.11:30129] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy89Nap1k13UdZUNSRjOwAAANU"]
[Fri Jan 30 22:15:17.879396 2026] [:error] [pid 24681:tid 24696] [client 45.137.126.41:35345] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy89YE368IXQpahn0KXngAAAQ0"]
[Fri Jan 30 22:15:18.988708 2026] [proxy_fcgi:error] [pid 46912:tid 46933] [client 45.137.126.41:25725] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:20.097614 2026] [:error] [pid 46912:tid 46944] [client 45.137.126.41:25725] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aXy8-D6yiVW7A9NwFFn9JQAAABQ"]
[Fri Jan 30 22:15:22.314867 2026] [:error] [pid 24712:tid 24756] [client 45.137.126.30:26265] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy8-oRLQrFiQF3h9-tligAAAY8"]
[Fri Jan 30 22:15:23.996793 2026] [:error] [pid 47663:tid 47671] [client 45.137.126.3:49341] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy8-0HGTrgIKCqEYbWuFwAAAkY"]
[Fri Jan 30 22:15:25.107629 2026] [proxy_fcgi:error] [pid 24712:tid 24756] [client 45.137.126.45:58005] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:25.653542 2026] [:error] [pid 24712:tid 24748] [client 45.137.126.45:58005] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy8_YRLQrFiQF3h9-tllwAAAYc"]
[Fri Jan 30 22:15:26.760603 2026] [proxy_fcgi:error] [pid 47021:tid 47031] [client 45.137.126.51:38797] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:28.429617 2026] [proxy_fcgi:error] [pid 47021:tid 47026] [client 45.137.126.51:38797] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:30.097904 2026] [:error] [pid 47021:tid 47028] [client 45.137.126.51:38797] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy9Atap1k13UdZUNSRjpwAAAMU"]
[Fri Jan 30 22:15:31.212239 2026] [proxy_fcgi:error] [pid 38980:tid 39007] [client 45.137.126.37:49541] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:31.761682 2026] [:error] [pid 38980:tid 38989] [client 45.137.126.37:49541] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy9A7YByxUZEaKXdHq80wAAAgI"]
[Fri Jan 30 22:15:32.885978 2026] [proxy_fcgi:error] [pid 47663:tid 47675] [client 45.137.126.51:25457] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:34.006658 2026] [:error] [pid 47663:tid 47673] [client 45.137.126.51:25457] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aXy9BkHGTrgIKCqEYbWueAAAAkg"]
[Fri Jan 30 22:15:35.657345 2026] [:error] [pid 46912:tid 46925] [client 45.137.126.28:58125] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy9Bz6yiVW7A9NwFFn9sgAAAAE"]
[Fri Jan 30 22:15:37.314649 2026] [proxy_fcgi:error] [pid 24681:tid 24700] [client 45.137.126.39:34419] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:37.882614 2026] [proxy_fcgi:error] [pid 24681:tid 24685] [client 45.137.126.39:34419] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:38.982264 2026] [:error] [pid 24681:tid 24687] [client 45.137.126.39:34419] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy9CoE368IXQpahn0KYSQAAAQQ"]
[Fri Jan 30 22:15:40.639583 2026] [:error] [pid 47021:tid 47023] [client 45.137.126.40:32587] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy9DNap1k13UdZUNSRkAwAAAMA"]
[Fri Jan 30 22:15:42.293238 2026] [:error] [pid 47021:tid 47046] [client 45.137.126.43:20749] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy9Dtap1k13UdZUNSRkGQAAANc"]
[Fri Jan 30 22:15:43.420003 2026] [:error] [pid 46914:tid 46987] [client 45.137.126.43:40051] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy9D1gSfJ4kZxNKlb_o4wAAAIk"]
[Fri Jan 30 22:15:44.534215 2026] [:error] [pid 24681:tid 24705] [client 45.137.126.30:40205] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy9EIE368IXQpahn0KYaAAAARY"]
[Fri Jan 30 22:15:46.761633 2026] [proxy_fcgi:error] [pid 46912:tid 46927] [client 45.137.126.40:42621] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:47.324499 2026] [:error] [pid 46912:tid 46938] [client 45.137.126.40:42621] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aXy9Ez6yiVW7A9NwFFn-HwAAAA4"]
[Fri Jan 30 22:15:48.414786 2026] [:error] [pid 24712:tid 24747] [client 45.137.126.11:28655] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aXy9FIRLQrFiQF3h9-tmLAAAAYY"]
[Fri Jan 30 22:15:49.505816 2026] [:error] [pid 46912:tid 46940] [client 45.137.126.8:37997] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXy9FT6yiVW7A9NwFFn-KwAAABA"]
[Fri Jan 30 22:15:51.709971 2026] [proxy_fcgi:error] [pid 46913:tid 46957] [client 45.137.126.27:54295] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:52.821596 2026] [proxy_fcgi:error] [pid 46913:tid 46965] [client 45.137.126.27:54295] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:15:55.090426 2026] [:error] [pid 46913:tid 46967] [client 45.137.126.27:54295] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXy9GzMWmKL8hOfC3uTl4AAAAFA"]
[Fri Jan 30 22:15:57.850876 2026] [:error] [pid 38686:tid 38700] [client 45.137.126.42:32859] [client 45.137.126.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.42, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aXy9HQoE8BAjgw1_sAWCPQAAAco"]
[Fri Jan 30 22:15:58.416615 2026] [proxy_fcgi:error] [pid 38686:tid 38714] [client 45.137.126.42:32859] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:16:01.284652 2026] [proxy_fcgi:error] [pid 38686:tid 38708] [client 45.137.126.42:32859] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:16:01.898639 2026] [proxy_fcgi:error] [pid 38686:tid 38700] [client 45.137.126.42:32859] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:16:04.712997 2026] [:error] [pid 38686:tid 38695] [client 45.137.126.42:32859] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXy9JAoE8BAjgw1_sAWCkwAAAcU"]
[Fri Jan 30 22:16:06.369167 2026] [proxy_fcgi:error] [pid 24711:tid 24733] [client 45.137.126.27:33257] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:16:06.915368 2026] [:error] [pid 24711:tid 24734] [client 45.137.126.27:33257] [client 45.137.126.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.27, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXy9Jq5Gwh4var6T23LA9AAAAVQ"]
[Fri Jan 30 22:16:08.057452 2026] [:error] [pid 24711:tid 24721] [client 45.137.126.27:33257] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/item.php"] [unique_id "aXy9KK5Gwh4var6T23LA_wAAAUc"]
[Fri Jan 30 22:16:09.153361 2026] [:error] [pid 47663:tid 47676] [client 45.137.126.9:65147] [client 45.137.126.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/assets/index.php"] [unique_id "aXy9KUHGTrgIKCqEYbWvNQAAAks"]
[Fri Jan 30 23:17:16.591415 2026] [proxy_fcgi:error] [pid 47663:tid 47689] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:16.668542 2026] [proxy_fcgi:error] [pid 47663:tid 47688] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:16.709986 2026] [proxy_fcgi:error] [pid 47663:tid 47680] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:16.912392 2026] [proxy_fcgi:error] [pid 47663:tid 47679] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:16.949880 2026] [proxy_fcgi:error] [pid 47663:tid 47671] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:16.975030 2026] [proxy_fcgi:error] [pid 47663:tid 47682] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:16.994609 2026] [proxy_fcgi:error] [pid 47663:tid 47684] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:17.343372 2026] [proxy_fcgi:error] [pid 47663:tid 47669] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:17.364435 2026] [proxy_fcgi:error] [pid 47663:tid 47675] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:17.411857 2026] [proxy_fcgi:error] [pid 47663:tid 47676] [client 20.5.80.241:12214] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:17:17.427854 2026] [:error] [pid 47663:tid 47672] [client 20.5.80.241:12214] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXzLfUHGTrgIKCqEYbW9KgAAAkc"]
[Fri Jan 30 23:17:18.317093 2026] [:error] [pid 46912:tid 46947] [client 20.5.80.241:2022] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXzLfj6yiVW7A9NwFFkc2gAAABc"]
[Fri Jan 30 23:17:21.692093 2026] [:error] [pid 24681:tid 24691] [client 20.5.80.241:10803] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXzLgYE368IXQpahn0KnxwAAAQg"]
[Fri Jan 30 23:17:22.773468 2026] [:error] [pid 38686:tid 38710] [client 20.5.80.241:12165] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aXzLggoE8BAjgw1_sAWT1AAAAdQ"]
[Fri Jan 30 23:17:33.436634 2026] [:error] [pid 24711:tid 24720] [client 20.5.80.241:6611] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aXzLja5Gwh4var6T23LYiwAAAUY"]
[Fri Jan 30 23:17:35.448755 2026] [:error] [pid 24712:tid 24766] [client 20.5.80.241:9425] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aXzLj4RLQrFiQF3h9-t6cAAAAZg"]
[Fri Jan 30 23:17:55.533641 2026] [:error] [pid 38980:tid 38998] [client 20.5.80.241:13315] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aXzLo7YByxUZEaKXdHrNPwAAAgs"]
[Fri Jan 30 23:17:56.645423 2026] [:error] [pid 46913:tid 46971] [client 20.5.80.241:13994] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aXzLpDMWmKL8hOfC3uTzdQAAAFQ"]
[Fri Jan 30 23:17:59.755516 2026] [:error] [pid 24712:tid 24764] [client 20.5.80.241:1447] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aXzLp4RLQrFiQF3h9-t6iQAAAZY"]
[Fri Jan 30 23:18:00.044132 2026] [:error] [pid 38980:tid 38987] [client 20.5.80.241:1425] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/amax.php"] [unique_id "aXzLqLYByxUZEaKXdHrNRAAAAgA"]
[Fri Jan 30 23:18:02.578352 2026] [:error] [pid 47663:tid 47666] [client 20.5.80.241:13329] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/image.php"] [unique_id "aXzLqkHGTrgIKCqEYbW9QgAAAkE"]
[Fri Jan 30 23:18:03.184198 2026] [:error] [pid 24681:tid 24689] [client 20.5.80.241:9667] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/image.php"] [unique_id "aXzLq4E368IXQpahn0Kn5QAAAQY"]
[Fri Jan 30 23:18:04.695838 2026] [:error] [pid 24712:tid 24748] [client 20.5.80.241:13334] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/image.php"] [unique_id "aXzLrIRLQrFiQF3h9-t6jgAAAYc"]
[Fri Jan 30 23:18:05.538315 2026] [:error] [pid 47663:tid 47669] [client 20.5.80.241:1678] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/image.php"] [unique_id "aXzLrUHGTrgIKCqEYbW9QwAAAkQ"]
[Fri Jan 30 23:18:07.785621 2026] [:error] [pid 24711:tid 24718] [client 20.5.80.241:7889] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aXzLr65Gwh4var6T23LYrgAAAUQ"]
[Fri Jan 30 23:18:08.028354 2026] [:error] [pid 47021:tid 47039] [client 20.5.80.241:13337] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aXzLsNap1k13UdZUNSR3ZgAAANA"]
[Fri Jan 30 23:18:09.515025 2026] [:error] [pid 38980:tid 39011] [client 20.5.80.241:8592] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aXzLsbYByxUZEaKXdHrNSQAAAhg"]
[Fri Jan 30 23:18:12.309242 2026] [:error] [pid 38686:tid 38698] [client 20.5.80.241:11086] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/990.php"] [unique_id "aXzLtAoE8BAjgw1_sAWUAQAAAcg"]
[Fri Jan 30 23:18:13.974610 2026] [:error] [pid 47663:tid 47669] [client 20.5.80.241:1061] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aXzLtUHGTrgIKCqEYbW9SQAAAkQ"]
[Fri Jan 30 23:18:14.658893 2026] [:error] [pid 46913:tid 46974] [client 20.5.80.241:1665] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aXzLtjMWmKL8hOfC3uTzgAAAAFc"]
[Fri Jan 30 23:18:15.087410 2026] [:error] [pid 38980:tid 38988] [client 20.5.80.241:13974] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aXzLt7YByxUZEaKXdHrNUAAAAgE"]
[Fri Jan 30 23:18:16.346159 2026] [:error] [pid 24681:tid 24694] [client 20.5.80.241:13328] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bypass.php"] [unique_id "aXzLuIE368IXQpahn0Kn9wAAAQs"]
[Fri Jan 30 23:18:17.535720 2026] [proxy_fcgi:error] [pid 38686:tid 38698] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.778920 2026] [proxy_fcgi:error] [pid 38686:tid 38692] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.816879 2026] [proxy_fcgi:error] [pid 38686:tid 38695] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.837243 2026] [proxy_fcgi:error] [pid 38686:tid 38713] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.856975 2026] [proxy_fcgi:error] [pid 38686:tid 38711] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.891871 2026] [proxy_fcgi:error] [pid 38686:tid 38699] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.910328 2026] [proxy_fcgi:error] [pid 38686:tid 38709] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.943637 2026] [proxy_fcgi:error] [pid 38686:tid 38696] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.983936 2026] [proxy_fcgi:error] [pid 38686:tid 38703] [client 20.5.80.241:1805] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:17.998750 2026] [:error] [pid 38686:tid 38710] [client 20.5.80.241:1805] [client 20.5.80.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXzLuQoE8BAjgw1_sAWUEAAAAdQ"]
[Fri Jan 30 23:18:20.217623 2026] [proxy_fcgi:error] [pid 24711:tid 24726] [client 20.5.80.241:13530] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:20.246461 2026] [:error] [pid 24711:tid 24725] [client 20.5.80.241:13530] [client 20.5.80.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aXzLvK5Gwh4var6T23LYtwAAAUs"]
[Fri Jan 30 23:18:24.479746 2026] [proxy_fcgi:error] [pid 47663:tid 47687] [client 20.5.80.241:9699] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:18:24.500669 2026] [:error] [pid 47663:tid 47681] [client 20.5.80.241:9699] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aXzLwEHGTrgIKCqEYbW9TwAAAlA"]
[Fri Jan 30 23:18:31.235476 2026] [:error] [pid 46913:tid 46954] [client 20.5.80.241:10305] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aXzLxzMWmKL8hOfC3uTzigAAAEM"]
[Fri Jan 30 23:18:32.099150 2026] [:error] [pid 46913:tid 46964] [client 20.5.80.241:5520] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/buy.php"] [unique_id "aXzLyDMWmKL8hOfC3uTzjgAAAE0"]
[Fri Jan 30 23:18:47.725533 2026] [:error] [pid 38980:tid 38987] [client 20.5.80.241:13524] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pro.php"] [unique_id "aXzL17YByxUZEaKXdHrNbAAAAgA"]
[Fri Jan 30 23:18:54.809363 2026] [:error] [pid 46912:tid 46925] [client 20.5.80.241:14828] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pro.php"] [unique_id "aXzL3j6yiVW7A9NwFFkdEAAAAAE"]
[Fri Jan 30 23:19:00.899908 2026] [:error] [pid 46914:tid 47002] [client 20.5.80.241:12235] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aXzL5FgSfJ4kZxNKlb_-AAAAAJg"]
[Fri Jan 30 23:19:04.754410 2026] [:error] [pid 46912:tid 46926] [client 20.5.80.241:13385] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/error.php"] [unique_id "aXzL6D6yiVW7A9NwFFkdGwAAAAI"]
[Fri Jan 30 23:19:19.032399 2026] [:error] [pid 38980:tid 38992] [client 20.5.80.241:6578] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzL97YByxUZEaKXdHrNfAAAAgU"]
[Fri Jan 30 23:19:21.775795 2026] [:error] [pid 38980:tid 39006] [client 20.5.80.241:6572] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzL-bYByxUZEaKXdHrNfgAAAhM"]
[Fri Jan 30 23:19:22.998468 2026] [:error] [pid 47021:tid 47032] [client 20.5.80.241:6807] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzL-tap1k13UdZUNSR3ywAAAMk"]
[Fri Jan 30 23:19:28.049530 2026] [:error] [pid 24711:tid 24725] [client 20.5.80.241:14839] [client 20.5.80.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.5.80.241, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzMAK5Gwh4var6T23LY2wAAAUs"]
[Fri Jan 30 23:19:28.060351 2026] [proxy_fcgi:error] [pid 24711:tid 24725] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.097196 2026] [proxy_fcgi:error] [pid 24711:tid 24726] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.137930 2026] [proxy_fcgi:error] [pid 24711:tid 24721] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.157028 2026] [proxy_fcgi:error] [pid 24711:tid 24722] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.313769 2026] [proxy_fcgi:error] [pid 24711:tid 24720] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.334990 2026] [proxy_fcgi:error] [pid 24711:tid 24729] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.354201 2026] [proxy_fcgi:error] [pid 24711:tid 24736] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.375706 2026] [proxy_fcgi:error] [pid 24711:tid 24718] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.402822 2026] [proxy_fcgi:error] [pid 24711:tid 24732] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.421810 2026] [proxy_fcgi:error] [pid 24711:tid 24727] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.441783 2026] [proxy_fcgi:error] [pid 24711:tid 24734] [client 20.5.80.241:14839] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 23:19:28.456651 2026] [:error] [pid 24711:tid 24717] [client 20.5.80.241:14839] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file56.php"] [unique_id "aXzMAK5Gwh4var6T23LY5gAAAUM"]
[Fri Jan 30 23:19:29.171502 2026] [:error] [pid 46912:tid 46946] [client 20.5.80.241:6561] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file56.php"] [unique_id "aXzMAT6yiVW7A9NwFFkdLwAAABY"]
[Fri Jan 30 23:19:33.371497 2026] [:error] [pid 38686:tid 38690] [client 20.5.80.241:8916] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file56.php"] [unique_id "aXzMBQoE8BAjgw1_sAWUIAAAAcA"]
[Fri Jan 30 23:19:33.889265 2026] [:error] [pid 38980:tid 39010] [client 20.5.80.241:5538] [client 20.5.80.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file56.php"] [unique_id "aXzMBbYByxUZEaKXdHrNmgAAAhc"]
[Sat Jan 31 00:08:06.843867 2026] [autoindex:error] [pid 59748:tid 59768] [client 98.95.177.220:41919] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 01:04:08.618009 2026] [:error] [pid 59662:tid 59718] [client 129.226.213.145:45514] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aXzkiA7k73dlTgySEchPfgAAAIA"]
[Sat Jan 31 01:53:31.933316 2026] [autoindex:error] [pid 59748:tid 59766] [client 13.221.87.249:40692] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:00:00.160191 2026] [:error] [pid 8354:tid 8364] [client 20.46.176.183:11211] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/template-part/"] [unique_id "aXz_sN27IpxWjEJXCd8oRAAAAYg"]
[Sat Jan 31 03:00:00.622974 2026] [:error] [pid 59660:tid 59682] [client 20.46.176.183:44139] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/template-part/"] [unique_id "aXz_sCwTX33V6TPUqxMTWAAAABI"]
[Sat Jan 31 03:00:01.082547 2026] [:error] [pid 10754:tid 10796] [client 20.46.176.183:44728] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/template-part/"] [unique_id "aXz_seUua7wHT-0pjVRi3gAAA8s"]
[Sat Jan 31 03:00:01.683442 2026] [:error] [pid 8386:tid 8409] [client 20.46.176.183:38385] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/template-part/"] [unique_id "aXz_sdZVZWDVqOkRRiJmmQAAAdU"]
[Sat Jan 31 03:37:57.120636 2026] [proxy_fcgi:error] [pid 39339:tid 39341] [client 20.203.132.68:6045] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:54:54.206686 2026] [autoindex:error] [pid 39244:tid 39331] [client 158.173.154.110:53221] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 31 03:54:54.828859 2026] [autoindex:error] [pid 39244:tid 39314] [client 158.173.154.110:53397] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 31 03:54:55.867700 2026] [autoindex:error] [pid 39339:tid 39358] [client 23.247.136.254:48714] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 31 03:54:56.949294 2026] [autoindex:error] [pid 39339:tid 39344] [client 23.247.136.254:48716] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 31 03:55:03.170812 2026] [autoindex:error] [pid 39339:tid 39359] [client 23.247.136.254:48730] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 31 03:55:03.910853 2026] [autoindex:error] [pid 39244:tid 39328] [client 23.247.136.254:48746] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Sat Jan 31 04:34:54.013402 2026] [proxy_fcgi:error] [pid 39339:tid 39363] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:54.279391 2026] [proxy_fcgi:error] [pid 39339:tid 39352] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:54.541952 2026] [proxy_fcgi:error] [pid 39339:tid 39359] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:54.916207 2026] [proxy_fcgi:error] [pid 39339:tid 39341] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:55.209454 2026] [proxy_fcgi:error] [pid 39339:tid 39343] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:55.560296 2026] [proxy_fcgi:error] [pid 39339:tid 39362] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:55.818847 2026] [proxy_fcgi:error] [pid 39339:tid 39348] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:56.624211 2026] [proxy_fcgi:error] [pid 39339:tid 39360] [client 74.248.24.163:47491] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:34:56.879873 2026] [:error] [pid 39339:tid 39358] [client 74.248.24.163:47491] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aX0V8MWi-IjigR3oHY6BRAAAANE"]
[Sat Jan 31 04:34:57.643903 2026] [:error] [pid 39339:tid 39353] [client 74.248.24.163:47546] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aX0V8cWi-IjigR3oHY6BRwAAAMw"]
[Sat Jan 31 04:34:58.362769 2026] [:error] [pid 39339:tid 39346] [client 74.248.24.163:10492] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aX0V8sWi-IjigR3oHY6BSQAAAMU"]
[Sat Jan 31 04:34:59.033791 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:7322] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aX0V83Ky7OGBlTY8MCecpgAAARc"]
[Sat Jan 31 04:34:59.858478 2026] [:error] [pid 39242:tid 39254] [client 74.248.24.163:16117] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload.php"] [unique_id "aX0V89OgXnkKGGSSCINYwgAAAAA"]
[Sat Jan 31 04:35:00.526221 2026] [:error] [pid 39242:tid 39263] [client 74.248.24.163:47087] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload.php"] [unique_id "aX0V9NOgXnkKGGSSCINYxQAAAAk"]
[Sat Jan 31 04:35:01.618679 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:15651] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload.php"] [unique_id "aX0V9dOgXnkKGGSSCINYyAAAABU"]
[Sat Jan 31 04:35:02.329927 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:11703] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/upload.php"] [unique_id "aX0V9oACllgWRWVrYITBVwAAAUU"]
[Sat Jan 31 04:35:03.011919 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:14864] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aX0V93Ky7OGBlTY8MCecqwAAARM"]
[Sat Jan 31 04:35:03.793266 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:11663] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aX0V93Ky7OGBlTY8MCecrAAAAQE"]
[Sat Jan 31 04:35:04.590386 2026] [:error] [pid 39244:tid 39309] [client 74.248.24.163:14894] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aX0V-Ho-KRTvg3jHEDzCMwAAAIA"]
[Sat Jan 31 04:35:05.588905 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:28071] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aX0V-YACllgWRWVrYITBXAAAAVI"]
[Sat Jan 31 04:35:06.432417 2026] [:error] [pid 39244:tid 39332] [client 74.248.24.163:3868] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aX0V-no-KRTvg3jHEDzCNgAAAJY"]
[Sat Jan 31 04:35:07.178607 2026] [:error] [pid 39242:tid 39269] [client 74.248.24.163:15631] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aX0V-9OgXnkKGGSSCINY1QAAAA8"]
[Sat Jan 31 04:35:07.882766 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:24610] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aX0V-4ACllgWRWVrYITBYwAAAVA"]
[Sat Jan 31 04:35:08.686983 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:31663] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aX0V_BBW1k4JK8a4v0YzagAAAFQ"]
[Sat Jan 31 04:35:09.547131 2026] [:error] [pid 39242:tid 39271] [client 74.248.24.163:7334] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aX0V_dOgXnkKGGSSCINY3AAAABE"]
[Sat Jan 31 04:35:10.266564 2026] [:error] [pid 39244:tid 39325] [client 74.248.24.163:15642] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aX0V_no-KRTvg3jHEDzCOgAAAI8"]
[Sat Jan 31 04:35:10.979649 2026] [:error] [pid 39243:tid 39294] [client 74.248.24.163:9497] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aX0V_hBW1k4JK8a4v0YzbgAAAEw"]
[Sat Jan 31 04:35:11.710324 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:13586] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aX0V_3Ky7OGBlTY8MCectgAAAQw"]
[Sat Jan 31 04:35:12.622170 2026] [:error] [pid 39242:tid 39263] [client 74.248.24.163:12306] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aX0WANOgXnkKGGSSCINY3wAAAAk"]
[Sat Jan 31 04:35:13.416524 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:11683] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aX0WAdOgXnkKGGSSCINY4gAAAA0"]
[Sat Jan 31 04:35:14.177663 2026] [:error] [pid 20836:tid 20849] [client 74.248.24.163:24607] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aX0WAoACllgWRWVrYITBdQAAAUg"]
[Sat Jan 31 04:35:14.850813 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:29097] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bak.php"] [unique_id "aX0WAno-KRTvg3jHEDzCTwAAAJQ"]
[Sat Jan 31 04:35:15.487526 2026] [:error] [pid 39339:tid 39350] [client 74.248.24.163:29066] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/index.php"] [unique_id "aX0WA8Wi-IjigR3oHY6BYAAAAMk"]
[Sat Jan 31 04:35:16.317362 2026] [:error] [pid 20836:tid 20856] [client 74.248.24.163:7324] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/index.php"] [unique_id "aX0WBIACllgWRWVrYITBfwAAAU8"]
[Sat Jan 31 04:35:17.010928 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:16376] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/index.php"] [unique_id "aX0WBXo-KRTvg3jHEDzCUgAAAJE"]
[Sat Jan 31 04:35:17.789712 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:25258] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/files/index.php"] [unique_id "aX0WBXo-KRTvg3jHEDzCVAAAAJM"]
[Sat Jan 31 04:35:18.443658 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:7320] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aX0WBoACllgWRWVrYITBgwAAAUY"]
[Sat Jan 31 04:35:19.377478 2026] [:error] [pid 20836:tid 20864] [client 74.248.24.163:13515] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aX0WB4ACllgWRWVrYITBhgAAAVc"]
[Sat Jan 31 04:35:20.227406 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:13563] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aX0WCIACllgWRWVrYITBhwAAAVE"]
[Sat Jan 31 04:35:20.981397 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:7302] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aX0WCIACllgWRWVrYITBiAAAAUY"]
[Sat Jan 31 04:35:21.613313 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:15855] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aX0WCcWi-IjigR3oHY6BbwAAANM"]
[Sat Jan 31 04:35:22.534728 2026] [:error] [pid 20210:tid 20232] [client 74.248.24.163:27988] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aX0WCnKy7OGBlTY8MCec0AAAARQ"]
[Sat Jan 31 04:35:23.348324 2026] [:error] [pid 39339:tid 39342] [client 74.248.24.163:7337] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aX0WC8Wi-IjigR3oHY6BdgAAAME"]
[Sat Jan 31 04:35:24.127565 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:28031] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aX0WDBBW1k4JK8a4v0YzoQAAAEY"]
[Sat Jan 31 04:35:25.014639 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:16326] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aX0WDcWi-IjigR3oHY6BewAAAMQ"]
[Sat Jan 31 04:35:25.925491 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:46943] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aX0WDdOgXnkKGGSSCINZAQAAAA0"]
[Sat Jan 31 04:35:26.892130 2026] [:error] [pid 39244:tid 39319] [client 74.248.24.163:3907] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aX0WDno-KRTvg3jHEDzCWwAAAIk"]
[Sat Jan 31 04:35:27.693713 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:9658] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aX0WD4ACllgWRWVrYITBkAAAAUc"]
[Sat Jan 31 04:35:28.357088 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:3952] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aX0WEIACllgWRWVrYITBkgAAAU0"]
[Sat Jan 31 04:35:29.044206 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:15824] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/cloud.php"] [unique_id "aX0WEdOgXnkKGGSSCINZBQAAAAY"]
[Sat Jan 31 04:35:29.718041 2026] [:error] [pid 39242:tid 39256] [client 74.248.24.163:13614] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aX0WEdOgXnkKGGSSCINZBwAAAAI"]
[Sat Jan 31 04:35:30.344314 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:25253] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aX0WEnKy7OGBlTY8MCec4QAAAQw"]
[Sat Jan 31 04:35:31.126826 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:14074] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aX0WE8Wi-IjigR3oHY6BiQAAAMQ"]
[Sat Jan 31 04:35:31.978823 2026] [:error] [pid 39244:tid 39322] [client 74.248.24.163:28656] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aX0WE3o-KRTvg3jHEDzCaQAAAIw"]
[Sat Jan 31 04:35:32.703459 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:27999] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aX0WFNOgXnkKGGSSCINZCgAAAAc"]
[Sat Jan 31 04:35:33.770427 2026] [:error] [pid 39244:tid 39334] [client 74.248.24.163:16367] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aX0WFXo-KRTvg3jHEDzCcwAAAJg"]
[Sat Jan 31 04:35:34.685173 2026] [:error] [pid 39242:tid 39264] [client 74.248.24.163:47139] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aX0WFtOgXnkKGGSSCINZDQAAAAo"]
[Sat Jan 31 04:35:35.671218 2026] [:error] [pid 39339:tid 39344] [client 74.248.24.163:25221] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aX0WF8Wi-IjigR3oHY6BpgAAAMM"]
[Sat Jan 31 04:35:36.442144 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:28648] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aX0WGHKy7OGBlTY8MCec_AAAAQg"]
[Sat Jan 31 04:35:37.489687 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:28646] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aX0WGdOgXnkKGGSSCINZGQAAABU"]
[Sat Jan 31 04:35:38.236443 2026] [:error] [pid 39339:tid 39353] [client 74.248.24.163:31358] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aX0WGsWi-IjigR3oHY6BrwAAAMw"]
[Sat Jan 31 04:35:39.245236 2026] [:error] [pid 39339:tid 39344] [client 74.248.24.163:14045] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aX0WG8Wi-IjigR3oHY6BtAAAAMM"]
[Sat Jan 31 04:35:40.206533 2026] [:error] [pid 39339:tid 39348] [client 74.248.24.163:31298] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/index.php"] [unique_id "aX0WHMWi-IjigR3oHY6BuAAAAMc"]
[Sat Jan 31 04:35:40.923348 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:14039] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/index.php"] [unique_id "aX0WHIACllgWRWVrYITB7wAAAUc"]
[Sat Jan 31 04:35:41.672565 2026] [:error] [pid 39243:tid 39303] [client 74.248.24.163:24691] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/index.php"] [unique_id "aX0WHRBW1k4JK8a4v0Yz4QAAAFU"]
[Sat Jan 31 04:35:42.977260 2026] [:error] [pid 39244:tid 39328] [client 74.248.24.163:30604] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/index.php"] [unique_id "aX0WHno-KRTvg3jHEDzCkwAAAJI"]
[Sat Jan 31 04:35:43.855644 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:46931] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes.php"] [unique_id "aX0WH4ACllgWRWVrYITCEgAAAUk"]
[Sat Jan 31 04:35:44.584435 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:30921] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes.php"] [unique_id "aX0WIHo-KRTvg3jHEDzCnAAAAII"]
[Sat Jan 31 04:35:45.725259 2026] [:error] [pid 39244:tid 39331] [client 74.248.24.163:28644] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes.php"] [unique_id "aX0WIXo-KRTvg3jHEDzCnQAAAJU"]
[Sat Jan 31 04:35:46.757626 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:27973] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes.php"] [unique_id "aX0WItOgXnkKGGSSCINZKQAAAAY"]
[Sat Jan 31 04:35:47.733176 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:28637] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/dropdown.php"] [unique_id "aX0WIxBW1k4JK8a4v0Yz7gAAAEY"]
[Sat Jan 31 04:35:48.736378 2026] [:error] [pid 39339:tid 39363] [client 74.248.24.163:15716] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/dropdown.php"] [unique_id "aX0WJMWi-IjigR3oHY6B0wAAANY"]
[Sat Jan 31 04:35:49.820646 2026] [:error] [pid 39339:tid 39346] [client 74.248.24.163:15715] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/dropdown.php"] [unique_id "aX0WJcWi-IjigR3oHY6B2QAAAMU"]
[Sat Jan 31 04:35:50.716156 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:26311] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/dropdown.php"] [unique_id "aX0WJoACllgWRWVrYITCLAAAAVg"]
[Sat Jan 31 04:35:51.386019 2026] [:error] [pid 39243:tid 39282] [client 74.248.24.163:31313] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/404.php"] [unique_id "aX0WJxBW1k4JK8a4v0Yz8QAAAEA"]
[Sat Jan 31 04:35:52.108343 2026] [:error] [pid 20210:tid 20218] [client 74.248.24.163:15728] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aX0WKHKy7OGBlTY8MCedMAAAAQY"]
[Sat Jan 31 04:35:52.952330 2026] [:error] [pid 39339:tid 39354] [client 74.248.24.163:9611] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aX0WKMWi-IjigR3oHY6B-gAAAM0"]
[Sat Jan 31 04:35:53.636770 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:13616] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aX0WKYACllgWRWVrYITCRAAAAU4"]
[Sat Jan 31 04:35:54.617704 2026] [:error] [pid 39244:tid 39312] [client 74.248.24.163:15706] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/file.php"] [unique_id "aX0WKno-KRTvg3jHEDzCsQAAAIM"]
[Sat Jan 31 04:35:55.759677 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:14792] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/file.php"] [unique_id "aX0WK3o-KRTvg3jHEDzCsgAAAIc"]
[Sat Jan 31 04:35:58.868820 2026] [proxy_fcgi:error] [pid 20210:tid 20228] [client 74.248.24.163:14841] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:35:59.382754 2026] [:error] [pid 20210:tid 20221] [client 74.248.24.163:14841] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/function.php"] [unique_id "aX0WL3Ky7OGBlTY8MCedUAAAAQk"]
[Sat Jan 31 04:36:00.197734 2026] [proxy_fcgi:error] [pid 20836:tid 20856] [client 74.248.24.163:14798] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:36:00.593635 2026] [proxy_fcgi:error] [pid 20836:tid 20841] [client 74.248.24.163:14798] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:36:00.856277 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:14798] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aX0WMIACllgWRWVrYITCWwAAAVg"]
[Sat Jan 31 04:36:01.825124 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:14836] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aX0WMXo-KRTvg3jHEDzCxgAAAJM"]
[Sat Jan 31 04:36:02.967381 2026] [proxy_fcgi:error] [pid 39244:tid 39313] [client 74.248.24.163:24685] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:36:03.456844 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:24685] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aX0WM3o-KRTvg3jHEDzC0AAAAIs"]
[Sat Jan 31 04:36:05.014282 2026] [:error] [pid 39339:tid 39341] [client 74.248.24.163:13617] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/cloud.php"] [unique_id "aX0WNcWi-IjigR3oHY6CBAAAAMA"]
[Sat Jan 31 04:36:05.702528 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:28624] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/cloud.php"] [unique_id "aX0WNXo-KRTvg3jHEDzC0wAAAIE"]
[Sat Jan 31 04:36:06.449602 2026] [:error] [pid 39242:tid 39265] [client 74.248.24.163:8859] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/cloud.php"] [unique_id "aX0WNtOgXnkKGGSSCINZOwAAAAs"]
[Sat Jan 31 04:36:07.219375 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:13988] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/cloud.php"] [unique_id "aX0WNxBW1k4JK8a4v0Y0CQAAAEs"]
[Sat Jan 31 04:36:08.140177 2026] [:error] [pid 39339:tid 39362] [client 74.248.24.163:14299] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-load.php"] [unique_id "aX0WOMWi-IjigR3oHY6CCQAAANU"]
[Sat Jan 31 04:36:08.821707 2026] [:error] [pid 39242:tid 39278] [client 74.248.24.163:13451] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-load.php"] [unique_id "aX0WONOgXnkKGGSSCINZPAAAABg"]
[Sat Jan 31 04:36:09.842627 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:13647] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-load.php"] [unique_id "aX0WOXo-KRTvg3jHEDzC2AAAAIc"]
[Sat Jan 31 04:36:10.666636 2026] [:error] [pid 20836:tid 20856] [client 74.248.24.163:29297] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-load.php"] [unique_id "aX0WOoACllgWRWVrYITCdAAAAU8"]
[Sat Jan 31 04:36:11.542044 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:13592] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/file.php"] [unique_id "aX0WO9OgXnkKGGSSCINZQAAAAA0"]
[Sat Jan 31 04:36:12.436987 2026] [:error] [pid 39243:tid 39283] [client 74.248.24.163:13673] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/file.php"] [unique_id "aX0WPBBW1k4JK8a4v0Y0FAAAAEE"]
[Sat Jan 31 04:36:13.520541 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:14817] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/file.php"] [unique_id "aX0WPRBW1k4JK8a4v0Y0FwAAAFI"]
[Sat Jan 31 04:36:14.379678 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:13502] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/file.php"] [unique_id "aX0WPno-KRTvg3jHEDzC2wAAAI0"]
[Sat Jan 31 04:36:16.926032 2026] [:error] [pid 39244:tid 39318] [client 74.248.24.163:13957] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "aX0WQHo-KRTvg3jHEDzC3wAAAIg"]
[Sat Jan 31 04:36:17.831469 2026] [:error] [pid 39244:tid 39319] [client 74.248.24.163:13499] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "aX0WQXo-KRTvg3jHEDzC4AAAAIk"]
[Sat Jan 31 04:36:18.902545 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:13654] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "aX0WQno-KRTvg3jHEDzC4gAAAII"]
[Sat Jan 31 04:36:20.211088 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:13450] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "aX0WRNOgXnkKGGSSCINZSgAAABA"]
[Sat Jan 31 04:36:21.239173 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:12411] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/index.php"] [unique_id "aX0WRYACllgWRWVrYITCjgAAAUk"]
[Sat Jan 31 04:36:22.172431 2026] [:error] [pid 39243:tid 39303] [client 74.248.24.163:30504] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aX0WRhBW1k4JK8a4v0Y0IAAAAFU"]
[Sat Jan 31 04:36:23.241254 2026] [:error] [pid 20836:tid 20860] [client 74.248.24.163:29289] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aX0WR4ACllgWRWVrYITClwAAAVM"]
[Sat Jan 31 04:36:24.099533 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:26186] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aX0WSIACllgWRWVrYITCmgAAAVI"]
[Sat Jan 31 04:36:25.003741 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:12387] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aX0WSXKy7OGBlTY8MCedaAAAAQg"]
[Sat Jan 31 04:36:25.757719 2026] [:error] [pid 39243:tid 39290] [client 74.248.24.163:29253] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/404.php"] [unique_id "aX0WSRBW1k4JK8a4v0Y0JQAAAEg"]
[Sat Jan 31 04:36:26.417849 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:29055] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/404.php"] [unique_id "aX0WSno-KRTvg3jHEDzC5wAAAIs"]
[Sat Jan 31 04:36:27.187005 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:28556] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/404.php"] [unique_id "aX0WSxBW1k4JK8a4v0Y0JwAAAE0"]
[Sat Jan 31 04:36:28.059620 2026] [:error] [pid 39244:tid 39320] [client 74.248.24.163:29396] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/404.php"] [unique_id "aX0WTHo-KRTvg3jHEDzC6gAAAIo"]
[Sat Jan 31 04:36:28.965799 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:29406] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aX0WTHo-KRTvg3jHEDzC7AAAAJE"]
[Sat Jan 31 04:36:29.621484 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:28993] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aX0WTYACllgWRWVrYITCogAAAUA"]
[Sat Jan 31 04:36:30.367752 2026] [:error] [pid 39243:tid 39283] [client 74.248.24.163:29010] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aX0WThBW1k4JK8a4v0Y0KQAAAEE"]
[Sat Jan 31 04:36:31.161364 2026] [:error] [pid 39244:tid 39319] [client 74.248.24.163:29245] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aX0WT3o-KRTvg3jHEDzC7wAAAIk"]
[Sat Jan 31 04:36:31.870348 2026] [:error] [pid 39244:tid 39316] [client 74.248.24.163:46793] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aX0WT3o-KRTvg3jHEDzC8wAAAIY"]
[Sat Jan 31 04:36:32.632423 2026] [:error] [pid 39243:tid 39292] [client 74.248.24.163:28789] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aX0WUBBW1k4JK8a4v0Y0KgAAAEo"]
[Sat Jan 31 04:36:33.513004 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:28762] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aX0WUdOgXnkKGGSSCINZVwAAAAc"]
[Sat Jan 31 04:36:34.306071 2026] [:error] [pid 39339:tid 39355] [client 74.248.24.163:45017] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/radio.php"] [unique_id "aX0WUsWi-IjigR3oHY6CKAAAAM4"]
[Sat Jan 31 04:36:35.071198 2026] [:error] [pid 20210:tid 20229] [client 74.248.24.163:46791] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aX0WU3Ky7OGBlTY8MCeddQAAARE"]
[Sat Jan 31 04:36:35.788744 2026] [:error] [pid 39242:tid 39258] [client 74.248.24.163:13659] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aX0WU9OgXnkKGGSSCINZWQAAAAQ"]
[Sat Jan 31 04:36:36.479808 2026] [:error] [pid 20836:tid 20851] [client 74.248.24.163:28606] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aX0WVIACllgWRWVrYITCrgAAAUo"]
[Sat Jan 31 04:36:37.307680 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:29241] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aX0WVcWi-IjigR3oHY6CKgAAANM"]
[Sat Jan 31 04:36:38.295079 2026] [:error] [pid 20210:tid 20225] [client 74.248.24.163:29035] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aX0WVnKy7OGBlTY8MCedewAAAQ0"]
[Sat Jan 31 04:36:39.121806 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:14838] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aX0WV3Ky7OGBlTY8MCedfQAAAQE"]
[Sat Jan 31 04:36:39.943541 2026] [:error] [pid 39242:tid 39264] [client 74.248.24.163:29212] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-activate.php"] [unique_id "aX0WV9OgXnkKGGSSCINZXwAAAAo"]
[Sat Jan 31 04:36:40.910876 2026] [:error] [pid 39339:tid 39363] [client 74.248.24.163:28570] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aX0WWMWi-IjigR3oHY6CLQAAANY"]
[Sat Jan 31 04:36:41.731768 2026] [:error] [pid 39242:tid 39263] [client 74.248.24.163:12398] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aX0WWdOgXnkKGGSSCINZYQAAAAk"]
[Sat Jan 31 04:36:42.615594 2026] [:error] [pid 39339:tid 39354] [client 74.248.24.163:8981] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aX0WWsWi-IjigR3oHY6CLwAAAM0"]
[Sat Jan 31 04:36:43.383712 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:12400] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aX0WWxBW1k4JK8a4v0Y0NAAAAEs"]
[Sat Jan 31 04:36:44.162554 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:29422] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aX0WXNOgXnkKGGSSCINZZgAAAAc"]
[Sat Jan 31 04:36:45.161747 2026] [:error] [pid 20210:tid 20233] [client 74.248.24.163:27893] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aX0WXXKy7OGBlTY8MCedhAAAARU"]
[Sat Jan 31 04:36:46.016029 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:8962] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aX0WXoACllgWRWVrYITCtQAAAVE"]
[Sat Jan 31 04:36:47.065074 2026] [:error] [pid 39339:tid 39357] [client 74.248.24.163:3705] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aX0WX8Wi-IjigR3oHY6CNwAAANA"]
[Sat Jan 31 04:36:47.937264 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:8815] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/themes.php"] [unique_id "aX0WX4ACllgWRWVrYITCuAAAAUc"]
[Sat Jan 31 04:36:48.652277 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:27864] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/themes.php"] [unique_id "aX0WYIACllgWRWVrYITCuQAAAU0"]
[Sat Jan 31 04:36:49.342644 2026] [:error] [pid 20210:tid 20221] [client 74.248.24.163:47559] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/themes.php"] [unique_id "aX0WYXKy7OGBlTY8MCediQAAAQk"]
[Sat Jan 31 04:36:50.048880 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:3791] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/themes.php"] [unique_id "aX0WYoACllgWRWVrYITCvgAAAU4"]
[Sat Jan 31 04:36:50.750490 2026] [:error] [pid 39339:tid 39363] [client 74.248.24.163:15777] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aX0WYsWi-IjigR3oHY6COwAAANY"]
[Sat Jan 31 04:36:51.925596 2026] [:error] [pid 39339:tid 39359] [client 74.248.24.163:15755] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aX0WY8Wi-IjigR3oHY6CPwAAANI"]
[Sat Jan 31 04:36:53.188756 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:15788] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aX0WZYACllgWRWVrYITCxAAAAVA"]
[Sat Jan 31 04:36:54.568061 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:30300] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aX0WZoACllgWRWVrYITCxQAAAUc"]
[Sat Jan 31 04:36:55.449397 2026] [:error] [pid 39244:tid 39332] [client 74.248.24.163:15761] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aX0WZ3o-KRTvg3jHEDzDBAAAAJY"]
[Sat Jan 31 04:36:56.441663 2026] [:error] [pid 39243:tid 39286] [client 74.248.24.163:4095] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aX0WaBBW1k4JK8a4v0Y0PAAAAEQ"]
[Sat Jan 31 04:36:57.234469 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:14092] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aX0WaYACllgWRWVrYITCxwAAAUk"]
[Sat Jan 31 04:36:57.919465 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:15780] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aX0WaXKy7OGBlTY8MCedjAAAARc"]
[Sat Jan 31 04:36:58.571115 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:29634] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aX0WanKy7OGBlTY8MCedjQAAAQw"]
[Sat Jan 31 04:36:59.299934 2026] [:error] [pid 39242:tid 39265] [client 74.248.24.163:47583] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aX0Wa9OgXnkKGGSSCINZeQAAAAs"]
[Sat Jan 31 04:37:00.242483 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:8960] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aX0WbIACllgWRWVrYITCzwAAAVg"]
[Sat Jan 31 04:37:00.983031 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:29639] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/function.php"] [unique_id "aX0WbNOgXnkKGGSSCINZfgAAABU"]
[Sat Jan 31 04:37:01.848973 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:28896] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aX0WbYACllgWRWVrYITC1AAAAUU"]
[Sat Jan 31 04:37:02.733028 2026] [:error] [pid 20210:tid 20214] [client 74.248.24.163:27669] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aX0WbnKy7OGBlTY8MCedkwAAAQI"]
[Sat Jan 31 04:37:03.608275 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:28927] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aX0Wb4ACllgWRWVrYITC1wAAAU4"]
[Sat Jan 31 04:37:04.503427 2026] [:error] [pid 39244:tid 39322] [client 74.248.24.163:31764] [client 74.248.24.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.248.24.163, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aX0WcHo-KRTvg3jHEDzDCwAAAIw"]
[Sat Jan 31 04:37:04.892676 2026] [proxy_fcgi:error] [pid 39244:tid 39313] [client 74.248.24.163:31764] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:37:06.656703 2026] [proxy_fcgi:error] [pid 39244:tid 39332] [client 74.248.24.163:31764] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:37:06.915126 2026] [proxy_fcgi:error] [pid 39244:tid 39318] [client 74.248.24.163:31764] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:37:07.910037 2026] [:error] [pid 39244:tid 39312] [client 74.248.24.163:31764] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/themes.php"] [unique_id "aX0Wc3o-KRTvg3jHEDzDGQAAAIM"]
[Sat Jan 31 04:37:08.694100 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:25706] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/themes.php"] [unique_id "aX0WdIACllgWRWVrYITC3QAAAVI"]
[Sat Jan 31 04:37:09.581774 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:27586] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/themes.php"] [unique_id "aX0WdYACllgWRWVrYITC4QAAAUU"]
[Sat Jan 31 04:37:10.453081 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:30113] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/themes.php"] [unique_id "aX0WdoACllgWRWVrYITC4gAAAUI"]
[Sat Jan 31 04:37:11.312157 2026] [:error] [pid 39244:tid 39319] [client 74.248.24.163:3315] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aX0Wd3o-KRTvg3jHEDzDGwAAAIk"]
[Sat Jan 31 04:37:12.071514 2026] [:error] [pid 20836:tid 20856] [client 74.248.24.163:29496] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aX0WeIACllgWRWVrYITC4wAAAU8"]
[Sat Jan 31 04:37:12.827897 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:7937] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aX0WeHo-KRTvg3jHEDzDHAAAAII"]
[Sat Jan 31 04:37:13.712635 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:26299] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aX0WeXo-KRTvg3jHEDzDHQAAAIE"]
[Sat Jan 31 04:37:14.705840 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:26279] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/license.php"] [unique_id "aX0WehBW1k4JK8a4v0Y0TAAAAE0"]
[Sat Jan 31 04:37:15.512259 2026] [:error] [pid 39243:tid 39291] [client 74.248.24.163:47823] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/license.php"] [unique_id "aX0WexBW1k4JK8a4v0Y0TQAAAEk"]
[Sat Jan 31 04:37:16.328781 2026] [:error] [pid 39243:tid 39299] [client 74.248.24.163:8901] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/license.php"] [unique_id "aX0WfBBW1k4JK8a4v0Y0UAAAAFE"]
[Sat Jan 31 04:37:17.120594 2026] [:error] [pid 20210:tid 20222] [client 74.248.24.163:26296] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/license.php"] [unique_id "aX0WfXKy7OGBlTY8MCedqAAAAQo"]
[Sat Jan 31 04:37:18.307509 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:29479] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "aX0WfoACllgWRWVrYITC7wAAAUA"]
[Sat Jan 31 04:37:19.020925 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:30021] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX0Wf9OgXnkKGGSSCINZnwAAABA"]
[Sat Jan 31 04:37:19.964734 2026] [:error] [pid 20836:tid 20856] [client 74.248.24.163:30101] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX0Wf4ACllgWRWVrYITC8QAAAU8"]
[Sat Jan 31 04:37:20.696746 2026] [:error] [pid 39244:tid 39333] [client 74.248.24.163:30535] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX0WgHo-KRTvg3jHEDzDKAAAAJc"]
[Sat Jan 31 04:37:21.740131 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:29501] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX0WgXo-KRTvg3jHEDzDKwAAAJM"]
[Sat Jan 31 04:37:22.793816 2026] [:error] [pid 39243:tid 39290] [client 74.248.24.163:16257] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aX0WghBW1k4JK8a4v0Y0WQAAAEg"]
[Sat Jan 31 04:37:23.554172 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:26291] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aX0WgxBW1k4JK8a4v0Y0YQAAAFQ"]
[Sat Jan 31 04:37:24.514500 2026] [:error] [pid 39244:tid 39326] [client 74.248.24.163:30051] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aX0WhHo-KRTvg3jHEDzDLQAAAJA"]
[Sat Jan 31 04:37:25.476790 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:19684] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aX0WhdOgXnkKGGSSCINZtgAAABI"]
[Sat Jan 31 04:37:26.234218 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:28691] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aX0Whno-KRTvg3jHEDzDLwAAAIc"]
[Sat Jan 31 04:37:27.251488 2026] [:error] [pid 39339:tid 39351] [client 74.248.24.163:14197] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aX0Wh8Wi-IjigR3oHY6CcwAAAMo"]
[Sat Jan 31 04:37:28.091433 2026] [:error] [pid 20836:tid 20851] [client 74.248.24.163:3766] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aX0WiIACllgWRWVrYITC_gAAAUo"]
[Sat Jan 31 04:37:28.840460 2026] [:error] [pid 39244:tid 39332] [client 74.248.24.163:32001] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aX0WiHo-KRTvg3jHEDzDNQAAAJY"]
[Sat Jan 31 04:37:29.755842 2026] [:error] [pid 39243:tid 39306] [client 74.248.24.163:28943] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "aX0WiRBW1k4JK8a4v0Y0dAAAAFg"]
[Sat Jan 31 04:37:30.355366 2026] [:error] [pid 39242:tid 39277] [client 74.248.24.163:16153] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "aX0WitOgXnkKGGSSCINZwQAAABc"]
[Sat Jan 31 04:37:31.077170 2026] [:error] [pid 39244:tid 39333] [client 74.248.24.163:23801] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "aX0Wi3o-KRTvg3jHEDzDOQAAAJc"]
[Sat Jan 31 04:37:31.843578 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:16152] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "aX0Wi8Wi-IjigR3oHY6ChwAAANM"]
[Sat Jan 31 04:37:32.562933 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:7541] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aX0WjIACllgWRWVrYITDIQAAAVI"]
[Sat Jan 31 04:37:33.348311 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:32067] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/file.php"] [unique_id "aX0WjdOgXnkKGGSSCINZyAAAAA0"]
[Sat Jan 31 04:37:34.242650 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:23752] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/file.php"] [unique_id "aX0Wjno-KRTvg3jHEDzDOgAAAIs"]
[Sat Jan 31 04:37:35.290749 2026] [:error] [pid 39244:tid 39316] [client 74.248.24.163:45081] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/file.php"] [unique_id "aX0Wj3o-KRTvg3jHEDzDOwAAAIY"]
[Sat Jan 31 04:37:36.235716 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:23806] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/file.php"] [unique_id "aX0WkMWi-IjigR3oHY6CjwAAAMQ"]
[Sat Jan 31 04:37:36.970746 2026] [:error] [pid 39244:tid 39331] [client 74.248.24.163:13302] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aX0WkHo-KRTvg3jHEDzDPgAAAJU"]
[Sat Jan 31 04:37:38.148155 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:27964] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aX0WknKy7OGBlTY8MCedwwAAARM"]
[Sat Jan 31 04:37:39.101878 2026] [:error] [pid 39244:tid 39313] [client 74.248.24.163:29558] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aX0Wk3o-KRTvg3jHEDzDQQAAAIQ"]
[Sat Jan 31 04:37:40.315137 2026] [:error] [pid 20836:tid 20849] [client 74.248.24.163:13281] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aX0WlIACllgWRWVrYITDPgAAAUg"]
[Sat Jan 31 04:37:41.074593 2026] [:error] [pid 39339:tid 39357] [client 74.248.24.163:13268] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dropdown.php"] [unique_id "aX0WlcWi-IjigR3oHY6ClgAAANA"]
[Sat Jan 31 04:37:42.439206 2026] [:error] [pid 39243:tid 39304] [client 74.248.24.163:15201] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dropdown.php"] [unique_id "aX0WlhBW1k4JK8a4v0Y0gwAAAFY"]
[Sat Jan 31 04:37:43.470805 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:29536] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dropdown.php"] [unique_id "aX0WlxBW1k4JK8a4v0Y0hwAAAFQ"]
[Sat Jan 31 04:37:44.251126 2026] [:error] [pid 39244:tid 39331] [client 74.248.24.163:32108] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dropdown.php"] [unique_id "aX0WmHo-KRTvg3jHEDzDUAAAAJU"]
[Sat Jan 31 04:37:45.390377 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:9763] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aX0WmYACllgWRWVrYITDWAAAAVE"]
[Sat Jan 31 04:37:46.266066 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:25044] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aX0WmoACllgWRWVrYITDXgAAAU4"]
[Sat Jan 31 04:37:47.256046 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:25083] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aX0Wm4ACllgWRWVrYITDYgAAAVg"]
[Sat Jan 31 04:37:48.247177 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:24756] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aX0WnIACllgWRWVrYITDZQAAAUA"]
[Sat Jan 31 04:37:49.343449 2026] [:error] [pid 39243:tid 39294] [client 74.248.24.163:9729] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signup.php"] [unique_id "aX0WnRBW1k4JK8a4v0Y0jgAAAEw"]
[Sat Jan 31 04:37:50.370870 2026] [:error] [pid 39339:tid 39351] [client 74.248.24.163:7509] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signup.php"] [unique_id "aX0WnsWi-IjigR3oHY6CngAAAMo"]
[Sat Jan 31 04:37:51.343807 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:9971] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signup.php"] [unique_id "aX0Wn3Ky7OGBlTY8MCed1QAAAQg"]
[Sat Jan 31 04:37:52.284287 2026] [:error] [pid 39243:tid 39284] [client 74.248.24.163:16446] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-signup.php"] [unique_id "aX0WoBBW1k4JK8a4v0Y0jwAAAEI"]
[Sat Jan 31 04:37:53.099425 2026] [:error] [pid 39244:tid 39328] [client 74.248.24.163:31083] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/css.php"] [unique_id "aX0WoXo-KRTvg3jHEDzDWgAAAJI"]
[Sat Jan 31 04:37:53.974385 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:15554] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aX0WodOgXnkKGGSSCINZ7wAAAAU"]
[Sat Jan 31 04:37:54.682116 2026] [:error] [pid 39242:tid 39257] [client 74.248.24.163:11289] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aX0WotOgXnkKGGSSCINZ8wAAAAM"]
[Sat Jan 31 04:37:55.518408 2026] [:error] [pid 39242:tid 39255] [client 74.248.24.163:27911] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/chosen.php"] [unique_id "aX0Wo9OgXnkKGGSSCINZ9AAAAAE"]
[Sat Jan 31 04:37:56.288847 2026] [:error] [pid 39243:tid 39306] [client 74.248.24.163:3168] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cong.php"] [unique_id "aX0WpBBW1k4JK8a4v0Y0kgAAAFg"]
[Sat Jan 31 04:37:57.051848 2026] [:error] [pid 39242:tid 39277] [client 74.248.24.163:28360] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cong.php"] [unique_id "aX0WpdOgXnkKGGSSCINZ9wAAABc"]
[Sat Jan 31 04:37:57.904138 2026] [:error] [pid 39242:tid 39276] [client 74.248.24.163:25047] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cong.php"] [unique_id "aX0WpdOgXnkKGGSSCINZ-gAAABY"]
[Sat Jan 31 04:37:58.831685 2026] [:error] [pid 39339:tid 39358] [client 74.248.24.163:9785] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/cong.php"] [unique_id "aX0WpsWi-IjigR3oHY6CpwAAANE"]
[Sat Jan 31 04:37:59.543327 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:25043] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aX0WpxBW1k4JK8a4v0Y0mgAAAEs"]
[Sat Jan 31 04:38:00.858656 2026] [:error] [pid 39244:tid 39332] [client 74.248.24.163:45252] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aX0WqHo-KRTvg3jHEDzDYgAAAJY"]
[Sat Jan 31 04:38:01.686784 2026] [:error] [pid 39243:tid 39291] [client 74.248.24.163:45280] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aX0WqRBW1k4JK8a4v0Y0nQAAAEk"]
[Sat Jan 31 04:38:02.863777 2026] [:error] [pid 20210:tid 20227] [client 74.248.24.163:29773] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aX0WqnKy7OGBlTY8MCed3wAAAQ8"]
[Sat Jan 31 04:38:03.638063 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:16404] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aX0Wq8Wi-IjigR3oHY6CrAAAANM"]
[Sat Jan 31 04:38:04.564691 2026] [:error] [pid 39243:tid 39282] [client 74.248.24.163:3162] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aX0WrBBW1k4JK8a4v0Y0pQAAAEA"]
[Sat Jan 31 04:38:05.283858 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:9947] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aX0WrXo-KRTvg3jHEDzDaAAAAIE"]
[Sat Jan 31 04:38:06.204509 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:10815] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aX0WrtOgXnkKGGSSCINaCQAAABI"]
[Sat Jan 31 04:38:06.994525 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:31062] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ova-tools.php"] [unique_id "aX0Wrno-KRTvg3jHEDzDbAAAAII"]
[Sat Jan 31 04:38:07.840364 2026] [proxy_fcgi:error] [pid 20210:tid 20216] [client 74.248.24.163:31117] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:38:08.262763 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:31117] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aX0WsHKy7OGBlTY8MCed4gAAAQg"]
[Sat Jan 31 04:38:09.095104 2026] [:error] [pid 20210:tid 20233] [client 74.248.24.163:24181] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aX0WsXKy7OGBlTY8MCed4wAAARU"]
[Sat Jan 31 04:38:09.906337 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:31127] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aX0WsRBW1k4JK8a4v0Y0qQAAAFQ"]
[Sat Jan 31 04:38:10.736065 2026] [:error] [pid 39242:tid 39265] [client 74.248.24.163:15552] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aX0WstOgXnkKGGSSCINaEQAAAAs"]
[Sat Jan 31 04:38:12.708593 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:24189] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aX0WtBBW1k4JK8a4v0Y0sgAAAEY"]
[Sat Jan 31 04:38:13.624965 2026] [:error] [pid 39339:tid 39349] [client 74.248.24.163:15563] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX0WtcWi-IjigR3oHY6CtQAAAMg"]
[Sat Jan 31 04:38:15.021169 2026] [:error] [pid 39244:tid 39313] [client 74.248.24.163:16422] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aX0Wt3o-KRTvg3jHEDzDfwAAAIQ"]
[Sat Jan 31 04:38:16.567502 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:15873] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aX0WuIACllgWRWVrYITDjAAAAVI"]
[Sat Jan 31 04:38:22.074447 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:12781] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aX0WvtOgXnkKGGSSCINaJwAAABI"]
[Sat Jan 31 04:38:24.165806 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:16872] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aX0WwIACllgWRWVrYITDlAAAAUA"]
[Sat Jan 31 04:38:29.909343 2026] [:error] [pid 39242:tid 39273] [client 74.248.24.163:10156] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aX0WxdOgXnkKGGSSCINaOAAAABM"]
[Sat Jan 31 04:38:33.639230 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:29871] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aX0WyYACllgWRWVrYITDqQAAAUI"]
[Sat Jan 31 04:38:35.784257 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:31814] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aX0Wy3Ky7OGBlTY8MCeeDQAAAQw"]
[Sat Jan 31 04:38:38.819824 2026] [:error] [pid 39243:tid 39284] [client 74.248.24.163:29842] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aX0WzhBW1k4JK8a4v0Y01AAAAEI"]
[Sat Jan 31 04:38:39.907881 2026] [:error] [pid 39242:tid 39255] [client 74.248.24.163:29978] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aX0Wz9OgXnkKGGSSCINaUAAAAAE"]
[Sat Jan 31 04:38:42.464165 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:12484] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aX0W0oACllgWRWVrYITDrQAAAUk"]
[Sat Jan 31 04:38:43.968095 2026] [:error] [pid 39244:tid 39313] [client 74.248.24.163:17096] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aX0W03o-KRTvg3jHEDzDngAAAIQ"]
[Sat Jan 31 04:38:45.851474 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:31425] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aX0W1YACllgWRWVrYITDtAAAAVI"]
[Sat Jan 31 04:38:48.456547 2026] [:error] [pid 39339:tid 39343] [client 74.248.24.163:30173] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aX0W2MWi-IjigR3oHY6C2wAAAMI"]
[Sat Jan 31 04:38:51.529626 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:3638] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aX0W29OgXnkKGGSSCINaWgAAAAU"]
[Sat Jan 31 04:38:53.046801 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:3202] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aX0W3YACllgWRWVrYITDuwAAAUk"]
[Sat Jan 31 04:38:55.251710 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:29316] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aX0W34ACllgWRWVrYITDvQAAAU0"]
[Sat Jan 31 04:38:57.302903 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:3228] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aX0W4YACllgWRWVrYITDwQAAAVI"]
[Sat Jan 31 04:39:00.900920 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:30189] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/about.php"] [unique_id "aX0W5NOgXnkKGGSSCINabwAAAAc"]
[Sat Jan 31 04:39:02.861264 2026] [:error] [pid 39242:tid 39258] [client 74.248.24.163:44702] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/about.php"] [unique_id "aX0W5tOgXnkKGGSSCINacwAAAAQ"]
[Sat Jan 31 04:39:04.085218 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:31501] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/about.php"] [unique_id "aX0W6HKy7OGBlTY8MCeeKAAAARM"]
[Sat Jan 31 04:39:05.131569 2026] [:error] [pid 39339:tid 39350] [client 74.248.24.163:31521] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/about.php"] [unique_id "aX0W6cWi-IjigR3oHY6DAQAAAMk"]
[Sat Jan 31 04:39:05.983563 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:7920] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/blogs.dir/about.php"] [unique_id "aX0W6YACllgWRWVrYITDzwAAAUY"]
[Sat Jan 31 04:39:07.083778 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:14545] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/blogs.dir/about.php"] [unique_id "aX0W6xBW1k4JK8a4v0Y07QAAAEs"]
[Sat Jan 31 04:39:08.407480 2026] [:error] [pid 20210:tid 20232] [client 74.248.24.163:30984] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/blogs.dir/about.php"] [unique_id "aX0W7HKy7OGBlTY8MCeeMwAAARQ"]
[Sat Jan 31 04:39:09.450719 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:31548] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/blogs.dir/about.php"] [unique_id "aX0W7YACllgWRWVrYITD0wAAAUk"]
[Sat Jan 31 04:39:10.244305 2026] [:error] [pid 20210:tid 20222] [client 74.248.24.163:31489] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aX0W7nKy7OGBlTY8MCeeNQAAAQo"]
[Sat Jan 31 04:39:11.207971 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:14567] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/about.php"] [unique_id "aX0W74ACllgWRWVrYITD1wAAAU0"]
[Sat Jan 31 04:39:12.080844 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:47006] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/about.php"] [unique_id "aX0W8IACllgWRWVrYITD2gAAAVE"]
[Sat Jan 31 04:39:13.130749 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:13882] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/about.php"] [unique_id "aX0W8RBW1k4JK8a4v0Y08gAAAFQ"]
[Sat Jan 31 04:39:13.917357 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:47016] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/about.php"] [unique_id "aX0W8Xo-KRTvg3jHEDzDtgAAAIs"]
[Sat Jan 31 04:39:14.624659 2026] [:error] [pid 20210:tid 20229] [client 74.248.24.163:3549] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/about.php"] [unique_id "aX0W8nKy7OGBlTY8MCeePAAAARE"]
[Sat Jan 31 04:39:15.389017 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:8747] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/gallery/about.php"] [unique_id "aX0W83Ky7OGBlTY8MCeePQAAAQE"]
[Sat Jan 31 04:39:16.215959 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:45524] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/gallery/about.php"] [unique_id "aX0W9IACllgWRWVrYITD4QAAAUU"]
[Sat Jan 31 04:39:17.273689 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:13826] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/gallery/about.php"] [unique_id "aX0W9RBW1k4JK8a4v0Y0-QAAAE0"]
[Sat Jan 31 04:39:18.233489 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:29343] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/gallery/about.php"] [unique_id "aX0W9oACllgWRWVrYITD4wAAAUA"]
[Sat Jan 31 04:39:18.928105 2026] [:error] [pid 20836:tid 20864] [client 74.248.24.163:29361] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aX0W9oACllgWRWVrYITD5AAAAVc"]
[Sat Jan 31 04:39:19.919955 2026] [:error] [pid 20836:tid 20861] [client 74.248.24.163:46988] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aX0W94ACllgWRWVrYITD5gAAAVQ"]
[Sat Jan 31 04:39:21.080658 2026] [:error] [pid 39243:tid 39291] [client 74.248.24.163:29313] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aX0W-RBW1k4JK8a4v0Y0_wAAAEk"]
[Sat Jan 31 04:39:22.082494 2026] [:error] [pid 39242:tid 39277] [client 74.248.24.163:7899] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aX0W-tOgXnkKGGSSCINaiQAAABc"]
[Sat Jan 31 04:39:23.050677 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:29315] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aX0W-xBW1k4JK8a4v0Y1AgAAAFc"]
[Sat Jan 31 04:39:24.040143 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:47098] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aX0W_HKy7OGBlTY8MCeeSgAAAQw"]
[Sat Jan 31 04:39:24.891059 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:14581] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aX0W_HKy7OGBlTY8MCeeTAAAAQE"]
[Sat Jan 31 04:39:25.875489 2026] [:error] [pid 20210:tid 20217] [client 74.248.24.163:15676] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aX0W_XKy7OGBlTY8MCeeTQAAAQU"]
[Sat Jan 31 04:39:26.967500 2026] [:error] [pid 20210:tid 20215] [client 74.248.24.163:24264] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/cloud.php"] [unique_id "aX0W_nKy7OGBlTY8MCeeUAAAAQM"]
[Sat Jan 31 04:39:27.845527 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:8754] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/cloud.php"] [unique_id "aX0W_9OgXnkKGGSSCINakAAAAAc"]
[Sat Jan 31 04:39:28.927774 2026] [:error] [pid 39243:tid 39287] [client 74.248.24.163:10068] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/cloud.php"] [unique_id "aX0XABBW1k4JK8a4v0Y1CAAAAEU"]
[Sat Jan 31 04:39:29.943917 2026] [:error] [pid 39243:tid 39299] [client 74.248.24.163:45524] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/cloud.php"] [unique_id "aX0XARBW1k4JK8a4v0Y1DAAAAFE"]
[Sat Jan 31 04:39:30.952043 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:13857] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/cloud.php"] [unique_id "aX0XAno-KRTvg3jHEDzDxgAAAI0"]
[Sat Jan 31 04:39:32.316182 2026] [proxy_fcgi:error] [pid 39242:tid 39262] [client 74.248.24.163:13885] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:39:32.995647 2026] [proxy_fcgi:error] [pid 39242:tid 39268] [client 74.248.24.163:13885] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:39:35.637488 2026] [proxy_fcgi:error] [pid 39242:tid 39255] [client 74.248.24.163:13885] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:39:35.892942 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:13885] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/cloud.php"] [unique_id "aX0XB9OgXnkKGGSSCINaoQAAAAY"]
[Sat Jan 31 04:39:36.718430 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:15632] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/cloud.php"] [unique_id "aX0XCNOgXnkKGGSSCINaogAAAAc"]
[Sat Jan 31 04:39:37.799134 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:10107] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/cloud.php"] [unique_id "aX0XCXo-KRTvg3jHEDzD0QAAAIE"]
[Sat Jan 31 04:39:38.922665 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:29325] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/images/cloud.php"] [unique_id "aX0XCtOgXnkKGGSSCINapAAAABI"]
[Sat Jan 31 04:39:39.980755 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:43338] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aX0XC4ACllgWRWVrYITECAAAAUY"]
[Sat Jan 31 04:39:41.292436 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:13852] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aX0XDcWi-IjigR3oHY6DCwAAAMQ"]
[Sat Jan 31 04:39:42.689892 2026] [:error] [pid 39243:tid 39301] [client 74.248.24.163:3524] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aX0XDhBW1k4JK8a4v0Y1IgAAAFM"]
[Sat Jan 31 04:39:43.637784 2026] [:error] [pid 39339:tid 39350] [client 74.248.24.163:31483] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aX0XD8Wi-IjigR3oHY6DDgAAAMk"]
[Sat Jan 31 04:39:44.814321 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:31513] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aX0XEBBW1k4JK8a4v0Y1JQAAAFc"]
[Sat Jan 31 04:39:47.534095 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:31023] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/cloud.php"] [unique_id "aX0XE3o-KRTvg3jHEDzD4AAAAIs"]
[Sat Jan 31 04:39:48.741598 2026] [:error] [pid 39339:tid 39365] [client 74.248.24.163:47191] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/cloud.php"] [unique_id "aX0XFMWi-IjigR3oHY6DEAAAANg"]
[Sat Jan 31 04:39:49.839201 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:14557] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/cloud.php"] [unique_id "aX0XFXo-KRTvg3jHEDzD5QAAAJE"]
[Sat Jan 31 04:39:51.315449 2026] [:error] [pid 20836:tid 20849] [client 74.248.24.163:3253] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aX0XF4ACllgWRWVrYITEFQAAAUg"]
[Sat Jan 31 04:39:52.328343 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:7904] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aX0XGBBW1k4JK8a4v0Y1LwAAAFQ"]
[Sat Jan 31 04:39:53.415336 2026] [:error] [pid 20210:tid 20233] [client 74.248.24.163:12571] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aX0XGXKy7OGBlTY8MCeegQAAARU"]
[Sat Jan 31 04:39:54.339328 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:13832] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aX0XGhBW1k4JK8a4v0Y1NAAAAE0"]
[Sat Jan 31 04:39:55.270220 2026] [:error] [pid 39242:tid 39268] [client 74.248.24.163:31530] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/cloud.php"] [unique_id "aX0XG9OgXnkKGGSSCINaswAAAA4"]
[Sat Jan 31 04:39:56.217461 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:47014] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/cloud.php"] [unique_id "aX0XHIACllgWRWVrYITEIAAAAUI"]
[Sat Jan 31 04:39:57.123500 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:43379] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/cloud.php"] [unique_id "aX0XHdOgXnkKGGSSCINatgAAABU"]
[Sat Jan 31 04:39:57.890350 2026] [:error] [pid 39243:tid 39283] [client 74.248.24.163:31494] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/cloud.php"] [unique_id "aX0XHRBW1k4JK8a4v0Y1PgAAAEE"]
[Sat Jan 31 04:39:58.577088 2026] [:error] [pid 39242:tid 39264] [client 74.248.24.163:31667] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/cloud.php"] [unique_id "aX0XHtOgXnkKGGSSCINaugAAAAo"]
[Sat Jan 31 04:39:59.720419 2026] [:error] [pid 39339:tid 39358] [client 74.248.24.163:12572] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/cloud.php"] [unique_id "aX0XH8Wi-IjigR3oHY6DHAAAANE"]
[Sat Jan 31 04:40:00.574771 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:7332] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/cloud.php"] [unique_id "aX0XINOgXnkKGGSSCINawAAAAA0"]
[Sat Jan 31 04:40:01.450065 2026] [:error] [pid 39339:tid 39341] [client 74.248.24.163:9613] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/cloud.php"] [unique_id "aX0XIcWi-IjigR3oHY6DIAAAAMA"]
[Sat Jan 31 04:40:02.299614 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:46962] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/updates.php"] [unique_id "aX0XInKy7OGBlTY8MCeejAAAAQw"]
[Sat Jan 31 04:40:03.166357 2026] [:error] [pid 20836:tid 20863] [client 74.248.24.163:14882] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/updates.php"] [unique_id "aX0XI4ACllgWRWVrYITEJQAAAVY"]
[Sat Jan 31 04:40:04.143275 2026] [:error] [pid 39339:tid 39354] [client 74.248.24.163:44721] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/updates.php"] [unique_id "aX0XJMWi-IjigR3oHY6DJgAAAM0"]
[Sat Jan 31 04:40:04.912702 2026] [:error] [pid 20210:tid 20219] [client 74.248.24.163:14868] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/updates.php"] [unique_id "aX0XJHKy7OGBlTY8MCeekgAAAQc"]
[Sat Jan 31 04:40:05.837480 2026] [:error] [pid 20210:tid 20223] [client 74.248.24.163:30622] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aX0XJXKy7OGBlTY8MCeelgAAAQs"]
[Sat Jan 31 04:40:06.812045 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:46969] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aX0XJno-KRTvg3jHEDzEAAAAAIE"]
[Sat Jan 31 04:40:07.658624 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:30650] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aX0XJ3o-KRTvg3jHEDzEAgAAAJE"]
[Sat Jan 31 04:40:08.604752 2026] [:error] [pid 39242:tid 39255] [client 74.248.24.163:46929] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aX0XKNOgXnkKGGSSCINayQAAAAE"]
[Sat Jan 31 04:40:09.697114 2026] [:error] [pid 39339:tid 39351] [client 74.248.24.163:30641] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aX0XKcWi-IjigR3oHY6DLgAAAMo"]
[Sat Jan 31 04:40:11.113522 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:9636] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aX0XK4ACllgWRWVrYITELAAAAU4"]
[Sat Jan 31 04:40:12.408407 2026] [:error] [pid 20836:tid 20861] [client 74.248.24.163:31666] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aX0XLIACllgWRWVrYITELQAAAVQ"]
[Sat Jan 31 04:40:13.433357 2026] [:error] [pid 20836:tid 20844] [client 74.248.24.163:31670] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aX0XLYACllgWRWVrYITEMwAAAUM"]
[Sat Jan 31 04:40:14.302216 2026] [:error] [pid 39339:tid 39341] [client 74.248.24.163:12349] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aX0XLsWi-IjigR3oHY6DPQAAAMA"]
[Sat Jan 31 04:40:15.338071 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:7337] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aX0XL8Wi-IjigR3oHY6DPgAAAM8"]
[Sat Jan 31 04:40:16.215725 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:29075] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aX0XMHo-KRTvg3jHEDzEEQAAAJE"]
[Sat Jan 31 04:40:17.203865 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:31639] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aX0XMXKy7OGBlTY8MCeengAAARc"]
[Sat Jan 31 04:40:18.387638 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:7350] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aX0XMoACllgWRWVrYITENgAAAUU"]
[Sat Jan 31 04:40:19.315620 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:46994] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aX0XM9OgXnkKGGSSCINa2wAAABA"]
[Sat Jan 31 04:40:20.537336 2026] [:error] [pid 20210:tid 20221] [client 74.248.24.163:12591] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aX0XNHKy7OGBlTY8MCeepAAAAQk"]
[Sat Jan 31 04:40:21.478898 2026] [:error] [pid 20836:tid 20862] [client 74.248.24.163:14064] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aX0XNYACllgWRWVrYITEPQAAAVU"]
[Sat Jan 31 04:40:22.434278 2026] [:error] [pid 39339:tid 39364] [client 74.248.24.163:14066] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/about.php7"] [unique_id "aX0XNsWi-IjigR3oHY6DRwAAANc"]
[Sat Jan 31 04:40:23.544460 2026] [:error] [pid 39339:tid 39363] [client 74.248.24.163:13554] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/about.php7"] [unique_id "aX0XN8Wi-IjigR3oHY6DSQAAANY"]
[Sat Jan 31 04:40:24.633333 2026] [:error] [pid 20210:tid 20216] [client 74.248.24.163:14072] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/about.php7"] [unique_id "aX0XOHKy7OGBlTY8MCeepgAAAQQ"]
[Sat Jan 31 04:40:25.872503 2026] [:error] [pid 39339:tid 39344] [client 74.248.24.163:4016] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/widgets/about.php7"] [unique_id "aX0XOcWi-IjigR3oHY6DSwAAAMM"]
[Sat Jan 31 04:40:26.815708 2026] [:error] [pid 20210:tid 20227] [client 74.248.24.163:15825] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-p.php7"] [unique_id "aX0XOnKy7OGBlTY8MCeeqgAAAQ8"]
[Sat Jan 31 04:40:27.855299 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:8981] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-p.php7"] [unique_id "aX0XOxBW1k4JK8a4v0Y1ZQAAAFc"]
[Sat Jan 31 04:40:29.099359 2026] [:error] [pid 20836:tid 20852] [client 74.248.24.163:7322] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-p.php7"] [unique_id "aX0XPYACllgWRWVrYITETwAAAUs"]
[Sat Jan 31 04:40:30.074461 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:15830] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-p.php7"] [unique_id "aX0XPoACllgWRWVrYITEUgAAAUU"]
[Sat Jan 31 04:40:30.857964 2026] [:error] [pid 39244:tid 39332] [client 74.248.24.163:9638] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "aX0XPno-KRTvg3jHEDzEKwAAAJY"]
[Sat Jan 31 04:40:31.629733 2026] [:error] [pid 20210:tid 20222] [client 74.248.24.163:25241] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "aX0XP3Ky7OGBlTY8MCeerQAAAQo"]
[Sat Jan 31 04:40:32.333276 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:3919] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "aX0XQHKy7OGBlTY8MCeesAAAAQE"]
[Sat Jan 31 04:40:33.100546 2026] [:error] [pid 39339:tid 39359] [client 74.248.24.163:16374] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "aX0XQcWi-IjigR3oHY6DUAAAANI"]
[Sat Jan 31 04:40:33.907345 2026] [:error] [pid 39339:tid 39343] [client 74.248.24.163:46937] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aX0XQcWi-IjigR3oHY6DUwAAAMI"]
[Sat Jan 31 04:40:34.848708 2026] [:error] [pid 39242:tid 39257] [client 74.248.24.163:29103] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/repeater.php"] [unique_id "aX0XQtOgXnkKGGSSCINa7AAAAAM"]
[Sat Jan 31 04:40:36.782702 2026] [proxy_fcgi:error] [pid 20836:tid 20851] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:37.066664 2026] [proxy_fcgi:error] [pid 20836:tid 20844] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:37.857114 2026] [proxy_fcgi:error] [pid 20836:tid 20842] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:38.115916 2026] [proxy_fcgi:error] [pid 20836:tid 20857] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:38.734847 2026] [proxy_fcgi:error] [pid 20836:tid 20856] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:39.002614 2026] [proxy_fcgi:error] [pid 20836:tid 20841] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:39.262885 2026] [proxy_fcgi:error] [pid 20836:tid 20853] [client 74.248.24.163:30651] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:40:39.517929 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:30651] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint/ajax-actions.php"] [unique_id "aX0XR4ACllgWRWVrYITEZwAAAU4"]
[Sat Jan 31 04:40:40.535678 2026] [:error] [pid 20836:tid 20862] [client 74.248.24.163:14870] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint/ajax-actions.php"] [unique_id "aX0XSIACllgWRWVrYITEaAAAAVU"]
[Sat Jan 31 04:40:41.681408 2026] [:error] [pid 39244:tid 39312] [client 74.248.24.163:16343] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint/ajax-actions.php"] [unique_id "aX0XSXo-KRTvg3jHEDzERgAAAIM"]
[Sat Jan 31 04:40:42.561867 2026] [:error] [pid 39243:tid 39304] [client 74.248.24.163:3946] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint/ajax-actions.php"] [unique_id "aX0XShBW1k4JK8a4v0Y1iQAAAFY"]
[Sat Jan 31 04:40:43.893649 2026] [:error] [pid 39243:tid 39296] [client 74.248.24.163:31332] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aX0XSxBW1k4JK8a4v0Y1jwAAAE4"]
[Sat Jan 31 04:40:45.336437 2026] [:error] [pid 39242:tid 39273] [client 74.248.24.163:16124] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aX0XTdOgXnkKGGSSCINbGgAAABM"]
[Sat Jan 31 04:40:46.270829 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:10487] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aX0XToACllgWRWVrYITEdwAAAU4"]
[Sat Jan 31 04:40:47.401456 2026] [:error] [pid 20210:tid 20219] [client 74.248.24.163:9645] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aX0XT3Ky7OGBlTY8MCeezwAAAQc"]
[Sat Jan 31 04:40:48.372474 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:30594] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aX0XUMWi-IjigR3oHY6DgQAAAM8"]
[Sat Jan 31 04:40:49.686125 2026] [:error] [pid 39243:tid 39297] [client 74.248.24.163:14016] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aX0XURBW1k4JK8a4v0Y1nQAAAE8"]
[Sat Jan 31 04:40:50.476264 2026] [:error] [pid 39339:tid 39355] [client 74.248.24.163:12298] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aX0XUsWi-IjigR3oHY6DhAAAAM4"]
[Sat Jan 31 04:40:51.945537 2026] [:error] [pid 39244:tid 39318] [client 74.248.24.163:3960] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aX0XU3o-KRTvg3jHEDzEVwAAAIg"]
[Sat Jan 31 04:40:52.997786 2026] [:error] [pid 39243:tid 39302] [client 74.248.24.163:26360] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aX0XVBBW1k4JK8a4v0Y1ogAAAFQ"]
[Sat Jan 31 04:40:53.970456 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:15852] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aX0XVYACllgWRWVrYITEkQAAAUc"]
[Sat Jan 31 04:40:54.896589 2026] [:error] [pid 39244:tid 39333] [client 74.248.24.163:31299] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aX0XVno-KRTvg3jHEDzEcQAAAJc"]
[Sat Jan 31 04:40:55.998428 2026] [:error] [pid 20210:tid 20214] [client 74.248.24.163:47393] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aX0XV3Ky7OGBlTY8MCefAgAAAQI"]
[Sat Jan 31 04:40:56.861351 2026] [:error] [pid 39339:tid 39364] [client 74.248.24.163:26365] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php7"] [unique_id "aX0XWMWi-IjigR3oHY6DsQAAANc"]
[Sat Jan 31 04:40:57.795914 2026] [:error] [pid 39242:tid 39268] [client 74.248.24.163:28645] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php7"] [unique_id "aX0XWdOgXnkKGGSSCINbKwAAAA4"]
[Sat Jan 31 04:40:58.548640 2026] [:error] [pid 39243:tid 39306] [client 74.248.24.163:47053] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php7"] [unique_id "aX0XWhBW1k4JK8a4v0Y1zAAAAFg"]
[Sat Jan 31 04:40:59.469449 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:30819] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php7"] [unique_id "aX0XW4ACllgWRWVrYITE5QAAAUY"]
[Sat Jan 31 04:41:00.588715 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:14033] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aX0XXHo-KRTvg3jHEDzEmQAAAJQ"]
[Sat Jan 31 04:41:01.557974 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:30813] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aX0XXRBW1k4JK8a4v0Y1zQAAAFI"]
[Sat Jan 31 04:41:02.612729 2026] [:error] [pid 20210:tid 20230] [client 74.248.24.163:14019] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aX0XXnKy7OGBlTY8MCefEQAAARI"]
[Sat Jan 31 04:41:05.278525 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:15808] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aX0XYXKy7OGBlTY8MCefGQAAARc"]
[Sat Jan 31 04:41:06.091543 2026] [:error] [pid 20210:tid 20214] [client 74.248.24.163:47381] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php7"] [unique_id "aX0XYnKy7OGBlTY8MCefGgAAAQI"]
[Sat Jan 31 04:41:06.876537 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:12310] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php7"] [unique_id "aX0XYoACllgWRWVrYITFEAAAAU4"]
[Sat Jan 31 04:41:08.045902 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:3904] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php7"] [unique_id "aX0XZHo-KRTvg3jHEDzEuAAAAJQ"]
[Sat Jan 31 04:41:08.884635 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:26361] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/adminfuns.php7"] [unique_id "aX0XZNOgXnkKGGSSCINbPAAAAA0"]
[Sat Jan 31 04:41:09.706205 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:11693] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ebs.php7"] [unique_id "aX0XZXo-KRTvg3jHEDzEvAAAAIc"]
[Sat Jan 31 04:41:10.806075 2026] [:error] [pid 20210:tid 20228] [client 74.248.24.163:3950] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ebs.php7"] [unique_id "aX0XZnKy7OGBlTY8MCefIAAAARA"]
[Sat Jan 31 04:41:11.617517 2026] [:error] [pid 39339:tid 39354] [client 74.248.24.163:28617] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ebs.php7"] [unique_id "aX0XZ8Wi-IjigR3oHY6D7wAAAM0"]
[Sat Jan 31 04:41:12.336589 2026] [:error] [pid 39339:tid 39343] [client 74.248.24.163:10478] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ebs.php7"] [unique_id "aX0XaMWi-IjigR3oHY6D8AAAAMI"]
[Sat Jan 31 04:41:13.093702 2026] [:error] [pid 20210:tid 20219] [client 74.248.24.163:24639] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aX0XaXKy7OGBlTY8MCefJAAAAQc"]
[Sat Jan 31 04:41:13.877989 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:11682] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aX0XaYACllgWRWVrYITFFQAAAVA"]
[Sat Jan 31 04:41:14.757453 2026] [:error] [pid 20210:tid 20230] [client 74.248.24.163:3912] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aX0XanKy7OGBlTY8MCefKAAAARI"]
[Sat Jan 31 04:41:15.544456 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:15833] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php7"] [unique_id "aX0XaxBW1k4JK8a4v0Y13AAAAEs"]
[Sat Jan 31 04:41:16.463497 2026] [:error] [pid 39339:tid 39351] [client 74.248.24.163:3920] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew2.php7"] [unique_id "aX0XbMWi-IjigR3oHY6D8gAAAMo"]
[Sat Jan 31 04:41:17.200286 2026] [:error] [pid 20210:tid 20232] [client 74.248.24.163:26354] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew2.php7"] [unique_id "aX0XbXKy7OGBlTY8MCefMAAAARQ"]
[Sat Jan 31 04:41:18.188564 2026] [:error] [pid 39339:tid 39350] [client 74.248.24.163:31674] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew2.php7"] [unique_id "aX0XbsWi-IjigR3oHY6D9AAAAMk"]
[Sat Jan 31 04:41:18.861531 2026] [:error] [pid 20210:tid 20227] [client 74.248.24.163:31317] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew2.php7"] [unique_id "aX0XbnKy7OGBlTY8MCefMgAAAQ8"]
[Sat Jan 31 04:41:19.555148 2026] [:error] [pid 20836:tid 20863] [client 74.248.24.163:10460] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex2.php7"] [unique_id "aX0Xb4ACllgWRWVrYITFJAAAAVY"]
[Sat Jan 31 04:41:20.397751 2026] [:error] [pid 39244:tid 39331] [client 74.248.24.163:47372] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex2.php7"] [unique_id "aX0XcHo-KRTvg3jHEDzEyAAAAJU"]
[Sat Jan 31 04:41:21.062784 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:12329] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex2.php7"] [unique_id "aX0XcYACllgWRWVrYITFJgAAAUc"]
[Sat Jan 31 04:41:21.819975 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:47364] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex2.php7"] [unique_id "aX0XccWi-IjigR3oHY6D9wAAAMQ"]
[Sat Jan 31 04:41:22.612816 2026] [:error] [pid 39243:tid 39290] [client 74.248.24.163:24626] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aX0XchBW1k4JK8a4v0Y16gAAAEg"]
[Sat Jan 31 04:41:23.465781 2026] [:error] [pid 39242:tid 39257] [client 74.248.24.163:15838] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aX0Xc9OgXnkKGGSSCINbUAAAAAM"]
[Sat Jan 31 04:41:24.303692 2026] [:error] [pid 20210:tid 20234] [client 74.248.24.163:47150] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aX0XdHKy7OGBlTY8MCefOgAAARY"]
[Sat Jan 31 04:41:25.140067 2026] [:error] [pid 39244:tid 39320] [client 74.248.24.163:3908] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aX0XdXo-KRTvg3jHEDzEzgAAAIo"]
[Sat Jan 31 04:41:26.119767 2026] [:error] [pid 20836:tid 20849] [client 74.248.24.163:11706] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aX0XdoACllgWRWVrYITFLAAAAUg"]
[Sat Jan 31 04:41:27.073566 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:10436] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aX0Xd4ACllgWRWVrYITFMAAAAUU"]
[Sat Jan 31 04:41:28.322822 2026] [:error] [pid 39339:tid 39362] [client 74.248.24.163:30817] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aX0XeMWi-IjigR3oHY6EAQAAANU"]
[Sat Jan 31 04:41:29.225663 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:10492] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aX0XeYACllgWRWVrYITFNAAAAUI"]
[Sat Jan 31 04:41:30.527936 2026] [:error] [pid 39244:tid 39333] [client 74.248.24.163:47080] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aX0Xeno-KRTvg3jHEDzE1QAAAJc"]
[Sat Jan 31 04:41:31.477913 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:10488] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aX0XexBW1k4JK8a4v0Y1-gAAAFI"]
[Sat Jan 31 04:41:32.423725 2026] [:error] [pid 39243:tid 39304] [client 74.248.24.163:24628] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aX0XfBBW1k4JK8a4v0Y2AAAAAFY"]
[Sat Jan 31 04:41:33.539901 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:28059] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aX0XfdOgXnkKGGSSCINbWQAAAAU"]
[Sat Jan 31 04:41:34.704675 2026] [:error] [pid 39242:tid 39258] [client 74.248.24.163:24576] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX0XftOgXnkKGGSSCINbXAAAAAQ"]
[Sat Jan 31 04:41:35.778641 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:47413] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX0Xf3Ky7OGBlTY8MCefVAAAARc"]
[Sat Jan 31 04:41:37.011691 2026] [:error] [pid 39339:tid 39362] [client 74.248.24.163:15853] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX0XgcWi-IjigR3oHY6EDwAAANU"]
[Sat Jan 31 04:41:37.922619 2026] [:error] [pid 39339:tid 39353] [client 74.248.24.163:31319] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX0XgcWi-IjigR3oHY6EEgAAAMw"]
[Sat Jan 31 04:41:38.793423 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:30833] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "aX0XgnKy7OGBlTY8MCefWgAAARM"]
[Sat Jan 31 04:41:39.827868 2026] [proxy_fcgi:error] [pid 39244:tid 39326] [client 74.248.24.163:26314] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:41:40.346016 2026] [proxy_fcgi:error] [pid 39244:tid 39314] [client 74.248.24.163:26314] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:41:43.048834 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:26314] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/xmrlpc.php"] [unique_id "aX0Xh3o-KRTvg3jHEDzE9gAAAJE"]
[Sat Jan 31 04:41:43.988155 2026] [:error] [pid 20210:tid 20236] [client 74.248.24.163:26366] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/xmrlpc.php"] [unique_id "aX0Xh3Ky7OGBlTY8MCefYgAAARg"]
[Sat Jan 31 04:41:44.839986 2026] [:error] [pid 39244:tid 39314] [client 74.248.24.163:28039] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/xmrlpc.php"] [unique_id "aX0XiHo-KRTvg3jHEDzE-QAAAIU"]
[Sat Jan 31 04:41:45.775439 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:28630] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/xmrlpc.php"] [unique_id "aX0XicWi-IjigR3oHY6EGgAAANM"]
[Sat Jan 31 04:41:46.548479 2026] [:error] [pid 20210:tid 20212] [client 74.248.24.163:28649] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aX0XinKy7OGBlTY8MCefZQAAAQA"]
[Sat Jan 31 04:41:47.224059 2026] [:error] [pid 39244:tid 39316] [client 74.248.24.163:12292] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aX0Xi3o-KRTvg3jHEDzE_QAAAIY"]
[Sat Jan 31 04:41:47.940295 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:31348] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aX0Xi9OgXnkKGGSSCINbZwAAABA"]
[Sat Jan 31 04:41:48.581340 2026] [:error] [pid 20836:tid 20844] [client 74.248.24.163:47097] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aX0XjIACllgWRWVrYITFSQAAAUM"]
[Sat Jan 31 04:41:49.395538 2026] [:error] [pid 39339:tid 39351] [client 74.248.24.163:11668] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aX0XjcWi-IjigR3oHY6ELwAAAMo"]
[Sat Jan 31 04:41:50.338228 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:26322] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aX0XjoACllgWRWVrYITFTQAAAVg"]
[Sat Jan 31 04:41:51.686344 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:28042] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aX0Xj3o-KRTvg3jHEDzFAwAAAJE"]
[Sat Jan 31 04:41:52.584433 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:47094] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aX0XkNOgXnkKGGSSCINbbgAAAA0"]
[Sat Jan 31 04:41:53.420540 2026] [:error] [pid 39244:tid 39320] [client 74.248.24.163:31353] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/xmrlpc.php"] [unique_id "aX0XkXo-KRTvg3jHEDzFBgAAAIo"]
[Sat Jan 31 04:41:54.380676 2026] [:error] [pid 39339:tid 39359] [client 74.248.24.163:31306] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/xmrlpc.php"] [unique_id "aX0XksWi-IjigR3oHY6EOQAAANI"]
[Sat Jan 31 04:41:55.491368 2026] [:error] [pid 20210:tid 20234] [client 74.248.24.163:26331] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/xmrlpc.php"] [unique_id "aX0Xk3Ky7OGBlTY8MCefagAAARY"]
[Sat Jan 31 04:41:56.411997 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:9512] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/xmrlpc.php"] [unique_id "aX0XlHKy7OGBlTY8MCefbAAAAQw"]
[Sat Jan 31 04:41:57.382041 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:10462] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aX0XlYACllgWRWVrYITFVwAAAU4"]
[Sat Jan 31 04:41:58.276343 2026] [:error] [pid 39339:tid 39342] [client 74.248.24.163:47091] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aX0XlsWi-IjigR3oHY6EQgAAAME"]
[Sat Jan 31 04:41:59.377343 2026] [:error] [pid 39339:tid 39349] [client 74.248.24.163:47385] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aX0Xl8Wi-IjigR3oHY6ESAAAAMg"]
[Sat Jan 31 04:42:00.474443 2026] [:error] [pid 39243:tid 39285] [client 74.248.24.163:31331] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aX0XmBBW1k4JK8a4v0Y2MQAAAEM"]
[Sat Jan 31 04:42:01.562373 2026] [:error] [pid 20210:tid 20218] [client 74.248.24.163:28074] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aX0XmXKy7OGBlTY8MCefmQAAAQY"]
[Sat Jan 31 04:42:02.789680 2026] [:error] [pid 39339:tid 39347] [client 74.248.24.163:26363] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aX0XmsWi-IjigR3oHY6ETwAAAMY"]
[Sat Jan 31 04:42:03.668024 2026] [:error] [pid 20210:tid 20225] [client 74.248.24.163:26364] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aX0Xm3Ky7OGBlTY8MCefmwAAAQ0"]
[Sat Jan 31 04:42:04.640905 2026] [:error] [pid 20210:tid 20230] [client 74.248.24.163:28636] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/makeasmtp.php"] [unique_id "aX0XnHKy7OGBlTY8MCefngAAARI"]
[Sat Jan 31 04:42:05.400939 2026] [:error] [pid 39244:tid 39322] [client 74.248.24.163:26352] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/admin.php"] [unique_id "aX0XnXo-KRTvg3jHEDzFDwAAAIw"]
[Sat Jan 31 04:42:06.074319 2026] [:error] [pid 20210:tid 20222] [client 74.248.24.163:24606] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/admin.php"] [unique_id "aX0XnnKy7OGBlTY8MCefoAAAAQo"]
[Sat Jan 31 04:42:06.915955 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:47151] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/admin.php"] [unique_id "aX0Xnno-KRTvg3jHEDzFEwAAAJE"]
[Sat Jan 31 04:42:07.765454 2026] [:error] [pid 39243:tid 39296] [client 74.248.24.163:31310] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/admin.php"] [unique_id "aX0XnxBW1k4JK8a4v0Y2NgAAAE4"]
[Sat Jan 31 04:42:08.881441 2026] [:error] [pid 39242:tid 39277] [client 74.248.24.163:11661] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aX0XoNOgXnkKGGSSCINbewAAABc"]
[Sat Jan 31 04:42:09.799498 2026] [:error] [pid 39243:tid 39304] [client 74.248.24.163:9487] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aX0XoRBW1k4JK8a4v0Y2OwAAAFY"]
[Sat Jan 31 04:42:10.887418 2026] [:error] [pid 39242:tid 39255] [client 74.248.24.163:10447] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aX0XotOgXnkKGGSSCINbfgAAAAE"]
[Sat Jan 31 04:42:11.705379 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:24636] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aX0Xo4ACllgWRWVrYITFdQAAAUI"]
[Sat Jan 31 04:42:12.463541 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:12295] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aX0XpBBW1k4JK8a4v0Y2QAAAAFc"]
[Sat Jan 31 04:42:13.199024 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:10468] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aX0XpcWi-IjigR3oHY6EXQAAAM8"]
[Sat Jan 31 04:42:14.128310 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:47399] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aX0XphBW1k4JK8a4v0Y2RAAAAEs"]
[Sat Jan 31 04:42:15.379384 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:31312] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aX0Xp3Ky7OGBlTY8MCefqAAAARc"]
[Sat Jan 31 04:42:16.276042 2026] [:error] [pid 39244:tid 39319] [client 74.248.24.163:26323] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aX0XqHo-KRTvg3jHEDzFHQAAAIk"]
[Sat Jan 31 04:42:17.134511 2026] [:error] [pid 39244:tid 39325] [client 74.248.24.163:30815] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aX0XqXo-KRTvg3jHEDzFJQAAAI8"]
[Sat Jan 31 04:42:18.148627 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:12336] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aX0Xqno-KRTvg3jHEDzFKgAAAIc"]
[Sat Jan 31 04:42:19.127003 2026] [:error] [pid 39339:tid 39354] [client 74.248.24.163:47128] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aX0Xq8Wi-IjigR3oHY6EZgAAAM0"]
[Sat Jan 31 04:42:20.294985 2026] [:error] [pid 20836:tid 20853] [client 74.248.24.163:11709] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/doc.php"] [unique_id "aX0XrIACllgWRWVrYITFhgAAAUw"]
[Sat Jan 31 04:42:21.063087 2026] [:error] [pid 39244:tid 39328] [client 74.248.24.163:11662] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/doc.php"] [unique_id "aX0XrXo-KRTvg3jHEDzFMQAAAJI"]
[Sat Jan 31 04:42:22.030993 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:9529] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/doc.php"] [unique_id "aX0XroACllgWRWVrYITFkgAAAUY"]
[Sat Jan 31 04:42:22.847761 2026] [:error] [pid 20210:tid 20233] [client 74.248.24.163:31356] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/doc.php"] [unique_id "aX0XrnKy7OGBlTY8MCefuQAAARU"]
[Sat Jan 31 04:42:24.090089 2026] [:error] [pid 20836:tid 20861] [client 74.248.24.163:27999] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aX0XsIACllgWRWVrYITFmAAAAVQ"]
[Sat Jan 31 04:42:25.003473 2026] [:error] [pid 39242:tid 39268] [client 74.248.24.163:9525] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aX0XsdOgXnkKGGSSCINbigAAAA4"]
[Sat Jan 31 04:42:25.803674 2026] [:error] [pid 39242:tid 39265] [client 74.248.24.163:30798] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aX0XsdOgXnkKGGSSCINbjQAAAAs"]
[Sat Jan 31 04:42:26.689884 2026] [:error] [pid 39244:tid 39324] [client 74.248.24.163:10479] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aX0Xsno-KRTvg3jHEDzFNQAAAI4"]
[Sat Jan 31 04:42:27.662334 2026] [:error] [pid 39339:tid 39342] [client 74.248.24.163:28029] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/file.php"] [unique_id "aX0Xs8Wi-IjigR3oHY6EbwAAAME"]
[Sat Jan 31 04:42:28.382642 2026] [:error] [pid 39244:tid 39309] [client 74.248.24.163:9654] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/file.php"] [unique_id "aX0XtHo-KRTvg3jHEDzFNgAAAIA"]
[Sat Jan 31 04:42:29.224128 2026] [:error] [pid 39243:tid 39304] [client 74.248.24.163:27986] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/file.php"] [unique_id "aX0XtRBW1k4JK8a4v0Y2WQAAAFY"]
[Sat Jan 31 04:42:30.151359 2026] [:error] [pid 39243:tid 39298] [client 74.248.24.163:30801] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/file.php"] [unique_id "aX0XthBW1k4JK8a4v0Y2XQAAAFA"]
[Sat Jan 31 04:42:31.018774 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:24637] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/themes.php"] [unique_id "aX0Xt3o-KRTvg3jHEDzFOgAAAI0"]
[Sat Jan 31 04:42:31.840901 2026] [:error] [pid 20836:tid 20844] [client 74.248.24.163:47418] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/themes.php"] [unique_id "aX0Xt4ACllgWRWVrYITFpQAAAUM"]
[Sat Jan 31 04:42:32.572443 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:10444] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/themes.php"] [unique_id "aX0XuNOgXnkKGGSSCINblQAAAAY"]
[Sat Jan 31 04:42:33.339290 2026] [:error] [pid 20836:tid 20845] [client 74.248.24.163:24598] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/themes.php"] [unique_id "aX0XuYACllgWRWVrYITFqAAAAUQ"]
[Sat Jan 31 04:42:34.293951 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:9484] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aX0Xuno-KRTvg3jHEDzFPgAAAJQ"]
[Sat Jan 31 04:42:35.317718 2026] [:error] [pid 39339:tid 39364] [client 74.248.24.163:47396] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aX0Xu8Wi-IjigR3oHY6EdAAAANc"]
[Sat Jan 31 04:42:36.215265 2026] [:error] [pid 39244:tid 39331] [client 74.248.24.163:28009] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aX0XvHo-KRTvg3jHEDzFQgAAAJU"]
[Sat Jan 31 04:42:36.807658 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:24636] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aX0XvIACllgWRWVrYITFrgAAAUI"]
[Sat Jan 31 04:42:37.684365 2026] [:error] [pid 20210:tid 20212] [client 74.248.24.163:47376] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.wp-cli/wp-login.php"] [unique_id "aX0XvXKy7OGBlTY8MCefzwAAAQA"]
[Sat Jan 31 04:42:38.552387 2026] [:error] [pid 39242:tid 39266] [client 74.248.24.163:9479] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.wp-cli/wp-login.php"] [unique_id "aX0XvtOgXnkKGGSSCINbmAAAAAw"]
[Sat Jan 31 04:42:39.656521 2026] [:error] [pid 20210:tid 20223] [client 74.248.24.163:28072] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.wp-cli/wp-login.php"] [unique_id "aX0Xv3Ky7OGBlTY8MCef0wAAAQs"]
[Sat Jan 31 04:42:40.545291 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:12342] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.wp-cli/wp-login.php"] [unique_id "aX0XwIACllgWRWVrYITFzwAAAUU"]
[Sat Jan 31 04:42:41.380742 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:9478] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aX0XwdOgXnkKGGSSCINbmgAAABU"]
[Sat Jan 31 04:42:42.490741 2026] [proxy_fcgi:error] [pid 20836:tid 20856] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:42.760657 2026] [proxy_fcgi:error] [pid 20836:tid 20852] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:43.017952 2026] [proxy_fcgi:error] [pid 20836:tid 20858] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:43.278711 2026] [proxy_fcgi:error] [pid 20836:tid 20859] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:43.604507 2026] [proxy_fcgi:error] [pid 20836:tid 20864] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:43.863309 2026] [proxy_fcgi:error] [pid 20836:tid 20855] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:44.704563 2026] [proxy_fcgi:error] [pid 20836:tid 20856] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:44.980591 2026] [proxy_fcgi:error] [pid 20836:tid 20842] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:45.240842 2026] [proxy_fcgi:error] [pid 20836:tid 20850] [client 74.248.24.163:28067] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:42:45.622797 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:28067] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aX0XxYACllgWRWVrYITF7QAAAVE"]
[Sat Jan 31 04:42:46.681100 2026] [:error] [pid 39243:tid 39306] [client 74.248.24.163:10438] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aX0XxhBW1k4JK8a4v0Y2rAAAAFg"]
[Sat Jan 31 04:42:47.447742 2026] [:error] [pid 39242:tid 39256] [client 74.248.24.163:27995] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aX0Xx9OgXnkKGGSSCINbpwAAAAI"]
[Sat Jan 31 04:42:48.637473 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:47141] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/content.php"] [unique_id "aX0XyHo-KRTvg3jHEDzFSAAAAIc"]
[Sat Jan 31 04:42:49.586919 2026] [:error] [pid 20210:tid 20217] [client 74.248.24.163:24608] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/contents.php/lv.php"] [unique_id "aX0XyXKy7OGBlTY8MCef3gAAAQU"]
[Sat Jan 31 04:42:50.441662 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:27998] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/contents.php/lv.php"] [unique_id "aX0XyoACllgWRWVrYITF9QAAAUY"]
[Sat Jan 31 04:42:51.512099 2026] [:error] [pid 39339:tid 39359] [client 74.248.24.163:30845] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/contents.php/lv.php"] [unique_id "aX0Xy8Wi-IjigR3oHY6E3QAAANI"]
[Sat Jan 31 04:42:52.248588 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:9527] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/contents.php/lv.php"] [unique_id "aX0XzBBW1k4JK8a4v0Y2tAAAAEY"]
[Sat Jan 31 04:42:53.258448 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:28015] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/admin.php"] [unique_id "aX0XzdOgXnkKGGSSCINbrgAAABA"]
[Sat Jan 31 04:42:54.027382 2026] [:error] [pid 39339:tid 39352] [client 74.248.24.163:12290] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/admin.php"] [unique_id "aX0XzsWi-IjigR3oHY6E4AAAAMs"]
[Sat Jan 31 04:42:54.992827 2026] [:error] [pid 39242:tid 39273] [client 74.248.24.163:10439] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/admin.php"] [unique_id "aX0XztOgXnkKGGSSCINbsAAAABM"]
[Sat Jan 31 04:42:55.947573 2026] [:error] [pid 20836:tid 20861] [client 74.248.24.163:24590] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/admin.php"] [unique_id "aX0Xz4ACllgWRWVrYITF_gAAAVQ"]
[Sat Jan 31 04:42:57.123581 2026] [:error] [pid 20210:tid 20216] [client 74.248.24.163:28625] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/daddy.php"] [unique_id "aX0X0XKy7OGBlTY8MCef5AAAAQQ"]
[Sat Jan 31 04:42:58.193418 2026] [:error] [pid 39243:tid 39297] [client 74.248.24.163:31359] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/daddy.php"] [unique_id "aX0X0hBW1k4JK8a4v0Y2uQAAAE8"]
[Sat Jan 31 04:42:58.978471 2026] [:error] [pid 39244:tid 39313] [client 74.248.24.163:3843] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/daddy.php"] [unique_id "aX0X0no-KRTvg3jHEDzFVAAAAIQ"]
[Sat Jan 31 04:42:59.981980 2026] [:error] [pid 39244:tid 39332] [client 74.248.24.163:47112] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/daddy.php"] [unique_id "aX0X03o-KRTvg3jHEDzFVgAAAJY"]
[Sat Jan 31 04:43:01.839691 2026] [:error] [pid 39242:tid 39274] [client 74.248.24.163:24589] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aX0X1dOgXnkKGGSSCINbuAAAABQ"]
[Sat Jan 31 04:43:02.885792 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:9523] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aX0X1no-KRTvg3jHEDzFWAAAAJM"]
[Sat Jan 31 04:43:04.212447 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:47155] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aX0X2BBW1k4JK8a4v0Y2wgAAAE0"]
[Sat Jan 31 04:43:05.162186 2026] [:error] [pid 39244:tid 39326] [client 74.248.24.163:12297] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/doc.php"] [unique_id "aX0X2Xo-KRTvg3jHEDzFWwAAAJA"]
[Sat Jan 31 04:43:09.036941 2026] [:error] [pid 20210:tid 20216] [client 74.248.24.163:10434] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aX0X3XKy7OGBlTY8MCef8wAAAQQ"]
[Sat Jan 31 04:43:10.609469 2026] [:error] [pid 39339:tid 39349] [client 74.248.24.163:47366] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aX0X3sWi-IjigR3oHY6E8QAAAMg"]
[Sat Jan 31 04:43:12.752190 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:28082] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aX0X4Ho-KRTvg3jHEDzFYwAAAJQ"]
[Sat Jan 31 04:43:16.742694 2026] [:error] [pid 20836:tid 20861] [client 74.248.24.163:31303] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ee.php"] [unique_id "aX0X5IACllgWRWVrYITGLgAAAVQ"]
[Sat Jan 31 04:43:22.036730 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:12318] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/erin1.PhP7"] [unique_id "aX0X6no-KRTvg3jHEDzFcAAAAIE"]
[Sat Jan 31 04:43:25.307455 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:27980] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/erin1.PhP7"] [unique_id "aX0X7Xo-KRTvg3jHEDzFdAAAAIs"]
[Sat Jan 31 04:43:30.252321 2026] [:error] [pid 39243:tid 39303] [client 74.248.24.163:31308] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/erin1.PhP7"] [unique_id "aX0X8hBW1k4JK8a4v0Y26gAAAFU"]
[Sat Jan 31 04:43:33.038698 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:47079] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/erin1.PhP7"] [unique_id "aX0X9dOgXnkKGGSSCINb0gAAAAc"]
[Sat Jan 31 04:43:35.996120 2026] [:error] [pid 39339:tid 39357] [client 74.248.24.163:7326] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fosil.php"] [unique_id "aX0X98Wi-IjigR3oHY6FFwAAANA"]
[Sat Jan 31 04:43:39.324805 2026] [:error] [pid 20836:tid 20863] [client 74.248.24.163:31549] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fosil.php"] [unique_id "aX0X-4ACllgWRWVrYITGXwAAAVY"]
[Sat Jan 31 04:43:45.690118 2026] [proxy_fcgi:error] [pid 20210:tid 20219] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:46.266889 2026] [proxy_fcgi:error] [pid 20210:tid 20224] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:46.525536 2026] [proxy_fcgi:error] [pid 20210:tid 20226] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:46.784064 2026] [proxy_fcgi:error] [pid 20210:tid 20230] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:47.303234 2026] [proxy_fcgi:error] [pid 20210:tid 20221] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:47.564809 2026] [proxy_fcgi:error] [pid 20210:tid 20222] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:47.822585 2026] [proxy_fcgi:error] [pid 20210:tid 20231] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:49.757565 2026] [proxy_fcgi:error] [pid 20210:tid 20219] [client 74.248.24.163:15670] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:43:50.012658 2026] [:error] [pid 20210:tid 20214] [client 74.248.24.163:15670] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aX0YBnKy7OGBlTY8MCegRgAAAQI"]
[Sat Jan 31 04:43:52.816834 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:7493] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aX0YCNOgXnkKGGSSCINb4wAAAAU"]
[Sat Jan 31 04:43:54.253122 2026] [:error] [pid 39243:tid 39298] [client 74.248.24.163:13912] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aX0YChBW1k4JK8a4v0Y3DgAAAFA"]
[Sat Jan 31 04:43:55.853415 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:14160] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aX0YC9OgXnkKGGSSCINb5QAAABI"]
[Sat Jan 31 04:43:58.027705 2026] [:error] [pid 20210:tid 20222] [client 74.248.24.163:30043] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aX0YDnKy7OGBlTY8MCegUgAAAQo"]
[Sat Jan 31 04:43:59.461787 2026] [:error] [pid 20210:tid 20219] [client 74.248.24.163:28701] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aX0YD3Ky7OGBlTY8MCegVAAAAQc"]
[Sat Jan 31 04:44:00.630752 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:23476] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aX0YEIACllgWRWVrYITGjAAAAU0"]
[Sat Jan 31 04:44:02.902616 2026] [:error] [pid 39339:tid 39355] [client 74.248.24.163:28930] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/main.php"] [unique_id "aX0YEsWi-IjigR3oHY6FNgAAAM4"]
[Sat Jan 31 04:44:03.698985 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:26247] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aX0YE9OgXnkKGGSSCINb6QAAAA0"]
[Sat Jan 31 04:44:04.540957 2026] [:error] [pid 39242:tid 39278] [client 74.248.24.163:17413] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aX0YFNOgXnkKGGSSCINb6gAAABg"]
[Sat Jan 31 04:44:05.561535 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:30569] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aX0YFXKy7OGBlTY8MCegWgAAAQg"]
[Sat Jan 31 04:44:06.541969 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:16283] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mar.php"] [unique_id "aX0YFtOgXnkKGGSSCINb7gAAAAY"]
[Sat Jan 31 04:44:07.659757 2026] [:error] [pid 20210:tid 20229] [client 74.248.24.163:3287] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aX0YF3Ky7OGBlTY8MCegXQAAARE"]
[Sat Jan 31 04:44:08.807706 2026] [:error] [pid 20210:tid 20215] [client 74.248.24.163:15048] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aX0YGHKy7OGBlTY8MCegXwAAAQM"]
[Sat Jan 31 04:44:09.839621 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:29623] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aX0YGYACllgWRWVrYITGpwAAAUY"]
[Sat Jan 31 04:44:11.119168 2026] [:error] [pid 20210:tid 20233] [client 74.248.24.163:26414] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/menu.php"] [unique_id "aX0YG3Ky7OGBlTY8MCegZwAAARU"]
[Sat Jan 31 04:44:11.928164 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:26286] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aX0YG3Ky7OGBlTY8MCegagAAAQE"]
[Sat Jan 31 04:44:12.769399 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:29615] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aX0YHIACllgWRWVrYITGqgAAAUk"]
[Sat Jan 31 04:44:13.960885 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:29445] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aX0YHXKy7OGBlTY8MCegbQAAARM"]
[Sat Jan 31 04:44:14.793859 2026] [:error] [pid 39244:tid 39328] [client 74.248.24.163:26302] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.php"] [unique_id "aX0YHno-KRTvg3jHEDzFxAAAAJI"]
[Sat Jan 31 04:44:15.787820 2026] [:error] [pid 20836:tid 20842] [client 74.248.24.163:30033] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aX0YH4ACllgWRWVrYITGsAAAAUE"]
[Sat Jan 31 04:44:16.653166 2026] [:error] [pid 39339:tid 39342] [client 74.248.24.163:26431] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aX0YIMWi-IjigR3oHY6FPwAAAME"]
[Sat Jan 31 04:44:17.881325 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:7950] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aX0YIXKy7OGBlTY8MCegdgAAAQE"]
[Sat Jan 31 04:44:18.567753 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:29502] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aX0YIsWi-IjigR3oHY6FUQAAANM"]
[Sat Jan 31 04:44:19.272360 2026] [:error] [pid 39242:tid 39266] [client 74.248.24.163:4051] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aX0YI9OgXnkKGGSSCINb_gAAAAw"]
[Sat Jan 31 04:44:20.186765 2026] [:error] [pid 39243:tid 39294] [client 74.248.24.163:3792] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aX0YJBBW1k4JK8a4v0Y3NwAAAEw"]
[Sat Jan 31 04:44:21.248597 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:47334] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aX0YJcWi-IjigR3oHY6FaAAAAMQ"]
[Sat Jan 31 04:44:21.956366 2026] [:error] [pid 39242:tid 39265] [client 74.248.24.163:27647] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/options.php"] [unique_id "aX0YJdOgXnkKGGSSCINcBAAAAAs"]
[Sat Jan 31 04:44:23.133796 2026] [:error] [pid 39242:tid 39276] [client 74.248.24.163:30703] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins.php"] [unique_id "aX0YJ9OgXnkKGGSSCINcBgAAABY"]
[Sat Jan 31 04:44:24.018646 2026] [:error] [pid 39242:tid 39254] [client 74.248.24.163:10733] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins.php"] [unique_id "aX0YKNOgXnkKGGSSCINcCAAAAAA"]
[Sat Jan 31 04:44:24.838652 2026] [:error] [pid 20836:tid 20860] [client 74.248.24.163:47592] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins.php"] [unique_id "aX0YKIACllgWRWVrYITGwgAAAVM"]
[Sat Jan 31 04:44:25.679717 2026] [:error] [pid 39242:tid 39262] [client 74.248.24.163:15807] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins.php"] [unique_id "aX0YKdOgXnkKGGSSCINcCgAAAAg"]
[Sat Jan 31 04:44:26.605274 2026] [:error] [pid 39339:tid 39365] [client 74.248.24.163:14129] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aX0YKsWi-IjigR3oHY6FbwAAANg"]
[Sat Jan 31 04:44:27.802414 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:30327] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aX0YKxBW1k4JK8a4v0Y3PQAAAEY"]
[Sat Jan 31 04:44:28.797437 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:16217] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aX0YLIACllgWRWVrYITGywAAAUk"]
[Sat Jan 31 04:44:29.640652 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:3819] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aX0YLRBW1k4JK8a4v0Y3QwAAAEs"]
[Sat Jan 31 04:44:30.943254 2026] [:error] [pid 39242:tid 39269] [client 74.248.24.163:28919] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pylSE9O2gWV.php"] [unique_id "aX0YLtOgXnkKGGSSCINcGgAAAA8"]
[Sat Jan 31 04:44:31.806944 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:27627] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pylSE9O2gWV.php"] [unique_id "aX0YL3o-KRTvg3jHEDzF7AAAAII"]
[Sat Jan 31 04:44:32.683448 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:27634] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pylSE9O2gWV.php"] [unique_id "aX0YMNOgXnkKGGSSCINcIAAAAAc"]
[Sat Jan 31 04:44:33.539254 2026] [:error] [pid 39339:tid 39347] [client 74.248.24.163:28270] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/pylSE9O2gWV.php"] [unique_id "aX0YMcWi-IjigR3oHY6FcwAAAMY"]
[Sat Jan 31 04:44:34.752349 2026] [:error] [pid 20210:tid 20229] [client 74.248.24.163:31784] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aX0YMnKy7OGBlTY8MCegjAAAARE"]
[Sat Jan 31 04:44:35.816680 2026] [:error] [pid 39339:tid 39350] [client 74.248.24.163:10727] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aX0YM8Wi-IjigR3oHY6FdgAAAMk"]
[Sat Jan 31 04:44:36.648471 2026] [:error] [pid 20836:tid 20863] [client 74.248.24.163:31754] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aX0YNIACllgWRWVrYITG0wAAAVY"]
[Sat Jan 31 04:44:37.387499 2026] [:error] [pid 39242:tid 39276] [client 74.248.24.163:30419] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aX0YNdOgXnkKGGSSCINcJQAAABY"]
[Sat Jan 31 04:44:38.170921 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:47591] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aX0YNoACllgWRWVrYITG1wAAAUk"]
[Sat Jan 31 04:44:39.026677 2026] [:error] [pid 39242:tid 39271] [client 74.248.24.163:30320] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aX0YN9OgXnkKGGSSCINcJgAAABE"]
[Sat Jan 31 04:44:39.936614 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:29378] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aX0YN4ACllgWRWVrYITG3QAAAU4"]
[Sat Jan 31 04:44:40.831117 2026] [:error] [pid 20210:tid 20226] [client 74.248.24.163:4075] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/randkeyword.php"] [unique_id "aX0YOHKy7OGBlTY8MCegkgAAAQ4"]
[Sat Jan 31 04:44:41.604547 2026] [:error] [pid 39242:tid 39265] [client 74.248.24.163:45005] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/search/label/PHP-Shells"] [unique_id "aX0YOdOgXnkKGGSSCINcLAAAAAs"]
[Sat Jan 31 04:44:42.388782 2026] [:error] [pid 20210:tid 20234] [client 74.248.24.163:10723] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/search/label/PHP-Shells"] [unique_id "aX0YOnKy7OGBlTY8MCeglgAAARY"]
[Sat Jan 31 04:44:43.273959 2026] [:error] [pid 39242:tid 39258] [client 74.248.24.163:29270] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/search/label/PHP-Shells"] [unique_id "aX0YO9OgXnkKGGSSCINcLwAAAAQ"]
[Sat Jan 31 04:44:44.164825 2026] [:error] [pid 39242:tid 39264] [client 74.248.24.163:16255] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/search/label/PHP-Shells"] [unique_id "aX0YPNOgXnkKGGSSCINcMQAAAAo"]
[Sat Jan 31 04:44:44.836319 2026] [:error] [pid 39242:tid 39256] [client 74.248.24.163:14140] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aX0YPNOgXnkKGGSSCINcMgAAAAI"]
[Sat Jan 31 04:44:45.739754 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:47305] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aX0YPXKy7OGBlTY8MCegnAAAARM"]
[Sat Jan 31 04:44:47.024472 2026] [:error] [pid 39339:tid 39357] [client 74.248.24.163:30525] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aX0YP8Wi-IjigR3oHY6FiwAAANA"]
[Sat Jan 31 04:44:47.858192 2026] [:error] [pid 39339:tid 39365] [client 74.248.24.163:8784] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211028.php"] [unique_id "aX0YP8Wi-IjigR3oHY6FjQAAANg"]
[Sat Jan 31 04:44:48.887613 2026] [:error] [pid 39244:tid 39313] [client 74.248.24.163:29676] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwso.php"] [unique_id "aX0YQHo-KRTvg3jHEDzF-gAAAIQ"]
[Sat Jan 31 04:44:49.990220 2026] [proxy_fcgi:error] [pid 20210:tid 20234] [client 74.248.24.163:29426] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:50.246501 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:29426] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aX0YQnKy7OGBlTY8MCegpAAAAQg"]
[Sat Jan 31 04:44:51.411712 2026] [proxy_fcgi:error] [pid 39243:tid 39285] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:51.670431 2026] [proxy_fcgi:error] [pid 39243:tid 39298] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:51.968461 2026] [proxy_fcgi:error] [pid 39243:tid 39300] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:52.257201 2026] [proxy_fcgi:error] [pid 39243:tid 39283] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:52.600964 2026] [proxy_fcgi:error] [pid 39243:tid 39284] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:53.125086 2026] [proxy_fcgi:error] [pid 39243:tid 39306] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:53.386646 2026] [proxy_fcgi:error] [pid 39243:tid 39297] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:53.917304 2026] [proxy_fcgi:error] [pid 39243:tid 39301] [client 74.248.24.163:14290] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:44:54.173207 2026] [:error] [pid 39243:tid 39287] [client 74.248.24.163:14290] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aX0YRhBW1k4JK8a4v0Y3bAAAAEU"]
[Sat Jan 31 04:44:54.837530 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:14280] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aX0YRnKy7OGBlTY8MCegrwAAARc"]
[Sat Jan 31 04:44:55.575345 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:47579] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aX0YR8Wi-IjigR3oHY6FmwAAAMQ"]
[Sat Jan 31 04:44:56.753268 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:15739] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-activate.php"] [unique_id "aX0YSNOgXnkKGGSSCINcPQAAABU"]
[Sat Jan 31 04:44:57.464669 2026] [:error] [pid 39339:tid 39341] [client 74.248.24.163:26218] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/29rc7ExgS6p.php"] [unique_id "aX0YScWi-IjigR3oHY6FnQAAAMA"]
[Sat Jan 31 04:44:58.353469 2026] [:error] [pid 39243:tid 39286] [client 74.248.24.163:15722] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/29rc7ExgS6p.php"] [unique_id "aX0YShBW1k4JK8a4v0Y3ggAAAEQ"]
[Sat Jan 31 04:44:59.210917 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:28781] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/29rc7ExgS6p.php"] [unique_id "aX0YSxBW1k4JK8a4v0Y3hwAAAFI"]
[Sat Jan 31 04:45:00.152373 2026] [:error] [pid 39242:tid 39257] [client 74.248.24.163:30974] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/29rc7ExgS6p.php"] [unique_id "aX0YTNOgXnkKGGSSCINcQQAAAAM"]
[Sat Jan 31 04:45:01.294230 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:13447] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aX0YTRBW1k4JK8a4v0Y3mwAAAE0"]
[Sat Jan 31 04:45:02.154468 2026] [:error] [pid 39244:tid 39320] [client 74.248.24.163:45006] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aX0YTno-KRTvg3jHEDzGDgAAAIo"]
[Sat Jan 31 04:45:03.042406 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:10704] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aX0YT3o-KRTvg3jHEDzGEQAAAIE"]
[Sat Jan 31 04:45:03.978473 2026] [:error] [pid 39243:tid 39297] [client 74.248.24.163:8868] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aX0YTxBW1k4JK8a4v0Y3ngAAAE8"]
[Sat Jan 31 04:45:04.784020 2026] [:error] [pid 39339:tid 39352] [client 74.248.24.163:8977] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aX0YUMWi-IjigR3oHY6FpwAAAMs"]
[Sat Jan 31 04:45:05.593210 2026] [:error] [pid 20210:tid 20226] [client 74.248.24.163:13056] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aX0YUXKy7OGBlTY8MCehCAAAAQ4"]
[Sat Jan 31 04:45:06.664246 2026] [:error] [pid 20210:tid 20234] [client 74.248.24.163:13626] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aX0YUnKy7OGBlTY8MCehCwAAARY"]
[Sat Jan 31 04:45:07.712187 2026] [:error] [pid 20836:tid 20852] [client 74.248.24.163:28765] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aX0YU4ACllgWRWVrYITHVAAAAUs"]
[Sat Jan 31 04:45:08.619559 2026] [:error] [pid 39243:tid 39289] [client 74.248.24.163:29686] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aX0YVBBW1k4JK8a4v0Y3qQAAAEc"]
[Sat Jan 31 04:45:09.829912 2026] [:error] [pid 39339:tid 39345] [client 74.248.24.163:3691] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aX0YVcWi-IjigR3oHY6FrAAAAMQ"]
[Sat Jan 31 04:45:10.738392 2026] [:error] [pid 39339:tid 39365] [client 74.248.24.163:8990] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aX0YVsWi-IjigR3oHY6FrwAAANg"]
[Sat Jan 31 04:45:11.646057 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:27678] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aX0YV8Wi-IjigR3oHY6FsQAAANM"]
[Sat Jan 31 04:45:12.558423 2026] [:error] [pid 39339:tid 39361] [client 74.248.24.163:8859] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aX0YWMWi-IjigR3oHY6FtQAAANQ"]
[Sat Jan 31 04:45:13.502526 2026] [:error] [pid 39244:tid 39333] [client 74.248.24.163:27648] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aX0YWXo-KRTvg3jHEDzGGgAAAJc"]
[Sat Jan 31 04:45:14.334468 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:28605] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aX0YWsWi-IjigR3oHY6FtwAAAM8"]
[Sat Jan 31 04:45:15.174607 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:29043] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aX0YW4ACllgWRWVrYITHZgAAAUk"]
[Sat Jan 31 04:45:16.037634 2026] [:error] [pid 20210:tid 20225] [client 74.248.24.163:30457] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aX0YXHKy7OGBlTY8MCehIgAAAQ0"]
[Sat Jan 31 04:45:16.847020 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:27903] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aX0YXNOgXnkKGGSSCINcWwAAABU"]
[Sat Jan 31 04:45:17.823761 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:30416] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aX0YXYACllgWRWVrYITHawAAAUc"]
[Sat Jan 31 04:45:18.581323 2026] [:error] [pid 20836:tid 20842] [client 74.248.24.163:29269] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aX0YXoACllgWRWVrYITHbAAAAUE"]
[Sat Jan 31 04:45:19.300298 2026] [:error] [pid 39244:tid 39309] [client 74.248.24.163:28779] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "aX0YX3o-KRTvg3jHEDzGIAAAAIA"]
[Sat Jan 31 04:45:20.326897 2026] [:error] [pid 39242:tid 39274] [client 74.248.24.163:14822] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "aX0YYNOgXnkKGGSSCINcXwAAABQ"]
[Sat Jan 31 04:45:21.373756 2026] [:error] [pid 20836:tid 20849] [client 74.248.24.163:29003] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "aX0YYYACllgWRWVrYITHdwAAAUg"]
[Sat Jan 31 04:45:22.421444 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:29997] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "aX0YYtOgXnkKGGSSCINcZAAAAA0"]
[Sat Jan 31 04:45:23.415335 2026] [:error] [pid 20836:tid 20864] [client 74.248.24.163:31775] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aX0YY4ACllgWRWVrYITHegAAAVc"]
[Sat Jan 31 04:45:24.377595 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:14008] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aX0YZMWi-IjigR3oHY6FxwAAAM8"]
[Sat Jan 31 04:45:25.299294 2026] [:error] [pid 39242:tid 39278] [client 74.248.24.163:8067] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aX0YZdOgXnkKGGSSCINcZgAAABg"]
[Sat Jan 31 04:45:26.362665 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:15739] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aX0YZoACllgWRWVrYITHgwAAAU4"]
[Sat Jan 31 04:45:27.398255 2026] [:error] [pid 20210:tid 20226] [client 74.248.24.163:15709] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aX0YZ3Ky7OGBlTY8MCehLAAAAQ4"]
[Sat Jan 31 04:45:28.322691 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:29218] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aX0YaIACllgWRWVrYITHkgAAAUY"]
[Sat Jan 31 04:45:29.128724 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:31763] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aX0YaYACllgWRWVrYITHlgAAAVE"]
[Sat Jan 31 04:45:29.900180 2026] [:error] [pid 39243:tid 39306] [client 74.248.24.163:29411] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aX0YaRBW1k4JK8a4v0Y30wAAAFg"]
[Sat Jan 31 04:45:30.725050 2026] [:error] [pid 20836:tid 20852] [client 74.248.24.163:29233] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/plugins.php"] [unique_id "aX0YaoACllgWRWVrYITHoAAAAUs"]
[Sat Jan 31 04:45:31.631859 2026] [:error] [pid 20836:tid 20842] [client 74.248.24.163:44931] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/plugins.php"] [unique_id "aX0Ya4ACllgWRWVrYITHqAAAAUE"]
[Sat Jan 31 04:45:32.420278 2026] [:error] [pid 20210:tid 20217] [client 74.248.24.163:3397] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/plugins.php"] [unique_id "aX0YbHKy7OGBlTY8MCehOgAAAQU"]
[Sat Jan 31 04:45:33.180022 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:27866] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/plugins.php"] [unique_id "aX0YbdOgXnkKGGSSCINcbwAAAAU"]
[Sat Jan 31 04:45:34.054139 2026] [:error] [pid 39339:tid 39346] [client 74.248.24.163:3628] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aX0YbsWi-IjigR3oHY6F2AAAAMU"]
[Sat Jan 31 04:45:35.108264 2026] [:error] [pid 39243:tid 39282] [client 74.248.24.163:29433] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aX0YbxBW1k4JK8a4v0Y32AAAAEA"]
[Sat Jan 31 04:45:36.060197 2026] [:error] [pid 39242:tid 39278] [client 74.248.24.163:44962] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aX0YcNOgXnkKGGSSCINccwAAABg"]
[Sat Jan 31 04:45:36.761507 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:14127] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aX0YcMWi-IjigR3oHY6F3wAAAM8"]
[Sat Jan 31 04:45:37.736775 2026] [:error] [pid 20210:tid 20216] [client 74.248.24.163:30490] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/atomlib.php"] [unique_id "aX0YcXKy7OGBlTY8MCehRQAAAQQ"]
[Sat Jan 31 04:45:38.812612 2026] [:error] [pid 39243:tid 39303] [client 74.248.24.163:29296] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/atomlib.php"] [unique_id "aX0YchBW1k4JK8a4v0Y32wAAAFU"]
[Sat Jan 31 04:45:39.700182 2026] [:error] [pid 39244:tid 39322] [client 74.248.24.163:29274] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/atomlib.php"] [unique_id "aX0Yc3o-KRTvg3jHEDzGNwAAAIw"]
[Sat Jan 31 04:45:40.580889 2026] [:error] [pid 20210:tid 20214] [client 74.248.24.163:30516] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/atomlib.php"] [unique_id "aX0YdHKy7OGBlTY8MCehSgAAAQI"]
[Sat Jan 31 04:45:41.540650 2026] [:error] [pid 20210:tid 20226] [client 74.248.24.163:3405] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/iR7SzrsOUEP.php"] [unique_id "aX0YdXKy7OGBlTY8MCehTAAAAQ4"]
[Sat Jan 31 04:45:42.532648 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:30482] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/iR7SzrsOUEP.php"] [unique_id "aX0YdoACllgWRWVrYITHvAAAAUU"]
[Sat Jan 31 04:45:43.428264 2026] [:error] [pid 39242:tid 39261] [client 74.248.24.163:14112] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/iR7SzrsOUEP.php"] [unique_id "aX0Yd9OgXnkKGGSSCINcewAAAAc"]
[Sat Jan 31 04:45:44.428955 2026] [:error] [pid 39243:tid 39287] [client 74.248.24.163:13464] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/includes/iR7SzrsOUEP.php"] [unique_id "aX0YeBBW1k4JK8a4v0Y34QAAAEU"]
[Sat Jan 31 04:45:45.609461 2026] [:error] [pid 39243:tid 39284] [client 74.248.24.163:30506] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aX0YeRBW1k4JK8a4v0Y35AAAAEI"]
[Sat Jan 31 04:45:46.275500 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:30517] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aX0YehBW1k4JK8a4v0Y35gAAAFI"]
[Sat Jan 31 04:45:47.066752 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:29248] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aX0Ye9OgXnkKGGSSCINcgwAAAAY"]
[Sat Jan 31 04:45:47.907788 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:8877] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/"] [unique_id "aX0Ye4ACllgWRWVrYITHxQAAAU0"]
[Sat Jan 31 04:45:48.646456 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:46811] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX0YfBBW1k4JK8a4v0Y36QAAAFc"]
[Sat Jan 31 04:45:49.439581 2026] [:error] [pid 39339:tid 39358] [client 74.248.24.163:26238] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX0YfcWi-IjigR3oHY6F-wAAANE"]
[Sat Jan 31 04:45:50.590702 2026] [:error] [pid 20210:tid 20217] [client 74.248.24.163:15406] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX0YfnKy7OGBlTY8MCehUwAAAQU"]
[Sat Jan 31 04:45:51.574669 2026] [:error] [pid 20836:tid 20862] [client 74.248.24.163:15729] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX0Yf4ACllgWRWVrYITHyAAAAVU"]
[Sat Jan 31 04:45:52.478257 2026] [:error] [pid 20210:tid 20226] [client 74.248.24.163:3503] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aX0YgHKy7OGBlTY8MCehVQAAAQ4"]
[Sat Jan 31 04:45:58.685735 2026] [:error] [pid 39242:tid 39268] [client 74.248.24.163:9971] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aX0YhtOgXnkKGGSSCINcoQAAAA4"]
[Sat Jan 31 04:45:59.415820 2026] [:error] [pid 39243:tid 39301] [client 74.248.24.163:29419] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aX0YhxBW1k4JK8a4v0Y39wAAAFM"]
[Sat Jan 31 04:46:00.216441 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:28411] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aX0YiIACllgWRWVrYITH1AAAAVA"]
[Sat Jan 31 04:46:01.009540 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:28385] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aX0YidOgXnkKGGSSCINcpAAAAAU"]
[Sat Jan 31 04:46:01.819617 2026] [:error] [pid 39339:tid 39364] [client 74.248.24.163:44726] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/users.php"] [unique_id "aX0YicWi-IjigR3oHY6GFgAAANc"]
[Sat Jan 31 04:46:05.175874 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:13983] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/users.php"] [unique_id "aX0YjYACllgWRWVrYITH2QAAAUk"]
[Sat Jan 31 04:46:05.931169 2026] [:error] [pid 20836:tid 20843] [client 74.248.24.163:9781] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/users.php"] [unique_id "aX0YjYACllgWRWVrYITH2wAAAUI"]
[Sat Jan 31 04:46:06.611816 2026] [:error] [pid 39339:tid 39359] [client 74.248.24.163:13501] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/users.php"] [unique_id "aX0YjsWi-IjigR3oHY6GNgAAANI"]
[Sat Jan 31 04:46:07.430404 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:29028] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aX0Yj4ACllgWRWVrYITH3QAAAU0"]
[Sat Jan 31 04:46:08.156172 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:14005] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aX0YkHo-KRTvg3jHEDzGWwAAAII"]
[Sat Jan 31 04:46:08.900976 2026] [:error] [pid 39243:tid 39296] [client 74.248.24.163:14796] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aX0YkBBW1k4JK8a4v0Y4WAAAAE4"]
[Sat Jan 31 04:46:09.720594 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:29290] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-conflg.php"] [unique_id "aX0YkXo-KRTvg3jHEDzGXQAAAI0"]
[Sat Jan 31 04:46:10.358057 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:25075] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aX0YkoACllgWRWVrYITH4AAAAVE"]
[Sat Jan 31 04:46:11.190420 2026] [:error] [pid 39242:tid 39277] [client 74.248.24.163:29260] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aX0Yk9OgXnkKGGSSCINcxwAAABc"]
[Sat Jan 31 04:46:11.964414 2026] [:error] [pid 39242:tid 39262] [client 74.248.24.163:13607] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aX0Yk9OgXnkKGGSSCINcyAAAAAg"]
[Sat Jan 31 04:46:12.826496 2026] [:error] [pid 39339:tid 39353] [client 74.248.24.163:14334] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/admin.php"] [unique_id "aX0YlMWi-IjigR3oHY6GQAAAAMw"]
[Sat Jan 31 04:46:13.872756 2026] [:error] [pid 39339:tid 39352] [client 74.248.24.163:24648] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/install.php"] [unique_id "aX0YlcWi-IjigR3oHY6GQgAAAMs"]
[Sat Jan 31 04:46:14.824806 2026] [:error] [pid 20836:tid 20862] [client 74.248.24.163:29039] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/install.php"] [unique_id "aX0YloACllgWRWVrYITH7QAAAVU"]
[Sat Jan 31 04:46:15.791106 2026] [:error] [pid 39242:tid 39264] [client 74.248.24.163:8845] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/install.php"] [unique_id "aX0Yl9OgXnkKGGSSCINc0AAAAAo"]
[Sat Jan 31 04:46:16.631058 2026] [:error] [pid 39244:tid 39314] [client 74.248.24.163:8849] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/install.php"] [unique_id "aX0YmHo-KRTvg3jHEDzGYgAAAIU"]
[Sat Jan 31 04:46:17.518804 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:14549] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aX0YmdOgXnkKGGSSCINc0wAAABA"]
[Sat Jan 31 04:46:18.341402 2026] [:error] [pid 39339:tid 39342] [client 74.248.24.163:30915] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aX0YmsWi-IjigR3oHY6GSQAAAME"]
[Sat Jan 31 04:46:19.513920 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:10589] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aX0Ym3o-KRTvg3jHEDzGZwAAAJM"]
[Sat Jan 31 04:46:20.461178 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:14580] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/mah.php"] [unique_id "aX0YnHo-KRTvg3jHEDzGaQAAAII"]
[Sat Jan 31 04:46:21.250404 2026] [:error] [pid 20836:tid 20852] [client 74.248.24.163:24665] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aX0YnYACllgWRWVrYITH9gAAAUs"]
[Sat Jan 31 04:46:22.877844 2026] [:error] [pid 39244:tid 39316] [client 74.248.24.163:31523] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aX0Ynno-KRTvg3jHEDzGagAAAIY"]
[Sat Jan 31 04:46:24.054802 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:12754] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aX0YoIACllgWRWVrYITH_wAAAUU"]
[Sat Jan 31 04:46:25.036919 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:30954] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aX0YoRBW1k4JK8a4v0Y4awAAAEY"]
[Sat Jan 31 04:46:26.532294 2026] [:error] [pid 20836:tid 20864] [client 74.248.24.163:12752] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/smaxx.php"] [unique_id "aX0YooACllgWRWVrYITIBwAAAVc"]
[Sat Jan 31 04:46:27.532642 2026] [:error] [pid 20210:tid 20236] [client 74.248.24.163:14827] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/smaxx.php"] [unique_id "aX0Yo3Ky7OGBlTY8MCehfQAAARg"]
[Sat Jan 31 04:46:28.974658 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:24762] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/smaxx.php"] [unique_id "aX0YpNOgXnkKGGSSCINc4AAAABU"]
[Sat Jan 31 04:46:29.987756 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:13659] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/WordPressCore/smaxx.php"] [unique_id "aX0YpRBW1k4JK8a4v0Y4bwAAAFI"]
[Sat Jan 31 04:46:30.773231 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:8841] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/atomlib.php"] [unique_id "aX0YptOgXnkKGGSSCINc4gAAAAY"]
[Sat Jan 31 04:46:31.684180 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:14528] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/atomlib.php"] [unique_id "aX0Yp3Ky7OGBlTY8MCehgwAAAQE"]
[Sat Jan 31 04:46:32.700100 2026] [:error] [pid 39243:tid 39294] [client 74.248.24.163:24738] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/atomlib.php"] [unique_id "aX0YqBBW1k4JK8a4v0Y4dAAAAEw"]
[Sat Jan 31 04:46:33.398605 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:10623] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/atomlib.php"] [unique_id "aX0YqdOgXnkKGGSSCINc5QAAAA0"]
[Sat Jan 31 04:46:34.386399 2026] [:error] [pid 20836:tid 20855] [client 74.248.24.163:13722] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aX0YqoACllgWRWVrYITIEQAAAU4"]
[Sat Jan 31 04:46:35.553211 2026] [:error] [pid 39244:tid 39316] [client 74.248.24.163:13634] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aX0Yq3o-KRTvg3jHEDzGdgAAAIY"]
[Sat Jan 31 04:46:36.604297 2026] [:error] [pid 39339:tid 39344] [client 74.248.24.163:12238] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aX0YrMWi-IjigR3oHY6GcQAAAMM"]
[Sat Jan 31 04:46:37.694423 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:29279] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aX0YrXo-KRTvg3jHEDzGzgAAAI0"]
[Sat Jan 31 04:46:38.687566 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:47112] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core/include.php"] [unique_id "aX0YrnKy7OGBlTY8MCeh9QAAAQE"]
[Sat Jan 31 04:46:39.789992 2026] [:error] [pid 20210:tid 20223] [client 74.248.24.163:31539] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core/include.php"] [unique_id "aX0Yr3Ky7OGBlTY8MCeiAwAAAQs"]
[Sat Jan 31 04:46:40.468723 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:15738] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core/include.php"] [unique_id "aX0YsHKy7OGBlTY8MCeiBAAAAQE"]
[Sat Jan 31 04:46:41.386094 2026] [:error] [pid 20210:tid 20235] [client 74.248.24.163:10582] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/core/include.php"] [unique_id "aX0YsXKy7OGBlTY8MCeiCQAAARc"]
[Sat Jan 31 04:46:42.200071 2026] [:error] [pid 39243:tid 39297] [client 74.248.24.163:8864] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aX0YshBW1k4JK8a4v0Y4mgAAAE8"]
[Sat Jan 31 04:46:43.032040 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:14810] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aX0Ys9OgXnkKGGSSCINc7QAAABU"]
[Sat Jan 31 04:46:43.788628 2026] [:error] [pid 39339:tid 39359] [client 74.248.24.163:8845] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aX0Ys8Wi-IjigR3oHY6GegAAANI"]
[Sat Jan 31 04:46:44.532819 2026] [:error] [pid 20836:tid 20850] [client 74.248.24.163:31505] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aX0YtIACllgWRWVrYITILQAAAUk"]
[Sat Jan 31 04:46:45.167775 2026] [:error] [pid 20210:tid 20234] [client 74.248.24.163:13661] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aX0YtXKy7OGBlTY8MCeiDQAAARY"]
[Sat Jan 31 04:46:46.308848 2026] [:error] [pid 20836:tid 20860] [client 74.248.24.163:10595] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aX0YtoACllgWRWVrYITIMwAAAVM"]
[Sat Jan 31 04:46:47.005200 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:30130] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aX0Yt4ACllgWRWVrYITINgAAAUY"]
[Sat Jan 31 04:46:47.961865 2026] [:error] [pid 20210:tid 20217] [client 74.248.24.163:12256] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aX0Yt3Ky7OGBlTY8MCeiEQAAAQU"]
[Sat Jan 31 04:46:48.781456 2026] [:error] [pid 39243:tid 39286] [client 74.248.24.163:29301] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aX0YuBBW1k4JK8a4v0Y4ogAAAEQ"]
[Sat Jan 31 04:46:49.853808 2026] [:error] [pid 20836:tid 20859] [client 74.248.24.163:13478] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aX0YuYACllgWRWVrYITIOAAAAVI"]
[Sat Jan 31 04:46:50.885163 2026] [:error] [pid 39244:tid 39328] [client 74.248.24.163:31489] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aX0Yuno-KRTvg3jHEDzG4QAAAJI"]
[Sat Jan 31 04:46:51.825078 2026] [:error] [pid 39242:tid 39268] [client 74.248.24.163:30078] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aX0Yu9OgXnkKGGSSCINc_AAAAA4"]
[Sat Jan 31 04:46:52.783887 2026] [:error] [pid 39244:tid 39316] [client 74.248.24.163:31521] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aX0YvHo-KRTvg3jHEDzG6gAAAIY"]
[Sat Jan 31 04:46:53.583642 2026] [:error] [pid 20210:tid 20219] [client 74.248.24.163:29282] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aX0YvXKy7OGBlTY8MCeiGgAAAQc"]
[Sat Jan 31 04:46:54.489273 2026] [:error] [pid 20836:tid 20858] [client 74.248.24.163:30092] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aX0YvoACllgWRWVrYITIRgAAAVE"]
[Sat Jan 31 04:46:55.314619 2026] [:error] [pid 39244:tid 39325] [client 74.248.24.163:13643] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aX0Yv3o-KRTvg3jHEDzG8wAAAI8"]
[Sat Jan 31 04:46:56.377640 2026] [:error] [pid 20210:tid 20225] [client 74.248.24.163:14843] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd-1/dropdown.php"] [unique_id "aX0YwHKy7OGBlTY8MCeiKAAAAQ0"]
[Sat Jan 31 04:46:57.065262 2026] [:error] [pid 39244:tid 39326] [client 74.248.24.163:29507] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd-1/dropdown.php"] [unique_id "aX0YwXo-KRTvg3jHEDzG9QAAAJA"]
[Sat Jan 31 04:46:57.889447 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:13753] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd-1/dropdown.php"] [unique_id "aX0YwXo-KRTvg3jHEDzG9wAAAII"]
[Sat Jan 31 04:46:59.268925 2026] [:error] [pid 20836:tid 20842] [client 74.248.24.163:13575] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aX0Yw4ACllgWRWVrYITIVAAAAUE"]
[Sat Jan 31 04:47:03.370879 2026] [:error] [pid 20836:tid 20852] [client 74.248.24.163:30028] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/dropdown.php"] [unique_id "aX0Yx4ACllgWRWVrYITIcgAAAUs"]
[Sat Jan 31 04:47:04.082311 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:15693] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/dropdown.php"] [unique_id "aX0YyIACllgWRWVrYITIfQAAAVg"]
[Sat Jan 31 04:47:04.882110 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:13662] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/dropdown.php"] [unique_id "aX0YyHKy7OGBlTY8MCeiRAAAARM"]
[Sat Jan 31 04:47:05.645378 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:15698] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/seotheme/dropdown.php"] [unique_id "aX0YyRBW1k4JK8a4v0Y4zAAAAE0"]
[Sat Jan 31 04:47:06.609120 2026] [:error] [pid 39244:tid 39313] [client 74.248.24.163:14838] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travel/issue.php"] [unique_id "aX0Yyno-KRTvg3jHEDzHAgAAAIQ"]
[Sat Jan 31 04:47:07.367505 2026] [:error] [pid 39242:tid 39262] [client 74.248.24.163:25221] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travel/issue.php"] [unique_id "aX0Yy9OgXnkKGGSSCINdEwAAAAg"]
[Sat Jan 31 04:47:08.128521 2026] [:error] [pid 39243:tid 39284] [client 74.248.24.163:10365] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travel/issue.php"] [unique_id "aX0YzBBW1k4JK8a4v0Y4zgAAAEI"]
[Sat Jan 31 04:47:08.811928 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:13737] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travel/issue.php"] [unique_id "aX0YzIACllgWRWVrYITIkwAAAUA"]
[Sat Jan 31 04:47:09.592098 2026] [:error] [pid 39242:tid 39270] [client 74.248.24.163:13694] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aX0YzdOgXnkKGGSSCINdGAAAABA"]
[Sat Jan 31 04:47:10.354569 2026] [:error] [pid 20836:tid 20849] [client 74.248.24.163:29517] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aX0YzoACllgWRWVrYITInAAAAUg"]
[Sat Jan 31 04:47:11.526047 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:26210] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aX0Yz3o-KRTvg3jHEDzHCQAAAJM"]
[Sat Jan 31 04:47:12.622663 2026] [:error] [pid 39339:tid 39349] [client 74.248.24.163:45557] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aX0Y0MWi-IjigR3oHY6GpAAAAMg"]
[Sat Jan 31 04:47:13.445564 2026] [:error] [pid 20210:tid 20225] [client 74.248.24.163:13721] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aX0Y0XKy7OGBlTY8MCeiSgAAAQ0"]
[Sat Jan 31 04:47:14.137926 2026] [:error] [pid 39242:tid 39271] [client 74.248.24.163:13718] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aX0Y0tOgXnkKGGSSCINdJQAAABE"]
[Sat Jan 31 04:47:15.241175 2026] [:error] [pid 20210:tid 20221] [client 74.248.24.163:45504] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aX0Y03Ky7OGBlTY8MCeiSwAAAQk"]
[Sat Jan 31 04:47:16.528868 2026] [:error] [pid 20210:tid 20216] [client 74.248.24.163:10343] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aX0Y1HKy7OGBlTY8MCeiUgAAAQQ"]
[Sat Jan 31 04:47:17.363008 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:15723] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aX0Y1Xo-KRTvg3jHEDzHEQAAAJQ"]
[Sat Jan 31 04:47:18.310867 2026] [:error] [pid 39243:tid 39286] [client 74.248.24.163:12570] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aX0Y1hBW1k4JK8a4v0Y41wAAAEQ"]
[Sat Jan 31 04:47:19.327682 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:12282] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aX0Y14ACllgWRWVrYITIqQAAAUU"]
[Sat Jan 31 04:47:20.244413 2026] [:error] [pid 39244:tid 39327] [client 74.248.24.163:13479] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aX0Y2Ho-KRTvg3jHEDzHFAAAAJE"]
[Sat Jan 31 04:47:21.138019 2026] [:error] [pid 39243:tid 39289] [client 74.248.24.163:7302] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/pdf.php"] [unique_id "aX0Y2RBW1k4JK8a4v0Y43AAAAEc"]
[Sat Jan 31 04:47:22.043025 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:47523] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/pdf.php"] [unique_id "aX0Y2oACllgWRWVrYITIqwAAAUY"]
[Sat Jan 31 04:47:23.607936 2026] [:error] [pid 39243:tid 39282] [client 74.248.24.163:29262] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/pdf.php"] [unique_id "aX0Y2xBW1k4JK8a4v0Y44QAAAEA"]
[Sat Jan 31 04:47:24.895395 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:8892] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/pdf.php"] [unique_id "aX0Y3Ho-KRTvg3jHEDzHGAAAAIs"]
[Sat Jan 31 04:47:26.284035 2026] [:error] [pid 39243:tid 39303] [client 74.248.24.163:26186] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/wp-login.php"] [unique_id "aX0Y3hBW1k4JK8a4v0Y45QAAAFU"]
[Sat Jan 31 04:47:27.316201 2026] [:error] [pid 39243:tid 39291] [client 74.248.24.163:47030] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/wp-login.php"] [unique_id "aX0Y3xBW1k4JK8a4v0Y45wAAAEk"]
[Sat Jan 31 04:47:28.275971 2026] [:error] [pid 39242:tid 39257] [client 74.248.24.163:31814] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/wp-login.php"] [unique_id "aX0Y4NOgXnkKGGSSCINdKQAAAAM"]
[Sat Jan 31 04:47:29.367728 2026] [:error] [pid 39339:tid 39347] [client 74.248.24.163:12602] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/upgrade/wp-login.php"] [unique_id "aX0Y4cWi-IjigR3oHY6GsgAAAMY"]
[Sat Jan 31 04:47:30.169275 2026] [:error] [pid 20836:tid 20847] [client 74.248.24.163:47544] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aX0Y4oACllgWRWVrYITIuAAAAUY"]
[Sat Jan 31 04:47:30.967669 2026] [:error] [pid 20836:tid 20848] [client 74.248.24.163:7307] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aX0Y4oACllgWRWVrYITIugAAAUc"]
[Sat Jan 31 04:47:31.849187 2026] [:error] [pid 39242:tid 39254] [client 74.248.24.163:15633] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aX0Y49OgXnkKGGSSCINdLAAAAAA"]
[Sat Jan 31 04:47:32.758563 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:47213] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aX0Y5Ho-KRTvg3jHEDzHJAAAAJM"]
[Sat Jan 31 04:47:33.594224 2026] [:error] [pid 20210:tid 20226] [client 74.248.24.163:10094] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cache.php"] [unique_id "aX0Y5XKy7OGBlTY8MCeiaQAAAQ4"]
[Sat Jan 31 04:47:34.381150 2026] [:error] [pid 20210:tid 20216] [client 74.248.24.163:28643] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cache.php"] [unique_id "aX0Y5nKy7OGBlTY8MCeibAAAAQQ"]
[Sat Jan 31 04:47:35.455608 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:7356] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cache.php"] [unique_id "aX0Y54ACllgWRWVrYITIwgAAAVA"]
[Sat Jan 31 04:47:36.561508 2026] [:error] [pid 20210:tid 20215] [client 74.248.24.163:28026] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cache.php"] [unique_id "aX0Y6HKy7OGBlTY8MCeibQAAAQM"]
[Sat Jan 31 04:47:37.380787 2026] [:error] [pid 20210:tid 20228] [client 74.248.24.163:26329] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cong.php"] [unique_id "aX0Y6XKy7OGBlTY8MCeibwAAARA"]
[Sat Jan 31 04:47:38.257822 2026] [:error] [pid 20210:tid 20232] [client 74.248.24.163:3877] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cong.php"] [unique_id "aX0Y6nKy7OGBlTY8MCeicAAAARQ"]
[Sat Jan 31 04:47:39.044899 2026] [:error] [pid 20210:tid 20224] [client 74.248.24.163:28070] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cong.php"] [unique_id "aX0Y63Ky7OGBlTY8MCeicgAAAQw"]
[Sat Jan 31 04:47:39.858661 2026] [:error] [pid 20210:tid 20221] [client 74.248.24.163:47321] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/cong.php"] [unique_id "aX0Y63Ky7OGBlTY8MCeidgAAAQk"]
[Sat Jan 31 04:47:40.950234 2026] [:error] [pid 39242:tid 39268] [client 74.248.24.163:9487] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aX0Y7NOgXnkKGGSSCINdNgAAAA4"]
[Sat Jan 31 04:47:41.711966 2026] [:error] [pid 39244:tid 39322] [client 74.248.24.163:30818] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aX0Y7Xo-KRTvg3jHEDzHLQAAAIw"]
[Sat Jan 31 04:47:42.543379 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:24667] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aX0Y7oACllgWRWVrYITIygAAAVA"]
[Sat Jan 31 04:47:43.461652 2026] [:error] [pid 20836:tid 20863] [client 74.248.24.163:31009] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aX0Y74ACllgWRWVrYITIywAAAVY"]
[Sat Jan 31 04:47:44.380172 2026] [:error] [pid 20836:tid 20853] [client 74.248.24.163:30803] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aX0Y8IACllgWRWVrYITIzAAAAUw"]
[Sat Jan 31 04:47:45.310917 2026] [:error] [pid 20210:tid 20236] [client 74.248.24.163:47133] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aX0Y8XKy7OGBlTY8MCeieAAAARg"]
[Sat Jan 31 04:47:46.304710 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:14911] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aX0Y8tOgXnkKGGSSCINdPAAAABI"]
[Sat Jan 31 04:47:46.982245 2026] [:error] [pid 39242:tid 39276] [client 74.248.24.163:16093] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aX0Y8tOgXnkKGGSSCINdPQAAABY"]
[Sat Jan 31 04:47:47.669984 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:13462] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aX0Y8xBW1k4JK8a4v0Y49gAAAFc"]
[Sat Jan 31 04:47:48.394791 2026] [:error] [pid 39243:tid 39300] [client 74.248.24.163:47098] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/wp-login.php"] [unique_id "aX0Y9BBW1k4JK8a4v0Y49wAAAFI"]
[Sat Jan 31 04:47:49.242020 2026] [:error] [pid 39339:tid 39341] [client 74.248.24.163:30970] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aX0Y9cWi-IjigR3oHY6GywAAAMA"]
[Sat Jan 31 04:47:50.002739 2026] [:error] [pid 20210:tid 20221] [client 74.248.24.163:13497] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/allez.php"] [unique_id "aX0Y9nKy7OGBlTY8MCeifgAAAQk"]
[Sat Jan 31 04:47:50.868789 2026] [:error] [pid 39243:tid 39286] [client 74.248.24.163:24621] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aX0Y9hBW1k4JK8a4v0Y4-wAAAEQ"]
[Sat Jan 31 04:47:51.633084 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:3391] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aX0Y93o-KRTvg3jHEDzHOAAAAII"]
[Sat Jan 31 04:47:52.733429 2026] [:error] [pid 39339:tid 39357] [client 74.248.24.163:15817] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aX0Y-MWi-IjigR3oHY6GzgAAANA"]
[Sat Jan 31 04:47:53.636514 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:29872] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/cloud.php"] [unique_id "aX0Y-dOgXnkKGGSSCINdRgAAAAY"]
[Sat Jan 31 04:47:54.629797 2026] [:error] [pid 39339:tid 39349] [client 74.248.24.163:31015] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aX0Y-sWi-IjigR3oHY6G0AAAAMg"]
[Sat Jan 31 04:47:55.343148 2026] [:error] [pid 39242:tid 39276] [client 74.248.24.163:13804] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aX0Y-9OgXnkKGGSSCINdSAAAABY"]
[Sat Jan 31 04:47:56.150419 2026] [:error] [pid 39242:tid 39256] [client 74.248.24.163:13846] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aX0Y_NOgXnkKGGSSCINdSQAAAAI"]
[Sat Jan 31 04:47:57.082008 2026] [:error] [pid 39243:tid 39304] [client 74.248.24.163:24614] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aX0Y_RBW1k4JK8a4v0Y5BAAAAFY"]
[Sat Jan 31 04:47:57.920841 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:13766] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aX0Y_Xo-KRTvg3jHEDzHQAAAAIs"]
[Sat Jan 31 04:47:59.040501 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:9656] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aX0Y_3o-KRTvg3jHEDzHRAAAAI0"]
[Sat Jan 31 04:48:00.026727 2026] [:error] [pid 39339:tid 39365] [client 74.248.24.163:29824] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aX0ZAMWi-IjigR3oHY6G1QAAANg"]
[Sat Jan 31 04:48:00.768931 2026] [:error] [pid 20836:tid 20853] [client 74.248.24.163:15851] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/product.php"] [unique_id "aX0ZAIACllgWRWVrYITI4AAAAUw"]
[Sat Jan 31 04:48:01.620005 2026] [:error] [pid 39339:tid 39341] [client 74.248.24.163:31653] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/network.php"] [unique_id "aX0ZAcWi-IjigR3oHY6G2AAAAMA"]
[Sat Jan 31 04:48:02.297824 2026] [:error] [pid 39242:tid 39259] [client 74.248.24.163:15869] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aX0ZAtOgXnkKGGSSCINdTwAAAAU"]
[Sat Jan 31 04:48:03.007680 2026] [:error] [pid 39243:tid 39301] [client 74.248.24.163:12093] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sx.php"] [unique_id "aX0ZAxBW1k4JK8a4v0Y5BwAAAFM"]
[Sat Jan 31 04:48:04.018812 2026] [:error] [pid 20836:tid 20853] [client 74.248.24.163:13269] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aX0ZBIACllgWRWVrYITI6wAAAUw"]
[Sat Jan 31 04:48:04.874111 2026] [:error] [pid 39243:tid 39287] [client 74.248.24.163:32095] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/Divi/includes/widgets/wp-blog.php"] [unique_id "aX0ZBBBW1k4JK8a4v0Y5CgAAAEU"]
[Sat Jan 31 04:48:07.474259 2026] [proxy_fcgi:error] [pid 20210:tid 20236] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:07.774464 2026] [proxy_fcgi:error] [pid 20210:tid 20229] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:08.030166 2026] [:error] [pid 20210:tid 20214] [client 74.248.24.163:30989] [client 74.248.24.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.248.24.163, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aX0ZCHKy7OGBlTY8MCeilQAAAQI"]
[Sat Jan 31 04:48:08.037566 2026] [proxy_fcgi:error] [pid 20210:tid 20214] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:08.297080 2026] [proxy_fcgi:error] [pid 20210:tid 20215] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:08.567125 2026] [proxy_fcgi:error] [pid 20210:tid 20213] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:08.828807 2026] [proxy_fcgi:error] [pid 20210:tid 20232] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:09.213180 2026] [proxy_fcgi:error] [pid 20210:tid 20234] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:09.499760 2026] [proxy_fcgi:error] [pid 20210:tid 20224] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:09.765893 2026] [proxy_fcgi:error] [pid 20210:tid 20222] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:10.033880 2026] [:error] [pid 20210:tid 20220] [client 74.248.24.163:30989] [client 74.248.24.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.248.24.163, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aX0ZCnKy7OGBlTY8MCeioAAAAQg"]
[Sat Jan 31 04:48:10.039160 2026] [proxy_fcgi:error] [pid 20210:tid 20220] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:10.299619 2026] [proxy_fcgi:error] [pid 20210:tid 20231] [client 74.248.24.163:30989] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:48:10.555431 2026] [:error] [pid 20210:tid 20225] [client 74.248.24.163:30989] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aX0ZCnKy7OGBlTY8MCeiowAAAQ0"]
[Sat Jan 31 04:48:11.631892 2026] [:error] [pid 39243:tid 39305] [client 74.248.24.163:9606] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aX0ZCxBW1k4JK8a4v0Y5GQAAAFc"]
[Sat Jan 31 04:48:12.652061 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:31994] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aX0ZDNOgXnkKGGSSCINdXgAAABI"]
[Sat Jan 31 04:48:13.536877 2026] [:error] [pid 20210:tid 20227] [client 74.248.24.163:13307] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aX0ZDXKy7OGBlTY8MCeipgAAAQ8"]
[Sat Jan 31 04:48:14.303909 2026] [:error] [pid 39244:tid 39324] [client 74.248.24.163:31000] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcoqCGrnVix.php"] [unique_id "aX0ZDno-KRTvg3jHEDzHVAAAAI4"]
[Sat Jan 31 04:48:15.070532 2026] [:error] [pid 39243:tid 39292] [client 74.248.24.163:31947] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcoqCGrnVix.php"] [unique_id "aX0ZDxBW1k4JK8a4v0Y5GwAAAEo"]
[Sat Jan 31 04:48:16.029837 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:14197] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcoqCGrnVix.php"] [unique_id "aX0ZEHo-KRTvg3jHEDzHVgAAAJM"]
[Sat Jan 31 04:48:16.663205 2026] [:error] [pid 20210:tid 20218] [client 74.248.24.163:31004] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/zcoqCGrnVix.php"] [unique_id "aX0ZEHKy7OGBlTY8MCeiqwAAAQY"]
[Sat Jan 31 04:48:17.515701 2026] [:error] [pid 39339:tid 39354] [client 74.248.24.163:13608] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aX0ZEcWi-IjigR3oHY6G8QAAAM0"]
[Sat Jan 31 04:48:18.559590 2026] [:error] [pid 39243:tid 39297] [client 74.248.24.163:14061] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aX0ZEhBW1k4JK8a4v0Y5IQAAAE8"]
[Sat Jan 31 04:48:19.292569 2026] [:error] [pid 39242:tid 39272] [client 74.248.24.163:29719] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aX0ZE9OgXnkKGGSSCINdaQAAABI"]
[Sat Jan 31 04:48:20.021614 2026] [:error] [pid 20836:tid 20844] [client 74.248.24.163:28686] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aX0ZFIACllgWRWVrYITJFAAAAUM"]
[Sat Jan 31 04:48:20.995056 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:3291] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/makeasmtp.php"] [unique_id "aX0ZFHo-KRTvg3jHEDzHXQAAAII"]
[Sat Jan 31 04:48:21.728346 2026] [:error] [pid 20836:tid 20842] [client 74.248.24.163:31975] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/makeasmtp.php"] [unique_id "aX0ZFYACllgWRWVrYITJGQAAAUE"]
[Sat Jan 31 04:48:22.428835 2026] [:error] [pid 20210:tid 20215] [client 74.248.24.163:31997] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/makeasmtp.php"] [unique_id "aX0ZFnKy7OGBlTY8MCeitAAAAQM"]
[Sat Jan 31 04:48:23.308200 2026] [:error] [pid 20210:tid 20212] [client 74.248.24.163:28987] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/public/makeasmtp.php"] [unique_id "aX0ZF3Ky7OGBlTY8MCeitQAAAQA"]
[Sat Jan 31 04:48:24.089881 2026] [:error] [pid 39242:tid 39263] [client 74.248.24.163:11361] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mcs.php"] [unique_id "aX0ZGNOgXnkKGGSSCINdcQAAAAk"]
[Sat Jan 31 04:48:24.876829 2026] [:error] [pid 39244:tid 39329] [client 74.248.24.163:15230] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mcs.php"] [unique_id "aX0ZGHo-KRTvg3jHEDzHYgAAAJM"]
[Sat Jan 31 04:48:25.858114 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:15059] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mcs.php"] [unique_id "aX0ZGXo-KRTvg3jHEDzHYwAAAIs"]
[Sat Jan 31 04:48:26.591409 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:29752] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mcs.php"] [unique_id "aX0ZGtOgXnkKGGSSCINdeAAAAAY"]
[Sat Jan 31 04:48:27.351802 2026] [:error] [pid 20836:tid 20845] [client 74.248.24.163:28707] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211022.php"] [unique_id "aX0ZG4ACllgWRWVrYITJHgAAAUQ"]
[Sat Jan 31 04:48:28.222770 2026] [:error] [pid 39244:tid 39317] [client 74.248.24.163:13608] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211022.php"] [unique_id "aX0ZHHo-KRTvg3jHEDzHaAAAAIc"]
[Sat Jan 31 04:48:28.986913 2026] [:error] [pid 20836:tid 20856] [client 74.248.24.163:23437] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211022.php"] [unique_id "aX0ZHIACllgWRWVrYITJIQAAAU8"]
[Sat Jan 31 04:48:29.762544 2026] [:error] [pid 39244:tid 39330] [client 74.248.24.163:28681] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell20211022.php"] [unique_id "aX0ZHXo-KRTvg3jHEDzHbwAAAJQ"]
[Sat Jan 31 04:48:30.547490 2026] [:error] [pid 20210:tid 20217] [client 74.248.24.163:14205] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwsi.php"] [unique_id "aX0ZHnKy7OGBlTY8MCeivAAAAQU"]
[Sat Jan 31 04:48:31.321622 2026] [:error] [pid 39244:tid 39310] [client 74.248.24.163:25681] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwsi.php"] [unique_id "aX0ZH3o-KRTvg3jHEDzHcAAAAIE"]
[Sat Jan 31 04:48:32.002369 2026] [:error] [pid 20210:tid 20222] [client 74.248.24.163:7976] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwsi.php"] [unique_id "aX0ZIHKy7OGBlTY8MCeivQAAAQo"]
[Sat Jan 31 04:48:32.699794 2026] [:error] [pid 39244:tid 39328] [client 74.248.24.163:11364] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sidwsi.php"] [unique_id "aX0ZIHo-KRTvg3jHEDzHcgAAAJI"]
[Sat Jan 31 04:48:33.546435 2026] [:error] [pid 39243:tid 39293] [client 74.248.24.163:15063] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/wp-signup.php"] [unique_id "aX0ZIRBW1k4JK8a4v0Y5KAAAAEs"]
[Sat Jan 31 04:48:34.330109 2026] [:error] [pid 39243:tid 39299] [client 74.248.24.163:47850] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/wp-signup.php"] [unique_id "aX0ZIhBW1k4JK8a4v0Y5KgAAAFE"]
[Sat Jan 31 04:48:35.071850 2026] [:error] [pid 20836:tid 20857] [client 74.248.24.163:29571] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/wp-signup.php"] [unique_id "aX0ZI4ACllgWRWVrYITJKAAAAVA"]
[Sat Jan 31 04:48:36.008414 2026] [:error] [pid 20210:tid 20212] [client 74.248.24.163:23756] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/wp-signup.php"] [unique_id "aX0ZJHKy7OGBlTY8MCeiwgAAAQA"]
[Sat Jan 31 04:48:36.868412 2026] [:error] [pid 39243:tid 39287] [client 74.248.24.163:47462] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.phpa"] [unique_id "aX0ZJBBW1k4JK8a4v0Y5MAAAAEU"]
[Sat Jan 31 04:48:38.132218 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:3741] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.phpa"] [unique_id "aX0ZJsWi-IjigR3oHY6HAQAAANM"]
[Sat Jan 31 04:48:39.425949 2026] [:error] [pid 20836:tid 20844] [client 74.248.24.163:29590] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.phpa"] [unique_id "aX0ZJ4ACllgWRWVrYITJLwAAAUM"]
[Sat Jan 31 04:48:40.184347 2026] [:error] [pid 20836:tid 20861] [client 74.248.24.163:3750] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mini.phpa"] [unique_id "aX0ZKIACllgWRWVrYITJMgAAAVQ"]
[Sat Jan 31 04:48:40.980640 2026] [:error] [pid 39242:tid 39275] [client 74.248.24.163:7942] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/kx.php"] [unique_id "aX0ZKNOgXnkKGGSSCINdhwAAABU"]
[Sat Jan 31 04:48:41.823341 2026] [:error] [pid 20210:tid 20231] [client 74.248.24.163:23758] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/kx.php"] [unique_id "aX0ZKXKy7OGBlTY8MCeixwAAARM"]
[Sat Jan 31 04:48:42.714369 2026] [:error] [pid 39244:tid 39324] [client 74.248.24.163:26244] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/kx.php"] [unique_id "aX0ZKno-KRTvg3jHEDzHfAAAAI4"]
[Sat Jan 31 04:48:43.829989 2026] [:error] [pid 20836:tid 20846] [client 74.248.24.163:3131] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/user/kx.php"] [unique_id "aX0ZK4ACllgWRWVrYITJNgAAAUU"]
[Sat Jan 31 04:48:44.644567 2026] [:error] [pid 20210:tid 20213] [client 74.248.24.163:25713] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cloud1.php"] [unique_id "aX0ZLHKy7OGBlTY8MCeiyQAAAQE"]
[Sat Jan 31 04:48:45.613454 2026] [:error] [pid 39244:tid 39321] [client 74.248.24.163:29459] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cloud1.php"] [unique_id "aX0ZLXo-KRTvg3jHEDzHgQAAAIs"]
[Sat Jan 31 04:48:46.667475 2026] [:error] [pid 39339:tid 39360] [client 74.248.24.163:47477] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cloud1.php"] [unique_id "aX0ZLsWi-IjigR3oHY6HDgAAANM"]
[Sat Jan 31 04:48:47.708246 2026] [:error] [pid 39242:tid 39276] [client 74.248.24.163:3285] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/cloud1.php"] [unique_id "aX0ZL9OgXnkKGGSSCINdjQAAABY"]
[Sat Jan 31 04:48:48.939370 2026] [:error] [pid 39244:tid 39333] [client 74.248.24.163:29599] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rx.php"] [unique_id "aX0ZMHo-KRTvg3jHEDzHggAAAJc"]
[Sat Jan 31 04:48:49.990629 2026] [:error] [pid 20210:tid 20218] [client 74.248.24.163:25677] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rx.php"] [unique_id "aX0ZMXKy7OGBlTY8MCei0QAAAQY"]
[Sat Jan 31 04:48:51.240157 2026] [:error] [pid 20210:tid 20236] [client 74.248.24.163:15040] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rx.php"] [unique_id "aX0ZM3Ky7OGBlTY8MCei0gAAARg"]
[Sat Jan 31 04:48:51.994264 2026] [:error] [pid 20210:tid 20223] [client 74.248.24.163:3764] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/rx.php"] [unique_id "aX0ZM3Ky7OGBlTY8MCei0wAAAQs"]
[Sat Jan 31 04:48:52.785077 2026] [:error] [pid 39243:tid 39288] [client 74.248.24.163:28941] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.PHP"] [unique_id "aX0ZNBBW1k4JK8a4v0Y5PwAAAEY"]
[Sat Jan 31 04:48:53.617848 2026] [:error] [pid 20836:tid 20841] [client 74.248.24.163:25723] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.PHP"] [unique_id "aX0ZNYACllgWRWVrYITJUgAAAUA"]
[Sat Jan 31 04:48:54.387066 2026] [:error] [pid 39339:tid 39346] [client 74.248.24.163:23760] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.PHP"] [unique_id "aX0ZNsWi-IjigR3oHY6HFwAAAMU"]
[Sat Jan 31 04:48:55.003251 2026] [:error] [pid 39242:tid 39271] [client 74.248.24.163:47817] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.PHP"] [unique_id "aX0ZN9OgXnkKGGSSCINdkwAAABE"]
[Sat Jan 31 04:48:55.721300 2026] [:error] [pid 20210:tid 20236] [client 74.248.24.163:47864] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aX0ZN3Ky7OGBlTY8MCei5AAAARg"]
[Sat Jan 31 04:48:56.463406 2026] [:error] [pid 20836:tid 20863] [client 74.248.24.163:19674] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aX0ZOIACllgWRWVrYITJWwAAAVY"]
[Sat Jan 31 04:48:57.348294 2026] [:error] [pid 20210:tid 20234] [client 74.248.24.163:13478] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aX0ZOXKy7OGBlTY8MCei5QAAARY"]
[Sat Jan 31 04:48:58.293524 2026] [:error] [pid 39244:tid 39314] [client 74.248.24.163:23804] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aX0ZOno-KRTvg3jHEDzHnAAAAIU"]
[Sat Jan 31 04:48:59.442515 2026] [:error] [pid 20210:tid 20219] [client 74.248.24.163:30288] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aX0ZO3Ky7OGBlTY8MCei6gAAAQc"]
[Sat Jan 31 04:49:00.165384 2026] [:error] [pid 20836:tid 20854] [client 74.248.24.163:29460] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aX0ZPIACllgWRWVrYITJgQAAAU0"]
[Sat Jan 31 04:49:01.090355 2026] [:error] [pid 39243:tid 39291] [client 74.248.24.163:47452] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aX0ZPRBW1k4JK8a4v0Y5aAAAAEk"]
[Sat Jan 31 04:49:01.947600 2026] [:error] [pid 39244:tid 39323] [client 74.248.24.163:3072] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aX0ZPXo-KRTvg3jHEDzHswAAAI0"]
[Sat Jan 31 04:49:02.912293 2026] [:error] [pid 39339:tid 39356] [client 74.248.24.163:8897] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aX0ZPsWi-IjigR3oHY6HHAAAAM8"]
[Sat Jan 31 04:49:03.689884 2026] [:error] [pid 39244:tid 39311] [client 74.248.24.163:8951] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aX0ZP3o-KRTvg3jHEDzHvQAAAII"]
[Sat Jan 31 04:49:04.625824 2026] [:error] [pid 20210:tid 20218] [client 74.248.24.163:30302] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aX0ZQHKy7OGBlTY8MCei8gAAAQY"]
[Sat Jan 31 04:49:05.421489 2026] [:error] [pid 39242:tid 39267] [client 74.248.24.163:47433] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aX0ZQdOgXnkKGGSSCINdmgAAAA0"]
[Sat Jan 31 04:49:06.512841 2026] [:error] [pid 39242:tid 39254] [client 74.248.24.163:3084] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aX0ZQtOgXnkKGGSSCINdmwAAAAA"]
[Sat Jan 31 04:49:07.322234 2026] [:error] [pid 20836:tid 20865] [client 74.248.24.163:47854] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aX0ZQ4ACllgWRWVrYITJyAAAAVg"]
[Sat Jan 31 04:49:08.111148 2026] [:error] [pid 39243:tid 39295] [client 74.248.24.163:12303] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aX0ZRBBW1k4JK8a4v0Y5jQAAAE0"]
[Sat Jan 31 04:49:09.053651 2026] [:error] [pid 20210:tid 20215] [client 74.248.24.163:29601] [client 74.248.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock.php"] [unique_id "aX0ZRXKy7OGBlTY8MCei-wAAAQM"]
[Sat Jan 31 04:49:09.854969 2026] [:error] [pid 39339:tid 39346] [client 74.248.24.163:29591] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aX0ZRcWi-IjigR3oHY6HIgAAAMU"]
[Sat Jan 31 04:49:10.606404 2026] [proxy_fcgi:error] [pid 39242:tid 39269] [client 74.248.24.163:14376] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:10.885223 2026] [proxy_fcgi:error] [pid 39242:tid 39256] [client 74.248.24.163:14376] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:11.140125 2026] [:error] [pid 39242:tid 39260] [client 74.248.24.163:14376] [client 74.248.24.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aX0ZR9OgXnkKGGSSCINdpgAAAAY"]
[Sat Jan 31 04:49:12.063963 2026] [proxy_fcgi:error] [pid 20836:tid 20862] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:12.594623 2026] [proxy_fcgi:error] [pid 20836:tid 20854] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:12.853159 2026] [proxy_fcgi:error] [pid 20836:tid 20845] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:13.111880 2026] [proxy_fcgi:error] [pid 20836:tid 20841] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:13.385415 2026] [proxy_fcgi:error] [pid 20836:tid 20858] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:13.643360 2026] [proxy_fcgi:error] [pid 20836:tid 20849] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:49:13.901143 2026] [proxy_fcgi:error] [pid 20836:tid 20844] [client 74.248.24.163:47462] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:21:49.912082 2026] [autoindex:error] [pid 20836:tid 20862] [client 104.28.160.50:59159] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:21:55.511781 2026] [autoindex:error] [pid 39339:tid 39345] [client 104.28.160.50:58449] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:21:56.375626 2026] [autoindex:error] [pid 39243:tid 39285] [client 142.111.70.82:33156] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:47:23.734897 2026] [proxy_fcgi:error] [pid 52484:tid 52502] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:23.869217 2026] [proxy_fcgi:error] [pid 52484:tid 52498] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:23.993924 2026] [proxy_fcgi:error] [pid 52484:tid 52506] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.120213 2026] [proxy_fcgi:error] [pid 52484:tid 52510] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.245566 2026] [proxy_fcgi:error] [pid 52484:tid 52500] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.370348 2026] [proxy_fcgi:error] [pid 52484:tid 52494] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.499461 2026] [proxy_fcgi:error] [pid 52484:tid 52508] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.627068 2026] [proxy_fcgi:error] [pid 52484:tid 52505] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.751337 2026] [proxy_fcgi:error] [pid 52484:tid 52488] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:24.876355 2026] [proxy_fcgi:error] [pid 52484:tid 52509] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:25.002113 2026] [proxy_fcgi:error] [pid 52484:tid 52504] [client 20.78.152.240:62317] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:47:25.122424 2026] [:error] [pid 52484:tid 52499] [client 20.78.152.240:62317] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aX00_UpwiaulxucQh7XJxgAAAg0"]
[Sat Jan 31 06:47:25.611608 2026] [:error] [pid 39242:tid 39258] [client 20.78.152.240:54327] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aX00_dOgXnkKGGSSCIN_JAAAAAQ"]
[Sat Jan 31 06:47:26.098788 2026] [:error] [pid 39244:tid 39329] [client 20.78.152.240:59254] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aX00_no-KRTvg3jHEDzqXQAAAJM"]
[Sat Jan 31 06:47:26.581171 2026] [:error] [pid 39339:tid 39347] [client 20.78.152.240:59258] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/akcc.php"] [unique_id "aX00_sWi-IjigR3oHY6rsgAAAMY"]
[Sat Jan 31 07:13:15.330038 2026] [autoindex:error] [pid 20210:tid 20223] [client 20.78.152.240:19707] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:13:15.464169 2026] [proxy_fcgi:error] [pid 20210:tid 20236] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:15.589608 2026] [proxy_fcgi:error] [pid 20210:tid 20218] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:19.091341 2026] [proxy_fcgi:error] [pid 20210:tid 20234] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:19.238952 2026] [proxy_fcgi:error] [pid 20210:tid 20233] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:19.371851 2026] [proxy_fcgi:error] [pid 20210:tid 20219] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:19.496534 2026] [proxy_fcgi:error] [pid 20210:tid 20232] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:19.626209 2026] [proxy_fcgi:error] [pid 20210:tid 20213] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:19.751758 2026] [proxy_fcgi:error] [pid 20210:tid 20221] [client 20.78.152.240:19707] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:13:20.134654 2026] [:error] [pid 20210:tid 20217] [client 20.78.152.240:19707] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aX07EHKy7OGBlTY8MCfOmwAAAQU"]
[Sat Jan 31 07:13:20.619810 2026] [:error] [pid 52484:tid 52495] [client 20.78.152.240:22728] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aX07EEpwiaulxucQh7XNlwAAAgk"]
[Sat Jan 31 07:13:21.103568 2026] [:error] [pid 52484:tid 52491] [client 20.78.152.240:22732] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aX07EUpwiaulxucQh7XNmgAAAgU"]
[Sat Jan 31 07:13:21.588142 2026] [:error] [pid 20836:tid 20861] [client 20.78.152.240:21971] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/"] [unique_id "aX07EYACllgWRWVrYIQAzQAAAVQ"]
[Sat Jan 31 08:28:59.546887 2026] [autoindex:error] [pid 39242:tid 39267] [client 66.249.68.136:59541] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 09:12:42.968931 2026] [autoindex:error] [pid 52415:tid 52423] [client 202.76.168.89:42567] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 10:53:09.305394 2026] [proxy_fcgi:error] [pid 39339:tid 39354] [client 3.127.203.41:54337] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 12:22:13.549944 2026] [autoindex:error] [pid 20836:tid 20844] [client 109.177.98.227:47970] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 13:54:53.805729 2026] [autoindex:error] [pid 39339:tid 39362] [client 93.158.90.43:50585] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 14:25:57.462117 2026] [:error] [pid 59523:tid 59544] [client 43.140.247.223:40682] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aX2gdZEkxOIGmVhqUWI9vgAAAxE"]
[Sat Jan 31 15:03:19.869464 2026] [:error] [pid 39242:tid 39254] [client 49.37.40.224:60157] [client 49.37.40.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.40.224, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aX2pN9OgXnkKGGSSCIP8bAAAAAA"]
[Sat Jan 31 15:03:19.881299 2026] [proxy_fcgi:error] [pid 39242:tid 39254] [client 49.37.40.224:60157] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 19:55:30.553913 2026] [:error] [pid 18773:tid 18787] [client 213.176.16.167:55926] [client 213.176.16.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.env"] [unique_id "aX3tstHy21j24IPrB1XmIwAAAYw"]
[Sat Jan 31 22:15:08.827832 2026] [autoindex:error] [pid 44533:tid 44573] [client 78.29.51.27:58537] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://78.29.51.27/phpneuralnetwork/?s1=CU_cientifica.com.au
[Sun Feb 01 00:53:44.895363 2026] [:error] [pid 59523:tid 59539] [client 104.28.153.27:44875] [client 104.28.153.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aX4zmJEkxOIGmVhqUWKlrQAAAww"]
[Sun Feb 01 02:05:26.876034 2026] [proxy_fcgi:error] [pid 18773:tid 18788] [client 15.204.155.25:54819] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 02:55:59.581186 2026] [autoindex:error] [pid 39242:tid 39255] [client 51.68.111.243:30191] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 05:02:16.402748 2026] [autoindex:error] [pid 10506:tid 10533] [client 161.115.234.186:1711] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Sun Feb 01 05:02:17.340188 2026] [autoindex:error] [pid 10506:tid 10532] [client 161.115.239.214:9611] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com
[Sun Feb 01 05:03:50.391470 2026] [autoindex:error] [pid 10506:tid 10531] [client 161.115.234.9:17603] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Feb 01 07:13:15.027082 2026] [autoindex:error] [pid 10616:tid 10622] [client 93.158.71.185:45107] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 09:59:19.905259 2026] [proxy_fcgi:error] [pid 2033:tid 2048] [client 104.28.214.117:38011] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 11:10:00.363432 2026] [autoindex:error] [pid 2033:tid 2049] [client 35.89.208.31:58868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:10:06.830824 2026] [autoindex:error] [pid 51610:tid 51628] [client 35.89.208.31:35792] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 12:49:18.140045 2026] [:error] [pid 2033:tid 2043] [client 43.153.86.78:56590] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aX7bTvF7B4oR5nK3T_OaUwAAAQg"]
[Sun Feb 01 12:54:07.120899 2026] [autoindex:error] [pid 51610:tid 51629] [client 34.38.255.139:34546] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 13:21:08.121937 2026] [autoindex:error] [pid 51610:tid 51618] [client 98.93.185.45:44916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 14:59:02.528858 2026] [autoindex:error] [pid 10508:tid 10563] [client 5.133.192.135:40885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 15:07:11.765613 2026] [autoindex:error] [pid 10508:tid 10545] [client 66.249.68.128:47424] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 15:07:12.923779 2026] [autoindex:error] [pid 10616:tid 10641] [client 34.151.74.148:50392] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 15:43:23.835401 2026] [autoindex:error] [pid 10506:tid 10536] [client 109.199.118.129:40424] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 18:22:12.118444 2026] [autoindex:error] [pid 51610:tid 51627] [client 64.190.76.14:35544] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: cientifica.com.au
[Sun Feb 01 19:33:25.582498 2026] [autoindex:error] [pid 10506:tid 10519] [client 51.68.107.137:9393] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 19:56:21.624526 2026] [autoindex:error] [pid 10508:tid 10565] [client 190.55.6.132:42997] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 20:26:56.814186 2026] [:error] [pid 10616:tid 10632] [client 43.156.109.53:39160] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aX9GkGd8pZdmVx6pUp7yAAAAAMw"]
[Sun Feb 01 20:47:05.061052 2026] [autoindex:error] [pid 10509:tid 10576] [client 23.95.96.140:42570] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 21:32:41.888723 2026] [:error] [pid 10509:tid 10585] [client 37.139.53.198:65417] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cientifica.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cientifica.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX9V-VMNpJBihOJgwVsDkwAAAI4"]
[Sun Feb 01 22:01:43.207478 2026] [autoindex:error] [pid 51610:tid 51626] [client 185.117.225.4:49110] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 22:01:45.716926 2026] [autoindex:error] [pid 41454:tid 41477] [client 185.117.225.4:36384] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 22:02:56.462784 2026] [autoindex:error] [pid 29578:tid 29599] [client 35.167.131.64:55360] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 22:03:03.373598 2026] [autoindex:error] [pid 2033:tid 2063] [client 35.167.131.64:50036] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 22:11:21.566487 2026] [autoindex:error] [pid 10616:tid 10641] [client 82.29.178.87:40104] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 23:30:57.199663 2026] [:error] [pid 2033:tid 2043] [client 223.15.245.170:58990] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aX9xsfF7B4oR5nK3T_M14AAAAQg"]
[Sun Feb 01 23:50:19.656680 2026] [autoindex:error] [pid 29578:tid 29590] [client 192.71.126.26:44199] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 03:02:25.242039 2026] [:error] [pid 50507:tid 50537] [client 43.166.238.12:60224] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aX-jQcaUnsPeE1TDPmRuvwAAABg"]
[Mon Feb 02 07:08:46.563715 2026] [autoindex:error] [pid 63153:tid 63165] [client 146.174.189.26:45802] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 07:18:49.773497 2026] [autoindex:error] [pid 62826:tid 62842] [client 195.29.176.175:50505] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 08:47:36.368648 2026] [autoindex:error] [pid 33612:tid 33624] [client 34.220.208.135:55562] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 08:47:44.232224 2026] [autoindex:error] [pid 63033:tid 63115] [client 34.220.208.135:52222] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 09:18:11.383633 2026] [proxy_fcgi:error] [pid 63032:tid 63067] [client 104.28.203.58:29128] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 09:19:14.385142 2026] [:error] [pid 33612:tid 33636] [client 104.28.153.27:42742] [client 104.28.153.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aX_7kstFn80qQEmo5QqB4QAAARY"]
[Mon Feb 02 09:19:35.900408 2026] [:error] [pid 46008:tid 46015] [client 104.28.153.27:42928] [client 104.28.153.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aX_7pyRa52iYn7SlSMkTqQAAAUU"]
[Mon Feb 02 10:12:00.491817 2026] [:error] [pid 56989:tid 56992] [client 43.130.14.245:57050] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYAH8Ep44HnChN-GZlhK5gAAAgE"]
[Mon Feb 02 11:44:57.859576 2026] [proxy_fcgi:error] [pid 33612:tid 33629] [client 194.26.192.26:65531] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 11:46:06.021923 2026] [:error] [pid 57080:tid 57106] [client 49.51.178.45:38032] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYAd_o9Utn0ZlfnF10Pu6gAAAtM"]
[Mon Feb 02 11:49:13.851857 2026] [:error] [pid 63032:tid 63085] [client 185.241.211.8:64411] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYAeuXyEQ1PkpebvdRh5dQAAABY"]
[Mon Feb 02 11:49:14.277745 2026] [:error] [pid 63034:tid 63140] [client 185.241.211.8:64592] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYAeuuKXlgw75_wfbHpx1QAAAJY"]
[Mon Feb 02 11:49:14.708365 2026] [:error] [pid 57080:tid 57109] [client 185.241.211.8:64784] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYAeuo9Utn0ZlfnF10PvzAAAAtY"]
[Mon Feb 02 11:49:15.136564 2026] [:error] [pid 46008:tid 46028] [client 185.241.211.8:64979] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYAeuyRa52iYn7SlSMk4QAAAAVE"]
[Mon Feb 02 11:49:15.570051 2026] [:error] [pid 63153:tid 63182] [client 185.241.211.8:65137] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYAeu3C9GXHnmLkdgdkZ1AAAANU"]
[Mon Feb 02 11:52:35.501542 2026] [autoindex:error] [pid 57080:tid 57109] [client 34.216.175.253:56996] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 11:52:36.649621 2026] [autoindex:error] [pid 63032:tid 63071] [client 34.216.175.253:58260] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 11:52:37.026229 2026] [autoindex:error] [pid 57021:tid 57033] [client 34.216.175.253:10944] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 11:52:37.399873 2026] [autoindex:error] [pid 57081:tid 57120] [client 34.216.175.253:46184] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 11:57:07.290800 2026] [autoindex:error] [pid 33612:tid 33619] [client 37.19.223.245:51708] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 02 11:57:07.949375 2026] [autoindex:error] [pid 63153:tid 63183] [client 37.19.223.245:51830] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 02 11:57:14.341285 2026] [autoindex:error] [pid 46008:tid 46031] [client 77.242.177.57:36952] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 02 11:57:17.506279 2026] [autoindex:error] [pid 33612:tid 33627] [client 162.240.18.101:60940] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 02 11:57:18.765335 2026] [autoindex:error] [pid 57081:tid 57136] [client 154.16.115.97:41420] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 02 11:57:19.718741 2026] [autoindex:error] [pid 63153:tid 63170] [client 34.135.166.24:34548] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 02 12:34:12.653459 2026] [autoindex:error] [pid 46008:tid 46019] [client 66.249.68.136:50441] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 12:34:12.822324 2026] [autoindex:error] [pid 46008:tid 46031] [client 66.249.68.137:37266] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 13:00:50.155262 2026] [autoindex:error] [pid 33612:tid 33625] [client 138.68.180.18:57926] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 15:17:44.490799 2026] [autoindex:error] [pid 46008:tid 46021] [client 205.210.31.145:59942] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 15:20:03.558898 2026] [autoindex:error] [pid 56989:tid 56991] [client 205.210.31.38:59052] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 17:38:19.072596 2026] [autoindex:error] [pid 56989:tid 57002] [client 100.27.226.81:59194] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 17:38:19.482271 2026] [autoindex:error] [pid 33612:tid 33621] [client 100.27.226.81:53994] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 19:53:14.599777 2026] [:error] [pid 57022:tid 57067] [client 4.194.216.14:15509] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYCQKhnEgLMzfcurxflGQwAAAo8"]
[Mon Feb 02 19:53:15.005360 2026] [:error] [pid 63153:tid 63176] [client 4.194.216.14:2807] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYCQK3C9GXHnmLkdgdl-hgAAAM8"]
[Mon Feb 02 19:53:15.214276 2026] [:error] [pid 56989:tid 57015] [client 4.194.216.14:24137] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYCQK0p44HnChN-GZlgGggAAAhg"]
[Mon Feb 02 19:53:15.796303 2026] [:error] [pid 63034:tid 63132] [client 4.194.216.14:19296] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYCQK-KXlgw75_wfbHrWTgAAAI4"]
[Mon Feb 02 20:44:45.586261 2026] [autoindex:error] [pid 57081:tid 57139] [client 83.140.244.72:40747] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 20:59:33.576565 2026] [autoindex:error] [pid 56989:tid 57014] [client 43.225.189.64:60196] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 21:29:37.841219 2026] [autoindex:error] [pid 63153:tid 63179] [client 43.225.189.64:46294] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 21:56:27.657296 2026] [autoindex:error] [pid 57081:tid 57134] [client 84.246.85.11:40605] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 21:56:28.876017 2026] [autoindex:error] [pid 56989:tid 57007] [client 84.246.85.11:39473] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 21:56:29.809970 2026] [autoindex:error] [pid 56989:tid 57013] [client 84.246.85.11:54601] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 22:15:23.102511 2026] [autoindex:error] [pid 57021:tid 57035] [client 34.221.224.198:48668] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 23:16:15.816056 2026] [autoindex:error] [pid 57080:tid 57090] [client 192.126.253.240:42249] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 23:16:19.689423 2026] [autoindex:error] [pid 33612:tid 33633] [client 196.51.204.122:33506] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 23:16:21.468913 2026] [autoindex:error] [pid 63034:tid 63130] [client 196.51.204.122:55365] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 02 23:16:23.308723 2026] [autoindex:error] [pid 33612:tid 33626] [client 192.126.253.148:55694] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 00:42:13.614900 2026] [:error] [pid 63153:tid 63183] [client 43.166.226.57:49106] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYDT5XC9GXHnmLkdgdnZYgAAANY"]
[Tue Feb 03 06:02:52.289107 2026] [autoindex:error] [pid 28720:tid 28735] [client 100.24.208.151:1885] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 06:02:52.701778 2026] [autoindex:error] [pid 42920:tid 42939] [client 100.24.208.151:24058] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 07:29:43.255683 2026] [:error] [pid 28720:tid 28732] [client 43.157.22.109:44124] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYEzZ2mRXm2bmr_sYibkWQAAAQo"]
[Tue Feb 03 09:33:28.058153 2026] [autoindex:error] [pid 43028:tid 43054] [client 159.89.54.163:36670] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 12:35:35.048643 2026] [:error] [pid 28720:tid 28737] [client 43.135.133.194:57814] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYF7F2mRXm2bmr_sYiZNdAAAAQ8"]
[Tue Feb 03 16:27:34.365712 2026] [:error] [pid 5148:tid 5171] [client 114.96.103.33:52984] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYGxdr83HCHLtUIbS7KWcgAAAVQ"]
[Tue Feb 03 16:39:20.398495 2026] [autoindex:error] [pid 5148:tid 5175] [client 184.72.188.130:39428] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 19:01:35.750854 2026] [:error] [pid 42922:tid 42994] [client 185.194.178.46:34507] [client 185.194.178.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.46, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYHVj2azX4WPS_dQRkh8TAAAAIk"]
[Tue Feb 03 19:01:35.791859 2026] [proxy_fcgi:error] [pid 42922:tid 42994] [client 185.194.178.46:34507] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 19:06:42.032263 2026] [autoindex:error] [pid 43028:tid 43031] [client 159.89.239.144:43976] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 19:27:46.144336 2026] [:error] [pid 42920:tid 42941] [client 103.65.236.149:65005] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aYHbsiix3YKltG4EU0ls2QAAAAw"]
[Tue Feb 03 19:27:46.460415 2026] [:error] [pid 42920:tid 42931] [client 103.65.236.149:65053] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYHbsiix3YKltG4EU0ls2gAAAAI"]
[Tue Feb 03 21:20:15.125756 2026] [autoindex:error] [pid 28720:tid 28728] [client 66.160.173.194:52771] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 22:40:09.558821 2026] [autoindex:error] [pid 42920:tid 42941] [client 149.40.50.202:54020] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 23:10:36.118530 2026] [autoindex:error] [pid 42922:tid 43008] [client 149.40.50.202:36290] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 23:27:29.655512 2026] [:error] [pid 28720:tid 28733] [client 182.42.104.32:53010] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYIT4WmRXm2bmr_sYib5UQAAAQs"]
[Wed Feb 04 01:26:13.013074 2026] [:error] [pid 5229:tid 5237] [client 43.130.67.6:38430] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYIvtUKmEgmJub93yUpjhwAAAYY"]
[Wed Feb 04 03:04:10.623824 2026] [autoindex:error] [pid 43028:tid 43033] [client 34.170.231.104:62290] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 03:04:10.831439 2026] [autoindex:error] [pid 43028:tid 43045] [client 34.170.231.104:62290] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 03:04:11.254655 2026] [:error] [pid 43028:tid 43037] [client 34.170.231.104:62290] [client 34.170.231.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.231.104, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYJGq1nHWnJD4cJC5Ds5qgAAAMc"]
[Wed Feb 04 03:04:11.266042 2026] [proxy_fcgi:error] [pid 43028:tid 43037] [client 34.170.231.104:62290] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 03:04:11.523051 2026] [autoindex:error] [pid 43028:tid 43053] [client 34.170.231.104:62290] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 03:04:12.389780 2026] [:error] [pid 43028:tid 43031] [client 34.170.231.104:62290] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYJGrFnHWnJD4cJC5Ds5sAAAAME"]
[Wed Feb 04 03:04:12.832669 2026] [:error] [pid 28720:tid 28743] [client 34.170.231.104:62983] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYJGrGmRXm2bmr_sYiY1CgAAARU"]
[Wed Feb 04 03:04:13.263101 2026] [:error] [pid 42921:tid 42963] [client 34.170.231.104:62711] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYJGrYblShffGl-01ofa3QAAAEU"]
[Wed Feb 04 03:04:13.701068 2026] [:error] [pid 43028:tid 43033] [client 34.170.231.104:50161] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYJGrVnHWnJD4cJC5Ds5uAAAAMM"]
[Wed Feb 04 03:04:14.103201 2026] [:error] [pid 28720:tid 28739] [client 34.170.231.104:63385] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYJGrmmRXm2bmr_sYiY1DgAAARE"]
[Wed Feb 04 03:04:14.539969 2026] [:error] [pid 42922:tid 42997] [client 34.170.231.104:62675] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYJGrmazX4WPS_dQRkj8XgAAAIw"]
[Wed Feb 04 03:04:14.935769 2026] [:error] [pid 42920:tid 42947] [client 34.170.231.104:61519] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYJGriix3YKltG4EU0nk7QAAABI"]
[Wed Feb 04 03:04:15.353496 2026] [:error] [pid 5229:tid 5246] [client 34.170.231.104:57490] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYJGr0KmEgmJub93yUp4dwAAAY8"]
[Wed Feb 04 03:04:15.824827 2026] [:error] [pid 5148:tid 5158] [client 34.170.231.104:62548] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYJGr783HCHLtUIbS7JccwAAAUc"]
[Wed Feb 04 03:04:16.289185 2026] [:error] [pid 5148:tid 5165] [client 34.170.231.104:59905] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYJGsL83HCHLtUIbS7JcdgAAAU4"]
[Wed Feb 04 03:04:16.746943 2026] [:error] [pid 5148:tid 5175] [client 34.170.231.104:62821] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYJGsL83HCHLtUIbS7JcdwAAAVg"]
[Wed Feb 04 03:04:17.197654 2026] [:error] [pid 5148:tid 5162] [client 34.170.231.104:52956] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYJGsb83HCHLtUIbS7JceQAAAUs"]
[Wed Feb 04 03:04:17.671706 2026] [:error] [pid 42921:tid 42978] [client 34.170.231.104:57899] [client 34.170.231.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYJGsYblShffGl-01ofa5gAAAFQ"]
[Wed Feb 04 03:56:40.160006 2026] [autoindex:error] [pid 47578:tid 47627] [client 193.183.64.238:58913] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 04:23:40.744932 2026] [proxy_fcgi:error] [pid 47577:tid 47591] [client 20.204.114.82:9558] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 04:23:40.891198 2026] [proxy_fcgi:error] [pid 47577:tid 47583] [client 20.204.114.82:9558] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 04:23:41.339870 2026] [proxy_fcgi:error] [pid 47577:tid 47585] [client 20.204.114.82:9558] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 04:23:41.481198 2026] [proxy_fcgi:error] [pid 47577:tid 47604] [client 20.204.114.82:9558] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 04:23:41.909015 2026] [proxy_fcgi:error] [pid 47577:tid 47597] [client 20.204.114.82:9558] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 04:23:42.049603 2026] [proxy_fcgi:error] [pid 47577:tid 47586] [client 20.204.114.82:9558] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 04:23:42.328079 2026] [:error] [pid 47577:tid 47601] [client 20.204.114.82:9558] [client 20.204.114.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aYJZTqvA4Yp0Sov-3kTRZQAAABQ"]
[Wed Feb 04 04:23:42.884623 2026] [:error] [pid 18816:tid 18832] [client 20.204.114.82:5664] [client 20.204.114.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aYJZTsszZcOol_Iv-0UA-gAAAQ0"]
[Wed Feb 04 04:23:43.442920 2026] [:error] [pid 18816:tid 18830] [client 20.204.114.82:5645] [client 20.204.114.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aYJZT8szZcOol_Iv-0UA-wAAAQs"]
[Wed Feb 04 04:23:43.977917 2026] [:error] [pid 47579:tid 47645] [client 20.204.114.82:5039] [client 20.204.114.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/images/"] [unique_id "aYJZT_uxWks846_Vi2ybHgAAAIE"]
[Wed Feb 04 08:24:35.329528 2026] [:error] [pid 18816:tid 18822] [client 43.163.206.70:47828] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYKRw8szZcOol_Iv-0V3owAAAQM"]
[Wed Feb 04 08:32:21.262132 2026] [:error] [pid 47676:tid 47679] [client 45.92.1.79:54285] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYKTlQrYSkTgZEfUDqGkPQAAAME"]
[Wed Feb 04 08:32:21.924112 2026] [:error] [pid 47579:tid 47659] [client 45.92.1.79:54581] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYKTlfuxWks846_Vi2z1cQAAAI8"]
[Wed Feb 04 08:32:22.532241 2026] [:error] [pid 47577:tid 47582] [client 45.92.1.79:54905] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYKTlqvA4Yp0Sov-3kQtPQAAAAE"]
[Wed Feb 04 08:32:23.138376 2026] [:error] [pid 47579:tid 47650] [client 45.92.1.79:55156] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYKTl_uxWks846_Vi2z1gQAAAIY"]
[Wed Feb 04 08:32:23.720631 2026] [:error] [pid 47578:tid 47619] [client 45.92.1.79:55464] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYKTl55oatM9u8-yDv8mVQAAAEQ"]
[Wed Feb 04 10:11:01.767201 2026] [:error] [pid 47500:tid 47525] [client 170.106.193.108:60696] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYKqtbrUat0rhPdY3A1nkQAAAVU"]
[Wed Feb 04 11:21:45.033306 2026] [autoindex:error] [pid 8285:tid 8299] [client 207.231.104.154:60604] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:00.459232 2026] [autoindex:error] [pid 47500:tid 47511] [client 191.102.174.215:34358] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au
[Wed Feb 04 12:24:01.635847 2026] [autoindex:error] [pid 47500:tid 47510] [client 95.164.234.180:24000] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au
[Wed Feb 04 12:24:05.039907 2026] [autoindex:error] [pid 47500:tid 47522] [client 132.255.133.116:60652] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au
[Wed Feb 04 12:24:06.043633 2026] [autoindex:error] [pid 50578:tid 50602] [client 95.164.234.200:44998] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au
[Wed Feb 04 12:24:16.072811 2026] [autoindex:error] [pid 50578:tid 50595] [client 172.56.97.12:34965] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Wed Feb 04 12:24:18.220094 2026] [autoindex:error] [pid 47404:tid 47426] [client 96.165.108.23:40507] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Wed Feb 04 12:24:21.746175 2026] [autoindex:error] [pid 47500:tid 47527] [client 73.2.186.197:36096] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Wed Feb 04 12:24:25.553216 2026] [autoindex:error] [pid 50578:tid 50580] [client 115.64.67.40:4486] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com.au/
[Wed Feb 04 12:24:27.535090 2026] [autoindex:error] [pid 47406:tid 47475] [client 115.64.67.40:4494] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.cientifica.com.au/
[Wed Feb 04 12:24:30.336349 2026] [autoindex:error] [pid 47406:tid 47473] [client 103.76.239.127:24898] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://cientifica.com.au/
[Wed Feb 04 12:24:31.920352 2026] [autoindex:error] [pid 50578:tid 50604] [client 103.76.239.127:24902] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.cientifica.com.au/
[Wed Feb 04 12:24:34.515035 2026] [autoindex:error] [pid 8285:tid 8311] [client 149.115.134.242:42302] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com.au/
[Wed Feb 04 12:24:35.855675 2026] [autoindex:error] [pid 47404:tid 47426] [client 103.76.236.170:39580] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:38.274160 2026] [autoindex:error] [pid 50578:tid 50588] [client 103.76.237.24:13182] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:40.610609 2026] [autoindex:error] [pid 47500:tid 47528] [client 103.76.238.218:42838] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:43.259308 2026] [autoindex:error] [pid 47500:tid 47519] [client 103.73.53.209:14198] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:46.594777 2026] [autoindex:error] [pid 47405:tid 47442] [client 152.89.123.32:12068] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:50.098294 2026] [autoindex:error] [pid 8285:tid 8287] [client 103.76.238.47:42564] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:52.429932 2026] [autoindex:error] [pid 50578:tid 50581] [client 103.76.236.251:39498] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:53.810109 2026] [autoindex:error] [pid 50578:tid 50597] [client 103.76.239.229:5346] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:56.175348 2026] [autoindex:error] [pid 47405:tid 47445] [client 103.76.238.225:4208] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:24:58.741174 2026] [autoindex:error] [pid 47406:tid 47476] [client 85.209.205.31:17991] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:00.726002 2026] [autoindex:error] [pid 50578:tid 50593] [client 23.135.40.191:59907] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:02.494734 2026] [autoindex:error] [pid 47404:tid 47432] [client 158.51.229.238:52007] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:08.588244 2026] [autoindex:error] [pid 50578:tid 50589] [client 103.73.53.17:5864] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:10.306484 2026] [autoindex:error] [pid 50578:tid 50592] [client 103.73.53.169:14086] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:11.035981 2026] [autoindex:error] [pid 50578:tid 50596] [client 103.76.236.212:12818] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:12.747894 2026] [autoindex:error] [pid 8285:tid 8298] [client 103.76.238.38:61428] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.baidu.com.au/
[Wed Feb 04 12:25:13.395227 2026] [autoindex:error] [pid 47500:tid 47506] [client 103.76.238.38:61432] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Wed Feb 04 12:25:15.099694 2026] [autoindex:error] [pid 50578:tid 50598] [client 103.73.53.146:47300] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:15.813626 2026] [autoindex:error] [pid 8285:tid 8307] [client 103.76.239.117:12908] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:17.512704 2026] [autoindex:error] [pid 47406:tid 47467] [client 103.76.238.33:55454] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:22.307831 2026] [autoindex:error] [pid 47404:tid 47410] [client 149.115.155.63:58624] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:25:22.934650 2026] [autoindex:error] [pid 47405:tid 47455] [client 149.115.155.63:58628] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Wed Feb 04 12:25:24.668564 2026] [autoindex:error] [pid 47406:tid 47472] [client 103.76.236.206:47550] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:26.445413 2026] [autoindex:error] [pid 8285:tid 8311] [client 103.76.239.155:51260] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:29.111859 2026] [autoindex:error] [pid 47500:tid 47518] [client 103.76.236.38:18538] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:29.758077 2026] [autoindex:error] [pid 8285:tid 8302] [client 103.76.236.38:18548] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cientifica.com.au/
[Wed Feb 04 12:25:31.468984 2026] [autoindex:error] [pid 8285:tid 8304] [client 103.76.237.157:10754] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:25:32.391400 2026] [autoindex:error] [pid 50578:tid 50601] [client 193.34.75.26:29764] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au
[Wed Feb 04 12:25:33.085085 2026] [autoindex:error] [pid 8285:tid 8306] [client 170.247.220.165:28788] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au
[Wed Feb 04 12:25:33.565579 2026] [autoindex:error] [pid 47405:tid 47464] [client 170.247.221.80:24000] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au
[Wed Feb 04 12:25:34.689919 2026] [autoindex:error] [pid 50578:tid 50591] [client 45.86.19.228:44760] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au
[Wed Feb 04 12:25:36.928890 2026] [autoindex:error] [pid 47406:tid 47488] [client 96.188.173.91:33915] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:25:38.953852 2026] [autoindex:error] [pid 47406:tid 47486] [client 73.255.58.25:35064] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:25:41.530686 2026] [autoindex:error] [pid 50578:tid 50604] [client 98.41.232.74:36698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:25:43.179897 2026] [autoindex:error] [pid 47406:tid 47487] [client 96.188.251.28:2847] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:26:00.815118 2026] [autoindex:error] [pid 8285:tid 8302] [client 82.23.220.187:38265] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:26:03.041771 2026] [autoindex:error] [pid 47500:tid 47517] [client 64.137.48.175:33843] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:26:05.199683 2026] [autoindex:error] [pid 47404:tid 47415] [client 92.71.74.64:30550] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:26:11.944379 2026] [autoindex:error] [pid 47406:tid 47483] [client 85.8.157.203:63145] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:26:13.292398 2026] [autoindex:error] [pid 8285:tid 8301] [client 113.20.51.97:25769] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:26:16.444628 2026] [autoindex:error] [pid 50578:tid 50592] [client 186.179.14.42:26924] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:10.024938 2026] [autoindex:error] [pid 47405:tid 47462] [client 185.72.242.215:45637] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:12.194622 2026] [autoindex:error] [pid 8285:tid 8287] [client 206.83.131.157:48867] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:13.939770 2026] [autoindex:error] [pid 8285:tid 8304] [client 104.249.51.85:20952] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:17.082394 2026] [autoindex:error] [pid 47406:tid 47470] [client 191.102.170.87:36524] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:23.254896 2026] [autoindex:error] [pid 8285:tid 8299] [client 103.76.239.224:49828] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:27:23.924473 2026] [autoindex:error] [pid 47404:tid 47425] [client 103.76.239.224:49840] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:27:26.751677 2026] [autoindex:error] [pid 50578:tid 50586] [client 149.12.118.47:36566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com.au/
[Wed Feb 04 12:27:31.938735 2026] [autoindex:error] [pid 8285:tid 8295] [client 103.73.53.183:48230] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:27:32.662805 2026] [autoindex:error] [pid 47404:tid 47434] [client 103.73.53.183:48232] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Wed Feb 04 12:27:36.904040 2026] [autoindex:error] [pid 47406:tid 47487] [client 1.120.112.106:54358] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:41.733234 2026] [autoindex:error] [pid 47404:tid 47423] [client 118.210.6.74:36218] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:43.671670 2026] [autoindex:error] [pid 8285:tid 8300] [client 168.81.45.22:59788] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:47.093262 2026] [autoindex:error] [pid 8285:tid 8292] [client 168.81.45.22:59988] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:27:56.413496 2026] [autoindex:error] [pid 8285:tid 8296] [client 89.23.81.208:53159] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:28:00.759775 2026] [autoindex:error] [pid 50578:tid 50590] [client 149.167.2.243:1406] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 12:28:04.508376 2026] [autoindex:error] [pid 47500:tid 47518] [client 149.167.2.243:1412] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 13:53:58.992956 2026] [autoindex:error] [pid 47406:tid 47484] [client 203.129.150.239:61079] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 13:54:30.017115 2026] [autoindex:error] [pid 47500:tid 47508] [client 172.225.114.65:44260] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 14:35:56.065361 2026] [proxy_fcgi:error] [pid 47404:tid 47419] [client 203.159.90.184:60177] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 15:11:21.627995 2026] [:error] [pid 47500:tid 47514] [client 43.159.136.201:55422] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYLxGbrUat0rhPdY3A3E3gAAAUo"]
[Wed Feb 04 17:20:34.662039 2026] [autoindex:error] [pid 47404:tid 47427] [client 104.28.108.2:64283] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 17:58:28.192269 2026] [proxy_fcgi:error] [pid 47406:tid 47469] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:28.821385 2026] [proxy_fcgi:error] [pid 47406:tid 47473] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:29.152887 2026] [proxy_fcgi:error] [pid 47406:tid 47475] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:29.867843 2026] [proxy_fcgi:error] [pid 47406:tid 47470] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:30.355512 2026] [proxy_fcgi:error] [pid 47406:tid 47486] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:30.659210 2026] [proxy_fcgi:error] [pid 47406:tid 47478] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:31.002479 2026] [proxy_fcgi:error] [pid 47406:tid 47481] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:31.157417 2026] [proxy_fcgi:error] [pid 47406:tid 47490] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:31.594111 2026] [proxy_fcgi:error] [pid 47406:tid 47483] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:31.742816 2026] [proxy_fcgi:error] [pid 47406:tid 47469] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:32.210649 2026] [proxy_fcgi:error] [pid 47406:tid 47471] [client 20.89.135.129:8402] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 17:58:32.323874 2026] [:error] [pid 47406:tid 47473] [client 20.89.135.129:8402] [client 20.89.135.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aYMYSAeu9R9b-_wtQ0IVZgAAAQY"]
[Wed Feb 04 17:58:32.787136 2026] [:error] [pid 47404:tid 47421] [client 20.89.135.129:2123] [client 20.89.135.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aYMYSFtGjJnGFKjTTub6awAAAIs"]
[Wed Feb 04 17:58:33.289226 2026] [:error] [pid 55160:tid 55171] [client 20.89.135.129:2520] [client 20.89.135.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aYMYSeTAiAYDLSDaxdcIpwAAAYk"]
[Wed Feb 04 17:58:33.788438 2026] [:error] [pid 47404:tid 47429] [client 20.89.135.129:2536] [client 20.89.135.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/r.php"] [unique_id "aYMYSVtGjJnGFKjTTub6bQAAAJM"]
[Wed Feb 04 19:38:02.784586 2026] [autoindex:error] [pid 47404:tid 47419] [client 34.206.74.121:4684] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 21:46:49.401850 2026] [autoindex:error] [pid 55160:tid 55171] [client 145.220.91.19:46574] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 23:09:35.041154 2026] [autoindex:error] [pid 63685:tid 63729] [client 47.252.21.203:34667] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 23:17:37.293490 2026] [autoindex:error] [pid 63777:tid 63790] [client 192.36.121.172:38719] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 00:28:40.566108 2026] [autoindex:error] [pid 6490:tid 6513] [client 89.37.173.44:40614] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 00:28:42.025559 2026] [autoindex:error] [pid 63686:tid 63755] [client 185.246.208.183:51972] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 00:28:43.735244 2026] [autoindex:error] [pid 63684:tid 63706] [client 89.25.35.71:60549] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 00:28:45.260105 2026] [autoindex:error] [pid 63685:tid 63718] [client 212.102.44.119:54488] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 02:56:08.382772 2026] [:error] [pid 63685:tid 63725] [client 217.77.10.74:57677] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYOWSI6Dyg716yRb8FC_8wAAAMk"]
[Thu Feb 05 07:34:15.668507 2026] [:error] [pid 12189:tid 12262] [client 193.111.248.121:63789] [client 193.111.248.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.111.248.121, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYPXd710V_VY_a0vRT6Y4gAAAIs"]
[Thu Feb 05 07:34:15.679519 2026] [proxy_fcgi:error] [pid 12189:tid 12262] [client 193.111.248.121:63789] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 07:51:09.697230 2026] [autoindex:error] [pid 12188:tid 12245] [client 43.225.189.101:44392] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 08:14:32.653220 2026] [autoindex:error] [pid 50182:tid 50202] [client 85.120.81.103:46318] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 08:51:05.855965 2026] [autoindex:error] [pid 50183:tid 50218] [client 43.225.189.101:42856] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 09:43:08.475846 2026] [autoindex:error] [pid 12392:tid 12399] [client 47.252.21.241:42075] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 10:30:53.506515 2026] [:error] [pid 31775:tid 31807] [client 45.92.1.79:63099] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYQA3RNlTj92HTKsJN1t3wAAAQI"]
[Thu Feb 05 10:30:54.115165 2026] [:error] [pid 31833:tid 31856] [client 45.92.1.79:63559] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYQA3hzypZt5yekRAkGjOQAAAZU"]
[Thu Feb 05 10:30:54.733912 2026] [:error] [pid 33122:tid 33145] [client 45.92.1.79:63990] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYQA3vW0IebAnFB9KDCT0QAAAFU"]
[Thu Feb 05 10:30:55.548735 2026] [:error] [pid 31775:tid 31819] [client 45.92.1.79:64421] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYQA3xNlTj92HTKsJN1uCwAAAQ4"]
[Thu Feb 05 10:30:56.243733 2026] [:error] [pid 33396:tid 33415] [client 45.92.1.79:64835] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYQA4PTgp_Ev6LiSSgAptQAAAMw"]
[Thu Feb 05 10:47:42.757328 2026] [autoindex:error] [pid 31833:tid 31842] [client 74.7.227.187:35972] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 12:50:46.183258 2026] [autoindex:error] [pid 31774:tid 31788] [client 54.174.62.169:29937] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 14:51:02.138252 2026] [:error] [pid 31774:tid 31796] [client 192.253.209.155:26883] [client 192.253.209.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.253.209.155, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYQ91qjDlLg1NOhSOXXmhgAAAJI"]
[Thu Feb 05 14:51:02.147913 2026] [proxy_fcgi:error] [pid 31774:tid 31796] [client 192.253.209.155:26883] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 15:20:58.837917 2026] [:error] [pid 31833:tid 31848] [client 182.43.70.143:54427] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYRE2hzypZt5yekRAkEWcQAAAY0"]
[Thu Feb 05 15:54:27.331805 2026] [autoindex:error] [pid 33122:tid 33131] [client 34.177.100.148:54650] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 17:41:25.834681 2026] [:error] [pid 19246:tid 19251] [client 149.57.191.68:46106] [client 149.57.191.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.57.191.68, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYRlxXE1Gc0V44f4mCckbwAAAgA"]
[Thu Feb 05 17:41:25.846196 2026] [proxy_fcgi:error] [pid 19246:tid 19251] [client 149.57.191.68:46106] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 18:33:06.143385 2026] [:error] [pid 14577:tid 14590] [client 43.153.19.83:39552] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYRx4pZbKwRdMc_HlgJp8AAAAUs"]
[Thu Feb 05 18:45:11.288997 2026] [:error] [pid 31774:tid 31787] [client 37.27.119.185:52694] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYR0t6jDlLg1NOhSOXUcLAAAAIk"], referer: https://www.sogou.com
[Thu Feb 05 18:45:11.895607 2026] [:error] [pid 19213:tid 19242] [client 37.27.119.185:53361] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYR0t17WBXhXgHKWAIBM4wAAAdg"], referer: https://www.reddit.com/r/science
[Thu Feb 05 18:45:13.507124 2026] [:error] [pid 31774:tid 31785] [client 37.27.119.185:53877] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYR0uajDlLg1NOhSOXUcMQAAAIc"], referer: https://www.netflix.com
[Thu Feb 05 18:45:14.155232 2026] [:error] [pid 33122:tid 33147] [client 37.27.119.185:54544] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYR0uvW0IebAnFB9KDAUAwAAAFc"], referer: https://www.expedia.com
[Thu Feb 05 19:39:22.823890 2026] [autoindex:error] [pid 33396:tid 33406] [client 34.177.100.148:34544] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 22:35:40.548411 2026] [proxy_fcgi:error] [pid 19246:tid 19260] [client 20.65.110.35:4547] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 23:48:26.671770 2026] [autoindex:error] [pid 31739:tid 31743] [client 37.214.17.242:2156] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 23:48:28.006407 2026] [autoindex:error] [pid 31739:tid 31762] [client 37.214.17.242:2156] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 02:21:48.278044 2026] [autoindex:error] [pid 11122:tid 11170] [client 136.112.169.39:58356] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 02:21:48.492320 2026] [autoindex:error] [pid 11122:tid 11172] [client 136.112.169.39:58356] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 02:21:48.963965 2026] [:error] [pid 11122:tid 11175] [client 136.112.169.39:58356] [client 136.112.169.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.169.39, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTfvD0RBzI4cnzjYXLAqwAAAJI"]
[Fri Feb 06 02:21:48.974041 2026] [proxy_fcgi:error] [pid 11122:tid 11175] [client 136.112.169.39:58356] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 02:21:49.282499 2026] [autoindex:error] [pid 11122:tid 11166] [client 136.112.169.39:58356] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 02:21:50.266046 2026] [:error] [pid 11122:tid 11156] [client 136.112.169.39:58356] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYTfvj0RBzI4cnzjYXLAsQAAAIA"]
[Fri Feb 06 02:21:50.779564 2026] [:error] [pid 39858:tid 39866] [client 136.112.169.39:54405] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYTfvvNde7AItnr98t34IwAAAUQ"]
[Fri Feb 06 02:21:51.201302 2026] [:error] [pid 64116:tid 64123] [client 136.112.169.39:49661] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYTfv7q-pUXYJUX2oz8YrQAAAMA"]
[Fri Feb 06 02:21:51.625423 2026] [:error] [pid 11459:tid 11521] [client 136.112.169.39:55777] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYTfv5n3t_QGiBnEMgMhOgAAAEo"]
[Fri Feb 06 02:21:52.112836 2026] [:error] [pid 64116:tid 64145] [client 136.112.169.39:59289] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwLq-pUXYJUX2oz8YrgAAANY"]
[Fri Feb 06 02:21:52.590693 2026] [:error] [pid 39858:tid 39873] [client 136.112.169.39:61256] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwPNde7AItnr98t34KQAAAUs"]
[Fri Feb 06 02:21:53.155449 2026] [:error] [pid 39858:tid 39884] [client 136.112.169.39:65487] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwfNde7AItnr98t34LwAAAVY"]
[Fri Feb 06 02:21:53.586597 2026] [:error] [pid 39858:tid 39882] [client 136.112.169.39:53194] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwfNde7AItnr98t34NwAAAVQ"]
[Fri Feb 06 02:21:54.159943 2026] [:error] [pid 39858:tid 39863] [client 136.112.169.39:50058] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwvNde7AItnr98t34OwAAAUE"]
[Fri Feb 06 02:21:54.575260 2026] [:error] [pid 64116:tid 64135] [client 136.112.169.39:62064] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwrq-pUXYJUX2oz8YrwAAAMw"]
[Fri Feb 06 02:21:55.013911 2026] [:error] [pid 64116:tid 64137] [client 136.112.169.39:59521] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYTfw7q-pUXYJUX2oz8YsAAAAM4"]
[Fri Feb 06 02:21:55.511892 2026] [:error] [pid 11121:tid 11135] [client 136.112.169.39:60341] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYTfwxEsbmrTJ-7kOtb7KQAAAAk"]
[Fri Feb 06 02:21:56.095159 2026] [:error] [pid 64116:tid 64134] [client 136.112.169.39:63643] [client 136.112.169.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYTfxLq-pUXYJUX2oz8YtQAAAMs"]
[Fri Feb 06 04:38:44.524013 2026] [proxy_fcgi:error] [pid 34582:tid 34585] [client 20.65.101.77:7165] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:04:28.686279 2026] [autoindex:error] [pid 34582:tid 34596] [client 93.158.90.65:56669] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 05:34:22.294788 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:22.753041 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:22.963949 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:23.382928 2026] [proxy_fcgi:error] [pid 34582:tid 34607] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:23.591684 2026] [proxy_fcgi:error] [pid 34582:tid 34600] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:23.815439 2026] [proxy_fcgi:error] [pid 34582:tid 34602] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:24.051600 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:24.378876 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:24.608908 2026] [proxy_fcgi:error] [pid 34582:tid 34592] [client 4.204.244.206:61485] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:34:24.914680 2026] [:error] [pid 34582:tid 34609] [client 4.204.244.206:61485] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aYUM4ODeJq1JGssYG6x0xwAAARg"]
[Fri Feb 06 05:34:26.015926 2026] [:error] [pid 1664:tid 1708] [client 4.204.244.206:61495] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aYUM4u_0lM6yA3VnvQVxWwAAAEg"]
[Fri Feb 06 05:34:26.733141 2026] [:error] [pid 1665:tid 1733] [client 4.204.244.206:61495] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aYUM4jYZLE6gThXvZMqZ7wAAAIY"]
[Fri Feb 06 05:34:27.583796 2026] [:error] [pid 1773:tid 1788] [client 4.204.244.206:61460] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ynz.PhP7"] [unique_id "aYUM4zYbySBHYmKOdJ-nAgAAAMU"]
[Fri Feb 06 05:34:28.412811 2026] [:error] [pid 34582:tid 34588] [client 4.204.244.206:61474] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/include.php"] [unique_id "aYUM5ODeJq1JGssYG6x0ygAAAQM"]
[Fri Feb 06 05:34:29.080229 2026] [:error] [pid 1664:tid 1718] [client 4.204.244.206:61492] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/include.php"] [unique_id "aYUM5e_0lM6yA3VnvQVxXwAAAFI"]
[Fri Feb 06 05:34:30.361204 2026] [:error] [pid 1773:tid 1805] [client 4.204.244.206:59241] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/include.php"] [unique_id "aYUM5jYbySBHYmKOdJ-nDAAAANY"]
[Fri Feb 06 05:34:31.247118 2026] [:error] [pid 1663:tid 1675] [client 4.204.244.206:61469] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/include.php"] [unique_id "aYUM519EQrJaKkABjK-aawAAAAI"]
[Fri Feb 06 05:34:35.538047 2026] [:error] [pid 34582:tid 34605] [client 4.204.244.206:59203] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aYUM6-DeJq1JGssYG6x02AAAARQ"]
[Fri Feb 06 05:34:38.408801 2026] [:error] [pid 1665:tid 1733] [client 4.204.244.206:59205] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aYUM7jYZLE6gThXvZMqZ_wAAAIY"]
[Fri Feb 06 05:34:52.855832 2026] [:error] [pid 34582:tid 34588] [client 4.204.244.206:59223] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aYUM_ODeJq1JGssYG6x1BQAAAQM"]
[Fri Feb 06 05:34:55.240860 2026] [:error] [pid 34582:tid 34588] [client 4.204.244.206:59222] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aYUM_-DeJq1JGssYG6x1FgAAAQM"]
[Fri Feb 06 05:35:16.128972 2026] [:error] [pid 1664:tid 1716] [client 4.204.244.206:61524] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aYUNFO_0lM6yA3VnvQVxjgAAAFA"]
[Fri Feb 06 05:35:18.633693 2026] [:error] [pid 1663:tid 1690] [client 4.204.244.206:59237] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aYUNFl9EQrJaKkABjK-atAAAABE"]
[Fri Feb 06 05:35:19.732778 2026] [:error] [pid 1773:tid 1793] [client 4.204.244.206:59200] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index.php"] [unique_id "aYUNFzYbySBHYmKOdJ-nUAAAAMo"]
[Fri Feb 06 05:35:24.186657 2026] [proxy_fcgi:error] [pid 34582:tid 34600] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:24.513226 2026] [proxy_fcgi:error] [pid 34582:tid 34603] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:24.799352 2026] [proxy_fcgi:error] [pid 34582:tid 34608] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:25.240470 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:25.453642 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:25.665853 2026] [proxy_fcgi:error] [pid 34582:tid 34592] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:25.878160 2026] [proxy_fcgi:error] [pid 34582:tid 34609] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:26.096875 2026] [proxy_fcgi:error] [pid 34582:tid 34593] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:26.369630 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:26.585598 2026] [proxy_fcgi:error] [pid 34582:tid 34585] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:26.868474 2026] [proxy_fcgi:error] [pid 34582:tid 34606] [client 4.204.244.206:59244] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:35:27.129805 2026] [:error] [pid 34582:tid 34588] [client 4.204.244.206:59244] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-files.php"] [unique_id "aYUNH-DeJq1JGssYG6x1UgAAAQM"]
[Fri Feb 06 05:35:27.906925 2026] [:error] [pid 1663:tid 1686] [client 4.204.244.206:61464] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-files.php"] [unique_id "aYUNH19EQrJaKkABjK-a5AAAAA0"]
[Fri Feb 06 05:35:28.836172 2026] [:error] [pid 1665:tid 1735] [client 4.204.244.206:61523] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-files.php"] [unique_id "aYUNIDYZLE6gThXvZMqadQAAAIg"]
[Fri Feb 06 05:35:29.983006 2026] [:error] [pid 1665:tid 1731] [client 4.204.244.206:61477] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-files.php"] [unique_id "aYUNITYZLE6gThXvZMqaeQAAAIQ"]
[Fri Feb 06 05:35:31.236607 2026] [:error] [pid 1664:tid 1704] [client 4.204.244.206:61504] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media.php"] [unique_id "aYUNI-_0lM6yA3VnvQVxsQAAAEQ"]
[Fri Feb 06 05:35:32.927953 2026] [:error] [pid 1663:tid 1673] [client 4.204.244.206:61473] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media.php"] [unique_id "aYUNJF9EQrJaKkABjK-a7gAAAAA"]
[Fri Feb 06 05:35:34.444872 2026] [:error] [pid 34582:tid 34601] [client 4.204.244.206:61544] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media.php"] [unique_id "aYUNJuDeJq1JGssYG6x1WAAAARA"]
[Fri Feb 06 05:35:40.065510 2026] [:error] [pid 34582:tid 34601] [client 4.204.244.206:59231] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/media.php"] [unique_id "aYUNLODeJq1JGssYG6x1ZwAAARA"]
[Fri Feb 06 05:35:44.502910 2026] [:error] [pid 34582:tid 34596] [client 4.204.244.206:59148] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aYUNMODeJq1JGssYG6x1oQAAAQs"]
[Fri Feb 06 05:35:48.363131 2026] [:error] [pid 34582:tid 34586] [client 4.204.244.206:59256] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aYUNNODeJq1JGssYG6x1zQAAAQE"]
[Fri Feb 06 05:35:54.271011 2026] [:error] [pid 1664:tid 1715] [client 4.204.244.206:61463] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aYUNOu_0lM6yA3VnvQVx9wAAAE8"]
[Fri Feb 06 05:35:56.096041 2026] [:error] [pid 1663:tid 1688] [client 4.204.244.206:59235] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aYUNPF9EQrJaKkABjK-bNQAAAA8"]
[Fri Feb 06 05:35:57.369481 2026] [:error] [pid 1663:tid 1679] [client 4.204.244.206:61458] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aYUNPV9EQrJaKkABjK-bNwAAAAY"]
[Fri Feb 06 05:36:05.139110 2026] [:error] [pid 34582:tid 34602] [client 4.204.244.206:61480] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aYUNReDeJq1JGssYG6x16wAAARE"]
[Fri Feb 06 05:36:07.728161 2026] [:error] [pid 1664:tid 1719] [client 4.204.244.206:61501] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aYUNR-_0lM6yA3VnvQVyCgAAAFM"]
[Fri Feb 06 05:36:08.841686 2026] [:error] [pid 34582:tid 34607] [client 4.204.244.206:59257] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aYUNSODeJq1JGssYG6x19AAAARY"]
[Fri Feb 06 05:36:10.223731 2026] [:error] [pid 34582:tid 34595] [client 4.204.244.206:59154] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aYUNSuDeJq1JGssYG6x1-AAAAQo"]
[Fri Feb 06 05:36:11.810474 2026] [:error] [pid 1665:tid 1736] [client 4.204.244.206:61514] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aYUNSzYZLE6gThXvZMqa3QAAAIk"]
[Fri Feb 06 05:36:16.264420 2026] [:error] [pid 1663:tid 1673] [client 4.204.244.206:61489] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/6.php"] [unique_id "aYUNUF9EQrJaKkABjK-bSwAAAAA"]
[Fri Feb 06 05:36:19.094175 2026] [:error] [pid 1663:tid 1688] [client 4.204.244.206:61449] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aYUNU19EQrJaKkABjK-bTgAAAA8"]
[Fri Feb 06 05:36:21.753537 2026] [:error] [pid 34582:tid 34585] [client 4.204.244.206:61457] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aYUNVeDeJq1JGssYG6x2FQAAAQA"]
[Fri Feb 06 05:36:23.041523 2026] [:error] [pid 34582:tid 34593] [client 4.204.244.206:61562] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aYUNV-DeJq1JGssYG6x2GwAAAQg"]
[Fri Feb 06 05:36:24.267300 2026] [:error] [pid 34582:tid 34587] [client 4.204.244.206:59209] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abe.php"] [unique_id "aYUNWODeJq1JGssYG6x2HAAAAQI"]
[Fri Feb 06 05:36:28.213013 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:28.445597 2026] [proxy_fcgi:error] [pid 34582:tid 34607] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:28.653217 2026] [:error] [pid 34582:tid 34602] [client 4.204.244.206:59143] [client 4.204.244.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.244.206, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYUNXODeJq1JGssYG6x2JwAAARE"]
[Fri Feb 06 05:36:28.658399 2026] [proxy_fcgi:error] [pid 34582:tid 34602] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:28.869569 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:29.089928 2026] [proxy_fcgi:error] [pid 34582:tid 34589] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:29.461794 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:29.828016 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:30.348942 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:30.684628 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:30.970490 2026] [proxy_fcgi:error] [pid 34582:tid 34596] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:31.540457 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 4.204.244.206:59143] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:36:31.759339 2026] [:error] [pid 34582:tid 34600] [client 4.204.244.206:59143] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php7"] [unique_id "aYUNX-DeJq1JGssYG6x2OAAAAQ8"]
[Fri Feb 06 05:36:33.116448 2026] [:error] [pid 1773:tid 1791] [client 4.204.244.206:61516] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php7"] [unique_id "aYUNYTYbySBHYmKOdJ-nqgAAAMg"]
[Fri Feb 06 05:36:35.166786 2026] [:error] [pid 34582:tid 34590] [client 4.204.244.206:61461] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php7"] [unique_id "aYUNY-DeJq1JGssYG6x2QQAAAQU"]
[Fri Feb 06 05:36:36.015039 2026] [:error] [pid 1663:tid 1682] [client 4.204.244.206:58089] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/t.php7"] [unique_id "aYUNZF9EQrJaKkABjK-bZQAAAAk"]
[Fri Feb 06 05:36:38.064750 2026] [:error] [pid 1665:tid 1739] [client 4.204.244.206:59254] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aYUNZjYZLE6gThXvZMqbAgAAAIw"]
[Fri Feb 06 05:36:41.560114 2026] [:error] [pid 1663:tid 1690] [client 4.204.244.206:61451] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aYUNaV9EQrJaKkABjK-bdAAAABE"]
[Fri Feb 06 05:36:43.629164 2026] [:error] [pid 1664:tid 1721] [client 4.204.244.206:61453] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aYUNa-_0lM6yA3VnvQVyNAAAAFU"]
[Fri Feb 06 05:36:47.219675 2026] [:error] [pid 1664:tid 1707] [client 4.204.244.206:61515] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/moon.php"] [unique_id "aYUNb-_0lM6yA3VnvQVyOAAAAEc"]
[Fri Feb 06 05:36:53.805989 2026] [:error] [pid 1773:tid 1784] [client 4.204.244.206:61547] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/priv.php"] [unique_id "aYUNdTYbySBHYmKOdJ-nzAAAAMM"]
[Fri Feb 06 05:36:56.123979 2026] [:error] [pid 1665:tid 1750] [client 4.204.244.206:59153] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/priv.php"] [unique_id "aYUNeDYZLE6gThXvZMqbEgAAAJc"]
[Fri Feb 06 05:36:57.462445 2026] [:error] [pid 34582:tid 34605] [client 4.204.244.206:59169] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/priv.php"] [unique_id "aYUNeeDeJq1JGssYG6x2XAAAARQ"]
[Fri Feb 06 05:37:05.359004 2026] [:error] [pid 1663:tid 1697] [client 4.204.244.206:61441] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aYUNgV9EQrJaKkABjK-bhgAAABg"]
[Fri Feb 06 05:37:06.368386 2026] [:error] [pid 34582:tid 34587] [client 4.204.244.206:59245] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aYUNguDeJq1JGssYG6x2eAAAAQI"]
[Fri Feb 06 05:37:09.284638 2026] [:error] [pid 1773:tid 1783] [client 4.204.244.206:59149] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aYUNhTYbySBHYmKOdJ-n6AAAAMI"]
[Fri Feb 06 05:37:13.848754 2026] [:error] [pid 1663:tid 1689] [client 4.204.244.206:59207] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aYUNiV9EQrJaKkABjK-bkAAAABA"]
[Fri Feb 06 05:37:15.990639 2026] [:error] [pid 34582:tid 34594] [client 4.204.244.206:61483] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aYUNi-DeJq1JGssYG6x2gQAAAQk"]
[Fri Feb 06 05:37:17.639975 2026] [:error] [pid 1663:tid 1689] [client 4.204.244.206:61543] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aYUNjV9EQrJaKkABjK-bngAAABA"]
[Fri Feb 06 05:37:19.285797 2026] [:error] [pid 34582:tid 34601] [client 4.204.244.206:59156] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aYUNj-DeJq1JGssYG6x2hQAAARA"]
[Fri Feb 06 05:37:25.836248 2026] [:error] [pid 34582:tid 34606] [client 4.204.244.206:61529] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/post.php"] [unique_id "aYUNleDeJq1JGssYG6x2kAAAARU"]
[Fri Feb 06 05:37:26.698603 2026] [:error] [pid 34582:tid 34605] [client 4.204.244.206:61466] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aYUNluDeJq1JGssYG6x2kQAAARQ"]
[Fri Feb 06 05:37:28.376500 2026] [:error] [pid 1665:tid 1727] [client 4.204.244.206:59249] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aYUNmDYZLE6gThXvZMqbPAAAAIA"]
[Fri Feb 06 05:37:29.636646 2026] [:error] [pid 1665:tid 1749] [client 4.204.244.206:58048] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-file.php"] [unique_id "aYUNmTYZLE6gThXvZMqbPwAAAJY"]
[Fri Feb 06 05:37:31.666448 2026] [proxy_fcgi:error] [pid 1665:tid 1743] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:31.877455 2026] [proxy_fcgi:error] [pid 1665:tid 1742] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:33.441963 2026] [proxy_fcgi:error] [pid 1665:tid 1748] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:33.687934 2026] [proxy_fcgi:error] [pid 1665:tid 1731] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:33.902722 2026] [proxy_fcgi:error] [pid 1665:tid 1750] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:34.182124 2026] [proxy_fcgi:error] [pid 1665:tid 1744] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:34.461301 2026] [proxy_fcgi:error] [pid 1665:tid 1727] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:34.799244 2026] [proxy_fcgi:error] [pid 1665:tid 1749] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:35.008390 2026] [proxy_fcgi:error] [pid 1665:tid 1739] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:35.216892 2026] [proxy_fcgi:error] [pid 1665:tid 1737] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:35.630792 2026] [proxy_fcgi:error] [pid 1665:tid 1736] [client 4.204.244.206:61565] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:37:36.098731 2026] [:error] [pid 1665:tid 1729] [client 4.204.244.206:61565] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aYUNoDYZLE6gThXvZMqbVQAAAII"]
[Fri Feb 06 05:37:40.525081 2026] [:error] [pid 1663:tid 1676] [client 4.204.244.206:59233] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aYUNpF9EQrJaKkABjK-bvwAAAAM"]
[Fri Feb 06 05:37:47.849974 2026] [:error] [pid 1773:tid 1783] [client 4.204.244.206:61486] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aYUNqzYbySBHYmKOdJ-oVAAAAMI"]
[Fri Feb 06 05:37:49.706782 2026] [:error] [pid 34582:tid 34585] [client 4.204.244.206:61448] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-links-opml.php"] [unique_id "aYUNreDeJq1JGssYG6x2vwAAAQA"]
[Fri Feb 06 05:37:52.778563 2026] [:error] [pid 1664:tid 1719] [client 4.204.244.206:59230] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/faq.php"] [unique_id "aYUNsO_0lM6yA3VnvQVyjQAAAFM"]
[Fri Feb 06 05:37:55.199808 2026] [:error] [pid 34582:tid 34597] [client 4.204.244.206:58057] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/faq.php"] [unique_id "aYUNs-DeJq1JGssYG6x2yQAAAQw"]
[Fri Feb 06 05:37:57.291609 2026] [:error] [pid 1773:tid 1799] [client 4.204.244.206:59218] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/faq.php"] [unique_id "aYUNtTYbySBHYmKOdJ-oZQAAANA"]
[Fri Feb 06 05:37:59.234698 2026] [:error] [pid 34582:tid 34608] [client 4.204.244.206:59239] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/faq.php"] [unique_id "aYUNt-DeJq1JGssYG6x20gAAARc"]
[Fri Feb 06 05:38:02.147712 2026] [:error] [pid 34582:tid 34590] [client 4.204.244.206:61468] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/landing.php"] [unique_id "aYUNuuDeJq1JGssYG6x22QAAAQU"]
[Fri Feb 06 05:38:03.349948 2026] [:error] [pid 1773:tid 1788] [client 4.204.244.206:58071] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/landing.php"] [unique_id "aYUNuzYbySBHYmKOdJ-ocQAAAMU"]
[Fri Feb 06 05:38:06.200817 2026] [:error] [pid 1773:tid 1797] [client 4.204.244.206:61517] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/landing.php"] [unique_id "aYUNvjYbySBHYmKOdJ-oegAAAM4"]
[Fri Feb 06 05:38:07.067784 2026] [:error] [pid 34582:tid 34604] [client 4.204.244.206:59242] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/landing.php"] [unique_id "aYUNv-DeJq1JGssYG6x27AAAARM"]
[Fri Feb 06 05:38:08.673070 2026] [:error] [pid 1773:tid 1807] [client 4.204.244.206:59155] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aYUNwDYbySBHYmKOdJ-ofQAAANg"]
[Fri Feb 06 05:38:09.445699 2026] [:error] [pid 1663:tid 1677] [client 4.204.244.206:57997] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aYUNwV9EQrJaKkABjK-b5wAAAAQ"]
[Fri Feb 06 05:38:10.171732 2026] [:error] [pid 1663:tid 1692] [client 4.204.244.206:59202] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aYUNwl9EQrJaKkABjK-b6AAAABM"]
[Fri Feb 06 05:38:11.630210 2026] [:error] [pid 1773:tid 1801] [client 4.204.244.206:59180] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aYUNwzYbySBHYmKOdJ-oiQAAANI"]
[Fri Feb 06 05:38:13.167326 2026] [:error] [pid 1773:tid 1797] [client 4.204.244.206:61537] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin_250714203832.php"] [unique_id "aYUNxTYbySBHYmKOdJ-ojQAAAM4"]
[Fri Feb 06 05:38:14.856263 2026] [:error] [pid 1665:tid 1731] [client 4.204.244.206:59139] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin_250714203832.php"] [unique_id "aYUNxjYZLE6gThXvZMqbdwAAAIQ"]
[Fri Feb 06 05:38:16.446762 2026] [:error] [pid 1773:tid 1793] [client 4.204.244.206:59262] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin_250714203832.php"] [unique_id "aYUNyDYbySBHYmKOdJ-olgAAAMo"]
[Fri Feb 06 05:38:17.406687 2026] [:error] [pid 1773:tid 1799] [client 4.204.244.206:59204] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin_250714203832.php"] [unique_id "aYUNyTYbySBHYmKOdJ-omwAAANA"]
[Fri Feb 06 05:38:18.409487 2026] [:error] [pid 1773:tid 1788] [client 4.204.244.206:61456] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aYUNyjYbySBHYmKOdJ-ongAAAMU"]
[Fri Feb 06 05:38:22.297028 2026] [:error] [pid 1663:tid 1691] [client 4.204.244.206:61552] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aYUNzl9EQrJaKkABjK-b9AAAABI"]
[Fri Feb 06 05:38:25.261186 2026] [:error] [pid 1663:tid 1692] [client 4.204.244.206:61536] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aYUN0V9EQrJaKkABjK-b_QAAABM"]
[Fri Feb 06 05:38:27.310541 2026] [:error] [pid 34582:tid 34609] [client 4.204.244.206:61549] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa-rex.php"] [unique_id "aYUN0-DeJq1JGssYG6x3EAAAARg"]
[Fri Feb 06 05:38:28.011747 2026] [:error] [pid 34582:tid 34588] [client 4.204.244.206:61518] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aYUN1ODeJq1JGssYG6x3EQAAAQM"]
[Fri Feb 06 05:38:28.874568 2026] [:error] [pid 1665:tid 1745] [client 4.204.244.206:59261] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aYUN1DYZLE6gThXvZMqbgAAAAJI"]
[Fri Feb 06 05:38:31.173140 2026] [:error] [pid 1665:tid 1740] [client 4.204.244.206:61518] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aYUN1zYZLE6gThXvZMqbggAAAI0"]
[Fri Feb 06 05:38:34.548163 2026] [:error] [pid 1663:tid 1681] [client 4.204.244.206:61564] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ty.php"] [unique_id "aYUN2l9EQrJaKkABjK-cCQAAAAg"]
[Fri Feb 06 05:38:38.689612 2026] [proxy_fcgi:error] [pid 34582:tid 34595] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:38.897335 2026] [:error] [pid 34582:tid 34598] [client 4.204.244.206:59145] [client 4.204.244.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.244.206, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYUN3uDeJq1JGssYG6x3IQAAAQ0"]
[Fri Feb 06 05:38:38.904224 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:39.126595 2026] [:error] [pid 34582:tid 34599] [client 4.204.244.206:59145] [client 4.204.244.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.244.206, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYUN3-DeJq1JGssYG6x3IgAAAQ4"]
[Fri Feb 06 05:38:39.131293 2026] [proxy_fcgi:error] [pid 34582:tid 34599] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:39.346469 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:39.561080 2026] [proxy_fcgi:error] [pid 34582:tid 34602] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:41.265543 2026] [proxy_fcgi:error] [pid 34582:tid 34607] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:41.476491 2026] [proxy_fcgi:error] [pid 34582:tid 34595] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:41.833756 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:42.044468 2026] [proxy_fcgi:error] [pid 34582:tid 34594] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:42.257160 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:43.187702 2026] [proxy_fcgi:error] [pid 34582:tid 34600] [client 4.204.244.206:59145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:38:43.399664 2026] [:error] [pid 34582:tid 34603] [client 4.204.244.206:59145] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aYUN4-DeJq1JGssYG6x3NgAAARI"]
[Fri Feb 06 05:38:44.962592 2026] [:error] [pid 1664:tid 1705] [client 4.204.244.206:59201] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aYUN5O_0lM6yA3VnvQVyywAAAEU"]
[Fri Feb 06 05:38:46.833063 2026] [:error] [pid 1664:tid 1707] [client 4.204.244.206:59168] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aYUN5u_0lM6yA3VnvQVyzgAAAEc"]
[Fri Feb 06 05:38:48.498177 2026] [:error] [pid 1665:tid 1750] [client 4.204.244.206:61488] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/2.php"] [unique_id "aYUN6DYZLE6gThXvZMqbmAAAAJc"]
[Fri Feb 06 05:38:51.425817 2026] [:error] [pid 1663:tid 1691] [client 4.204.244.206:59219] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/baxa1.phP8"] [unique_id "aYUN619EQrJaKkABjK-cHwAAABI"]
[Fri Feb 06 05:38:52.549070 2026] [:error] [pid 34582:tid 34599] [client 4.204.244.206:61539] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/baxa1.phP8"] [unique_id "aYUN7ODeJq1JGssYG6x3SwAAAQ4"]
[Fri Feb 06 05:38:54.163858 2026] [:error] [pid 34582:tid 34592] [client 4.204.244.206:61467] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/baxa1.phP8"] [unique_id "aYUN7uDeJq1JGssYG6x3TAAAAQc"]
[Fri Feb 06 05:38:56.368530 2026] [:error] [pid 34582:tid 34585] [client 4.204.244.206:59198] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/baxa1.phP8"] [unique_id "aYUN8ODeJq1JGssYG6x3TgAAAQA"]
[Fri Feb 06 05:39:01.386074 2026] [:error] [pid 1664:tid 1713] [client 4.204.244.206:59140] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aYUN9e_0lM6yA3VnvQVy4wAAAE0"]
[Fri Feb 06 05:39:04.387979 2026] [:error] [pid 1665:tid 1739] [client 4.204.244.206:59150] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aYUN-DYZLE6gThXvZMqbpAAAAIw"]
[Fri Feb 06 05:39:05.825639 2026] [:error] [pid 34582:tid 34604] [client 4.204.244.206:59159] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aYUN-eDeJq1JGssYG6x3XgAAARM"]
[Fri Feb 06 05:39:07.503661 2026] [:error] [pid 1773:tid 1778] [client 4.204.244.206:61557] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mah.php"] [unique_id "aYUN-zYbySBHYmKOdJ-o6gAAAMA"]
[Fri Feb 06 05:39:11.477684 2026] [:error] [pid 1664:tid 1720] [client 4.204.244.206:61462] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/law2.php"] [unique_id "aYUN_-_0lM6yA3VnvQVy6wAAAFQ"]
[Fri Feb 06 05:39:13.220288 2026] [:error] [pid 34582:tid 34599] [client 4.204.244.206:58109] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/law2.php"] [unique_id "aYUOAeDeJq1JGssYG6x3awAAAQ4"]
[Fri Feb 06 05:39:47.952890 2026] [proxy_fcgi:error] [pid 1663:tid 1693] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:48.163200 2026] [proxy_fcgi:error] [pid 1663:tid 1687] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:48.397985 2026] [proxy_fcgi:error] [pid 1663:tid 1673] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:48.722192 2026] [proxy_fcgi:error] [pid 1663:tid 1680] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:48.938195 2026] [proxy_fcgi:error] [pid 1663:tid 1688] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:49.189499 2026] [proxy_fcgi:error] [pid 1663:tid 1677] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:49.415293 2026] [proxy_fcgi:error] [pid 1663:tid 1690] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:49.678424 2026] [proxy_fcgi:error] [pid 1663:tid 1679] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:49.893784 2026] [proxy_fcgi:error] [pid 1663:tid 1697] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:50.103839 2026] [proxy_fcgi:error] [pid 1663:tid 1694] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:50.336692 2026] [proxy_fcgi:error] [pid 1663:tid 1682] [client 4.204.244.206:59188] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 05:39:50.542808 2026] [:error] [pid 1663:tid 1696] [client 4.204.244.206:59188] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aYUOJl9EQrJaKkABjK-cZwAAABc"]
[Fri Feb 06 05:39:53.854149 2026] [:error] [pid 1665:tid 1742] [client 4.204.244.206:61455] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aYUOKTYZLE6gThXvZMqb8QAAAI8"]
[Fri Feb 06 05:39:55.459496 2026] [:error] [pid 1665:tid 1746] [client 4.204.244.206:58058] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aYUOKzYZLE6gThXvZMqb9AAAAJM"]
[Fri Feb 06 05:39:56.593836 2026] [:error] [pid 1773:tid 1789] [client 4.204.244.206:61471] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/st.php"] [unique_id "aYUOLDYbySBHYmKOdJ-pMQAAAMY"]
[Fri Feb 06 05:39:58.931881 2026] [:error] [pid 1664:tid 1713] [client 4.204.244.206:61445] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aYUOLu_0lM6yA3VnvQVzUwAAAE0"]
[Fri Feb 06 05:39:59.891054 2026] [:error] [pid 1773:tid 1803] [client 4.204.244.206:59174] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aYUOLzYbySBHYmKOdJ-pNQAAANQ"]
[Fri Feb 06 05:40:01.050568 2026] [:error] [pid 1663:tid 1686] [client 4.204.244.206:59238] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aYUOMV9EQrJaKkABjK-chgAAAA0"]
[Fri Feb 06 05:40:01.867821 2026] [:error] [pid 1664:tid 1721] [client 4.204.244.206:61508] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cache.php"] [unique_id "aYUOMe_0lM6yA3VnvQVzWwAAAFU"]
[Fri Feb 06 05:40:04.713323 2026] [:error] [pid 1665:tid 1740] [client 4.204.244.206:59232] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aYUONDYZLE6gThXvZMqb-QAAAI0"]
[Fri Feb 06 05:40:06.281420 2026] [:error] [pid 1773:tid 1793] [client 4.204.244.206:61469] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aYUONjYbySBHYmKOdJ-pPAAAAMo"]
[Fri Feb 06 05:40:06.998949 2026] [:error] [pid 1664:tid 1705] [client 4.204.244.206:59210] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aYUONu_0lM6yA3VnvQVzZAAAAEU"]
[Fri Feb 06 05:40:07.978509 2026] [:error] [pid 1664:tid 1715] [client 4.204.244.206:59144] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file3.php"] [unique_id "aYUON-_0lM6yA3VnvQVzZwAAAE8"]
[Fri Feb 06 05:40:09.370488 2026] [:error] [pid 1665:tid 1746] [client 4.204.244.206:58096] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aYUOOTYZLE6gThXvZMqb_wAAAJM"]
[Fri Feb 06 05:40:12.635732 2026] [:error] [pid 1665:tid 1744] [client 4.204.244.206:58080] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aYUOPDYZLE6gThXvZMqcBAAAAJE"]
[Fri Feb 06 05:40:14.312761 2026] [:error] [pid 34582:tid 34609] [client 4.204.244.206:61551] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aYUOPuDeJq1JGssYG6x4DwAAARg"]
[Fri Feb 06 05:40:15.010656 2026] [:error] [pid 1665:tid 1750] [client 4.204.244.206:61487] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfanew.php7"] [unique_id "aYUOPzYZLE6gThXvZMqcCQAAAJc"]
[Fri Feb 06 05:40:16.484196 2026] [:error] [pid 1664:tid 1711] [client 4.204.244.206:61496] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aYUOQO_0lM6yA3VnvQVzbAAAAEs"]
[Fri Feb 06 05:40:17.524325 2026] [:error] [pid 34582:tid 34606] [client 4.204.244.206:59224] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aYUOQeDeJq1JGssYG6x4GAAAARU"]
[Fri Feb 06 05:40:18.561063 2026] [:error] [pid 1663:tid 1675] [client 4.204.244.206:59250] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aYUOQl9EQrJaKkABjK-ckAAAAAI"]
[Fri Feb 06 05:40:19.697376 2026] [:error] [pid 1665:tid 1728] [client 4.204.244.206:59241] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ws.php"] [unique_id "aYUOQzYZLE6gThXvZMqcDgAAAIE"]
[Fri Feb 06 05:40:20.532586 2026] [:error] [pid 1663:tid 1674] [client 4.204.244.206:61506] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aYUORF9EQrJaKkABjK-ckgAAAAE"]
[Fri Feb 06 05:40:21.487223 2026] [:error] [pid 34582:tid 34588] [client 4.204.244.206:61520] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aYUOReDeJq1JGssYG6x4JwAAAQM"]
[Fri Feb 06 05:40:23.593124 2026] [:error] [pid 1664:tid 1710] [client 4.204.244.206:61481] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aYUOR-_0lM6yA3VnvQVzegAAAEo"]
[Fri Feb 06 05:40:24.620885 2026] [:error] [pid 1665:tid 1738] [client 4.204.244.206:61478] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/dropdown.php"] [unique_id "aYUOSDYZLE6gThXvZMqcEAAAAIs"]
[Fri Feb 06 05:40:27.396749 2026] [:error] [pid 1664:tid 1701] [client 4.204.244.206:59220] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aYUOS-_0lM6yA3VnvQVzfgAAAEE"]
[Fri Feb 06 05:40:29.899087 2026] [:error] [pid 1663:tid 1681] [client 4.204.244.206:59162] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aYUOTV9EQrJaKkABjK-cogAAAAg"]
[Fri Feb 06 05:40:33.875953 2026] [:error] [pid 34582:tid 34596] [client 4.204.244.206:58067] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aYUOUeDeJq1JGssYG6x4PgAAAQs"]
[Fri Feb 06 05:40:34.865004 2026] [:error] [pid 1664:tid 1702] [client 4.204.244.206:59227] [client 4.204.244.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/shell.php"] [unique_id "aYUOUu_0lM6yA3VnvQVzkgAAAEI"]
[Fri Feb 06 05:42:22.984208 2026] [autoindex:error] [pid 1773:tid 1799] [client 139.59.239.230:50699] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 05:48:34.096502 2026] [:error] [pid 1663:tid 1697] [client 192.253.209.126:54279] [client 192.253.209.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.253.209.126, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYUQMl9EQrJaKkABjK-fLgAAABg"]
[Fri Feb 06 05:48:34.107123 2026] [proxy_fcgi:error] [pid 1663:tid 1697] [client 192.253.209.126:54279] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:50:06.494723 2026] [autoindex:error] [pid 1773:tid 1790] [client 43.225.189.121:39048] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 07:33:38.721927 2026] [autoindex:error] [pid 1665:tid 1730] [client 43.225.189.121:37518] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 08:38:35.484810 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 20.94.87.22:1639] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 15:55:09.492127 2026] [autoindex:error] [pid 3513:tid 3524] [client 74.7.227.19:39706] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 17:06:13.964380 2026] [autoindex:error] [pid 3380:tid 3392] [client 122.162.144.250:28960] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 17:22:18.793741 2026] [:error] [pid 3380:tid 3402] [client 124.156.157.91:58570] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYWyyhFAlUvBGSBK2jdABgAAABI"]
[Fri Feb 06 17:33:28.054521 2026] [autoindex:error] [pid 3380:tid 3387] [client 54.166.141.205:43446] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 17:33:28.459496 2026] [autoindex:error] [pid 3382:tid 3458] [client 54.166.141.205:33094] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 22:09:19.741940 2026] [:error] [pid 3382:tid 3441] [client 43.166.255.122:40134] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYX2D8IgU1HR0rhYrE9l1QAAAIE"]
[Fri Feb 06 22:35:58.878935 2026] [autoindex:error] [pid 46432:tid 46451] [client 66.132.153.122:39402] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 23:40:19.354707 2026] [:error] [pid 46432:tid 46449] [client 43.166.131.228:43372] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYYLYwbwJwu_od0kZjNAjwAAAk8"]
[Fri Feb 06 23:49:58.162367 2026] [autoindex:error] [pid 3477:tid 3489] [client 3.230.41.50:13917] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:09:26.815878 2026] [:error] [pid 36857:tid 36862] [client 120.71.59.24:41347] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYYSNpVQwfj7Kp4Dd0EGxQAAAYM"]
[Sat Feb 07 00:14:12.301641 2026] [autoindex:error] [pid 3477:tid 3499] [client 31.97.153.61:47348] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:14:16.769135 2026] [autoindex:error] [pid 3381:tid 3432] [client 46.202.140.154:50530] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:14:31.947917 2026] [autoindex:error] [pid 3382:tid 3450] [client 91.99.127.48:35686] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:14:32.024391 2026] [autoindex:error] [pid 3381:tid 3434] [client 107.172.195.97:12414] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:14:32.410312 2026] [autoindex:error] [pid 36857:tid 36864] [client 154.28.229.45:27476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:14:37.887953 2026] [autoindex:error] [pid 15821:tid 15836] [client 103.4.251.125:37480] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:19:02.387602 2026] [autoindex:error] [pid 3382:tid 3460] [client 146.70.185.32:41029] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:19:03.394104 2026] [autoindex:error] [pid 37019:tid 37026] [client 146.70.185.32:30675] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:19:15.785636 2026] [autoindex:error] [pid 37019:tid 37034] [client 146.70.185.32:6563] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:21:11.727996 2026] [autoindex:error] [pid 3382:tid 3453] [client 107.172.195.53:18580] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:21:16.927651 2026] [autoindex:error] [pid 15821:tid 15846] [client 104.164.173.202:44812] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:21:21.961154 2026] [autoindex:error] [pid 3513:tid 3521] [client 107.172.195.86:30968] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:40:51.694669 2026] [autoindex:error] [pid 35308:tid 35442] [client 103.196.9.206:40996] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:40:51.694669 2026] [autoindex:error] [pid 35308:tid 35436] [client 103.4.251.161:37168] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:40:58.419148 2026] [autoindex:error] [pid 35307:tid 35390] [client 104.164.173.71:14752] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:45:16.063516 2026] [autoindex:error] [pid 55701:tid 55767] [client 146.70.185.32:30482] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:45:17.649973 2026] [autoindex:error] [pid 55616:tid 55639] [client 146.70.185.32:55483] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 00:48:31.328906 2026] [autoindex:error] [pid 35537:tid 35551] [client 193.183.88.235:57343] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:08:15.994427 2026] [autoindex:error] [pid 55616:tid 55639] [client 154.28.229.191:26940] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:08:15.996818 2026] [autoindex:error] [pid 55616:tid 55642] [client 103.4.251.161:17524] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:08:24.567887 2026] [autoindex:error] [pid 55701:tid 55766] [client 103.196.9.43:26390] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:14:37.071074 2026] [autoindex:error] [pid 35307:tid 35388] [client 103.196.9.176:38648] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:14:38.712327 2026] [autoindex:error] [pid 35308:tid 35442] [client 104.252.191.155:24026] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:14:45.443169 2026] [autoindex:error] [pid 35309:tid 35479] [client 103.4.251.98:44598] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:45:58.148233 2026] [autoindex:error] [pid 50881:tid 50955] [client 154.28.229.221:4566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:46:00.839980 2026] [autoindex:error] [pid 35307:tid 35371] [client 104.164.173.167:59198] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 01:46:05.063448 2026] [autoindex:error] [pid 35537:tid 35551] [client 104.252.191.221:38752] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:16:49.272614 2026] [autoindex:error] [pid 35308:tid 35432] [client 216.73.216.86:33830] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:20:12.406257 2026] [autoindex:error] [pid 35307:tid 35366] [client 147.93.155.10:35894] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:20:12.417338 2026] [autoindex:error] [pid 35307:tid 35386] [client 147.93.155.10:35910] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:16.062129 2026] [autoindex:error] [pid 55701:tid 55778] [client 103.104.21.239:40868] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:16.227149 2026] [autoindex:error] [pid 35537:tid 35542] [client 46.202.38.171:18376] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:16.407978 2026] [autoindex:error] [pid 35537:tid 35548] [client 104.239.64.193:30962] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:16.655041 2026] [autoindex:error] [pid 35307:tid 35370] [client 82.24.77.12:9380] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:17.061017 2026] [autoindex:error] [pid 55701:tid 55762] [client 46.202.42.142:54984] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:17.543680 2026] [autoindex:error] [pid 35309:tid 35476] [client 82.22.226.155:31932] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:17.606297 2026] [autoindex:error] [pid 35307:tid 35374] [client 96.62.229.245:59336] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:18.852188 2026] [autoindex:error] [pid 35307:tid 35384] [client 34.6.231.120:57616] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:23.959819 2026] [autoindex:error] [pid 50881:tid 50948] [client 34.7.64.56:46948] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 02:57:47.428122 2026] [autoindex:error] [pid 55616:tid 55627] [client 34.7.64.56:34576] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 05:41:21.791957 2026] [autoindex:error] [pid 43182:tid 43186] [client 207.46.13.160:19072] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 05:52:06.603971 2026] [autoindex:error] [pid 43182:tid 43204] [client 66.249.68.136:59002] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 06:26:34.898721 2026] [:error] [pid 50673:tid 50743] [client 182.44.8.254:38458] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYZqmmVwLsaZ7aKO2ckHugAAAIg"]
[Sat Feb 07 08:34:10.208103 2026] [:error] [pid 50672:tid 50712] [client 3.81.233.23:59412] [client 3.81.233.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aYaIgg9o0jq1XS8Nv7Ox9AAAAEQ"]
[Sat Feb 07 08:58:36.365081 2026] [:error] [pid 50673:tid 50737] [client 49.51.183.75:47950] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYaOPGVwLsaZ7aKO2ck1hwAAAII"]
[Sat Feb 07 09:07:26.694050 2026] [autoindex:error] [pid 43182:tid 43197] [client 146.70.185.32:15324] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 09:07:28.023049 2026] [autoindex:error] [pid 55157:tid 55185] [client 146.70.185.32:53500] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 09:07:41.685363 2026] [autoindex:error] [pid 50671:tid 50691] [client 146.70.185.32:36607] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 09:41:02.796707 2026] [autoindex:error] [pid 50672:tid 50732] [client 90.231.56.134:47340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 11:38:20.936822 2026] [:error] [pid 50671:tid 50695] [client 129.226.174.80:48764] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYazrLvqLohWBI_mqBM3vAAAAA8"]
[Sat Feb 07 12:28:48.151773 2026] [autoindex:error] [pid 50780:tid 50783] [client 217.77.10.74:65080] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 12:42:59.313389 2026] [:error] [pid 50672:tid 50713] [client 223.244.35.77:48652] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYbC0w9o0jq1XS8Nv7PjPAAAAEU"]
[Sat Feb 07 12:49:39.926792 2026] [autoindex:error] [pid 43182:tid 43207] [client 192.36.109.114:40337] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 13:09:56.611713 2026] [:error] [pid 50673:tid 50746] [client 46.101.151.214:60759] [client 46.101.151.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.151.214, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYbJJGVwLsaZ7aKO2cmGLwAAAIs"]
[Sat Feb 07 13:09:56.623494 2026] [proxy_fcgi:error] [pid 50673:tid 50746] [client 46.101.151.214:60759] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 13:25:56.211830 2026] [:error] [pid 58058:tid 58075] [client 46.101.145.150:55797] [client 46.101.145.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.145.150, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYbM5Lz-Qlvs65S4DP-ypwAAAY4"]
[Sat Feb 07 13:25:56.223309 2026] [proxy_fcgi:error] [pid 58058:tid 58075] [client 46.101.145.150:55797] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 13:44:59.760652 2026] [autoindex:error] [pid 50673:tid 50739] [client 52.91.44.113:34548] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 14:03:44.488567 2026] [:error] [pid 50780:tid 50792] [client 3.81.233.23:44014] [client 3.81.233.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYbVwOtUmIu2JHM2CrsxhAAAAMo"]
[Sat Feb 07 17:13:20.222661 2026] [autoindex:error] [pid 50671:tid 50702] [client 170.64.131.198:51734] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 17:13:20.242358 2026] [autoindex:error] [pid 50671:tid 50684] [client 170.64.131.198:51734] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 17:41:25.669019 2026] [:error] [pid 43182:tid 43202] [client 43.153.54.14:51368] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYcIxfEC82JnxmrnFYmG3wAAAVI"]
[Sat Feb 07 19:16:30.392123 2026] [:error] [pid 43182:tid 43187] [client 43.135.138.128:60110] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYcfDvEC82JnxmrnFYmeOwAAAUM"]
[Sat Feb 07 19:17:36.221801 2026] [:error] [pid 55157:tid 55164] [client 60.188.57.0:33724] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYcfUH36JdtTn2bTEoy05QAAAQI"]
[Sat Feb 07 20:41:32.175123 2026] [autoindex:error] [pid 50673:tid 50753] [client 100.24.208.151:51743] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 20:41:32.614039 2026] [autoindex:error] [pid 50672:tid 50713] [client 100.24.208.151:29907] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 21:24:55.650221 2026] [autoindex:error] [pid 50671:tid 50687] [client 217.77.10.74:54122] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 21:39:54.266349 2026] [autoindex:error] [pid 30684:tid 30689] [client 164.92.125.55:59152] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 21:39:55.274813 2026] [autoindex:error] [pid 30684:tid 30702] [client 164.92.125.55:56942] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:14:01.009620 2026] [proxy_fcgi:error] [pid 58058:tid 58078] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:01.541641 2026] [proxy_fcgi:error] [pid 58058:tid 58079] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:02.052612 2026] [proxy_fcgi:error] [pid 58058:tid 58081] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:02.586608 2026] [proxy_fcgi:error] [pid 58058:tid 58082] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:03.103659 2026] [proxy_fcgi:error] [pid 58058:tid 58064] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:03.591639 2026] [proxy_fcgi:error] [pid 58058:tid 58075] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:04.098896 2026] [proxy_fcgi:error] [pid 58058:tid 58063] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:04.597602 2026] [proxy_fcgi:error] [pid 58058:tid 58061] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:05.613791 2026] [proxy_fcgi:error] [pid 58058:tid 58063] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:06.663705 2026] [proxy_fcgi:error] [pid 58058:tid 58079] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:07.169992 2026] [proxy_fcgi:error] [pid 58058:tid 58063] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:07.665869 2026] [proxy_fcgi:error] [pid 58058:tid 58077] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:08.236609 2026] [proxy_fcgi:error] [pid 58058:tid 58083] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:08.726720 2026] [proxy_fcgi:error] [pid 58058:tid 58068] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:09.237638 2026] [proxy_fcgi:error] [pid 58058:tid 58071] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:09.780262 2026] [proxy_fcgi:error] [pid 58058:tid 58085] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:10.261610 2026] [proxy_fcgi:error] [pid 58058:tid 58064] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:10.803628 2026] [proxy_fcgi:error] [pid 58058:tid 58077] [client 31.171.130.111:23041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:17.801242 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.111:23041] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdIubz-Qlvs65S4DP9KcAAAAZU"]
[Sat Feb 07 22:14:20.255320 2026] [:error] [pid 50673:tid 50750] [client 31.171.130.140:32775] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdIvGVwLsaZ7aKO2ck1FAAAAI8"]
[Sat Feb 07 22:14:22.625307 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.115:51611] [client 31.171.130.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aYdIvvEC82JnxmrnFYn1twAAAUE"]
[Sat Feb 07 22:14:23.659622 2026] [proxy_fcgi:error] [pid 50672:tid 50713] [client 31.171.130.134:20407] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:25.181321 2026] [:error] [pid 50672:tid 50726] [client 31.171.130.134:20407] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdIwQ9o0jq1XS8Nv7Np5wAAAFI"]
[Sat Feb 07 22:14:27.133134 2026] [proxy_fcgi:error] [pid 50673:tid 50738] [client 31.171.130.160:40165] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:27.602794 2026] [:error] [pid 50673:tid 50749] [client 31.171.130.160:40165] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdIw2VwLsaZ7aKO2ck1YAAAAI4"]
[Sat Feb 07 22:14:29.024900 2026] [proxy_fcgi:error] [pid 43182:tid 43199] [client 31.171.130.107:32017] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:31.627324 2026] [:error] [pid 43182:tid 43196] [client 31.171.130.107:32017] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdIx_EC82JnxmrnFYn2FwAAAUw"]
[Sat Feb 07 22:14:33.058435 2026] [:error] [pid 30684:tid 30695] [client 31.171.130.135:26859] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdIybqwdxwowLt-_Lw2EwAAAcg"]
[Sat Feb 07 22:14:34.016496 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.144:57081] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdIyvEC82JnxmrnFYn2NgAAAUE"]
[Sat Feb 07 22:14:34.991413 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.133:24079] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdIyvEC82JnxmrnFYn2QgAAAUg"]
[Sat Feb 07 22:14:35.979681 2026] [:error] [pid 50673:tid 50744] [client 31.171.130.154:38741] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdIy2VwLsaZ7aKO2ck1uQAAAIk"]
[Sat Feb 07 22:14:36.956362 2026] [:error] [pid 43182:tid 43205] [client 31.171.130.132:44445] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdIzPEC82JnxmrnFYn2WAAAAVU"]
[Sat Feb 07 22:14:38.469687 2026] [:error] [pid 58058:tid 58085] [client 31.171.130.138:48323] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdIzrz-Qlvs65S4DP9LTAAAAZg"]
[Sat Feb 07 22:14:39.433643 2026] [proxy_fcgi:error] [pid 50673:tid 50744] [client 31.171.130.148:54299] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:40.375716 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.148:54299] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aYdI0GVwLsaZ7aKO2ck17QAAAIg"]
[Sat Feb 07 22:14:42.328483 2026] [:error] [pid 58058:tid 58076] [client 31.171.130.140:44315] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdI0rz-Qlvs65S4DP9LewAAAY8"]
[Sat Feb 07 22:14:43.771784 2026] [:error] [pid 55157:tid 55171] [client 31.171.130.120:25909] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdI0336JdtTn2bTEozvoQAAAQk"]
[Sat Feb 07 22:14:44.730270 2026] [proxy_fcgi:error] [pid 50673:tid 50746] [client 31.171.130.119:47789] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:45.208285 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.119:47789] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdI1WVwLsaZ7aKO2ck2IAAAAIU"]
[Sat Feb 07 22:14:46.196378 2026] [proxy_fcgi:error] [pid 50780:tid 50806] [client 31.171.130.116:28323] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:47.691395 2026] [proxy_fcgi:error] [pid 50780:tid 50799] [client 31.171.130.116:28323] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:49.122691 2026] [:error] [pid 50780:tid 50794] [client 31.171.130.116:28323] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdI2etUmIu2JHM2CrvlPwAAAMw"]
[Sat Feb 07 22:14:50.139618 2026] [proxy_fcgi:error] [pid 30684:tid 30689] [client 31.171.130.112:52609] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:50.639329 2026] [:error] [pid 30684:tid 30707] [client 31.171.130.112:52609] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdI2rqwdxwowLt-_Lw2rwAAAdQ"]
[Sat Feb 07 22:14:51.631845 2026] [proxy_fcgi:error] [pid 30684:tid 30697] [client 31.171.130.158:28539] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:52.607792 2026] [:error] [pid 30684:tid 30695] [client 31.171.130.158:28539] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aYdI3LqwdxwowLt-_Lw2wgAAAcg"]
[Sat Feb 07 22:14:54.112742 2026] [:error] [pid 50673:tid 50753] [client 31.171.130.145:28867] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdI3mVwLsaZ7aKO2ck2cQAAAJI"]
[Sat Feb 07 22:14:55.597666 2026] [proxy_fcgi:error] [pid 43182:tid 43191] [client 31.171.130.132:24915] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:56.081087 2026] [proxy_fcgi:error] [pid 43182:tid 43195] [client 31.171.130.132:24915] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:57.023541 2026] [:error] [pid 43182:tid 43206] [client 31.171.130.132:24915] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdI4fEC82JnxmrnFYn3HgAAAVY"]
[Sat Feb 07 22:14:58.523772 2026] [:error] [pid 43182:tid 43207] [client 31.171.130.148:23821] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdI4vEC82JnxmrnFYn3LQAAAVc"]
[Sat Feb 07 22:15:00.044629 2026] [:error] [pid 50671:tid 50688] [client 31.171.130.120:53809] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdI5LvqLohWBI_mqBPIpAAAAAg"]
[Sat Feb 07 22:15:00.990366 2026] [:error] [pid 58058:tid 58070] [client 31.171.130.160:44623] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdI5Lz-Qlvs65S4DP9MeQAAAYk"]
[Sat Feb 07 22:15:02.055297 2026] [:error] [pid 30684:tid 30689] [client 31.171.130.147:51023] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdI5rqwdxwowLt-_Lw3CAAAAcI"]
[Sat Feb 07 22:22:12.527305 2026] [:error] [pid 50780:tid 50804] [client 20.151.2.11:20185] [client 20.151.2.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYdKlOtUmIu2JHM2CrvsSAAAANY"]
[Sat Feb 07 22:22:13.322593 2026] [:error] [pid 50671:tid 50691] [client 20.151.2.11:20204] [client 20.151.2.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYdKlbvqLohWBI_mqBPPfgAAAAs"]
[Sat Feb 07 22:22:14.015962 2026] [:error] [pid 58058:tid 58067] [client 20.151.2.11:20218] [client 20.151.2.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYdKlrz-Qlvs65S4DP9TbgAAAYY"]
[Sat Feb 07 22:22:14.804429 2026] [:error] [pid 50672:tid 50728] [client 20.151.2.11:20164] [client 20.151.2.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYdKlg9o0jq1XS8Nv7NxHQAAAFQ"]
[Sat Feb 07 23:58:43.582183 2026] [:error] [pid 43182:tid 43195] [client 43.157.95.239:39408] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYdhM_EC82JnxmrnFYkm5gAAAUs"]
[Sun Feb 08 00:13:01.645891 2026] [:error] [pid 30684:tid 30698] [client 103.77.107.178:50377] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/sftp-config.json"] [unique_id "aYdkjbqwdxwowLt-_LxhzAAAAcs"]
[Sun Feb 08 00:13:02.289066 2026] [:error] [pid 43182:tid 43191] [client 103.77.107.178:50762] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYdkjvEC82JnxmrnFYksTwAAAUc"]
[Sun Feb 08 01:18:19.138065 2026] [:error] [pid 17001:tid 17034] [client 54.90.128.13:39806] [client 54.90.128.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYdz290X31QDRSlPKmRtYAAAAZI"]
[Sun Feb 08 01:48:41.140255 2026] [:error] [pid 16829:tid 16863] [client 43.157.67.70:55084] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYd6-QQFls00VxRngXuvCQAAAVY"]
[Sun Feb 08 04:21:13.665033 2026] [autoindex:error] [pid 24422:tid 24475] [client 209.38.94.122:52352] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 04:21:13.685158 2026] [autoindex:error] [pid 24422:tid 24478] [client 209.38.94.122:52352] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 05:46:23.242149 2026] [proxy_fcgi:error] [pid 24422:tid 24459] [client 172.213.144.187:24282] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 05:46:23.479430 2026] [proxy_fcgi:error] [pid 24422:tid 24476] [client 172.213.144.187:24282] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 05:46:23.716339 2026] [proxy_fcgi:error] [pid 24422:tid 24481] [client 172.213.144.187:24282] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:28:41.963711 2026] [autoindex:error] [pid 24423:tid 24495] [client 93.158.71.185:33613] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 08:12:01.315883 2026] [:error] [pid 24423:tid 24503] [client 182.42.111.156:54161] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYfU0U3f9n1Y0TpV5Ya7AAAAAJI"]
[Sun Feb 08 08:25:45.991834 2026] [autoindex:error] [pid 24422:tid 24482] [client 147.182.220.24:44476] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 08:25:47.306686 2026] [autoindex:error] [pid 24423:tid 24506] [client 147.182.220.24:57950] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 08:59:33.681719 2026] [:error] [pid 24422:tid 24458] [client 43.130.71.237:42790] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYff9SNNjcLoSCLKhTfX9QAAAEA"]
[Sun Feb 08 10:52:58.408443 2026] [autoindex:error] [pid 56906:tid 56916] [client 15.204.135.170:54052] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 11:49:16.173744 2026] [autoindex:error] [pid 24530:tid 24542] [client 15.204.182.106:34654] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 12:52:17.337065 2026] [autoindex:error] [pid 24530:tid 24555] [client 15.204.182.106:19426] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:01:37.371961 2026] [autoindex:error] [pid 43900:tid 43914] [client 34.76.238.59:35780] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:01:37.907929 2026] [autoindex:error] [pid 24422:tid 24458] [client 34.76.238.59:48234] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:01:38.701468 2026] [autoindex:error] [pid 24421:tid 24431] [client 35.190.210.132:40566] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:01:39.209764 2026] [autoindex:error] [pid 24422:tid 24468] [client 35.190.210.132:58194] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:03:40.792540 2026] [autoindex:error] [pid 24530:tid 24554] [client 34.77.42.83:35930] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:03:42.221843 2026] [autoindex:error] [pid 24530:tid 24536] [client 34.77.19.192:48604] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:03:44.088856 2026] [autoindex:error] [pid 56906:tid 56915] [client 35.189.252.46:40632] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:04:08.220212 2026] [autoindex:error] [pid 24421:tid 24453] [client 34.38.119.122:33964] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 13:54:05.225988 2026] [autoindex:error] [pid 43900:tid 43915] [client 54.198.1.64:34626] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 14:31:26.608502 2026] [:error] [pid 24423:tid 24496] [client 113.11.180.5:23694] [client 113.11.180.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.11.180.5, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYgtvk3f9n1Y0TpV5YYk6AAAAIs"]
[Sun Feb 08 14:31:26.620592 2026] [proxy_fcgi:error] [pid 24423:tid 24496] [client 113.11.180.5:23694] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 14:32:29.904666 2026] [:error] [pid 24530:tid 24549] [client 49.37.161.183:57468] [client 49.37.161.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.161.183, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYgt_UazNRCs1GRWrh67RAAAANE"]
[Sun Feb 08 14:32:29.916719 2026] [proxy_fcgi:error] [pid 24530:tid 24549] [client 49.37.161.183:57468] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 14:40:21.238122 2026] [:error] [pid 24422:tid 24480] [client 182.43.70.143:46061] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYgv1SNNjcLoSCLKhTc3UAAAAFY"]
[Sun Feb 08 15:52:22.598868 2026] [autoindex:error] [pid 24423:tid 24507] [client 72.11.155.223:52352] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 16:23:49.429828 2026] [autoindex:error] [pid 24421:tid 24434] [client 104.155.30.66:64062] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 16:30:36.127009 2026] [autoindex:error] [pid 24421:tid 24438] [client 103.188.127.79:63616] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 16:54:22.724999 2026] [:error] [pid 54609:tid 54628] [client 43.135.142.7:46530] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYhPPqRRnRH9N52BW9J7FwAAAZE"]
[Sun Feb 08 16:56:47.105170 2026] [autoindex:error] [pid 24421:tid 24444] [client 34.79.41.221:64468] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 20:34:43.679591 2026] [autoindex:error] [pid 54609:tid 54616] [client 8.39.54.150:58534] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 20:34:44.806223 2026] [autoindex:error] [pid 54609:tid 54623] [client 8.39.54.150:52328] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 20:34:45.578439 2026] [autoindex:error] [pid 58631:tid 58646] [client 8.39.54.150:52340] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 21:06:18.518612 2026] [autoindex:error] [pid 56906:tid 56913] [client 15.204.183.221:49558] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 21:53:32.061099 2026] [autoindex:error] [pid 43900:tid 43905] [client 35.238.69.21:64275] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 21:53:32.061325 2026] [autoindex:error] [pid 58631:tid 58643] [client 35.238.69.21:64271] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 21:55:42.314531 2026] [autoindex:error] [pid 24421:tid 24454] [client 66.249.68.136:62739] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 22:01:22.542809 2026] [autoindex:error] [pid 56906:tid 56922] [client 15.204.183.221:28996] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 23:11:56.438805 2026] [:error] [pid 6662:tid 6683] [client 43.159.132.207:41294] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYinvN-oEK1ut16KiNIQxAAAAlE"]
[Mon Feb 09 00:11:54.098739 2026] [autoindex:error] [pid 9482:tid 9543] [client 15.204.161.7:7148] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 00:18:53.265631 2026] [autoindex:error] [pid 9422:tid 9435] [client 149.57.176.212:15776] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 00:42:37.866154 2026] [:error] [pid 6663:tid 6698] [client 101.32.15.141:45656] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYi8_WGI3uHqWdeZM76fewAAAoU"]
[Mon Feb 09 00:56:03.043204 2026] [autoindex:error] [pid 6662:tid 6673] [client 181.214.218.149:24437] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 09 00:56:04.413492 2026] [autoindex:error] [pid 6723:tid 6799] [client 181.214.218.149:24564] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 09 00:56:23.455247 2026] [autoindex:error] [pid 24423:tid 24498] [client 181.214.218.149:2916] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 09 00:56:24.135609 2026] [autoindex:error] [pid 6662:tid 6680] [client 181.214.218.149:3692] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://cientifica.com.au/
[Mon Feb 09 01:03:17.357181 2026] [autoindex:error] [pid 24423:tid 24497] [client 15.204.161.7:27784] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 01:59:55.426219 2026] [autoindex:error] [pid 6723:tid 6795] [client 66.249.68.136:34783] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 02:46:01.055112 2026] [proxy_fcgi:error] [pid 9482:tid 9562] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:01.558359 2026] [proxy_fcgi:error] [pid 9482:tid 9549] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:01.795724 2026] [proxy_fcgi:error] [pid 9482:tid 9558] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:02.032513 2026] [proxy_fcgi:error] [pid 9482:tid 9546] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:02.300330 2026] [proxy_fcgi:error] [pid 9482:tid 9556] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:02.546612 2026] [proxy_fcgi:error] [pid 9482:tid 9559] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:03.036833 2026] [proxy_fcgi:error] [pid 9482:tid 9553] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:03.329030 2026] [proxy_fcgi:error] [pid 9482:tid 9563] [client 72.146.26.204:8665] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:46:03.561343 2026] [:error] [pid 9482:tid 9547] [client 72.146.26.204:8665] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aYjZ68TkGH_puEFp5zPkEQAAA8g"]
[Mon Feb 09 02:46:05.007468 2026] [:error] [pid 9422:tid 9432] [client 72.146.26.204:16961] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aYjZ7a9DqDJC68qBbyxhYgAAAYc"]
[Mon Feb 09 02:46:07.036925 2026] [:error] [pid 43900:tid 43927] [client 72.146.26.204:26059] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aYjZ7-Wrhnpm_Csk3kni8AAAAVg"]
[Mon Feb 09 02:46:08.423466 2026] [:error] [pid 9482:tid 9553] [client 72.146.26.204:24607] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aYjZ8MTkGH_puEFp5zPkIAAAA84"]
[Mon Feb 09 02:46:10.465642 2026] [:error] [pid 6630:tid 6653] [client 72.146.26.204:3423] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aYjZ8p2jf0FBTEb_cWQm1wAAAhQ"]
[Mon Feb 09 02:46:11.528763 2026] [:error] [pid 9422:tid 9434] [client 72.146.26.204:9901] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aYjZ869DqDJC68qBbyxhZwAAAYk"]
[Mon Feb 09 02:46:12.386249 2026] [:error] [pid 24423:tid 24504] [client 72.146.26.204:24600] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aYjZ9E3f9n1Y0TpV5YadhQAAAJM"]
[Mon Feb 09 02:46:15.016230 2026] [:error] [pid 9422:tid 9440] [client 72.146.26.204:24585] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aYjZ969DqDJC68qBbyxhagAAAY8"]
[Mon Feb 09 02:46:16.508634 2026] [:error] [pid 9482:tid 9550] [client 72.146.26.204:17472] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aYjZ-MTkGH_puEFp5zPkNgAAA8s"]
[Mon Feb 09 02:46:18.078494 2026] [:error] [pid 6723:tid 6807] [client 72.146.26.204:12368] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aYjZ-jkiu6gHwS33P0qrUwAAA1Y"]
[Mon Feb 09 02:46:19.991494 2026] [:error] [pid 6662:tid 6669] [client 72.146.26.204:26024] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aYjZ-9-oEK1ut16KiNIvmQAAAkM"]
[Mon Feb 09 02:46:21.681614 2026] [:error] [pid 6723:tid 6787] [client 72.146.26.204:16999] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aYjZ_Tkiu6gHwS33P0qrXAAAA0I"]
[Mon Feb 09 02:46:27.485783 2026] [:error] [pid 9422:tid 9433] [client 72.146.26.204:25999] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aYjaA69DqDJC68qBbyxhdgAAAYg"]
[Mon Feb 09 02:46:33.032614 2026] [:error] [pid 43900:tid 43925] [client 72.146.26.204:26031] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aYjaCeWrhnpm_Csk3knjDAAAAVY"]
[Mon Feb 09 02:46:43.102260 2026] [:error] [pid 24530:tid 24544] [client 72.146.26.204:26097] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aYjaE0azNRCs1GRWrh5NKgAAAMw"]
[Mon Feb 09 02:46:50.544645 2026] [:error] [pid 6723:tid 6798] [client 72.146.26.204:14959] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aYjaGjkiu6gHwS33P0qrggAAA00"]
[Mon Feb 09 02:46:55.823121 2026] [:error] [pid 6663:tid 6717] [client 72.146.26.204:3658] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aYjaH2GI3uHqWdeZM764wQAAApg"]
[Mon Feb 09 02:46:56.696507 2026] [:error] [pid 43900:tid 43927] [client 72.146.26.204:3661] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aYjaIOWrhnpm_Csk3knjNgAAAVg"]
[Mon Feb 09 02:46:58.495339 2026] [:error] [pid 6630:tid 6635] [client 72.146.26.204:29938] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aYjaIp2jf0FBTEb_cWQm8QAAAgI"]
[Mon Feb 09 02:46:59.449458 2026] [:error] [pid 6663:tid 6693] [client 72.146.26.204:27074] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aYjaI2GI3uHqWdeZM764zQAAAoA"]
[Mon Feb 09 02:47:00.485510 2026] [:error] [pid 6630:tid 6641] [client 72.146.26.204:61606] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aYjaJJ2jf0FBTEb_cWQm-QAAAgg"]
[Mon Feb 09 02:47:02.608022 2026] [:error] [pid 24423:tid 24499] [client 72.146.26.204:27122] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aYjaJk3f9n1Y0TpV5YadrwAAAI4"]
[Mon Feb 09 02:47:03.267853 2026] [proxy_fcgi:error] [pid 6663:tid 6715] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:03.507961 2026] [proxy_fcgi:error] [pid 6663:tid 6702] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:03.745055 2026] [proxy_fcgi:error] [pid 6663:tid 6705] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:04.017136 2026] [proxy_fcgi:error] [pid 6663:tid 6699] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:04.255304 2026] [proxy_fcgi:error] [pid 6663:tid 6710] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:04.667352 2026] [proxy_fcgi:error] [pid 6663:tid 6693] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:04.943600 2026] [proxy_fcgi:error] [pid 6663:tid 6717] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:05.181070 2026] [proxy_fcgi:error] [pid 6663:tid 6707] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:05.917721 2026] [proxy_fcgi:error] [pid 6663:tid 6712] [client 72.146.26.204:29934] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:47:06.334623 2026] [:error] [pid 6663:tid 6701] [client 72.146.26.204:29934] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aYjaKmGI3uHqWdeZM764-QAAAog"]
[Mon Feb 09 02:47:07.018730 2026] [:error] [pid 6630:tid 6656] [client 72.146.26.204:3549] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aYjaK52jf0FBTEb_cWQnBwAAAhc"]
[Mon Feb 09 02:47:08.072107 2026] [:error] [pid 6723:tid 6788] [client 72.146.26.204:3579] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aYjaLDkiu6gHwS33P0qrlgAAA0M"]
[Mon Feb 09 02:47:09.647749 2026] [:error] [pid 24423:tid 24488] [client 72.146.26.204:61616] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/install.php"] [unique_id "aYjaLU3f9n1Y0TpV5YadugAAAIM"]
[Mon Feb 09 02:47:11.093757 2026] [:error] [pid 24423:tid 24490] [client 72.146.26.204:22635] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aYjaL03f9n1Y0TpV5YadvQAAAIU"]
[Mon Feb 09 02:47:12.567081 2026] [:error] [pid 24530:tid 24544] [client 72.146.26.204:7713] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aYjaMEazNRCs1GRWrh5NPgAAAMw"]
[Mon Feb 09 02:47:13.496801 2026] [:error] [pid 24423:tid 24501] [client 72.146.26.204:8770] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aYjaMU3f9n1Y0TpV5YadvwAAAJA"]
[Mon Feb 09 02:47:14.266834 2026] [:error] [pid 24423:tid 24486] [client 72.146.26.204:23097] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lv.php"] [unique_id "aYjaMk3f9n1Y0TpV5YadwwAAAIE"]
[Mon Feb 09 02:47:15.397452 2026] [:error] [pid 24530:tid 24549] [client 72.146.26.204:7595] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aYjaM0azNRCs1GRWrh5NRQAAANE"]
[Mon Feb 09 02:47:16.399814 2026] [:error] [pid 24530:tid 24555] [client 72.146.26.204:3114] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aYjaNEazNRCs1GRWrh5NRwAAANc"]
[Mon Feb 09 02:47:17.306124 2026] [:error] [pid 9482:tid 9552] [client 72.146.26.204:23047] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aYjaNcTkGH_puEFp5zPkWAAAA80"]
[Mon Feb 09 02:47:18.656141 2026] [:error] [pid 6662:tid 6678] [client 72.146.26.204:64917] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/simple.php"] [unique_id "aYjaNt-oEK1ut16KiNIv3QAAAkw"]
[Mon Feb 09 02:47:19.877026 2026] [:error] [pid 6662:tid 6681] [client 72.146.26.204:3110] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaN9-oEK1ut16KiNIv4QAAAk8"]
[Mon Feb 09 02:47:20.989980 2026] [:error] [pid 9422:tid 9443] [client 72.146.26.204:7564] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaOK9DqDJC68qBbyxhogAAAZI"]
[Mon Feb 09 02:47:24.533896 2026] [:error] [pid 6723:tid 6803] [client 72.146.26.204:12853] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaPDkiu6gHwS33P0qrngAAA1I"]
[Mon Feb 09 02:47:25.716201 2026] [:error] [pid 24530:tid 24551] [client 72.146.26.204:7575] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaPUazNRCs1GRWrh5NTgAAANM"]
[Mon Feb 09 02:47:26.593376 2026] [:error] [pid 24530:tid 24533] [client 72.146.26.204:28876] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaPkazNRCs1GRWrh5NUQAAAME"]
[Mon Feb 09 02:47:27.697178 2026] [:error] [pid 24530:tid 24538] [client 72.146.26.204:10729] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaP0azNRCs1GRWrh5NUgAAAMY"]
[Mon Feb 09 02:47:28.937827 2026] [:error] [pid 24423:tid 24507] [client 72.146.26.204:10712] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaQE3f9n1Y0TpV5Yad2wAAAJY"]
[Mon Feb 09 02:47:30.009101 2026] [:error] [pid 6630:tid 6653] [client 72.146.26.204:28922] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaQp2jf0FBTEb_cWQnGQAAAhQ"]
[Mon Feb 09 02:47:30.774711 2026] [:error] [pid 9482:tid 9563] [client 72.146.26.204:18508] [client 72.146.26.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYjaQsTkGH_puEFp5zPkXwAAA9g"]
[Mon Feb 09 02:47:31.956476 2026] [:error] [pid 24530:tid 24556] [client 72.146.26.204:18507] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaQ0azNRCs1GRWrh5NVQAAANg"]
[Mon Feb 09 02:47:33.014715 2026] [:error] [pid 24530:tid 24539] [client 72.146.26.204:12831] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaRUazNRCs1GRWrh5NVwAAAMc"]
[Mon Feb 09 02:47:34.652659 2026] [:error] [pid 6723:tid 6793] [client 72.146.26.204:12857] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaRjkiu6gHwS33P0qrpgAAA0g"]
[Mon Feb 09 02:47:35.645367 2026] [:error] [pid 24423:tid 24498] [client 72.146.26.204:7602] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/cong.php"] [unique_id "aYjaR03f9n1Y0TpV5Yad4QAAAI0"]
[Mon Feb 09 02:47:36.732225 2026] [:error] [pid 6663:tid 6712] [client 72.146.26.204:23074] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aYjaSGGI3uHqWdeZM765QQAAApM"]
[Mon Feb 09 02:47:37.926144 2026] [:error] [pid 6723:tid 6797] [client 72.146.26.204:12840] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aYjaSTkiu6gHwS33P0qrqgAAA0w"]
[Mon Feb 09 02:47:39.071348 2026] [:error] [pid 6663:tid 6711] [client 72.146.26.204:8796] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aYjaS2GI3uHqWdeZM765RQAAApI"]
[Mon Feb 09 02:47:40.422523 2026] [:error] [pid 9482:tid 9550] [client 72.146.26.204:25543] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/w.php"] [unique_id "aYjaTMTkGH_puEFp5zPkZQAAA8s"]
[Mon Feb 09 02:47:41.228984 2026] [:error] [pid 24530:tid 24545] [client 72.146.26.204:63549] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aYjaTUazNRCs1GRWrh5NYQAAAM0"]
[Mon Feb 09 02:47:42.207179 2026] [:error] [pid 43900:tid 43921] [client 72.146.26.204:21119] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aYjaTuWrhnpm_Csk3knjcgAAAVI"]
[Mon Feb 09 02:47:43.369465 2026] [:error] [pid 9422:tid 9436] [client 72.146.26.204:3074] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aYjaT69DqDJC68qBbyxhtwAAAYs"]
[Mon Feb 09 02:47:44.447736 2026] [:error] [pid 6630:tid 6654] [client 72.146.26.204:7567] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aYjaUJ2jf0FBTEb_cWQnJAAAAhU"]
[Mon Feb 09 02:47:46.400894 2026] [:error] [pid 9422:tid 9441] [client 72.146.26.204:7582] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaUq9DqDJC68qBbyxhuwAAAZA"]
[Mon Feb 09 02:47:47.794616 2026] [:error] [pid 24421:tid 24434] [client 72.146.26.204:3125] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaU6p7cTzhX5M1IP9umAAAAAM"]
[Mon Feb 09 02:47:49.088681 2026] [:error] [pid 24423:tid 24487] [client 72.146.26.204:8625] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaVU3f9n1Y0TpV5Yad-AAAAII"]
[Mon Feb 09 02:47:50.230739 2026] [:error] [pid 6663:tid 6695] [client 72.146.26.204:8637] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aYjaVmGI3uHqWdeZM765VgAAAoI"]
[Mon Feb 09 02:47:51.466523 2026] [:error] [pid 43900:tid 43914] [client 72.146.26.204:12856] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aYjaV-Wrhnpm_Csk3knjfAAAAUs"]
[Mon Feb 09 02:47:52.385845 2026] [:error] [pid 43900:tid 43915] [client 72.146.26.204:7561] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aYjaWOWrhnpm_Csk3knjgAAAAUw"]
[Mon Feb 09 02:47:53.438503 2026] [:error] [pid 6662:tid 6668] [client 72.146.26.204:12806] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aYjaWd-oEK1ut16KiNIwDAAAAkI"]
[Mon Feb 09 02:47:54.316476 2026] [:error] [pid 6630:tid 6639] [client 72.146.26.204:12854] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aYjaWp2jf0FBTEb_cWQnLwAAAgY"]
[Mon Feb 09 02:47:55.677168 2026] [:error] [pid 24530:tid 24548] [client 72.146.26.204:10702] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aYjaW0azNRCs1GRWrh5NbQAAANA"]
[Mon Feb 09 02:47:56.313478 2026] [:error] [pid 24423:tid 24486] [client 72.146.26.204:64939] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aYjaXE3f9n1Y0TpV5YaeCAAAAIE"]
[Mon Feb 09 02:47:57.184732 2026] [:error] [pid 24421:tid 24450] [client 72.146.26.204:61625] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aYjaXap7cTzhX5M1IP9uoAAAABM"]
[Mon Feb 09 02:47:57.851659 2026] [:error] [pid 6630:tid 6653] [client 72.146.26.204:9924] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aYjaXZ2jf0FBTEb_cWQnNwAAAhQ"]
[Mon Feb 09 02:47:59.020832 2026] [:error] [pid 43900:tid 43912] [client 72.146.26.204:7705] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYjaX-Wrhnpm_Csk3knjjAAAAUk"]
[Mon Feb 09 02:47:59.981559 2026] [:error] [pid 9422:tid 9426] [client 72.146.26.204:21071] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYjaX69DqDJC68qBbyxhxwAAAYE"]
[Mon Feb 09 02:48:00.901956 2026] [:error] [pid 9422:tid 9428] [client 72.146.26.204:7614] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYjaYK9DqDJC68qBbyxhyQAAAYM"]
[Mon Feb 09 02:48:01.653190 2026] [:error] [pid 24421:tid 24452] [client 72.146.26.204:8790] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYjaYap7cTzhX5M1IP9upgAAABU"]
[Mon Feb 09 02:48:03.200453 2026] [:error] [pid 24421:tid 24434] [client 72.146.26.204:23078] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aYjaY6p7cTzhX5M1IP9uqQAAAAM"]
[Mon Feb 09 02:48:04.144491 2026] [:error] [pid 9422:tid 9442] [client 72.146.26.204:9969] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aYjaZK9DqDJC68qBbyxhzAAAAZE"]
[Mon Feb 09 02:48:05.336327 2026] [proxy_fcgi:error] [pid 9422:tid 9437] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:05.583729 2026] [proxy_fcgi:error] [pid 9422:tid 9444] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:05.831095 2026] [proxy_fcgi:error] [pid 9422:tid 9439] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:06.069419 2026] [proxy_fcgi:error] [pid 9422:tid 9448] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:06.307887 2026] [proxy_fcgi:error] [pid 9422:tid 9445] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:06.573599 2026] [proxy_fcgi:error] [pid 9422:tid 9440] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:07.801844 2026] [proxy_fcgi:error] [pid 9422:tid 9442] [client 72.146.26.204:21102] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:48:08.044515 2026] [:error] [pid 9422:tid 9441] [client 72.146.26.204:21102] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aYjaaK9DqDJC68qBbyxh3gAAAZA"]
[Mon Feb 09 02:48:09.198522 2026] [:error] [pid 6723:tid 6800] [client 72.146.26.204:45165] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aYjaaTkiu6gHwS33P0qrxwAAA08"]
[Mon Feb 09 02:48:09.967799 2026] [:error] [pid 6663:tid 6715] [client 72.146.26.204:8768] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aYjaaWGI3uHqWdeZM765bgAAApY"]
[Mon Feb 09 02:48:10.831090 2026] [:error] [pid 24423:tid 24497] [client 72.146.26.204:10728] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aYjaak3f9n1Y0TpV5YaeFQAAAIw"]
[Mon Feb 09 02:48:11.995960 2026] [:error] [pid 6630:tid 6649] [client 72.146.26.204:9955] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYjaa52jf0FBTEb_cWQnUQAAAhA"]
[Mon Feb 09 02:48:13.570663 2026] [:error] [pid 43900:tid 43913] [client 72.146.26.204:8810] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYjabeWrhnpm_Csk3knjlgAAAUo"]
[Mon Feb 09 02:48:14.238155 2026] [:error] [pid 6663:tid 6716] [client 72.146.26.204:7570] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYjabmGI3uHqWdeZM765dAAAApc"]
[Mon Feb 09 02:48:15.282604 2026] [:error] [pid 6630:tid 6646] [client 72.146.26.204:8253] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYjab52jf0FBTEb_cWQnWQAAAg0"]
[Mon Feb 09 02:48:16.705062 2026] [:error] [pid 6723:tid 6807] [client 72.146.26.204:10700] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aYjacDkiu6gHwS33P0qr0gAAA1Y"]
[Mon Feb 09 02:48:17.589659 2026] [:error] [pid 24423:tid 24485] [client 72.146.26.204:11804] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aYjacU3f9n1Y0TpV5YaeQAAAAIA"]
[Mon Feb 09 02:48:19.242614 2026] [:error] [pid 9482:tid 9554] [client 72.146.26.204:30412] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aYjac8TkGH_puEFp5zPkggAAA88"]
[Mon Feb 09 02:48:20.387222 2026] [:error] [pid 6630:tid 6634] [client 72.146.26.204:7950] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/404.php"] [unique_id "aYjadJ2jf0FBTEb_cWQnZQAAAgE"]
[Mon Feb 09 02:48:21.841447 2026] [:error] [pid 6663:tid 6700] [client 72.146.26.204:7282] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aYjadWGI3uHqWdeZM765gQAAAoc"]
[Mon Feb 09 02:48:23.188162 2026] [:error] [pid 24421:tid 24441] [client 72.146.26.204:30431] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aYjad6p7cTzhX5M1IP9utgAAAAo"]
[Mon Feb 09 02:48:24.797834 2026] [:error] [pid 24423:tid 24506] [client 72.146.26.204:7257] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aYjaeE3f9n1Y0TpV5YaeTAAAAJU"]
[Mon Feb 09 02:48:27.382485 2026] [:error] [pid 6663:tid 6697] [client 72.146.26.204:30441] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/mail.php"] [unique_id "aYjae2GI3uHqWdeZM765hwAAAoQ"]
[Mon Feb 09 02:48:29.021524 2026] [:error] [pid 24530:tid 24534] [client 72.146.26.204:64226] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYjafUazNRCs1GRWrh5NjgAAAMI"]
[Mon Feb 09 02:48:31.737963 2026] [:error] [pid 24530:tid 24540] [client 72.146.26.204:3191] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYjaf0azNRCs1GRWrh5NlAAAAMg"]
[Mon Feb 09 02:48:33.082740 2026] [:error] [pid 43900:tid 43903] [client 72.146.26.204:64913] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYjageWrhnpm_Csk3knjvQAAAUA"]
[Mon Feb 09 02:48:34.615213 2026] [:error] [pid 24423:tid 24486] [client 72.146.26.204:17430] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYjagk3f9n1Y0TpV5YaeZQAAAIE"]
[Mon Feb 09 02:48:35.460240 2026] [:error] [pid 6723:tid 6806] [client 72.146.26.204:17429] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aYjagzkiu6gHwS33P0qr4wAAA1U"]
[Mon Feb 09 02:48:36.400294 2026] [:error] [pid 6663:tid 6698] [client 72.146.26.204:3154] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aYjahGGI3uHqWdeZM765lAAAAoU"]
[Mon Feb 09 02:48:37.651478 2026] [:error] [pid 43900:tid 43911] [client 72.146.26.204:64290] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aYjaheWrhnpm_Csk3knjwwAAAUg"]
[Mon Feb 09 02:48:38.564506 2026] [:error] [pid 6662:tid 6678] [client 72.146.26.204:7237] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/sx.php"] [unique_id "aYjaht-oEK1ut16KiNIwOwAAAkw"]
[Mon Feb 09 02:48:39.462777 2026] [:error] [pid 43900:tid 43916] [client 72.146.26.204:64221] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYjah-Wrhnpm_Csk3knjyQAAAU0"]
[Mon Feb 09 02:48:40.131053 2026] [:error] [pid 9482:tid 9555] [client 72.146.26.204:20063] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYjaiMTkGH_puEFp5zPkkgAAA9A"]
[Mon Feb 09 02:48:41.879742 2026] [:error] [pid 6663:tid 6707] [client 72.146.26.204:7806] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYjaiWGI3uHqWdeZM765oAAAAo4"]
[Mon Feb 09 02:48:42.868214 2026] [:error] [pid 43900:tid 43907] [client 72.146.26.204:9191] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYjaiuWrhnpm_Csk3knjzQAAAUQ"]
[Mon Feb 09 02:48:43.865347 2026] [:error] [pid 6662:tid 6683] [client 72.146.26.204:28810] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aYjai9-oEK1ut16KiNIwRgAAAlE"]
[Mon Feb 09 02:48:44.984075 2026] [:error] [pid 9422:tid 9449] [client 72.146.26.204:61536] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aYjajK9DqDJC68qBbyxh_gAAAZg"]
[Mon Feb 09 02:48:46.319300 2026] [:error] [pid 9422:tid 9445] [client 72.146.26.204:27942] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aYjajq9DqDJC68qBbyxiAgAAAZQ"]
[Mon Feb 09 02:48:47.135390 2026] [:error] [pid 24421:tid 24438] [client 72.146.26.204:42264] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aYjaj6p7cTzhX5M1IP9uywAAAAc"]
[Mon Feb 09 02:48:47.832642 2026] [:error] [pid 24421:tid 24443] [client 72.146.26.204:42303] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aYjaj6p7cTzhX5M1IP9uzQAAAAw"]
[Mon Feb 09 02:48:48.890361 2026] [:error] [pid 6663:tid 6711] [client 72.146.26.204:35577] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aYjakGGI3uHqWdeZM765pAAAApI"]
[Mon Feb 09 02:48:49.747047 2026] [:error] [pid 6662:tid 6688] [client 72.146.26.204:17993] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aYjakd-oEK1ut16KiNIwTAAAAlY"]
[Mon Feb 09 02:48:50.796365 2026] [:error] [pid 24423:tid 24494] [client 72.146.26.204:3778] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/1.php"] [unique_id "aYjakk3f9n1Y0TpV5YaecwAAAIk"]
[Mon Feb 09 02:48:51.679480 2026] [:error] [pid 9422:tid 9442] [client 72.146.26.204:31346] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aYjak69DqDJC68qBbyxiBwAAAZE"]
[Mon Feb 09 02:48:52.930256 2026] [:error] [pid 43900:tid 43921] [client 72.146.26.204:7217] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aYjalOWrhnpm_Csk3knj2gAAAVI"]
[Mon Feb 09 02:48:53.616102 2026] [:error] [pid 6663:tid 6713] [client 72.146.26.204:3813] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aYjalWGI3uHqWdeZM765rgAAApQ"]
[Mon Feb 09 02:48:55.292055 2026] [:error] [pid 6663:tid 6699] [client 72.146.26.204:31336] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/byp.php"] [unique_id "aYjal2GI3uHqWdeZM765swAAAoY"]
[Mon Feb 09 02:48:57.298002 2026] [:error] [pid 24530:tid 24553] [client 72.146.26.204:10629] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aYjamUazNRCs1GRWrh5NqAAAANU"]
[Mon Feb 09 02:48:58.315361 2026] [:error] [pid 9422:tid 9437] [client 72.146.26.204:19978] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aYjamq9DqDJC68qBbyxiCgAAAYw"]
[Mon Feb 09 02:48:59.061694 2026] [:error] [pid 6723:tid 6798] [client 72.146.26.204:7206] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aYjamzkiu6gHwS33P0qr_AAAA00"]
[Mon Feb 09 02:49:00.285861 2026] [:error] [pid 24530:tid 24533] [client 72.146.26.204:18988] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-trackback.php"] [unique_id "aYjanEazNRCs1GRWrh5NqwAAAME"]
[Mon Feb 09 02:49:01.283386 2026] [:error] [pid 43900:tid 43920] [client 72.146.26.204:20019] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aYjaneWrhnpm_Csk3knj5AAAAVE"]
[Mon Feb 09 02:49:02.190237 2026] [:error] [pid 9422:tid 9433] [client 72.146.26.204:11514] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aYjanq9DqDJC68qBbyxiDwAAAYg"]
[Mon Feb 09 02:49:03.198603 2026] [:error] [pid 9482:tid 9544] [client 72.146.26.204:45214] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aYjan8TkGH_puEFp5zPkmgAAA8U"]
[Mon Feb 09 02:49:04.273830 2026] [:error] [pid 24421:tid 24453] [client 72.146.26.204:27526] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/index.php"] [unique_id "aYjaoKp7cTzhX5M1IP9u2QAAABY"]
[Mon Feb 09 02:49:04.989000 2026] [:error] [pid 43900:tid 43912] [client 72.146.26.204:11901] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYjaoOWrhnpm_Csk3knj7AAAAUk"]
[Mon Feb 09 02:49:05.685464 2026] [:error] [pid 6662:tid 6688] [client 72.146.26.204:8110] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYjaod-oEK1ut16KiNIwVwAAAlY"]
[Mon Feb 09 02:49:08.302726 2026] [proxy_fcgi:error] [pid 6630:tid 6654] [client 72.146.26.204:31307] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:49:08.536520 2026] [:error] [pid 6630:tid 6655] [client 72.146.26.204:31307] [client 72.146.26.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYjapJ2jf0FBTEb_cWQnqAAAAhY"]
[Mon Feb 09 02:49:10.156299 2026] [:error] [pid 24421:tid 24455] [client 72.146.26.204:39244] [client 72.146.26.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYjapqp7cTzhX5M1IP9u4gAAABg"]
[Mon Feb 09 02:49:12.973780 2026] [:error] [pid 6630:tid 6642] [client 72.146.26.204:12295] [client 72.146.26.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYjaqJ2jf0FBTEb_cWQnsQAAAgk"]
[Mon Feb 09 02:49:14.612600 2026] [:error] [pid 24423:tid 24487] [client 72.146.26.204:12315] [client 72.146.26.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYjaqk3f9n1Y0TpV5YaelAAAAII"]
[Mon Feb 09 02:49:15.697213 2026] [proxy_fcgi:error] [pid 9422:tid 9435] [client 72.146.26.204:7178] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:49:16.188429 2026] [:error] [pid 9422:tid 9446] [client 72.146.26.204:7178] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aYjarK9DqDJC68qBbyxiKwAAAZU"]
[Mon Feb 09 02:49:16.842770 2026] [:error] [pid 43900:tid 43912] [client 72.146.26.204:26497] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aYjarOWrhnpm_Csk3knj9wAAAUk"]
[Mon Feb 09 02:49:17.730594 2026] [:error] [pid 24421:tid 24434] [client 72.146.26.204:11506] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aYjarap7cTzhX5M1IP9u6AAAAAM"]
[Mon Feb 09 02:49:18.286207 2026] [:error] [pid 43900:tid 43924] [client 72.146.26.204:8718] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aYjaruWrhnpm_Csk3knj-wAAAVU"]
[Mon Feb 09 02:49:18.879696 2026] [:error] [pid 43900:tid 43908] [client 72.146.26.204:16417] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYjaruWrhnpm_Csk3knj_AAAAUU"]
[Mon Feb 09 02:49:19.990751 2026] [:error] [pid 43900:tid 43923] [client 72.146.26.204:45203] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYjar-Wrhnpm_Csk3knkAQAAAVQ"]
[Mon Feb 09 02:49:20.599074 2026] [:error] [pid 6723:tid 6802] [client 72.146.26.204:3967] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYjasDkiu6gHwS33P0qsHwAAA1E"]
[Mon Feb 09 02:49:21.325136 2026] [:error] [pid 6630:tid 6645] [client 72.146.26.204:16395] [client 72.146.26.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYjasZ2jf0FBTEb_cWQnuwAAAgw"]
[Mon Feb 09 02:54:30.892656 2026] [autoindex:error] [pid 43900:tid 43903] [client 40.160.16.154:1778] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 03:27:30.384703 2026] [autoindex:error] [pid 6723:tid 6788] [client 40.160.16.154:16956] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 04:02:00.583387 2026] [autoindex:error] [pid 47939:tid 48018] [client 5.133.192.193:45203] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 06:35:28.522263 2026] [autoindex:error] [pid 48044:tid 48067] [client 173.92.142.120:48619] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 06:42:20.492767 2026] [autoindex:error] [pid 47939:tid 48021] [client 95.164.168.241:63698] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 07:36:16.123532 2026] [autoindex:error] [pid 60676:tid 60701] [client 74.7.242.20:51296] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 09:46:21.632135 2026] [autoindex:error] [pid 60508:tid 60522] [client 74.7.242.15:38280] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 10:00:08.434940 2026] [:error] [pid 47937:tid 47946] [client 170.64.226.244:47096] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYk_qM4Fd42MP2DhNrVw0AAAAAA"]
[Mon Feb 09 10:00:13.586358 2026] [:error] [pid 60678:tid 60755] [client 170.64.226.244:41068] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYk_re8Gd_fDFrcNu4NHBwAAAws"]
[Mon Feb 09 13:08:00.261742 2026] [:error] [pid 18303:tid 18316] [client 170.64.226.244:50758] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYlrsEY7TEaZkFrGG4lRIwAAAQs"]
[Mon Feb 09 13:08:00.362567 2026] [:error] [pid 60508:tid 60523] [client 170.64.226.244:41872] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYlrsOXDvLC4ADfnEzNyvgAAAY0"]
[Mon Feb 09 13:24:12.925098 2026] [:error] [pid 18303:tid 18305] [client 43.157.22.109:33070] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYlvfEY7TEaZkFrGG4lUXQAAAQA"]
[Mon Feb 09 15:49:38.892264 2026] [:error] [pid 60677:tid 60715] [client 170.64.226.244:53112] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYmRklyBgzfmDf6Gaet3swAAAsQ"]
[Mon Feb 09 15:49:38.957653 2026] [:error] [pid 60677:tid 60718] [client 170.64.226.244:40994] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYmRklyBgzfmDf6Gaet3tAAAAsc"]
[Mon Feb 09 15:51:59.914604 2026] [autoindex:error] [pid 60678:tid 60745] [client 66.249.68.137:48289] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 15:55:02.245894 2026] [autoindex:error] [pid 60677:tid 60778] [client 34.151.74.148:47608] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 16:06:15.745903 2026] [autoindex:error] [pid 47938:tid 48000] [client 52.55.4.1:59747] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 18:13:46.622726 2026] [:error] [pid 60676:tid 60696] [client 170.64.226.244:52140] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYmzWnhKcn7mJYMx5_CQtAAAAow"]
[Mon Feb 09 18:13:46.710702 2026] [:error] [pid 47938:tid 48000] [client 170.64.226.244:34984] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYmzWrVCzWE6fQJEkNIMswAAAFU"]
[Mon Feb 09 18:16:54.313360 2026] [:error] [pid 60677:tid 60714] [client 170.64.226.244:50842] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYm0FlyBgzfmDf6GaeuuDQAAAsM"]
[Mon Feb 09 18:16:54.377299 2026] [:error] [pid 60677:tid 60742] [client 170.64.226.244:45382] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYm0FlyBgzfmDf6GaeuuDgAAAs8"]
[Mon Feb 09 19:25:01.783169 2026] [:error] [pid 60589:tid 60604] [client 170.64.226.244:46842] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYnEDTIJyhPWC0JyMLyEdQAAAc0"]
[Mon Feb 09 19:25:01.958370 2026] [:error] [pid 47937:tid 47954] [client 170.64.226.244:44992] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYnEDc4Fd42MP2DhNrXiIgAAAAg"]
[Mon Feb 09 19:34:28.556053 2026] [:error] [pid 60679:tid 60728] [client 170.64.226.244:54988] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYnGRMixhoT1e6Iv6g_fWQAAA0A"]
[Mon Feb 09 19:34:28.629670 2026] [:error] [pid 60679:tid 60784] [client 170.64.226.244:57300] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYnGRMixhoT1e6Iv6g_fWgAAA1g"]
[Mon Feb 09 19:35:41.139774 2026] [:error] [pid 60619:tid 60673] [client 49.51.252.146:57796] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYnGjXEpg0UoeR8kJ-06ywAAAlc"]
[Mon Feb 09 20:11:43.276624 2026] [autoindex:error] [pid 60508:tid 60523] [client 165.232.177.132:52948] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 20:11:44.250131 2026] [autoindex:error] [pid 60589:tid 60591] [client 165.232.177.132:57284] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 20:29:13.349960 2026] [autoindex:error] [pid 60679:tid 60735] [client 35.245.45.168:57492] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 21:00:11.506968 2026] [:error] [pid 60508:tid 60518] [client 43.166.246.180:33028] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYnaW-XDvLC4ADfnEzPWPwAAAYg"]
[Mon Feb 09 21:05:29.039833 2026] [:error] [pid 60619:tid 60666] [client 104.28.160.81:18458] [client 104.28.160.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "cientifica.com.au"] [uri "/style.php"] [unique_id "aYnbmXEpg0UoeR8kJ-1NgAAAAlA"]
[Mon Feb 09 22:26:34.154273 2026] [autoindex:error] [pid 60676:tid 60703] [client 66.249.68.135:41419] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 09 23:23:33.851716 2026] [:error] [pid 18303:tid 18305] [client 170.64.226.244:47632] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYn79UY7TEaZkFrGG4m5lQAAAQA"]
[Mon Feb 09 23:23:33.925716 2026] [:error] [pid 60619:tid 60667] [client 170.64.226.244:51028] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYn79XEpg0UoeR8kJ-1uvwAAAlE"]
[Tue Feb 10 00:00:45.842192 2026] [:error] [pid 60678:tid 60771] [client 1.15.52.154:39418] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYoEre8Gd_fDFrcNu4PT1QAAAxA"]
[Tue Feb 10 00:20:37.157034 2026] [autoindex:error] [pid 34139:tid 34155] [client 52.36.240.67:49486] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 01:27:59.340775 2026] [:error] [pid 34046:tid 34123] [client 43.165.65.180:52512] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYoZH3P7l4DEEA1DQG_MDQAAARQ"]
[Tue Feb 10 02:34:14.380249 2026] [autoindex:error] [pid 14194:tid 14207] [client 40.160.26.78:27298] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://redz.com/
[Tue Feb 10 02:38:54.935942 2026] [autoindex:error] [pid 14069:tid 14076] [client 9.139.40.196:52293] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.manyget.com/
[Tue Feb 10 03:00:39.210272 2026] [:error] [pid 34139:tid 34151] [client 43.130.101.151:44466] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYou1-gedr85OdF4Mt0RWwAAAIg"]
[Tue Feb 10 03:29:07.867888 2026] [:error] [pid 44367:tid 44452] [client 170.64.226.244:35098] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYo1g_II14RyAHrGKTFaLAAAAIA"]
[Tue Feb 10 03:29:07.945851 2026] [:error] [pid 44363:tid 44440] [client 170.64.226.244:42078] [client 170.64.226.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYo1gzbZaugDEX0piYzyywAAAE8"]
[Tue Feb 10 06:32:59.655352 2026] [autoindex:error] [pid 47830:tid 47857] [client 40.160.26.78:52196] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.terra.com/
[Tue Feb 10 06:39:08.239380 2026] [autoindex:error] [pid 47831:tid 47882] [client 71.227.69.122:54915] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.cosmoage.com/
[Tue Feb 10 06:39:56.106310 2026] [autoindex:error] [pid 47937:tid 47950] [client 15.204.135.170:57471] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 07:29:39.928324 2026] [autoindex:error] [pid 47830:tid 47864] [client 43.225.189.101:43962] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 08:05:55.769694 2026] [autoindex:error] [pid 30054:tid 30079] [client 5.133.192.168:45831] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 08:15:07.529107 2026] [autoindex:error] [pid 47831:tid 47885] [client 43.225.189.101:56530] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 08:37:41.573805 2026] [autoindex:error] [pid 47831:tid 47896] [client 104.28.240.87:28339] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 08:37:43.191851 2026] [autoindex:error] [pid 47831:tid 47893] [client 104.28.240.86:51575] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 09:29:13.301433 2026] [:error] [pid 47937:tid 47954] [client 43.153.54.14:42656] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYqJ6cpqXpC2CvJ3fOPsCQAAAM8"]
[Tue Feb 10 10:12:57.956729 2026] [autoindex:error] [pid 47937:tid 47962] [client 93.158.90.141:45439] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 11:00:58.311037 2026] [autoindex:error] [pid 59544:tid 59555] [client 68.183.199.167:59348] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 11:00:59.604883 2026] [autoindex:error] [pid 47830:tid 47850] [client 68.183.199.167:44856] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 11:13:23.520457 2026] [autoindex:error] [pid 59407:tid 59427] [client 202.144.173.132:59028] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 11:17:00.639869 2026] [autoindex:error] [pid 47830:tid 47851] [client 68.218.165.88:20353] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:23:57.049375 2026] [autoindex:error] [pid 47937:tid 47939] [client 144.124.192.195:47552] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:23:58.373619 2026] [autoindex:error] [pid 47830:tid 47853] [client 144.124.192.195:47910] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:23:59.675544 2026] [autoindex:error] [pid 47937:tid 47946] [client 144.124.192.195:48166] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:13.965639 2026] [autoindex:error] [pid 47830:tid 47847] [client 144.124.192.195:51429] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:15.295663 2026] [autoindex:error] [pid 47830:tid 47849] [client 144.124.192.195:51728] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:16.589273 2026] [autoindex:error] [pid 47831:tid 47878] [client 144.124.192.195:52039] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:28.860724 2026] [autoindex:error] [pid 30054:tid 30062] [client 144.124.192.195:55037] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:29.555332 2026] [autoindex:error] [pid 30054:tid 30067] [client 144.124.192.195:55135] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:30.222771 2026] [autoindex:error] [pid 47830:tid 47856] [client 144.124.192.195:55268] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:39.472916 2026] [autoindex:error] [pid 30054:tid 30069] [client 144.124.192.195:57490] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:40.126949 2026] [autoindex:error] [pid 47830:tid 47849] [client 144.124.192.195:57632] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:24:40.800360 2026] [autoindex:error] [pid 30054:tid 30062] [client 144.124.192.195:57825] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 14:47:02.659110 2026] [autoindex:error] [pid 47831:tid 47892] [client 100.52.181.165:57962] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 15:28:27.988512 2026] [autoindex:error] [pid 59544:tid 59550] [client 147.182.141.144:35318] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 15:28:29.260905 2026] [autoindex:error] [pid 47830:tid 47851] [client 147.182.141.144:48940] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 15:38:45.674241 2026] [:error] [pid 47937:tid 47940] [client 43.155.129.131:55308] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYrghcpqXpC2CvJ3fONmMwAAAME"]
[Tue Feb 10 17:14:28.759698 2026] [autoindex:error] [pid 47937:tid 47947] [client 149.40.50.207:53994] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 18:51:58.027103 2026] [autoindex:error] [pid 47837:tid 47912] [client 149.40.50.207:33036] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 20:36:23.834056 2026] [autoindex:error] [pid 47937:tid 47956] [client 52.87.244.56:58690] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 20:36:24.254828 2026] [autoindex:error] [pid 7704:tid 7707] [client 52.87.244.56:52604] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 21:30:03.434396 2026] [autoindex:error] [pid 47837:tid 47918] [client 104.28.164.59:48456] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 21:30:26.485378 2026] [autoindex:error] [pid 7704:tid 7730] [client 104.28.164.59:48069] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 21:45:46.813952 2026] [:error] [pid 59407:tid 59419] [client 49.51.243.156:59946] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYs2imLlhBXE3qmX-JkxogAAAUo"]
[Tue Feb 10 23:07:04.863457 2026] [autoindex:error] [pid 47937:tid 47953] [client 170.64.230.208:52082] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 23:41:13.997066 2026] [autoindex:error] [pid 59407:tid 59420] [client 50.114.28.184:34827] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 23:41:14.929583 2026] [autoindex:error] [pid 59544:tid 59559] [client 104.239.53.38:41725] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 23:41:15.594842 2026] [autoindex:error] [pid 47937:tid 47952] [client 50.114.28.184:53187] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 23:41:17.084262 2026] [autoindex:error] [pid 47937:tid 47959] [client 104.239.53.38:40839] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 02:33:26.809384 2026] [:error] [pid 46779:tid 46852] [client 123.187.240.242:60405] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYt59tZrCpVdS6yMMkdmqwAAAJg"]
[Wed Feb 11 05:27:07.780406 2026] [proxy_fcgi:error] [pid 28073:tid 28093] [client 141.98.10.136:62201] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:27:08.397913 2026] [proxy_fcgi:error] [pid 28073:tid 28090] [client 141.98.10.136:58384] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:58:31.079651 2026] [autoindex:error] [pid 27965:tid 28010] [client 154.28.229.7:19496] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 05:58:31.082183 2026] [autoindex:error] [pid 17401:tid 17420] [client 103.196.9.74:8900] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 05:58:36.054922 2026] [autoindex:error] [pid 17401:tid 17417] [client 103.196.9.164:21308] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 05:59:23.818268 2026] [autoindex:error] [pid 27964:tid 27984] [client 31.97.153.61:39936] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 06:58:30.841851 2026] [autoindex:error] [pid 27965:tid 28027] [client 193.149.129.63:48646] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 07:09:40.022800 2026] [autoindex:error] [pid 27966:tid 28050] [client 141.138.213.100:32973] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 07:11:43.382302 2026] [autoindex:error] [pid 22537:tid 22545] [client 103.196.9.69:2514] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 07:11:43.389816 2026] [autoindex:error] [pid 27966:tid 28045] [client 104.164.173.110:5220] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 07:11:53.011841 2026] [autoindex:error] [pid 22537:tid 22560] [client 103.196.9.250:43156] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 08:03:43.655563 2026] [:error] [pid 27965:tid 28025] [client 177.10.226.192:10997] [client 177.10.226.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.226.192, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYvHX9HLAUAIo8qpZyGC-QAAAFY"]
[Wed Feb 11 08:03:43.666756 2026] [proxy_fcgi:error] [pid 27965:tid 28025] [client 177.10.226.192:10997] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 09:05:49.105195 2026] [autoindex:error] [pid 27966:tid 28031] [client 74.7.241.45:37796] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 09:58:35.480845 2026] [autoindex:error] [pid 22537:tid 22539] [client 192.153.57.62:44630] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 09:59:24.027799 2026] [autoindex:error] [pid 22537:tid 22555] [client 2.57.122.44:50562] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 10:57:31.706071 2026] [:error] [pid 17401:tid 17423] [client 43.135.185.59:52758] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYvwGw0lHeayTY40t37l-AAAARQ"]
[Wed Feb 11 12:29:54.165822 2026] [autoindex:error] [pid 27966:tid 28036] [client 2.57.122.44:53106] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 12:29:54.829337 2026] [autoindex:error] [pid 22570:tid 22624] [client 2.57.122.44:53176] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 13:01:01.091949 2026] [autoindex:error] [pid 22569:tid 22579] [client 74.7.227.146:39404] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 14:07:41.902659 2026] [autoindex:error] [pid 28073:tid 28085] [client 34.74.242.206:1727] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 14:18:03.669690 2026] [autoindex:error] [pid 27964:tid 27975] [client 34.74.242.206:1717] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:09:00.570826 2026] [autoindex:error] [pid 27965:tid 28024] [client 34.74.242.206:1687] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:15:07.472599 2026] [autoindex:error] [pid 17401:tid 17423] [client 34.74.242.206:1694] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 16:45:39.030897 2026] [autoindex:error] [pid 27964:tid 27981] [client 54.162.53.4:37586] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 16:52:25.635234 2026] [autoindex:error] [pid 27966:tid 28043] [client 54.162.53.4:38210] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 17:29:55.098303 2026] [:error] [pid 22570:tid 22614] [client 45.148.10.238:39874] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cientifica.com.au"] [uri "/.git/config"] [unique_id "aYxMEyE5uSe043FXwQpIvQAAAc4"]
[Wed Feb 11 18:23:37.432055 2026] [autoindex:error] [pid 22537:tid 22547] [client 34.23.25.162:63236] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 18:44:58.184995 2026] [:error] [pid 27966:tid 28043] [client 64.227.167.178:50629] [client 64.227.167.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.167.178, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYxdql8HJ9ydyf0SPu6d7wAAAI0"]
[Wed Feb 11 18:44:58.195453 2026] [proxy_fcgi:error] [pid 27966:tid 28043] [client 64.227.167.178:50629] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:48:16.120454 2026] [:error] [pid 28073:tid 28086] [client 45.148.10.238:45812] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cientifica.com.au"] [uri "/.git/config"] [unique_id "aYxecIeHYIlOlF-DsMy1eAAAAMs"]
[Wed Feb 11 19:09:22.514195 2026] [autoindex:error] [pid 27966:tid 28048] [client 157.173.122.176:37986] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:11:43.639824 2026] [autoindex:error] [pid 28073:tid 28099] [client 34.140.20.28:54538] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:41:11.733672 2026] [:error] [pid 27964:tid 27996] [client 134.209.146.211:60368] [client 134.209.146.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.146.211, incrementing brute counter"] [hostname "cientifica.com.au"] [uri "/wp-login.php"] [unique_id "aYxq18p0XgWYHLcQtEjUiAAAABU"]
[Wed Feb 11 19:41:11.743126 2026] [proxy_fcgi:error] [pid 27964:tid 27996] [client 134.209.146.211:60368] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:05:30.364660 2026] [autoindex:error] [pid 22569:tid 22588] [client 139.59.239.230:56674] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 20:17:31.590262 2026] [proxy_fcgi:error] [pid 22569:tid 22574] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:31.844033 2026] [proxy_fcgi:error] [pid 22569:tid 22589] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:32.107629 2026] [proxy_fcgi:error] [pid 22569:tid 22594] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:32.369140 2026] [proxy_fcgi:error] [pid 22569:tid 22591] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:32.622430 2026] [proxy_fcgi:error] [pid 22569:tid 22575] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:32.877900 2026] [proxy_fcgi:error] [pid 22569:tid 22583] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:33.138338 2026] [proxy_fcgi:error] [pid 22569:tid 22596] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:17:33.391763 2026] [proxy_fcgi:error] [pid 22569:tid 22582] [client 20.107.195.240:47096] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 21:54:31.333280 2026] [autoindex:error] [pid 28073:tid 28086] [client 159.203.169.63:34546] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 21:54:32.824300 2026] [autoindex:error] [pid 27966:tid 28031] [client 159.203.169.63:37320] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 23:03:30.322925 2026] [autoindex:error] [pid 27965:tid 28022] [client 136.112.151.254:51551] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 23:03:30.900491 2026] [autoindex:error] [pid 27965:tid 28014] [client 136.112.151.254:56843] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 05:12:41.130350 2026] [:error] [pid 57641:tid 57664] [client 43.131.23.154:49904] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cientifica.com.au"] [uri "/"] [unique_id "aYzwyXEGAHJopH5xQFw-BAAAANQ"]
[Thu Feb 12 05:14:28.882621 2026] [autoindex:error] [pid 57532:tid 57548] [client 43.225.189.64:57992] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 05:38:52.517322 2026] [autoindex:error] [pid 57641:tid 57655] [client 54.39.6.233:43186] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 05:42:42.961271 2026] [:error] [pid 29368:tid 29385] [client 182.42.104.32:57510] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cientifica.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cientifica.com.au"] [uri "/"] [unique_id "aYz30tNsoKUOH6cSt8285wAAAQ8"]
[Thu Feb 12 05:49:37.326314 2026] [:error] [pid 57532:tid 57564] [client 194.5.82.38:34091] [client 194.5.82.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYz5cYfDW9Kql6FLJINYrAAAABY"]
[Thu Feb 12 05:49:37.527141 2026] [proxy_fcgi:error] [pid 57533:tid 57577] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:37.631680 2026] [proxy_fcgi:error] [pid 57533:tid 57576] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:37.836103 2026] [proxy_fcgi:error] [pid 57533:tid 57592] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:37.933564 2026] [proxy_fcgi:error] [pid 57533:tid 57590] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.032133 2026] [proxy_fcgi:error] [pid 57533:tid 57580] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.128403 2026] [:error] [pid 57533:tid 57598] [client 194.5.82.23:56719] [client 194.5.82.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.23, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYz5csBMbk5EwuXt4ZffagAAAFY"]
[Thu Feb 12 05:49:38.132914 2026] [proxy_fcgi:error] [pid 57533:tid 57598] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.330250 2026] [proxy_fcgi:error] [pid 57533:tid 57584] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.428057 2026] [proxy_fcgi:error] [pid 57533:tid 57575] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.525845 2026] [proxy_fcgi:error] [pid 57533:tid 57597] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.726911 2026] [proxy_fcgi:error] [pid 57533:tid 57587] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:38.935775 2026] [proxy_fcgi:error] [pid 57533:tid 57594] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.126517 2026] [proxy_fcgi:error] [pid 57533:tid 57599] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.234954 2026] [proxy_fcgi:error] [pid 57533:tid 57582] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.433191 2026] [proxy_fcgi:error] [pid 57533:tid 57576] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.535428 2026] [proxy_fcgi:error] [pid 57533:tid 57590] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.666216 2026] [proxy_fcgi:error] [pid 57533:tid 57580] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.759195 2026] [proxy_fcgi:error] [pid 57533:tid 57598] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:39.853645 2026] [proxy_fcgi:error] [pid 57533:tid 57583] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.042062 2026] [proxy_fcgi:error] [pid 57533:tid 57575] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.140505 2026] [proxy_fcgi:error] [pid 57533:tid 57587] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.238275 2026] [proxy_fcgi:error] [pid 57533:tid 57578] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.331845 2026] [proxy_fcgi:error] [pid 57533:tid 57593] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.433166 2026] [proxy_fcgi:error] [pid 57533:tid 57581] [client 194.5.82.23:56719] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.529051 2026] [:error] [pid 57533:tid 57599] [client 194.5.82.23:56719] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aYz5dMBMbk5EwuXt4ZffhgAAAFc"]
[Thu Feb 12 05:49:40.820085 2026] [proxy_fcgi:error] [pid 57534:tid 57608] [client 194.5.82.17:43021] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:40.911393 2026] [:error] [pid 57534:tid 57614] [client 194.5.82.17:43021] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYz5dN-p0vPYwBdK43QZRwAAAIs"]
[Thu Feb 12 05:49:41.098203 2026] [proxy_fcgi:error] [pid 57534:tid 57619] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.194297 2026] [proxy_fcgi:error] [pid 57534:tid 57627] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.383709 2026] [proxy_fcgi:error] [pid 57534:tid 57625] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.478073 2026] [proxy_fcgi:error] [pid 57534:tid 57622] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.571515 2026] [proxy_fcgi:error] [pid 57534:tid 57616] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.757529 2026] [proxy_fcgi:error] [pid 57534:tid 57605] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.859523 2026] [proxy_fcgi:error] [pid 57534:tid 57612] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:41.954999 2026] [proxy_fcgi:error] [pid 57534:tid 57615] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:42.056317 2026] [proxy_fcgi:error] [pid 57534:tid 57623] [client 194.5.82.49:58805] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:42.145510 2026] [:error] [pid 57534:tid 57618] [client 194.5.82.49:58805] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYz5dt-p0vPYwBdK43QZVgAAAI8"]
[Thu Feb 12 05:49:42.329996 2026] [proxy_fcgi:error] [pid 57641:tid 57651] [client 194.5.82.17:38821] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:42.427697 2026] [proxy_fcgi:error] [pid 57641:tid 57650] [client 194.5.82.17:38821] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:42.523359 2026] [:error] [pid 57641:tid 57647] [client 194.5.82.17:38821] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aYz5dnEGAHJopH5xQFxODgAAAMQ"]
[Thu Feb 12 05:49:42.706391 2026] [proxy_fcgi:error] [pid 57641:tid 57667] [client 194.5.82.48:26299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:42.800535 2026] [proxy_fcgi:error] [pid 57641:tid 57653] [client 194.5.82.48:26299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:43.085812 2026] [proxy_fcgi:error] [pid 57641:tid 57658] [client 194.5.82.48:26299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:43.276593 2026] [proxy_fcgi:error] [pid 57641:tid 57646] [client 194.5.82.48:26299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:43.368920 2026] [:error] [pid 57641:tid 57664] [client 194.5.82.48:26299] [client 194.5.82.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/fm.php"] [unique_id "aYz5d3EGAHJopH5xQFxOFwAAANQ"]
[Thu Feb 12 05:49:43.649850 2026] [proxy_fcgi:error] [pid 29368:tid 29375] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:43.746090 2026] [proxy_fcgi:error] [pid 29368:tid 29385] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:43.841436 2026] [proxy_fcgi:error] [pid 29368:tid 29373] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:43.934044 2026] [proxy_fcgi:error] [pid 29368:tid 29390] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:44.441138 2026] [proxy_fcgi:error] [pid 29368:tid 29377] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:44.553644 2026] [proxy_fcgi:error] [pid 29368:tid 29383] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:44.752001 2026] [proxy_fcgi:error] [pid 29368:tid 29388] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:44.847927 2026] [proxy_fcgi:error] [pid 29368:tid 29380] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:44.947387 2026] [proxy_fcgi:error] [pid 29368:tid 29394] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:45.042672 2026] [proxy_fcgi:error] [pid 29368:tid 29372] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:45.229762 2026] [proxy_fcgi:error] [pid 29368:tid 29392] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:45.329592 2026] [proxy_fcgi:error] [pid 29368:tid 29382] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:45.440106 2026] [proxy_fcgi:error] [pid 29368:tid 29381] [client 194.5.82.45:63121] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:45.531463 2026] [:error] [pid 29368:tid 29371] [client 194.5.82.45:63121] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYz5edNsoKUOH6cSt83BlgAAAQE"]
[Thu Feb 12 05:49:45.721734 2026] [proxy_fcgi:error] [pid 57533:tid 57578] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:45.914372 2026] [proxy_fcgi:error] [pid 57533:tid 57600] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:46.012488 2026] [proxy_fcgi:error] [pid 57533:tid 57582] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:46.106426 2026] [proxy_fcgi:error] [pid 57533:tid 57597] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:46.202676 2026] [proxy_fcgi:error] [pid 57533:tid 57579] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:46.299190 2026] [proxy_fcgi:error] [pid 57533:tid 57589] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:46.489041 2026] [proxy_fcgi:error] [pid 57533:tid 57591] [client 194.5.82.39:55791] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:46.768228 2026] [:error] [pid 57533:tid 57583] [client 194.5.82.39:55791] [client 194.5.82.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYz5esBMbk5EwuXt4ZffnQAAAEg"]
[Thu Feb 12 05:49:46.953202 2026] [proxy_fcgi:error] [pid 57534:tid 57627] [client 194.5.82.9:30057] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.049455 2026] [proxy_fcgi:error] [pid 57534:tid 57617] [client 194.5.82.9:30057] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.155036 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.9:30057] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.280423 2026] [proxy_fcgi:error] [pid 57534:tid 57619] [client 194.5.82.9:30057] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.372645 2026] [:error] [pid 57534:tid 57626] [client 194.5.82.9:30057] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYz5e9-p0vPYwBdK43QZaQAAAJc"]
[Thu Feb 12 05:49:47.563685 2026] [proxy_fcgi:error] [pid 57533:tid 57577] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.658714 2026] [proxy_fcgi:error] [pid 57533:tid 57598] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.754977 2026] [proxy_fcgi:error] [pid 57533:tid 57586] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.848934 2026] [proxy_fcgi:error] [pid 57533:tid 57592] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:47.945982 2026] [proxy_fcgi:error] [pid 57533:tid 57587] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.041080 2026] [proxy_fcgi:error] [pid 57533:tid 57593] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.139304 2026] [proxy_fcgi:error] [pid 57533:tid 57581] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.333614 2026] [proxy_fcgi:error] [pid 57533:tid 57596] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.432533 2026] [proxy_fcgi:error] [pid 57533:tid 57582] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.531800 2026] [proxy_fcgi:error] [pid 57533:tid 57584] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.626443 2026] [proxy_fcgi:error] [pid 57533:tid 57589] [client 194.5.82.32:42419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.721603 2026] [:error] [pid 57533:tid 57576] [client 194.5.82.32:42419] [client 194.5.82.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYz5fMBMbk5EwuXt4ZffqwAAAEE"]
[Thu Feb 12 05:49:48.904353 2026] [proxy_fcgi:error] [pid 57532:tid 57555] [client 194.5.82.4:35751] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:48.993463 2026] [:error] [pid 57532:tid 57562] [client 194.5.82.4:35751] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYz5fIfDW9Kql6FLJINYxQAAABQ"]
[Thu Feb 12 05:49:49.267938 2026] [proxy_fcgi:error] [pid 57532:tid 57551] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:49.551830 2026] [proxy_fcgi:error] [pid 57532:tid 57561] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:49.668406 2026] [proxy_fcgi:error] [pid 57532:tid 57546] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:49.954963 2026] [proxy_fcgi:error] [pid 57532:tid 57565] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:50.049633 2026] [proxy_fcgi:error] [pid 57532:tid 57542] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:50.237430 2026] [proxy_fcgi:error] [pid 57532:tid 57566] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:50.337959 2026] [proxy_fcgi:error] [pid 57532:tid 57552] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:50.436151 2026] [proxy_fcgi:error] [pid 57532:tid 57555] [client 194.5.82.40:28735] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:50.634227 2026] [:error] [pid 57532:tid 57548] [client 194.5.82.40:28735] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYz5fofDW9Kql6FLJINY2AAAAAY"]
[Thu Feb 12 05:49:50.928309 2026] [:error] [pid 57533:tid 57596] [client 194.5.82.40:23309] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYz5fsBMbk5EwuXt4ZffrgAAAFQ"]
[Thu Feb 12 05:49:51.117878 2026] [proxy_fcgi:error] [pid 57641:tid 57663] [client 194.5.82.16:34445] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:51.212023 2026] [proxy_fcgi:error] [pid 57641:tid 57647] [client 194.5.82.16:34445] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:51.304701 2026] [proxy_fcgi:error] [pid 57641:tid 57645] [client 194.5.82.16:34445] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:51.395216 2026] [:error] [pid 57641:tid 57644] [client 194.5.82.16:34445] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYz5f3EGAHJopH5xQFxOLAAAAME"]
[Thu Feb 12 05:49:51.578799 2026] [proxy_fcgi:error] [pid 57532:tid 57545] [client 194.5.82.13:53771] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:51.876659 2026] [proxy_fcgi:error] [pid 57532:tid 57561] [client 194.5.82.13:53771] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:52.064169 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.13:53771] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:52.153480 2026] [:error] [pid 57532:tid 57543] [client 194.5.82.13:53771] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYz5gIfDW9Kql6FLJINY4gAAAAE"]
[Thu Feb 12 05:49:52.437471 2026] [proxy_fcgi:error] [pid 57534:tid 57620] [client 194.5.82.47:39481] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:52.533373 2026] [proxy_fcgi:error] [pid 57534:tid 57625] [client 194.5.82.47:39481] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:52.746661 2026] [proxy_fcgi:error] [pid 57534:tid 57603] [client 194.5.82.47:39481] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:52.837069 2026] [:error] [pid 57534:tid 57612] [client 194.5.82.47:39481] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYz5gN-p0vPYwBdK43QZeAAAAIk"]
[Thu Feb 12 05:49:53.031098 2026] [proxy_fcgi:error] [pid 57533:tid 57599] [client 194.5.82.16:43331] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:54.869600 2026] [proxy_fcgi:error] [pid 57533:tid 57579] [client 194.5.82.16:43331] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:55.064407 2026] [proxy_fcgi:error] [pid 57533:tid 57581] [client 194.5.82.16:43331] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:55.256416 2026] [proxy_fcgi:error] [pid 57533:tid 57591] [client 194.5.82.16:43331] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:55.348829 2026] [:error] [pid 57533:tid 57598] [client 194.5.82.16:43331] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aYz5g8BMbk5EwuXt4ZffxQAAAFY"]
[Thu Feb 12 05:49:55.630415 2026] [:error] [pid 29368:tid 29383] [client 194.5.82.15:20241] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aYz5g9NsoKUOH6cSt83B2QAAAQ0"]
[Thu Feb 12 05:49:55.930593 2026] [proxy_fcgi:error] [pid 57532:tid 57554] [client 194.5.82.166:26405] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:56.029216 2026] [proxy_fcgi:error] [pid 57532:tid 57564] [client 194.5.82.166:26405] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:56.129885 2026] [proxy_fcgi:error] [pid 57532:tid 57561] [client 194.5.82.166:26405] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:56.232270 2026] [proxy_fcgi:error] [pid 57532:tid 57547] [client 194.5.82.166:26405] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:56.328283 2026] [:error] [pid 57532:tid 57542] [client 194.5.82.166:26405] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aYz5hIfDW9Kql6FLJINY-gAAAAA"]
[Thu Feb 12 05:49:56.522058 2026] [:error] [pid 29368:tid 29374] [client 194.5.82.23:61049] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYz5hNNsoKUOH6cSt83B4gAAAQQ"]
[Thu Feb 12 05:49:56.837000 2026] [:error] [pid 29368:tid 29377] [client 194.5.82.23:57121] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aYz5hNNsoKUOH6cSt83B5wAAAQc"]
[Thu Feb 12 05:49:58.030903 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:58.340762 2026] [proxy_fcgi:error] [pid 57534:tid 57623] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:58.534306 2026] [proxy_fcgi:error] [pid 57534:tid 57618] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:58.738584 2026] [proxy_fcgi:error] [pid 57534:tid 57614] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:58.939881 2026] [proxy_fcgi:error] [pid 57534:tid 57607] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:59.037721 2026] [proxy_fcgi:error] [pid 57534:tid 57624] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:59.445194 2026] [proxy_fcgi:error] [pid 57534:tid 57615] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:59.548246 2026] [proxy_fcgi:error] [pid 57534:tid 57626] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:49:59.741502 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:00.140766 2026] [proxy_fcgi:error] [pid 57534:tid 57627] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:00.257240 2026] [proxy_fcgi:error] [pid 57534:tid 57617] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:00.365585 2026] [proxy_fcgi:error] [pid 57534:tid 57610] [client 194.5.82.44:59081] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:00.456729 2026] [:error] [pid 57534:tid 57622] [client 194.5.82.44:59081] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYz5iN-p0vPYwBdK43QZnwAAAJM"]
[Thu Feb 12 05:50:00.640853 2026] [proxy_fcgi:error] [pid 57532:tid 57560] [client 194.5.82.53:30193] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:00.843682 2026] [:error] [pid 57532:tid 57552] [client 194.5.82.53:30193] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYz5iIfDW9Kql6FLJINZGAAAAAo"]
[Thu Feb 12 05:50:01.037439 2026] [proxy_fcgi:error] [pid 29368:tid 29379] [client 194.5.82.14:31173] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:01.131959 2026] [proxy_fcgi:error] [pid 29368:tid 29370] [client 194.5.82.14:31173] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:01.336248 2026] [:error] [pid 29368:tid 29385] [client 194.5.82.14:31173] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYz5idNsoKUOH6cSt83CDQAAAQ8"]
[Thu Feb 12 05:50:01.636682 2026] [:error] [pid 57641:tid 57646] [client 194.5.82.21:62421] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aYz5iXEGAHJopH5xQFxOdAAAAMM"]
[Thu Feb 12 05:50:01.838010 2026] [proxy_fcgi:error] [pid 29368:tid 29380] [client 194.5.82.4:28111] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:01.939653 2026] [proxy_fcgi:error] [pid 29368:tid 29393] [client 194.5.82.4:28111] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:02.079898 2026] [proxy_fcgi:error] [pid 29368:tid 29384] [client 194.5.82.4:28111] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:02.660351 2026] [:error] [pid 29368:tid 29371] [client 194.5.82.4:28111] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/about.php"] [unique_id "aYz5itNsoKUOH6cSt83CGQAAAQE"]
[Thu Feb 12 05:50:03.041437 2026] [proxy_fcgi:error] [pid 29368:tid 29389] [client 194.5.82.27:35191] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:03.138439 2026] [proxy_fcgi:error] [pid 29368:tid 29391] [client 194.5.82.27:35191] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:03.533617 2026] [proxy_fcgi:error] [pid 29368:tid 29380] [client 194.5.82.27:35191] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:03.625748 2026] [:error] [pid 29368:tid 29384] [client 194.5.82.27:35191] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYz5i9NsoKUOH6cSt83CIgAAAQ4"]
[Thu Feb 12 05:50:03.845950 2026] [proxy_fcgi:error] [pid 57532:tid 57542] [client 194.5.82.29:40083] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:03.940606 2026] [proxy_fcgi:error] [pid 57532:tid 57548] [client 194.5.82.29:40083] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:04.074132 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.29:40083] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:04.262627 2026] [proxy_fcgi:error] [pid 57532:tid 57565] [client 194.5.82.29:40083] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:04.543291 2026] [:error] [pid 57532:tid 57560] [client 194.5.82.29:40083] [client 194.5.82.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYz5jIfDW9Kql6FLJINZJQAAABI"]
[Thu Feb 12 05:50:04.731007 2026] [proxy_fcgi:error] [pid 57641:tid 57656] [client 194.5.82.52:40069] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:05.391604 2026] [proxy_fcgi:error] [pid 57641:tid 57649] [client 194.5.82.52:40069] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:05.581846 2026] [proxy_fcgi:error] [pid 57641:tid 57646] [client 194.5.82.52:40069] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:05.679016 2026] [proxy_fcgi:error] [pid 57641:tid 57660] [client 194.5.82.52:40069] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:05.780623 2026] [proxy_fcgi:error] [pid 57641:tid 57668] [client 194.5.82.52:40069] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:05.874139 2026] [proxy_fcgi:error] [pid 57641:tid 57645] [client 194.5.82.52:40069] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:06.063811 2026] [:error] [pid 57641:tid 57650] [client 194.5.82.52:40069] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYz5jnEGAHJopH5xQFxOggAAAMc"]
[Thu Feb 12 05:50:06.342250 2026] [proxy_fcgi:error] [pid 29368:tid 29377] [client 194.5.82.13:22313] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:06.436879 2026] [proxy_fcgi:error] [pid 29368:tid 29371] [client 194.5.82.13:22313] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:06.634513 2026] [proxy_fcgi:error] [pid 29368:tid 29372] [client 194.5.82.13:22313] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:06.729505 2026] [proxy_fcgi:error] [pid 29368:tid 29391] [client 194.5.82.13:22313] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:07.023405 2026] [proxy_fcgi:error] [pid 29368:tid 29376] [client 194.5.82.13:22313] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:07.219012 2026] [proxy_fcgi:error] [pid 29368:tid 29380] [client 194.5.82.13:22313] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:07.309426 2026] [:error] [pid 29368:tid 29384] [client 194.5.82.13:22313] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aYz5j9NsoKUOH6cSt83CPQAAAQ4"]
[Thu Feb 12 05:50:07.495339 2026] [proxy_fcgi:error] [pid 57534:tid 57619] [client 194.5.82.4:60745] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:07.632529 2026] [proxy_fcgi:error] [pid 57534:tid 57620] [client 194.5.82.4:60745] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:07.726260 2026] [proxy_fcgi:error] [pid 57534:tid 57615] [client 194.5.82.4:60745] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:07.816508 2026] [:error] [pid 57534:tid 57608] [client 194.5.82.4:60745] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aYz5j9-p0vPYwBdK43QZqwAAAIU"]
[Thu Feb 12 05:50:08.126260 2026] [proxy_fcgi:error] [pid 29368:tid 29372] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.221567 2026] [proxy_fcgi:error] [pid 29368:tid 29378] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.327765 2026] [proxy_fcgi:error] [pid 29368:tid 29391] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.428209 2026] [proxy_fcgi:error] [pid 29368:tid 29375] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.527695 2026] [proxy_fcgi:error] [pid 29368:tid 29393] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.630155 2026] [proxy_fcgi:error] [pid 29368:tid 29385] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.724825 2026] [proxy_fcgi:error] [pid 29368:tid 29374] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:08.931696 2026] [proxy_fcgi:error] [pid 29368:tid 29384] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:09.027507 2026] [proxy_fcgi:error] [pid 29368:tid 29379] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:09.121748 2026] [proxy_fcgi:error] [pid 29368:tid 29386] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:09.409749 2026] [proxy_fcgi:error] [pid 29368:tid 29378] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:09.506080 2026] [proxy_fcgi:error] [pid 29368:tid 29375] [client 194.5.82.51:47923] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:09.792617 2026] [:error] [pid 29368:tid 29385] [client 194.5.82.51:47923] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/layout.php"] [unique_id "aYz5kdNsoKUOH6cSt83CWgAAAQ8"]
[Thu Feb 12 05:50:10.067851 2026] [:error] [pid 57641:tid 57658] [client 194.5.82.17:37921] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aYz5knEGAHJopH5xQFxOjAAAAM4"]
[Thu Feb 12 05:50:10.261312 2026] [:error] [pid 57532:tid 57553] [client 194.5.82.53:64151] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aYz5kofDW9Kql6FLJINZMQAAAAs"]
[Thu Feb 12 05:50:10.554303 2026] [proxy_fcgi:error] [pid 57532:tid 57550] [client 194.5.82.18:48973] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:10.653671 2026] [:error] [pid 57532:tid 57563] [client 194.5.82.18:48973] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aYz5kofDW9Kql6FLJINZNAAAABU"]
[Thu Feb 12 05:50:11.396806 2026] [proxy_fcgi:error] [pid 57532:tid 57546] [client 194.5.82.46:47111] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:11.495563 2026] [proxy_fcgi:error] [pid 57532:tid 57561] [client 194.5.82.46:47111] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:11.778228 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.46:47111] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:11.974707 2026] [:error] [pid 57532:tid 57547] [client 194.5.82.46:47111] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aYz5k4fDW9Kql6FLJINZPQAAAAU"]
[Thu Feb 12 05:50:12.249978 2026] [:error] [pid 57534:tid 57607] [client 194.5.82.37:43799] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/generated-classname.php"] [unique_id "aYz5lN-p0vPYwBdK43QZtQAAAIQ"]
[Thu Feb 12 05:50:12.529567 2026] [proxy_fcgi:error] [pid 57533:tid 57599] [client 194.5.82.37:30435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:12.726782 2026] [proxy_fcgi:error] [pid 57533:tid 57575] [client 194.5.82.37:30435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:12.823527 2026] [proxy_fcgi:error] [pid 57533:tid 57588] [client 194.5.82.37:30435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:13.494026 2026] [proxy_fcgi:error] [pid 57533:tid 57577] [client 194.5.82.37:30435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:13.583581 2026] [:error] [pid 57533:tid 57579] [client 194.5.82.37:30435] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/dashboard.php"] [unique_id "aYz5lcBMbk5EwuXt4ZfgAgAAAEQ"]
[Thu Feb 12 05:50:14.775110 2026] [proxy_fcgi:error] [pid 57532:tid 57552] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:14.870443 2026] [proxy_fcgi:error] [pid 57532:tid 57543] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:14.964953 2026] [proxy_fcgi:error] [pid 57532:tid 57546] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.059702 2026] [proxy_fcgi:error] [pid 57532:tid 57557] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.249861 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.347622 2026] [proxy_fcgi:error] [pid 57532:tid 57556] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.446316 2026] [proxy_fcgi:error] [pid 57532:tid 57551] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.541628 2026] [proxy_fcgi:error] [pid 57532:tid 57542] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.636197 2026] [proxy_fcgi:error] [pid 57532:tid 57566] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.830281 2026] [proxy_fcgi:error] [pid 57532:tid 57559] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:15.927140 2026] [proxy_fcgi:error] [pid 57532:tid 57554] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:16.022200 2026] [proxy_fcgi:error] [pid 57532:tid 57562] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:16.330471 2026] [proxy_fcgi:error] [pid 57532:tid 57550] [client 194.5.82.37:20017] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:16.420791 2026] [:error] [pid 57532:tid 57560] [client 194.5.82.37:20017] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aYz5mIfDW9Kql6FLJINZVwAAABI"]
[Thu Feb 12 05:50:16.697304 2026] [:error] [pid 57641:tid 57656] [client 194.5.82.25:21985] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/random_compat/bala.php"] [unique_id "aYz5mHEGAHJopH5xQFxOkgAAAMw"]
[Thu Feb 12 05:50:16.881335 2026] [:error] [pid 29368:tid 29394] [client 194.5.82.11:56665] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aYz5mNNsoKUOH6cSt83CaQAAARg"]
[Thu Feb 12 05:50:17.460281 2026] [proxy_fcgi:error] [pid 57532:tid 57548] [client 194.5.82.33:46299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:17.808676 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.33:46299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:17.901415 2026] [proxy_fcgi:error] [pid 57532:tid 57556] [client 194.5.82.33:46299] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:17.995612 2026] [:error] [pid 57532:tid 57563] [client 194.5.82.33:46299] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYz5mYfDW9Kql6FLJINZXwAAABU"]
[Thu Feb 12 05:50:18.185366 2026] [proxy_fcgi:error] [pid 57533:tid 57579] [client 194.5.82.45:34407] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:18.373961 2026] [:error] [pid 57533:tid 57576] [client 194.5.82.45:34407] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYz5msBMbk5EwuXt4ZfgDQAAAEE"]
[Thu Feb 12 05:50:18.556340 2026] [:error] [pid 57534:tid 57614] [client 194.5.82.26:21433] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aYz5mt-p0vPYwBdK43QZzAAAAIs"]
[Thu Feb 12 05:50:18.741054 2026] [proxy_fcgi:error] [pid 29368:tid 29388] [client 194.5.82.37:33339] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:18.936909 2026] [proxy_fcgi:error] [pid 29368:tid 29376] [client 194.5.82.37:33339] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:20.710308 2026] [proxy_fcgi:error] [pid 29368:tid 29378] [client 194.5.82.37:33339] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:20.806857 2026] [proxy_fcgi:error] [pid 29368:tid 29381] [client 194.5.82.37:33339] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:20.902275 2026] [proxy_fcgi:error] [pid 29368:tid 29371] [client 194.5.82.37:33339] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:20.997974 2026] [proxy_fcgi:error] [pid 29368:tid 29388] [client 194.5.82.37:33339] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:21.088572 2026] [:error] [pid 29368:tid 29390] [client 194.5.82.37:33339] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aYz5ndNsoKUOH6cSt83CegAAARQ"]
[Thu Feb 12 05:50:21.399979 2026] [proxy_fcgi:error] [pid 57641:tid 57645] [client 194.5.82.18:26337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:21.590530 2026] [proxy_fcgi:error] [pid 57641:tid 57668] [client 194.5.82.18:26337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:21.777086 2026] [proxy_fcgi:error] [pid 57641:tid 57655] [client 194.5.82.18:26337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:21.872740 2026] [proxy_fcgi:error] [pid 57641:tid 57667] [client 194.5.82.18:26337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:22.151527 2026] [proxy_fcgi:error] [pid 57641:tid 57662] [client 194.5.82.18:26337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:22.241702 2026] [:error] [pid 57641:tid 57668] [client 194.5.82.18:26337] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aYz5nnEGAHJopH5xQFxO1AAAANg"]
[Thu Feb 12 05:50:22.434897 2026] [proxy_fcgi:error] [pid 57533:tid 57583] [client 194.5.82.33:27565] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:22.529322 2026] [proxy_fcgi:error] [pid 57533:tid 57592] [client 194.5.82.33:27565] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:22.846956 2026] [proxy_fcgi:error] [pid 57533:tid 57596] [client 194.5.82.33:27565] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:22.945161 2026] [proxy_fcgi:error] [pid 57533:tid 57600] [client 194.5.82.33:27565] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:23.035654 2026] [:error] [pid 57533:tid 57577] [client 194.5.82.33:27565] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Proxy/HTTP.term.php"] [unique_id "aYz5n8BMbk5EwuXt4ZfgQAAAAEI"]
[Thu Feb 12 05:50:23.424138 2026] [proxy_fcgi:error] [pid 57641:tid 57646] [client 194.5.82.23:22989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:23.630412 2026] [proxy_fcgi:error] [pid 57641:tid 57661] [client 194.5.82.23:22989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:23.733789 2026] [:error] [pid 57641:tid 57663] [client 194.5.82.23:22989] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/utils.php"] [unique_id "aYz5n3EGAHJopH5xQFxO-wAAANM"]
[Thu Feb 12 05:50:24.129089 2026] [proxy_fcgi:error] [pid 29368:tid 29386] [client 194.5.82.44:40667] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:24.639019 2026] [proxy_fcgi:error] [pid 29368:tid 29391] [client 194.5.82.44:40667] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:24.732415 2026] [proxy_fcgi:error] [pid 29368:tid 29394] [client 194.5.82.44:40667] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:24.924161 2026] [:error] [pid 29368:tid 29372] [client 194.5.82.44:40667] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/db-update.php"] [unique_id "aYz5oNNsoKUOH6cSt83CmwAAAQI"]
[Thu Feb 12 05:50:25.230329 2026] [proxy_fcgi:error] [pid 29368:tid 29376] [client 194.5.82.45:63043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:25.435567 2026] [proxy_fcgi:error] [pid 29368:tid 29381] [client 194.5.82.45:63043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:25.532184 2026] [proxy_fcgi:error] [pid 29368:tid 29370] [client 194.5.82.45:63043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:25.856070 2026] [proxy_fcgi:error] [pid 29368:tid 29388] [client 194.5.82.45:63043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:25.945112 2026] [:error] [pid 29368:tid 29375] [client 194.5.82.45:63043] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/ini_db_model.php"] [unique_id "aYz5odNsoKUOH6cSt83CpwAAAQU"]
[Thu Feb 12 05:50:26.137636 2026] [proxy_fcgi:error] [pid 29368:tid 29377] [client 194.5.82.37:22207] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:26.435694 2026] [proxy_fcgi:error] [pid 29368:tid 29376] [client 194.5.82.37:22207] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:26.635097 2026] [proxy_fcgi:error] [pid 29368:tid 29380] [client 194.5.82.37:22207] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:26.930995 2026] [proxy_fcgi:error] [pid 29368:tid 29381] [client 194.5.82.37:22207] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:27.125569 2026] [:error] [pid 29368:tid 29382] [client 194.5.82.37:22207] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aYz5o9NsoKUOH6cSt83CswAAAQw"]
[Thu Feb 12 05:50:27.327685 2026] [proxy_fcgi:error] [pid 57533:tid 57576] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:27.432068 2026] [proxy_fcgi:error] [pid 57533:tid 57588] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:27.629757 2026] [proxy_fcgi:error] [pid 57533:tid 57599] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:30.374714 2026] [proxy_fcgi:error] [pid 57533:tid 57579] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:30.852850 2026] [proxy_fcgi:error] [pid 57533:tid 57594] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:31.144757 2026] [proxy_fcgi:error] [pid 57533:tid 57597] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:31.338868 2026] [proxy_fcgi:error] [pid 57533:tid 57593] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:31.637648 2026] [proxy_fcgi:error] [pid 57533:tid 57587] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:31.748409 2026] [proxy_fcgi:error] [pid 57533:tid 57589] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:32.250998 2026] [proxy_fcgi:error] [pid 57533:tid 57588] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:32.351480 2026] [proxy_fcgi:error] [pid 57533:tid 57582] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:32.763123 2026] [proxy_fcgi:error] [pid 57533:tid 57592] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:33.160460 2026] [proxy_fcgi:error] [pid 57533:tid 57596] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:33.350901 2026] [proxy_fcgi:error] [pid 57533:tid 57598] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:33.447160 2026] [proxy_fcgi:error] [pid 57533:tid 57593] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:33.544327 2026] [proxy_fcgi:error] [pid 57533:tid 57599] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:33.674017 2026] [proxy_fcgi:error] [pid 57533:tid 57575] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:33.768718 2026] [proxy_fcgi:error] [pid 57533:tid 57586] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:34.055916 2026] [proxy_fcgi:error] [pid 57533:tid 57579] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:34.376278 2026] [proxy_fcgi:error] [pid 57533:tid 57576] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:34.473152 2026] [proxy_fcgi:error] [pid 57533:tid 57588] [client 194.5.82.22:21601] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:34.659646 2026] [:error] [pid 57533:tid 57583] [client 194.5.82.22:21601] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/custom-classname.php"] [unique_id "aYz5qsBMbk5EwuXt4ZfgkwAAAEg"]
[Thu Feb 12 05:50:34.851053 2026] [proxy_fcgi:error] [pid 29368:tid 29390] [client 194.5.82.15:23919] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:34.960200 2026] [proxy_fcgi:error] [pid 29368:tid 29377] [client 194.5.82.15:23919] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:35.246967 2026] [proxy_fcgi:error] [pid 29368:tid 29393] [client 194.5.82.15:23919] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:35.340953 2026] [proxy_fcgi:error] [pid 29368:tid 29376] [client 194.5.82.15:23919] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:35.434854 2026] [:error] [pid 29368:tid 29389] [client 194.5.82.15:23919] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYz5q9NsoKUOH6cSt83C2QAAARM"]
[Thu Feb 12 05:50:35.726063 2026] [:error] [pid 57532:tid 57560] [client 194.5.82.30:41235] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/db_model.php"] [unique_id "aYz5q4fDW9Kql6FLJINZhwAAABI"]
[Thu Feb 12 05:50:35.922307 2026] [proxy_fcgi:error] [pid 57532:tid 57561] [client 194.5.82.21:26771] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:36.018281 2026] [proxy_fcgi:error] [pid 57532:tid 57543] [client 194.5.82.21:26771] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:36.126501 2026] [proxy_fcgi:error] [pid 57532:tid 57547] [client 194.5.82.21:26771] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:36.226071 2026] [:error] [pid 57532:tid 57542] [client 194.5.82.21:26771] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYz5rIfDW9Kql6FLJINZiwAAAAA"]
[Thu Feb 12 05:50:36.512465 2026] [proxy_fcgi:error] [pid 57534:tid 57613] [client 194.5.82.15:36039] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:36.932182 2026] [proxy_fcgi:error] [pid 57534:tid 57615] [client 194.5.82.15:36039] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:37.225248 2026] [:error] [pid 57534:tid 57611] [client 194.5.82.15:36039] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aYz5rd-p0vPYwBdK43QaNwAAAIg"]
[Thu Feb 12 05:50:37.507392 2026] [proxy_fcgi:error] [pid 57532:tid 57545] [client 194.5.82.25:53519] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:37.704312 2026] [proxy_fcgi:error] [pid 57532:tid 57548] [client 194.5.82.25:53519] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:37.803306 2026] [proxy_fcgi:error] [pid 57532:tid 57566] [client 194.5.82.25:53519] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:37.987233 2026] [:error] [pid 57532:tid 57563] [client 194.5.82.25:53519] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aYz5rYfDW9Kql6FLJINZlAAAABU"]
[Thu Feb 12 05:50:39.229094 2026] [:error] [pid 57532:tid 57543] [client 194.5.82.10:64439] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aYz5r4fDW9Kql6FLJINZlgAAAAE"]
[Thu Feb 12 05:50:39.425281 2026] [proxy_fcgi:error] [pid 57532:tid 57542] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:39.630265 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:39.727927 2026] [proxy_fcgi:error] [pid 57532:tid 57559] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:39.832842 2026] [proxy_fcgi:error] [pid 57532:tid 57550] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:39.938698 2026] [proxy_fcgi:error] [pid 57532:tid 57562] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:40.134918 2026] [proxy_fcgi:error] [pid 57532:tid 57545] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:40.358350 2026] [proxy_fcgi:error] [pid 57532:tid 57548] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:40.460693 2026] [proxy_fcgi:error] [pid 57532:tid 57555] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:40.723443 2026] [proxy_fcgi:error] [pid 57532:tid 57553] [client 194.5.82.28:26165] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:40.812879 2026] [:error] [pid 57532:tid 57546] [client 194.5.82.28:26165] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Hooks.php"] [unique_id "aYz5sIfDW9Kql6FLJINZpQAAAAQ"]
[Thu Feb 12 05:50:42.385449 2026] [proxy_fcgi:error] [pid 57641:tid 57659] [client 194.5.82.12:37581] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:42.476299 2026] [:error] [pid 57641:tid 57647] [client 194.5.82.12:37581] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYz5snEGAHJopH5xQFxPMwAAAMQ"]
[Thu Feb 12 05:50:42.666393 2026] [proxy_fcgi:error] [pid 57641:tid 57657] [client 194.5.82.9:48739] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:42.763173 2026] [proxy_fcgi:error] [pid 57641:tid 57662] [client 194.5.82.9:48739] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:43.044168 2026] [:error] [pid 57641:tid 57665] [client 194.5.82.9:48739] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYz5s3EGAHJopH5xQFxPOQAAANU"]
[Thu Feb 12 05:50:43.229033 2026] [proxy_fcgi:error] [pid 57641:tid 57664] [client 194.5.82.17:42871] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:43.327798 2026] [:error] [pid 57641:tid 57660] [client 194.5.82.17:42871] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYz5s3EGAHJopH5xQFxPOwAAANA"]
[Thu Feb 12 05:50:43.529339 2026] [proxy_fcgi:error] [pid 57534:tid 57613] [client 194.5.82.47:49071] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:43.629423 2026] [proxy_fcgi:error] [pid 57534:tid 57617] [client 194.5.82.47:49071] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:43.730889 2026] [proxy_fcgi:error] [pid 57534:tid 57615] [client 194.5.82.47:49071] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:44.136527 2026] [proxy_fcgi:error] [pid 57534:tid 57614] [client 194.5.82.47:49071] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:44.343419 2026] [proxy_fcgi:error] [pid 57534:tid 57612] [client 194.5.82.47:49071] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:44.443186 2026] [proxy_fcgi:error] [pid 57534:tid 57619] [client 194.5.82.47:49071] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:44.533415 2026] [:error] [pid 57534:tid 57608] [client 194.5.82.47:49071] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/db_model.php"] [unique_id "aYz5tN-p0vPYwBdK43QaTwAAAIU"]
[Thu Feb 12 05:50:45.033877 2026] [proxy_fcgi:error] [pid 57532:tid 57563] [client 194.5.82.10:45749] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:45.132368 2026] [proxy_fcgi:error] [pid 57532:tid 57553] [client 194.5.82.10:45749] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:45.339784 2026] [proxy_fcgi:error] [pid 57532:tid 57564] [client 194.5.82.10:45749] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:45.541747 2026] [:error] [pid 57532:tid 57552] [client 194.5.82.10:45749] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYz5tYfDW9Kql6FLJINZtwAAAAo"]
[Thu Feb 12 05:50:46.042265 2026] [proxy_fcgi:error] [pid 57641:tid 57660] [client 194.5.82.48:40119] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:46.137997 2026] [proxy_fcgi:error] [pid 57641:tid 57658] [client 194.5.82.48:40119] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:46.228470 2026] [:error] [pid 57641:tid 57649] [client 194.5.82.48:40119] [client 194.5.82.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/filemanager.php"] [unique_id "aYz5tnEGAHJopH5xQFxPTAAAAMY"]
[Thu Feb 12 05:50:46.838308 2026] [proxy_fcgi:error] [pid 57641:tid 57647] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:46.938784 2026] [proxy_fcgi:error] [pid 57641:tid 57656] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:47.147051 2026] [proxy_fcgi:error] [pid 57641:tid 57665] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:47.345119 2026] [proxy_fcgi:error] [pid 57641:tid 57646] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:47.442192 2026] [proxy_fcgi:error] [pid 57641:tid 57667] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:47.540204 2026] [proxy_fcgi:error] [pid 57641:tid 57651] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:47.736851 2026] [proxy_fcgi:error] [pid 57641:tid 57663] [client 194.5.82.8:23337] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:48.029804 2026] [:error] [pid 57641:tid 57645] [client 194.5.82.8:23337] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aYz5uHEGAHJopH5xQFxPZAAAAMI"]
[Thu Feb 12 05:50:48.224428 2026] [proxy_fcgi:error] [pid 57534:tid 57622] [client 194.5.82.28:26419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:48.331727 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.28:26419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:48.435838 2026] [proxy_fcgi:error] [pid 57534:tid 57611] [client 194.5.82.28:26419] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:48.539871 2026] [:error] [pid 57534:tid 57612] [client 194.5.82.28:26419] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aYz5uN-p0vPYwBdK43QaVwAAAIk"]
[Thu Feb 12 05:50:49.733042 2026] [proxy_fcgi:error] [pid 57533:tid 57589] [client 194.5.82.45:53281] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:49.944740 2026] [proxy_fcgi:error] [pid 57533:tid 57600] [client 194.5.82.45:53281] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:50.041942 2026] [:error] [pid 57533:tid 57583] [client 194.5.82.45:53281] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aYz5usBMbk5EwuXt4ZfgqAAAAEg"]
[Thu Feb 12 05:50:50.221466 2026] [:error] [pid 57641:tid 57659] [client 194.5.82.35:40435] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/bru.php"] [unique_id "aYz5unEGAHJopH5xQFxPaAAAAM8"]
[Thu Feb 12 05:50:50.422339 2026] [proxy_fcgi:error] [pid 57641:tid 57663] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:50.529297 2026] [proxy_fcgi:error] [pid 57641:tid 57666] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:50.631291 2026] [proxy_fcgi:error] [pid 57641:tid 57645] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:50.734721 2026] [proxy_fcgi:error] [pid 57641:tid 57656] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:50.829950 2026] [proxy_fcgi:error] [pid 57641:tid 57648] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:51.326872 2026] [proxy_fcgi:error] [pid 57641:tid 57668] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:51.537049 2026] [proxy_fcgi:error] [pid 57641:tid 57660] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:52.030931 2026] [proxy_fcgi:error] [pid 57641:tid 57656] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:52.233699 2026] [proxy_fcgi:error] [pid 57641:tid 57647] [client 194.5.82.46:25285] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:52.325084 2026] [:error] [pid 57641:tid 57665] [client 194.5.82.46:25285] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYz5vHEGAHJopH5xQFxPggAAANU"]
[Thu Feb 12 05:50:52.520047 2026] [:error] [pid 57534:tid 57614] [client 194.5.82.14:64971] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/PHPMailer/PHPMailer.php"] [unique_id "aYz5vN-p0vPYwBdK43QaXQAAAIs"]
[Thu Feb 12 05:50:52.698974 2026] [:error] [pid 57641:tid 57655] [client 194.5.82.20:46105] [client 194.5.82.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aYz5vHEGAHJopH5xQFxPhAAAAMs"]
[Thu Feb 12 05:50:52.889114 2026] [proxy_fcgi:error] [pid 57532:tid 57558] [client 194.5.82.7:24351] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:53.264789 2026] [:error] [pid 57532:tid 57560] [client 194.5.82.7:24351] [client 194.5.82.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.7, incrementing ddos counter"] [hostname "cientifica.com.au"] [uri "/xmlrpc.php"] [unique_id "aYz5vYfDW9Kql6FLJINZxwAAABI"]
[Thu Feb 12 05:50:53.270319 2026] [proxy_fcgi:error] [pid 57532:tid 57560] [client 194.5.82.7:24351] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:53.554702 2026] [proxy_fcgi:error] [pid 57532:tid 57566] [client 194.5.82.7:24351] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:53.648396 2026] [proxy_fcgi:error] [pid 57532:tid 57548] [client 194.5.82.7:24351] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:53.740881 2026] [:error] [pid 57532:tid 57542] [client 194.5.82.7:24351] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aYz5vYfDW9Kql6FLJINZzAAAAAA"]
[Thu Feb 12 05:50:54.923259 2026] [:error] [pid 57534:tid 57606] [client 194.5.82.28:60183] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/HookManager.php"] [unique_id "aYz5vt-p0vPYwBdK43QaZQAAAIM"]
[Thu Feb 12 05:50:55.222012 2026] [:error] [pid 57533:tid 57587] [client 194.5.82.24:39939] [client 194.5.82.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aYz5v8BMbk5EwuXt4ZfgrwAAAEs"]
[Thu Feb 12 05:50:55.505015 2026] [proxy_fcgi:error] [pid 29368:tid 29370] [client 194.5.82.44:38643] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:55.630401 2026] [proxy_fcgi:error] [pid 29368:tid 29392] [client 194.5.82.44:38643] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:56.032693 2026] [:error] [pid 29368:tid 29390] [client 194.5.82.44:38643] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "aYz5wNNsoKUOH6cSt83C_gAAARQ"]
[Thu Feb 12 05:50:56.223392 2026] [:error] [pid 57533:tid 57594] [client 194.5.82.166:26231] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/ini_user-info.php"] [unique_id "aYz5wMBMbk5EwuXt4ZfgswAAAFI"]
[Thu Feb 12 05:50:56.539369 2026] [proxy_fcgi:error] [pid 57534:tid 57610] [client 194.5.82.43:53187] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:56.736361 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.43:53187] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:56.832429 2026] [:error] [pid 57534:tid 57623] [client 194.5.82.43:53187] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/500.php"] [unique_id "aYz5wN-p0vPYwBdK43QaawAAAJQ"]
[Thu Feb 12 05:50:57.028001 2026] [proxy_fcgi:error] [pid 57534:tid 57611] [client 194.5.82.39:54135] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:57.129119 2026] [proxy_fcgi:error] [pid 57534:tid 57612] [client 194.5.82.39:54135] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:57.223520 2026] [proxy_fcgi:error] [pid 57534:tid 57619] [client 194.5.82.39:54135] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:57.501858 2026] [:error] [pid 57534:tid 57621] [client 194.5.82.39:54135] [client 194.5.82.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYz5wd-p0vPYwBdK43QacwAAAJI"]
[Thu Feb 12 05:50:57.812694 2026] [proxy_fcgi:error] [pid 57533:tid 57599] [client 194.5.82.17:46067] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.003422 2026] [proxy_fcgi:error] [pid 57533:tid 57586] [client 194.5.82.17:46067] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.125559 2026] [proxy_fcgi:error] [pid 57533:tid 57579] [client 194.5.82.17:46067] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.230149 2026] [proxy_fcgi:error] [pid 57533:tid 57591] [client 194.5.82.17:46067] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.323523 2026] [proxy_fcgi:error] [pid 57533:tid 57587] [client 194.5.82.17:46067] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.433869 2026] [proxy_fcgi:error] [pid 57533:tid 57600] [client 194.5.82.17:46067] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.523783 2026] [:error] [pid 57533:tid 57589] [client 194.5.82.17:46067] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/user-info.php"] [unique_id "aYz5wsBMbk5EwuXt4ZfgwgAAAE0"]
[Thu Feb 12 05:50:58.809484 2026] [proxy_fcgi:error] [pid 57534:tid 57605] [client 194.5.82.19:23163] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.903334 2026] [proxy_fcgi:error] [pid 57534:tid 57614] [client 194.5.82.19:23163] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:58.996478 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.19:23163] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:59.201643 2026] [proxy_fcgi:error] [pid 57534:tid 57622] [client 194.5.82.19:23163] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:59.294355 2026] [:error] [pid 57534:tid 57603] [client 194.5.82.19:23163] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aYz5w9-p0vPYwBdK43QaewAAAIA"]
[Thu Feb 12 05:50:59.477363 2026] [proxy_fcgi:error] [pid 57532:tid 57552] [client 194.5.82.9:28697] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:59.565975 2026] [:error] [pid 57532:tid 57548] [client 194.5.82.9:28697] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYz5w4fDW9Kql6FLJINZ1gAAAAY"]
[Thu Feb 12 05:50:59.754790 2026] [proxy_fcgi:error] [pid 57533:tid 57577] [client 194.5.82.166:35433] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:50:59.845413 2026] [:error] [pid 57533:tid 57581] [client 194.5.82.166:35433] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aYz5w8BMbk5EwuXt4ZfgxgAAAEY"]
[Thu Feb 12 05:51:00.025861 2026] [:error] [pid 57532:tid 57557] [client 194.5.82.27:35523] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYz5xIfDW9Kql6FLJINZ2AAAAA8"]
[Thu Feb 12 05:51:00.229823 2026] [:error] [pid 57533:tid 57597] [client 194.5.82.22:27743] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/Registry.php"] [unique_id "aYz5xMBMbk5EwuXt4ZfgxwAAAFU"]
[Thu Feb 12 05:51:00.932659 2026] [proxy_fcgi:error] [pid 57534:tid 57626] [client 194.5.82.50:45261] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:01.341750 2026] [proxy_fcgi:error] [pid 57534:tid 57625] [client 194.5.82.50:45261] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:01.442654 2026] [:error] [pid 57534:tid 57620] [client 194.5.82.50:45261] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYz5xd-p0vPYwBdK43QahgAAAJE"]
[Thu Feb 12 05:51:01.639063 2026] [proxy_fcgi:error] [pid 57641:tid 57646] [client 194.5.82.46:53799] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:01.945268 2026] [proxy_fcgi:error] [pid 57641:tid 57654] [client 194.5.82.46:53799] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:02.039615 2026] [proxy_fcgi:error] [pid 57641:tid 57663] [client 194.5.82.46:53799] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:02.138827 2026] [proxy_fcgi:error] [pid 57641:tid 57644] [client 194.5.82.46:53799] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:02.326151 2026] [proxy_fcgi:error] [pid 57641:tid 57649] [client 194.5.82.46:53799] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:02.429333 2026] [proxy_fcgi:error] [pid 57641:tid 57656] [client 194.5.82.46:53799] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:02.520340 2026] [:error] [pid 57641:tid 57647] [client 194.5.82.46:53799] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aYz5xnEGAHJopH5xQFxPlgAAAMQ"]
[Thu Feb 12 05:51:02.706052 2026] [proxy_fcgi:error] [pid 57532:tid 57552] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:03.374405 2026] [proxy_fcgi:error] [pid 57532:tid 57556] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:03.853416 2026] [proxy_fcgi:error] [pid 57532:tid 57563] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:03.948229 2026] [proxy_fcgi:error] [pid 57532:tid 57565] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.041974 2026] [proxy_fcgi:error] [pid 57532:tid 57560] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.135268 2026] [proxy_fcgi:error] [pid 57532:tid 57552] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.232538 2026] [proxy_fcgi:error] [pid 57532:tid 57542] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.530113 2026] [proxy_fcgi:error] [pid 57532:tid 57566] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.623881 2026] [proxy_fcgi:error] [pid 57532:tid 57543] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.718269 2026] [proxy_fcgi:error] [pid 57532:tid 57556] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.812077 2026] [proxy_fcgi:error] [pid 57532:tid 57562] [client 194.5.82.28:43653] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:04.903450 2026] [:error] [pid 57532:tid 57558] [client 194.5.82.28:43653] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aYz5yIfDW9Kql6FLJINZ_AAAABA"]
[Thu Feb 12 05:51:06.764286 2026] [proxy_fcgi:error] [pid 57534:tid 57616] [client 194.5.82.43:65219] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:06.866879 2026] [proxy_fcgi:error] [pid 57534:tid 57615] [client 194.5.82.43:65219] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:07.532638 2026] [:error] [pid 57534:tid 57620] [client 194.5.82.43:65219] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYz5y9-p0vPYwBdK43QalQAAAJE"]
[Thu Feb 12 05:51:07.727932 2026] [proxy_fcgi:error] [pid 57641:tid 57665] [client 194.5.82.14:28875] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:08.023259 2026] [proxy_fcgi:error] [pid 57641:tid 57657] [client 194.5.82.14:28875] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:08.209180 2026] [proxy_fcgi:error] [pid 57641:tid 57661] [client 194.5.82.14:28875] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:08.503141 2026] [proxy_fcgi:error] [pid 57641:tid 57646] [client 194.5.82.14:28875] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:08.691260 2026] [proxy_fcgi:error] [pid 57641:tid 57662] [client 194.5.82.14:28875] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:08.787913 2026] [:error] [pid 57641:tid 57654] [client 194.5.82.14:28875] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/library/about.php"] [unique_id "aYz5zHEGAHJopH5xQFxPrwAAAMo"]
[Thu Feb 12 05:51:08.972490 2026] [proxy_fcgi:error] [pid 57532:tid 57554] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:09.065855 2026] [proxy_fcgi:error] [pid 57532:tid 57545] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:09.162177 2026] [proxy_fcgi:error] [pid 57532:tid 57552] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:09.451267 2026] [proxy_fcgi:error] [pid 57532:tid 57551] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:09.642277 2026] [proxy_fcgi:error] [pid 57532:tid 57562] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:09.837883 2026] [proxy_fcgi:error] [pid 57532:tid 57564] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:09.932038 2026] [proxy_fcgi:error] [pid 57532:tid 57557] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:10.134614 2026] [proxy_fcgi:error] [pid 57532:tid 57550] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:10.229207 2026] [proxy_fcgi:error] [pid 57532:tid 57555] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:10.529366 2026] [proxy_fcgi:error] [pid 57532:tid 57554] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:10.922170 2026] [proxy_fcgi:error] [pid 57532:tid 57551] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.133352 2026] [proxy_fcgi:error] [pid 57532:tid 57543] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.346006 2026] [proxy_fcgi:error] [pid 57532:tid 57553] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.532225 2026] [proxy_fcgi:error] [pid 57532:tid 57557] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.627403 2026] [proxy_fcgi:error] [pid 57532:tid 57559] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.723106 2026] [proxy_fcgi:error] [pid 57532:tid 57556] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.832718 2026] [proxy_fcgi:error] [pid 57532:tid 57550] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:11.929424 2026] [proxy_fcgi:error] [pid 57532:tid 57544] [client 194.5.82.27:51655] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:12.032303 2026] [:error] [pid 57532:tid 57555] [client 194.5.82.27:51655] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aYz50IfDW9Kql6FLJINaIQAAAA0"]
[Thu Feb 12 05:51:12.336126 2026] [proxy_fcgi:error] [pid 57534:tid 57623] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:12.432329 2026] [proxy_fcgi:error] [pid 57534:tid 57605] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:12.646364 2026] [proxy_fcgi:error] [pid 57534:tid 57622] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:12.841520 2026] [proxy_fcgi:error] [pid 57534:tid 57611] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:12.938021 2026] [proxy_fcgi:error] [pid 57534:tid 57612] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:13.035302 2026] [proxy_fcgi:error] [pid 57534:tid 57604] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:13.137008 2026] [proxy_fcgi:error] [pid 57534:tid 57609] [client 194.5.82.25:38615] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:13.228808 2026] [:error] [pid 57534:tid 57610] [client 194.5.82.25:38615] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYz50d-p0vPYwBdK43QapgAAAIc"]
[Thu Feb 12 05:51:13.414018 2026] [proxy_fcgi:error] [pid 57532:tid 57547] [client 194.5.82.13:33639] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:13.505045 2026] [:error] [pid 57532:tid 57546] [client 194.5.82.13:33639] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYz50YfDW9Kql6FLJINaIwAAAAQ"]
[Thu Feb 12 05:51:13.783563 2026] [:error] [pid 57532:tid 57558] [client 194.5.82.16:48325] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aYz50YfDW9Kql6FLJINaJQAAABA"]
[Thu Feb 12 05:51:13.967307 2026] [proxy_fcgi:error] [pid 57532:tid 57548] [client 194.5.82.7:49515] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:14.250605 2026] [:error] [pid 57532:tid 57551] [client 194.5.82.7:49515] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/404.php"] [unique_id "aYz50ofDW9Kql6FLJINaKwAAAAk"]
[Thu Feb 12 05:51:14.625451 2026] [:error] [pid 57532:tid 57557] [client 194.5.82.51:64277] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/Requests/src/Requests.php"] [unique_id "aYz50ofDW9Kql6FLJINaLgAAAA8"]
[Thu Feb 12 05:51:14.931280 2026] [proxy_fcgi:error] [pid 57641:tid 57645] [client 194.5.82.15:65417] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:15.030793 2026] [proxy_fcgi:error] [pid 57641:tid 57665] [client 194.5.82.15:65417] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:15.232426 2026] [proxy_fcgi:error] [pid 57641:tid 57664] [client 194.5.82.15:65417] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:15.329441 2026] [:error] [pid 57641:tid 57659] [client 194.5.82.15:65417] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/HTTP/Parser.php"] [unique_id "aYz503EGAHJopH5xQFxPvAAAAM8"]
[Thu Feb 12 05:51:15.520012 2026] [proxy_fcgi:error] [pid 29368:tid 29386] [client 194.5.82.5:57435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:15.638326 2026] [proxy_fcgi:error] [pid 29368:tid 29385] [client 194.5.82.5:57435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:15.731872 2026] [proxy_fcgi:error] [pid 29368:tid 29379] [client 194.5.82.5:57435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:15.830239 2026] [proxy_fcgi:error] [pid 29368:tid 29388] [client 194.5.82.5:57435] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:16.131865 2026] [:error] [pid 29368:tid 29383] [client 194.5.82.5:57435] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aYz51NNsoKUOH6cSt83DLwAAAQ0"]
[Thu Feb 12 05:51:16.631949 2026] [proxy_fcgi:error] [pid 57641:tid 57661] [client 194.5.82.20:58167] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:16.733194 2026] [proxy_fcgi:error] [pid 57641:tid 57660] [client 194.5.82.20:58167] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:16.829264 2026] [:error] [pid 57641:tid 57656] [client 194.5.82.20:58167] [client 194.5.82.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYz51HEGAHJopH5xQFxPwwAAAMw"]
[Thu Feb 12 05:51:17.023867 2026] [proxy_fcgi:error] [pid 29368:tid 29389] [client 194.5.82.5:25061] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:17.127524 2026] [:error] [pid 29368:tid 29384] [client 194.5.82.5:25061] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aYz51dNsoKUOH6cSt83DMQAAAQ4"]
[Thu Feb 12 05:51:17.561364 2026] [:error] [pid 57534:tid 57605] [client 194.5.82.32:50403] [client 194.5.82.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aYz51d-p0vPYwBdK43QasAAAAII"]
[Thu Feb 12 05:51:17.773371 2026] [:error] [pid 57532:tid 57558] [client 194.5.82.21:52557] File does not exist: /home/cientificacom/public_html/shell.php5
[Thu Feb 12 05:51:17.863404 2026] [:error] [pid 57532:tid 57548] [client 194.5.82.21:52557] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aYz51YfDW9Kql6FLJINaNwAAAAY"]
[Thu Feb 12 05:51:18.050409 2026] [proxy_fcgi:error] [pid 29368:tid 29372] [client 194.5.82.25:47883] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:18.151107 2026] [proxy_fcgi:error] [pid 29368:tid 29375] [client 194.5.82.25:47883] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:18.247759 2026] [proxy_fcgi:error] [pid 29368:tid 29386] [client 194.5.82.25:47883] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:18.351529 2026] [proxy_fcgi:error] [pid 29368:tid 29393] [client 194.5.82.25:47883] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 05:51:26.813389 2026] [autoindex:error] [pid 29368:tid 29373] [client 194.5.82.25:47883] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 05:51:30.030563 2026] [:error] [pid 57533:tid 57594] [client 194.5.82.165:46967] [client 194.5.82.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "cientifica.com.au"] [uri "/tinyfilemanager"] [unique_id "aYz54sBMbk5EwuXt4Zfg8wAAAFI"]
[Thu Feb 12 05:56:48.690294 2026] [autoindex:error] [pid 57533:tid 57593] [client 43.225.189.64:58268] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 06:00:30.935707 2026] [autoindex:error] [pid 57533:tid 57598] [client 66.249.79.192:35804] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 06:04:06.327932 2026] [autoindex:error] [pid 29368:tid 29379] [client 44.243.136.105:37556] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 10:23:26.074660 2026] [autoindex:error] [pid 3136:tid 3140] [client 199.244.88.232:25339] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 11:27:27.854409 2026] [autoindex:error] [pid 50254:tid 50263] [client 51.68.107.159:16759] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 13:47:12.990701 2026] [autoindex:error] [pid 50169:tid 50233] [client 93.158.90.36:56991] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 14:11:39.053606 2026] [autoindex:error] [pid 3136:tid 3158] [client 35.87.158.155:50594] AH01276: Cannot serve directory /home/cientificacom/public_html/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 17:14:13.281692 2026] [proxy_fcgi:error] [pid 21431:tid 21446] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:13.527032 2026] [proxy_fcgi:error] [pid 21431:tid 21458] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:14.065030 2026] [proxy_fcgi:error] [pid 21431:tid 21445] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:14.311316 2026] [proxy_fcgi:error] [pid 21431:tid 21441] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:14.573647 2026] [proxy_fcgi:error] [pid 21431:tid 21448] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:14.957977 2026] [proxy_fcgi:error] [pid 21431:tid 21443] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:15.209221 2026] [proxy_fcgi:error] [pid 21431:tid 21440] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:15.922415 2026] [proxy_fcgi:error] [pid 21431:tid 21452] [client 158.158.35.157:6781] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:14:16.189639 2026] [:error] [pid 21431:tid 21454] [client 158.158.35.157:6781] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aY2Z6JgxKQsNF5X8gtSHfQAAANI"]
[Thu Feb 12 17:14:17.219545 2026] [:error] [pid 21434:tid 21510] [client 158.158.35.157:58778] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aY2Z6QbL1v6OC5G-tE-YlwAAAc0"]
[Thu Feb 12 17:14:17.781825 2026] [:error] [pid 39777:tid 39799] [client 158.158.35.157:58755] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aY2Z6VzexR6hGUkt5pPU4wAAAFQ"]
[Thu Feb 12 17:14:18.809469 2026] [:error] [pid 39777:tid 39784] [client 158.158.35.157:58764] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/tx1.php"] [unique_id "aY2Z6lzexR6hGUkt5pPU6QAAAEU"]
[Thu Feb 12 17:14:19.922636 2026] [:error] [pid 21431:tid 21438] [client 158.158.35.157:6750] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aY2Z65gxKQsNF5X8gtSHhQAAAMI"]
[Thu Feb 12 17:14:20.555663 2026] [:error] [pid 21431:tid 21456] [client 158.158.35.157:58802] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aY2Z7JgxKQsNF5X8gtSHigAAANQ"]
[Thu Feb 12 17:14:21.100625 2026] [:error] [pid 21433:tid 21482] [client 158.158.35.157:46366] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aY2Z7dc_9AdG3uAKpzvu9AAAAYw"]
[Thu Feb 12 17:14:21.903414 2026] [:error] [pid 21433:tid 21484] [client 158.158.35.157:57619] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/xv.php"] [unique_id "aY2Z7dc_9AdG3uAKpzvu-AAAAY4"]
[Thu Feb 12 17:14:22.831111 2026] [:error] [pid 21433:tid 21471] [client 158.158.35.157:57340] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aY2Z7tc_9AdG3uAKpzvu_gAAAYE"]
[Thu Feb 12 17:14:24.624364 2026] [:error] [pid 21434:tid 21498] [client 158.158.35.157:60890] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aY2Z8AbL1v6OC5G-tE-YnAAAAcE"]
[Thu Feb 12 17:14:25.286765 2026] [:error] [pid 21527:tid 21530] [client 158.158.35.157:60240] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aY2Z8Saer9JPUXlMLuG_9QAAAAE"]
[Thu Feb 12 17:14:25.896471 2026] [:error] [pid 21433:tid 21489] [client 158.158.35.157:60910] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x56.php"] [unique_id "aY2Z8dc_9AdG3uAKpzvvBQAAAZM"]
[Thu Feb 12 17:14:26.403193 2026] [:error] [pid 21527:tid 21552] [client 158.158.35.157:64121] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aY2Z8iaer9JPUXlMLuG_-wAAABc"]
[Thu Feb 12 17:14:26.884886 2026] [:error] [pid 21527:tid 21537] [client 158.158.35.157:58786] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aY2Z8iaer9JPUXlMLuG__gAAAAg"]
[Thu Feb 12 17:14:27.918904 2026] [:error] [pid 21431:tid 21440] [client 158.158.35.157:57325] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aY2Z85gxKQsNF5X8gtSHkgAAAMQ"]
[Thu Feb 12 17:14:28.493022 2026] [:error] [pid 21527:tid 21543] [client 158.158.35.157:57304] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/htaccess.php"] [unique_id "aY2Z9Caer9JPUXlMLuHABgAAAA4"]
[Thu Feb 12 17:14:29.016293 2026] [:error] [pid 39777:tid 39794] [client 158.158.35.157:6737] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aY2Z9VzexR6hGUkt5pPU8gAAAE8"]
[Thu Feb 12 17:14:29.569699 2026] [:error] [pid 39777:tid 39780] [client 158.158.35.157:58776] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aY2Z9VzexR6hGUkt5pPU9AAAAEE"]
[Thu Feb 12 17:14:30.076848 2026] [:error] [pid 21434:tid 21518] [client 158.158.35.157:46377] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aY2Z9gbL1v6OC5G-tE-YoQAAAdU"]
[Thu Feb 12 17:14:30.564489 2026] [:error] [pid 39777:tid 39784] [client 158.158.35.157:60897] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/readme.php"] [unique_id "aY2Z9lzexR6hGUkt5pPU9gAAAEU"]
[Thu Feb 12 17:14:31.051795 2026] [:error] [pid 39777:tid 39798] [client 158.158.35.157:60285] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aY2Z91zexR6hGUkt5pPU-AAAAFM"]
[Thu Feb 12 17:14:31.586298 2026] [:error] [pid 21433:tid 21491] [client 158.158.35.157:46411] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aY2Z99c_9AdG3uAKpzvvDwAAAZU"]
[Thu Feb 12 17:14:32.219388 2026] [:error] [pid 21527:tid 21543] [client 158.158.35.157:57607] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aY2Z-Caer9JPUXlMLuHAEgAAAA4"]
[Thu Feb 12 17:14:32.782803 2026] [:error] [pid 21433:tid 21481] [client 158.158.35.157:60925] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/x50.php"] [unique_id "aY2Z-Nc_9AdG3uAKpzvvEgAAAYs"]
[Thu Feb 12 17:14:33.547196 2026] [:error] [pid 21434:tid 21508] [client 158.158.35.157:64083] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aY2Z-QbL1v6OC5G-tE-YrQAAAcs"]
[Thu Feb 12 17:14:34.168451 2026] [:error] [pid 21431:tid 21437] [client 158.158.35.157:60927] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aY2Z-pgxKQsNF5X8gtSHmQAAAME"]
[Thu Feb 12 17:14:34.674474 2026] [:error] [pid 21527:tid 21548] [client 158.158.35.157:57297] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aY2Z-iaer9JPUXlMLuHAGAAAABM"]
[Thu Feb 12 17:14:35.196602 2026] [:error] [pid 21431:tid 21441] [client 158.158.35.157:46429] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/fv.php"] [unique_id "aY2Z-5gxKQsNF5X8gtSHnAAAAMU"]
[Thu Feb 12 17:14:35.687657 2026] [:error] [pid 21433:tid 21487] [client 158.158.35.157:58798] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aY2Z-9c_9AdG3uAKpzvvHQAAAZE"]
[Thu Feb 12 17:14:36.350808 2026] [:error] [pid 21527:tid 21532] [client 158.158.35.157:64107] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aY2Z_Caer9JPUXlMLuHAKAAAAAM"]
[Thu Feb 12 17:14:37.184671 2026] [:error] [pid 39777:tid 39793] [client 158.158.35.157:60913] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aY2Z_VzexR6hGUkt5pPVBgAAAE4"]
[Thu Feb 12 17:14:37.701946 2026] [:error] [pid 21431:tid 21440] [client 158.158.35.157:6720] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/file.php"] [unique_id "aY2Z_ZgxKQsNF5X8gtSHpgAAAMQ"]
[Thu Feb 12 17:14:38.491096 2026] [:error] [pid 21433:tid 21470] [client 158.158.35.157:6736] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aY2Z_tc_9AdG3uAKpzvvLQAAAYA"]
[Thu Feb 12 17:14:39.383359 2026] [:error] [pid 39777:tid 39782] [client 158.158.35.157:57306] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aY2Z_1zexR6hGUkt5pPVDQAAAEM"]
[Thu Feb 12 17:14:40.548565 2026] [:error] [pid 21434:tid 21509] [client 158.158.35.157:64066] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aY2aAAbL1v6OC5G-tE-Y1gAAAcw"]
[Thu Feb 12 17:14:41.692994 2026] [:error] [pid 39777:tid 39784] [client 158.158.35.157:57316] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lsd.php"] [unique_id "aY2aAVzexR6hGUkt5pPVFwAAAEU"]
[Thu Feb 12 17:14:43.284741 2026] [:error] [pid 39777:tid 39803] [client 158.158.35.157:46421] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aY2aA1zexR6hGUkt5pPVGAAAAFg"]
[Thu Feb 12 17:14:49.150766 2026] [:error] [pid 21527:tid 21529] [client 158.158.35.157:58800] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aY2aCSaer9JPUXlMLuHAoAAAAAA"]
[Thu Feb 12 17:14:50.173971 2026] [:error] [pid 21527:tid 21549] [client 158.158.35.157:6767] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aY2aCiaer9JPUXlMLuHArAAAABQ"]
[Thu Feb 12 17:14:50.680242 2026] [:error] [pid 21527:tid 21533] [client 158.158.35.157:60249] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/as.php"] [unique_id "aY2aCiaer9JPUXlMLuHAsgAAAAQ"]
[Thu Feb 12 17:14:51.258725 2026] [:error] [pid 21434:tid 21508] [client 158.158.35.157:57287] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aY2aCwbL1v6OC5G-tE-Y9AAAAcs"]
[Thu Feb 12 17:14:51.815882 2026] [:error] [pid 39777:tid 39798] [client 158.158.35.157:60248] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aY2aC1zexR6hGUkt5pPVTwAAAFM"]
[Thu Feb 12 17:14:52.366597 2026] [:error] [pid 21527:tid 21543] [client 158.158.35.157:60249] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aY2aDCaer9JPUXlMLuHAugAAAA4"]
[Thu Feb 12 17:14:52.945310 2026] [:error] [pid 21434:tid 21503] [client 158.158.35.157:64109] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wsd.php"] [unique_id "aY2aDAbL1v6OC5G-tE-Y-AAAAcY"]
[Thu Feb 12 17:14:53.569984 2026] [:error] [pid 21527:tid 21548] [client 158.158.35.157:64101] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aY2aDSaer9JPUXlMLuHAwQAAABM"]
[Thu Feb 12 17:14:54.346441 2026] [:error] [pid 21431:tid 21440] [client 158.158.35.157:64079] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aY2aDpgxKQsNF5X8gtSH3QAAAMQ"]
[Thu Feb 12 17:14:55.114296 2026] [:error] [pid 21527:tid 21532] [client 158.158.35.157:63459] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aY2aDyaer9JPUXlMLuHAzAAAAAM"]
[Thu Feb 12 17:14:56.161860 2026] [:error] [pid 39777:tid 39795] [client 158.158.35.157:58807] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gtc.php"] [unique_id "aY2aEFzexR6hGUkt5pPVXgAAAFA"]
[Thu Feb 12 17:14:56.749188 2026] [:error] [pid 21434:tid 21510] [client 158.158.35.157:64105] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aY2aEAbL1v6OC5G-tE-ZCwAAAc0"]
[Thu Feb 12 17:14:57.431071 2026] [:error] [pid 21434:tid 21506] [client 158.158.35.157:46387] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aY2aEQbL1v6OC5G-tE-ZDwAAAck"]
[Thu Feb 12 17:14:58.111776 2026] [:error] [pid 21433:tid 21483] [client 158.158.35.157:58766] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aY2aEtc_9AdG3uAKpzvvewAAAY0"]
[Thu Feb 12 17:14:59.031190 2026] [:error] [pid 21433:tid 21492] [client 158.158.35.157:60889] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/atx.php"] [unique_id "aY2aE9c_9AdG3uAKpzvvfgAAAZY"]
[Thu Feb 12 17:14:59.554314 2026] [:error] [pid 21433:tid 21486] [client 158.158.35.157:57662] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aY2aE9c_9AdG3uAKpzvvggAAAZA"]
[Thu Feb 12 17:15:00.079807 2026] [:error] [pid 39777:tid 39787] [client 158.158.35.157:46377] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aY2aFFzexR6hGUkt5pPVbwAAAEg"]
[Thu Feb 12 17:15:00.599326 2026] [:error] [pid 21527:tid 21546] [client 158.158.35.157:60871] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aY2aFCaer9JPUXlMLuHBFgAAABE"]
[Thu Feb 12 17:15:01.125137 2026] [:error] [pid 39777:tid 39797] [client 158.158.35.157:46391] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/z60.php"] [unique_id "aY2aFVzexR6hGUkt5pPVdQAAAFI"]
[Thu Feb 12 17:15:01.624544 2026] [:error] [pid 39777:tid 39784] [client 158.158.35.157:46408] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aY2aFVzexR6hGUkt5pPVeAAAAEU"]
[Thu Feb 12 17:15:02.173956 2026] [:error] [pid 21527:tid 21546] [client 158.158.35.157:57608] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aY2aFiaer9JPUXlMLuHBJAAAABE"]
[Thu Feb 12 17:15:02.657514 2026] [:error] [pid 21527:tid 21532] [client 158.158.35.157:46377] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aY2aFiaer9JPUXlMLuHBKAAAAAM"]
[Thu Feb 12 17:15:03.171320 2026] [:error] [pid 39777:tid 39801] [client 158.158.35.157:57638] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/403.php"] [unique_id "aY2aF1zexR6hGUkt5pPVegAAAFY"]
[Thu Feb 12 17:15:03.869574 2026] [:error] [pid 21434:tid 21514] [client 158.158.35.157:58752] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aY2aFwbL1v6OC5G-tE-ZIwAAAdE"]
[Thu Feb 12 17:15:05.161785 2026] [:error] [pid 21527:tid 21545] [client 158.158.35.157:64119] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aY2aGSaer9JPUXlMLuHBRQAAABA"]
[Thu Feb 12 17:15:06.504731 2026] [:error] [pid 39777:tid 39797] [client 158.158.35.157:60258] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aY2aGlzexR6hGUkt5pPVgQAAAFI"]
[Thu Feb 12 17:15:07.493151 2026] [:error] [pid 39777:tid 39783] [client 158.158.35.157:60229] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/m.php"] [unique_id "aY2aG1zexR6hGUkt5pPViAAAAEQ"]
[Thu Feb 12 17:15:08.425792 2026] [:error] [pid 21527:tid 21539] [client 158.158.35.157:57616] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aY2aHCaer9JPUXlMLuHBYQAAAAo"]
[Thu Feb 12 17:15:09.920507 2026] [:error] [pid 21434:tid 21500] [client 158.158.35.157:60231] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aY2aHQbL1v6OC5G-tE-ZOgAAAcM"]
[Thu Feb 12 17:15:10.939596 2026] [:error] [pid 21434:tid 21501] [client 158.158.35.157:62855] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aY2aHgbL1v6OC5G-tE-ZQwAAAcQ"]
[Thu Feb 12 17:15:11.883526 2026] [:error] [pid 21527:tid 21551] [client 158.158.35.157:60904] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes.php"] [unique_id "aY2aHyaer9JPUXlMLuHBdAAAABY"]
[Thu Feb 12 17:15:12.570330 2026] [:error] [pid 21431:tid 21441] [client 158.158.35.157:64069] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2aIJgxKQsNF5X8gtSIDAAAAMU"]
[Thu Feb 12 17:15:13.254569 2026] [:error] [pid 21433:tid 21486] [client 158.158.35.157:64108] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2aIdc_9AdG3uAKpzvvoAAAAZA"]
[Thu Feb 12 17:15:13.954642 2026] [:error] [pid 21527:tid 21540] [client 158.158.35.157:57651] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2aISaer9JPUXlMLuHBrwAAAAs"]
[Thu Feb 12 17:15:14.811077 2026] [:error] [pid 21433:tid 21471] [client 158.158.35.157:60235] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2aItc_9AdG3uAKpzvvpwAAAYE"]
[Thu Feb 12 17:15:15.968628 2026] [proxy_fcgi:error] [pid 21433:tid 21493] [client 158.158.35.157:6744] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:16.403773 2026] [proxy_fcgi:error] [pid 21433:tid 21474] [client 158.158.35.157:6744] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:16.907886 2026] [proxy_fcgi:error] [pid 21433:tid 21482] [client 158.158.35.157:6744] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:17.150753 2026] [proxy_fcgi:error] [pid 21433:tid 21479] [client 158.158.35.157:6744] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:17.393289 2026] [proxy_fcgi:error] [pid 21433:tid 21480] [client 158.158.35.157:6744] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:17.637129 2026] [proxy_fcgi:error] [pid 21433:tid 21487] [client 158.158.35.157:6744] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:17.925933 2026] [:error] [pid 21433:tid 21476] [client 158.158.35.157:6744] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aY2aJdc_9AdG3uAKpzvvwAAAAYY"]
[Thu Feb 12 17:15:18.449311 2026] [proxy_fcgi:error] [pid 39777:tid 39783] [client 158.158.35.157:58804] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:18.717297 2026] [proxy_fcgi:error] [pid 39777:tid 39794] [client 158.158.35.157:58804] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:19.016892 2026] [proxy_fcgi:error] [pid 39777:tid 39787] [client 158.158.35.157:58804] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:19.406666 2026] [proxy_fcgi:error] [pid 39777:tid 39786] [client 158.158.35.157:58804] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:15:19.651116 2026] [:error] [pid 39777:tid 39800] [client 158.158.35.157:58804] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aY2aJ1zexR6hGUkt5pPV5gAAAFU"]
[Thu Feb 12 17:15:20.401240 2026] [:error] [pid 21434:tid 21514] [client 158.158.35.157:39375] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aY2aKAbL1v6OC5G-tE-ZZAAAAdE"]
[Thu Feb 12 17:15:21.325056 2026] [:error] [pid 21434:tid 21511] [client 158.158.35.157:39373] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aY2aKQbL1v6OC5G-tE-ZawAAAc4"]
[Thu Feb 12 17:15:21.819465 2026] [:error] [pid 21433:tid 21487] [client 158.158.35.157:46352] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/0x.php"] [unique_id "aY2aKdc_9AdG3uAKpzvv0wAAAZE"]
[Thu Feb 12 17:15:22.324974 2026] [:error] [pid 21433:tid 21491] [client 158.158.35.157:57314] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aY2aKtc_9AdG3uAKpzvv1QAAAZU"]
[Thu Feb 12 17:15:22.861155 2026] [:error] [pid 21434:tid 21500] [client 158.158.35.157:60283] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aY2aKgbL1v6OC5G-tE-ZeAAAAcM"]
[Thu Feb 12 17:15:23.501138 2026] [:error] [pid 21434:tid 21516] [client 158.158.35.157:39361] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aY2aKwbL1v6OC5G-tE-ZfAAAAdM"]
[Thu Feb 12 17:15:24.006732 2026] [:error] [pid 21431:tid 21442] [client 158.158.35.157:46344] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css.php"] [unique_id "aY2aLJgxKQsNF5X8gtSIJwAAAMY"]
[Thu Feb 12 17:15:24.504292 2026] [:error] [pid 39777:tid 39786] [client 158.158.35.157:57290] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aY2aLFzexR6hGUkt5pPV7AAAAEc"]
[Thu Feb 12 17:15:25.031312 2026] [:error] [pid 21527:tid 21533] [client 158.158.35.157:64080] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aY2aLSaer9JPUXlMLuHByAAAAAQ"]
[Thu Feb 12 17:15:25.529913 2026] [:error] [pid 39777:tid 39791] [client 158.158.35.157:57635] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aY2aLVzexR6hGUkt5pPV7gAAAEw"]
[Thu Feb 12 17:15:26.031334 2026] [:error] [pid 21527:tid 21552] [client 158.158.35.157:58761] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/222.php"] [unique_id "aY2aLiaer9JPUXlMLuHB0wAAABc"]
[Thu Feb 12 17:15:26.602962 2026] [:error] [pid 39777:tid 39798] [client 158.158.35.157:60887] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2aLlzexR6hGUkt5pPV8gAAAFM"]
[Thu Feb 12 17:15:27.789177 2026] [:error] [pid 21433:tid 21493] [client 158.158.35.157:39379] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2aL9c_9AdG3uAKpzvv4wAAAZc"]
[Thu Feb 12 17:15:28.356045 2026] [:error] [pid 21431:tid 21454] [client 158.158.35.157:58783] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2aMJgxKQsNF5X8gtSIMgAAANI"]
[Thu Feb 12 17:15:28.991869 2026] [:error] [pid 21431:tid 21459] [client 158.158.35.157:57663] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2aMJgxKQsNF5X8gtSINAAAANc"]
[Thu Feb 12 17:15:29.888107 2026] [:error] [pid 39777:tid 39796] [client 158.158.35.157:60282] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aY2aMVzexR6hGUkt5pPV_gAAAFE"]
[Thu Feb 12 17:15:30.477061 2026] [:error] [pid 21434:tid 21508] [client 158.158.35.157:60287] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aY2aMgbL1v6OC5G-tE-ZiQAAAcs"]
[Thu Feb 12 17:15:31.101638 2026] [:error] [pid 21527:tid 21547] [client 158.158.35.157:39385] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aY2aMyaer9JPUXlMLuHB3gAAABI"]
[Thu Feb 12 17:15:31.617630 2026] [:error] [pid 21433:tid 21472] [client 158.158.35.157:46398] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin.php"] [unique_id "aY2aM9c_9AdG3uAKpzvv7AAAAYI"]
[Thu Feb 12 17:15:32.186713 2026] [:error] [pid 21431:tid 21438] [client 158.158.35.157:57284] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aY2aNJgxKQsNF5X8gtSIOgAAAMI"]
[Thu Feb 12 17:15:32.887396 2026] [:error] [pid 21431:tid 21457] [client 158.158.35.157:58801] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aY2aNJgxKQsNF5X8gtSIQAAAANU"]
[Thu Feb 12 17:15:33.428936 2026] [:error] [pid 21433:tid 21476] [client 158.158.35.157:46336] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aY2aNdc_9AdG3uAKpzvv8QAAAYY"]
[Thu Feb 12 17:15:34.058776 2026] [:error] [pid 21431:tid 21444] [client 158.158.35.157:39362] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aY2aNpgxKQsNF5X8gtSIRQAAAMg"]
[Thu Feb 12 17:15:35.034638 2026] [:error] [pid 21527:tid 21536] [client 158.158.35.157:46348] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2aNyaer9JPUXlMLuHB6wAAAAc"]
[Thu Feb 12 17:15:35.701056 2026] [:error] [pid 21434:tid 21507] [client 158.158.35.157:57643] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2aNwbL1v6OC5G-tE-ZkgAAAco"]
[Thu Feb 12 17:15:36.883186 2026] [:error] [pid 39777:tid 39798] [client 158.158.35.157:60867] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2aOFzexR6hGUkt5pPWCgAAAFM"]
[Thu Feb 12 17:15:37.982605 2026] [:error] [pid 21433:tid 21475] [client 158.158.35.157:64125] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2aOdc_9AdG3uAKpzvv_gAAAYU"]
[Thu Feb 12 17:15:38.975766 2026] [:error] [pid 39777:tid 39787] [client 158.158.35.157:62887] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aY2aOlzexR6hGUkt5pPWDQAAAEg"]
[Thu Feb 12 17:15:40.212445 2026] [:error] [pid 21431:tid 21452] [client 158.158.35.157:60884] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aY2aPJgxKQsNF5X8gtSIUAAAANA"]
[Thu Feb 12 17:15:41.426791 2026] [:error] [pid 39777:tid 39781] [client 158.158.35.157:64087] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aY2aPVzexR6hGUkt5pPWFwAAAEI"]
[Thu Feb 12 17:15:42.234662 2026] [:error] [pid 39777:tid 39797] [client 158.158.35.157:64122] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/abcd.php"] [unique_id "aY2aPlzexR6hGUkt5pPWHQAAAFI"]
[Thu Feb 12 17:15:43.605892 2026] [:error] [pid 21431:tid 21456] [client 158.158.35.157:64091] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2aP5gxKQsNF5X8gtSIWAAAANQ"]
[Thu Feb 12 17:15:45.179660 2026] [:error] [pid 21431:tid 21441] [client 158.158.35.157:46383] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2aQZgxKQsNF5X8gtSIXAAAAMU"]
[Thu Feb 12 17:15:46.542977 2026] [:error] [pid 21433:tid 21484] [client 158.158.35.157:64098] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2aQtc_9AdG3uAKpzvwCAAAAY4"]
[Thu Feb 12 17:15:48.363329 2026] [:error] [pid 21433:tid 21494] [client 158.158.35.157:60225] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2aRNc_9AdG3uAKpzvwDQAAAZg"]
[Thu Feb 12 17:15:49.750846 2026] [:error] [pid 21431:tid 21460] [client 158.158.35.157:57652] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aY2aRZgxKQsNF5X8gtSIYAAAANg"]
[Thu Feb 12 17:15:51.092370 2026] [:error] [pid 21431:tid 21450] [client 158.158.35.157:35402] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aY2aR5gxKQsNF5X8gtSIaAAAAM4"]
[Thu Feb 12 17:15:52.580070 2026] [:error] [pid 21434:tid 21514] [client 158.158.35.157:57332] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aY2aSAbL1v6OC5G-tE-ZqAAAAdE"]
[Thu Feb 12 17:15:53.873281 2026] [:error] [pid 21527:tid 21553] [client 158.158.35.157:58758] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/inputs.php"] [unique_id "aY2aSSaer9JPUXlMLuHCHgAAABg"]
[Thu Feb 12 17:15:54.834842 2026] [:error] [pid 21431:tid 21458] [client 158.158.35.157:6772] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aY2aSpgxKQsNF5X8gtSIcgAAANY"]
[Thu Feb 12 17:15:55.378771 2026] [:error] [pid 21527:tid 21529] [client 158.158.35.157:46405] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aY2aSyaer9JPUXlMLuHCIgAAAAA"]
[Thu Feb 12 17:15:56.165644 2026] [:error] [pid 21527:tid 21533] [client 158.158.35.157:57605] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aY2aTCaer9JPUXlMLuHCJQAAAAQ"]
[Thu Feb 12 17:15:56.730513 2026] [:error] [pid 21527:tid 21539] [client 158.158.35.157:57323] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about.php"] [unique_id "aY2aTCaer9JPUXlMLuHCKAAAAAo"]
[Thu Feb 12 17:15:57.310730 2026] [:error] [pid 21433:tid 21488] [client 158.158.35.157:60255] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aY2aTdc_9AdG3uAKpzvwIQAAAZI"]
[Thu Feb 12 17:15:57.956735 2026] [:error] [pid 21433:tid 21470] [client 158.158.35.157:63468] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aY2aTdc_9AdG3uAKpzvwIgAAAYA"]
[Thu Feb 12 17:15:58.790369 2026] [:error] [pid 21527:tid 21553] [client 158.158.35.157:58777] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aY2aTiaer9JPUXlMLuHCLgAAABg"]
[Thu Feb 12 17:15:59.705559 2026] [:error] [pid 21433:tid 21483] [client 158.158.35.157:46374] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/alfa.php"] [unique_id "aY2aT9c_9AdG3uAKpzvwJwAAAY0"]
[Thu Feb 12 17:16:00.367394 2026] [:error] [pid 21434:tid 21513] [client 158.158.35.157:57602] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY2aUAbL1v6OC5G-tE-ZsAAAAdA"]
[Thu Feb 12 17:16:00.884106 2026] [:error] [pid 21431:tid 21447] [client 158.158.35.157:58785] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY2aUJgxKQsNF5X8gtSIfAAAAMs"]
[Thu Feb 12 17:16:01.634050 2026] [:error] [pid 21433:tid 21475] [client 158.158.35.157:64088] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY2aUdc_9AdG3uAKpzvwKQAAAYU"]
[Thu Feb 12 17:16:02.793024 2026] [:error] [pid 39777:tid 39802] [client 158.158.35.157:40407] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY2aUlzexR6hGUkt5pPWRgAAAFc"]
[Thu Feb 12 17:16:03.757866 2026] [:error] [pid 21433:tid 21482] [client 158.158.35.157:64115] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY2aU9c_9AdG3uAKpzvwLgAAAYw"]
[Thu Feb 12 17:16:04.867146 2026] [:error] [pid 21433:tid 21476] [client 158.158.35.157:47675] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY2aVNc_9AdG3uAKpzvwNAAAAYY"]
[Thu Feb 12 17:16:05.541471 2026] [:error] [pid 39777:tid 39781] [client 158.158.35.157:58759] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY2aVVzexR6hGUkt5pPWSQAAAEI"]
[Thu Feb 12 17:16:06.355250 2026] [:error] [pid 21431:tid 21451] [client 158.158.35.157:46369] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY2aVpgxKQsNF5X8gtSIjgAAAM8"]
[Thu Feb 12 17:16:07.237470 2026] [:error] [pid 21431:tid 21455] [client 158.158.35.157:47624] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY2aV5gxKQsNF5X8gtSImQAAANM"]
[Thu Feb 12 17:16:07.936792 2026] [:error] [pid 21431:tid 21456] [client 158.158.35.157:39417] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY2aV5gxKQsNF5X8gtSIpQAAANQ"]
[Thu Feb 12 17:16:08.498993 2026] [:error] [pid 21433:tid 21484] [client 158.158.35.157:57298] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY2aWNc_9AdG3uAKpzvwOAAAAY4"]
[Thu Feb 12 17:16:09.140397 2026] [:error] [pid 39777:tid 39803] [client 158.158.35.157:60918] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY2aWVzexR6hGUkt5pPWTwAAAFg"]
[Thu Feb 12 17:16:10.058469 2026] [:error] [pid 39777:tid 39800] [client 158.158.35.157:57339] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY2aWlzexR6hGUkt5pPWUQAAAFU"]
[Thu Feb 12 17:16:10.812756 2026] [:error] [pid 21527:tid 21536] [client 158.158.35.157:40396] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY2aWiaer9JPUXlMLuHCPgAAAAc"]
[Thu Feb 12 17:16:11.844421 2026] [:error] [pid 21433:tid 21489] [client 158.158.35.157:40406] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY2aW9c_9AdG3uAKpzvwPQAAAZM"]
[Thu Feb 12 17:16:12.420246 2026] [:error] [pid 21433:tid 21488] [client 158.158.35.157:40437] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY2aXNc_9AdG3uAKpzvwQAAAAZI"]
[Thu Feb 12 17:16:13.090075 2026] [:error] [pid 21433:tid 21480] [client 158.158.35.157:58772] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aY2aXdc_9AdG3uAKpzvwRAAAAYo"]
[Thu Feb 12 17:16:13.704616 2026] [:error] [pid 39777:tid 39785] [client 158.158.35.157:46395] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aY2aXVzexR6hGUkt5pPWVwAAAEY"]
[Thu Feb 12 17:16:14.424196 2026] [:error] [pid 21434:tid 21501] [client 158.158.35.157:39401] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aY2aXgbL1v6OC5G-tE-ZxwAAAcQ"]
[Thu Feb 12 17:16:15.040173 2026] [:error] [pid 21434:tid 21510] [client 158.158.35.157:58070] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/manager.php"] [unique_id "aY2aXwbL1v6OC5G-tE-ZygAAAc0"]
[Thu Feb 12 17:16:15.594921 2026] [:error] [pid 21434:tid 21513] [client 158.158.35.157:51114] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aY2aXwbL1v6OC5G-tE-Z0AAAAdA"]
[Thu Feb 12 17:16:16.161870 2026] [:error] [pid 39777:tid 39779] [client 158.158.35.157:46354] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aY2aYFzexR6hGUkt5pPWXQAAAEA"]
[Thu Feb 12 17:16:16.692400 2026] [:error] [pid 21431:tid 21446] [client 158.158.35.157:46394] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aY2aYJgxKQsNF5X8gtSIvgAAAMo"]
[Thu Feb 12 17:16:17.495803 2026] [:error] [pid 21527:tid 21553] [client 158.158.35.157:7056] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/item.php"] [unique_id "aY2aYSaer9JPUXlMLuHCTQAAABg"]
[Thu Feb 12 17:16:18.120495 2026] [:error] [pid 39777:tid 39791] [client 158.158.35.157:46364] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY2aYlzexR6hGUkt5pPWYwAAAEw"]
[Thu Feb 12 17:16:18.613693 2026] [:error] [pid 21527:tid 21552] [client 158.158.35.157:45371] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY2aYiaer9JPUXlMLuHCUgAAABc"]
[Thu Feb 12 17:16:19.505622 2026] [proxy_fcgi:error] [pid 21431:tid 21456] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:19.750159 2026] [proxy_fcgi:error] [pid 21431:tid 21448] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:20.238806 2026] [proxy_fcgi:error] [pid 21431:tid 21452] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:20.730765 2026] [proxy_fcgi:error] [pid 21431:tid 21439] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:20.974417 2026] [proxy_fcgi:error] [pid 21431:tid 21436] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:21.217802 2026] [proxy_fcgi:error] [pid 21431:tid 21450] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:21.579747 2026] [proxy_fcgi:error] [pid 21431:tid 21440] [client 158.158.35.157:54851] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:16:22.214536 2026] [:error] [pid 21431:tid 21448] [client 158.158.35.157:54851] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY2aZpgxKQsNF5X8gtSI1wAAAMw"]
[Thu Feb 12 17:16:22.848587 2026] [:error] [pid 21527:tid 21551] [client 158.158.35.157:58052] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY2aZiaer9JPUXlMLuHCYAAAABY"]
[Thu Feb 12 17:16:23.373865 2026] [:error] [pid 21527:tid 21532] [client 158.158.35.157:54230] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY2aZyaer9JPUXlMLuHCYgAAAAM"]
[Thu Feb 12 17:16:24.138187 2026] [:error] [pid 21527:tid 21553] [client 158.158.35.157:42137] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY2aaCaer9JPUXlMLuHCZwAAABg"]
[Thu Feb 12 17:16:24.740620 2026] [:error] [pid 21527:tid 21539] [client 158.158.35.157:54254] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2aaCaer9JPUXlMLuHCbgAAAAo"]
[Thu Feb 12 17:16:25.504448 2026] [:error] [pid 21527:tid 21536] [client 158.158.35.157:42144] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2aaSaer9JPUXlMLuHCcwAAAAc"]
[Thu Feb 12 17:16:26.896597 2026] [:error] [pid 21527:tid 21543] [client 158.158.35.157:38077] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2aaiaer9JPUXlMLuHCdwAAAA4"]
[Thu Feb 12 17:16:27.627880 2026] [:error] [pid 21431:tid 21436] [client 158.158.35.157:38018] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2aa5gxKQsNF5X8gtSI2wAAAMA"]
[Thu Feb 12 17:16:28.198331 2026] [:error] [pid 21434:tid 21515] [client 158.158.35.157:47001] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aY2abAbL1v6OC5G-tE-Z3AAAAdI"]
[Thu Feb 12 17:16:28.846058 2026] [:error] [pid 21434:tid 21510] [client 158.158.35.157:49517] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aY2abAbL1v6OC5G-tE-Z4QAAAc0"]
[Thu Feb 12 17:16:29.515636 2026] [:error] [pid 21434:tid 21498] [client 158.158.35.157:65074] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aY2abQbL1v6OC5G-tE-Z5QAAAcE"]
[Thu Feb 12 17:16:30.356544 2026] [:error] [pid 39777:tid 39790] [client 158.158.35.157:6155] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/gmo.php"] [unique_id "aY2ablzexR6hGUkt5pPWdAAAAEs"]
[Thu Feb 12 17:16:30.966184 2026] [:error] [pid 39777:tid 39793] [client 158.158.35.157:38043] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY2ablzexR6hGUkt5pPWdwAAAE4"]
[Thu Feb 12 17:16:33.382216 2026] [:error] [pid 21433:tid 21482] [client 158.158.35.157:49506] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aY2acdc_9AdG3uAKpzvwZQAAAYw"]
[Thu Feb 12 17:16:33.966979 2026] [:error] [pid 21433:tid 21491] [client 158.158.35.157:62134] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aY2acdc_9AdG3uAKpzvwZwAAAZU"]
[Thu Feb 12 17:16:34.502302 2026] [:error] [pid 21431:tid 21452] [client 158.158.35.157:62928] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/index.php"] [unique_id "aY2acpgxKQsNF5X8gtSI4QAAANA"]
[Thu Feb 12 17:16:35.232957 2026] [:error] [pid 21431:tid 21446] [client 158.158.35.157:6800] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aY2ac5gxKQsNF5X8gtSI4wAAAMo"]
[Thu Feb 12 17:16:36.021291 2026] [:error] [pid 39777:tid 39801] [client 158.158.35.157:54820] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY2adFzexR6hGUkt5pPWggAAAFY"]
[Thu Feb 12 17:16:36.725266 2026] [:error] [pid 21527:tid 21547] [client 158.158.35.157:40406] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY2adCaer9JPUXlMLuHCiwAAABI"]
[Thu Feb 12 17:16:37.232379 2026] [:error] [pid 21433:tid 21485] [client 158.158.35.157:60802] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY2addc_9AdG3uAKpzvwbAAAAY8"]
[Thu Feb 12 17:16:37.924960 2026] [:error] [pid 21527:tid 21529] [client 158.158.35.157:39931] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY2adSaer9JPUXlMLuHCkQAAAAA"]
[Thu Feb 12 17:16:38.714799 2026] [:error] [pid 39777:tid 39788] [client 158.158.35.157:62131] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY2adlzexR6hGUkt5pPWjQAAAEk"]
[Thu Feb 12 17:16:39.470741 2026] [:error] [pid 21527:tid 21535] [client 158.158.35.157:39892] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY2adyaer9JPUXlMLuHCmgAAAAY"]
[Thu Feb 12 17:16:40.140377 2026] [:error] [pid 21433:tid 21477] [client 158.158.35.157:64967] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY2aeNc_9AdG3uAKpzvwhAAAAYc"]
[Thu Feb 12 17:16:40.783640 2026] [:error] [pid 21527:tid 21542] [client 158.158.35.157:57652] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2aeCaer9JPUXlMLuHCoQAAAA0"]
[Thu Feb 12 17:16:41.304795 2026] [:error] [pid 39777:tid 39780] [client 158.158.35.157:54835] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2aeVzexR6hGUkt5pPWkQAAAEE"]
[Thu Feb 12 17:16:42.266958 2026] [:error] [pid 21527:tid 21546] [client 158.158.35.157:39887] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2aeiaer9JPUXlMLuHCrgAAABE"]
[Thu Feb 12 17:16:43.079132 2026] [:error] [pid 21433:tid 21494] [client 158.158.35.157:6949] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2ae9c_9AdG3uAKpzvwiwAAAZg"]
[Thu Feb 12 17:16:43.714409 2026] [:error] [pid 21434:tid 21500] [client 158.158.35.157:52361] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aY2aewbL1v6OC5G-tE-aRgAAAcM"]
[Thu Feb 12 17:16:44.442496 2026] [:error] [pid 21434:tid 21510] [client 158.158.35.157:52954] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aY2afAbL1v6OC5G-tE-aSQAAAc0"]
[Thu Feb 12 17:16:45.266945 2026] [:error] [pid 21431:tid 21444] [client 158.158.35.157:6833] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aY2afZgxKQsNF5X8gtSI9gAAAMg"]
[Thu Feb 12 17:16:45.940232 2026] [:error] [pid 21434:tid 21505] [client 158.158.35.157:52964] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/index/function.php"] [unique_id "aY2afQbL1v6OC5G-tE-aVwAAAcg"]
[Thu Feb 12 17:16:46.712217 2026] [:error] [pid 21527:tid 21547] [client 158.158.35.157:62127] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY2afiaer9JPUXlMLuHCxAAAABI"]
[Thu Feb 12 17:16:48.991275 2026] [:error] [pid 21434:tid 21520] [client 158.158.35.157:55472] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY2agAbL1v6OC5G-tE-aXwAAAdc"]
[Thu Feb 12 17:16:51.196024 2026] [:error] [pid 39777:tid 39799] [client 158.158.35.157:59622] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY2ag1zexR6hGUkt5pPWmQAAAFQ"]
[Thu Feb 12 17:16:53.961727 2026] [:error] [pid 39777:tid 39801] [client 158.158.35.157:55532] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY2ahVzexR6hGUkt5pPWngAAAFY"]
[Thu Feb 12 17:16:56.399794 2026] [:error] [pid 21527:tid 21545] [client 158.158.35.157:59589] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aY2aiCaer9JPUXlMLuHDBwAAABA"]
[Thu Feb 12 17:16:58.243673 2026] [:error] [pid 21433:tid 21492] [client 158.158.35.157:55514] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aY2aitc_9AdG3uAKpzvwqgAAAZY"]
[Thu Feb 12 17:17:00.364669 2026] [:error] [pid 21433:tid 21494] [client 158.158.35.157:53584] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aY2ajNc_9AdG3uAKpzvwswAAAZg"]
[Thu Feb 12 17:17:02.005143 2026] [:error] [pid 21434:tid 21518] [client 158.158.35.157:51207] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aY2ajgbL1v6OC5G-tE-awAAAAdU"]
[Thu Feb 12 17:17:02.903348 2026] [:error] [pid 21431:tid 21454] [client 158.158.35.157:55504] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/ww1.php"] [unique_id "aY2ajpgxKQsNF5X8gtSJKAAAANI"]
[Thu Feb 12 17:17:03.733990 2026] [:error] [pid 21431:tid 21451] [client 158.158.35.157:55493] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aY2aj5gxKQsNF5X8gtSJLQAAAM8"]
[Thu Feb 12 17:17:05.528930 2026] [:error] [pid 21433:tid 21483] [client 158.158.35.157:6855] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aY2akdc_9AdG3uAKpzvwuAAAAY0"]
[Thu Feb 12 17:17:07.725053 2026] [:error] [pid 21527:tid 21530] [client 158.158.35.157:38131] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aY2akyaer9JPUXlMLuHDKQAAAAE"]
[Thu Feb 12 17:17:08.832755 2026] [:error] [pid 21431:tid 21456] [client 158.158.35.157:51200] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/about/function.php"] [unique_id "aY2alJgxKQsNF5X8gtSJNgAAANQ"]
[Thu Feb 12 17:17:09.515801 2026] [:error] [pid 21431:tid 21444] [client 158.158.35.157:55550] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aY2alZgxKQsNF5X8gtSJOAAAAMg"]
[Thu Feb 12 17:17:10.076846 2026] [:error] [pid 21433:tid 21488] [client 158.158.35.157:51165] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aY2altc_9AdG3uAKpzvwxAAAAZI"]
[Thu Feb 12 17:17:10.737034 2026] [:error] [pid 21433:tid 21484] [client 158.158.35.157:55510] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aY2altc_9AdG3uAKpzvwxgAAAY4"]
[Thu Feb 12 17:17:12.190146 2026] [:error] [pid 21434:tid 21499] [client 158.158.35.157:45856] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/admin/function.php"] [unique_id "aY2amAbL1v6OC5G-tE-azgAAAcI"]
[Thu Feb 12 17:17:13.366971 2026] [:error] [pid 21527:tid 21541] [client 158.158.35.157:51154] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2amSaer9JPUXlMLuHDQwAAAAw"]
[Thu Feb 12 17:17:14.566235 2026] [:error] [pid 21527:tid 21537] [client 158.158.35.157:51143] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2amiaer9JPUXlMLuHDSwAAAAg"]
[Thu Feb 12 17:17:16.042090 2026] [:error] [pid 21527:tid 21539] [client 158.158.35.157:6852] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2anCaer9JPUXlMLuHDUgAAAAo"]
[Thu Feb 12 17:17:16.749233 2026] [:error] [pid 39777:tid 39792] [client 158.158.35.157:57410] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2anFzexR6hGUkt5pPW1AAAAE0"]
[Thu Feb 12 17:17:17.532611 2026] [:error] [pid 21433:tid 21483] [client 158.158.35.157:6863] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY2andc_9AdG3uAKpzvw0QAAAY0"]
[Thu Feb 12 17:17:18.242228 2026] [:error] [pid 21434:tid 21509] [client 158.158.35.157:57459] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY2angbL1v6OC5G-tE-a3AAAAcw"]
[Thu Feb 12 17:17:18.923039 2026] [:error] [pid 21431:tid 21436] [client 158.158.35.157:6875] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY2anpgxKQsNF5X8gtSJQQAAAMA"]
[Thu Feb 12 17:17:19.808197 2026] [:error] [pid 21434:tid 21521] [client 158.158.35.157:57454] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY2anwbL1v6OC5G-tE-a4wAAAdg"]
[Thu Feb 12 17:17:20.372503 2026] [:error] [pid 21431:tid 21445] [client 158.158.35.157:38130] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aY2aoJgxKQsNF5X8gtSJRAAAAMk"]
[Thu Feb 12 17:17:20.977027 2026] [:error] [pid 21434:tid 21520] [client 158.158.35.157:38137] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/security.php"] [unique_id "aY2aoAbL1v6OC5G-tE-a5QAAAdc"]
[Thu Feb 12 17:17:21.578949 2026] [proxy_fcgi:error] [pid 21527:tid 21530] [client 158.158.35.157:53000] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:17:22.684883 2026] [:error] [pid 21527:tid 21549] [client 158.158.35.157:53000] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY2aoiaer9JPUXlMLuHDawAAABQ"]
[Thu Feb 12 17:17:25.570010 2026] [:error] [pid 21434:tid 21504] [client 158.158.35.157:38087] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aY2apQbL1v6OC5G-tE-a9wAAAcc"]
[Thu Feb 12 17:17:26.488585 2026] [:error] [pid 39777:tid 39788] [client 158.158.35.157:57459] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aY2aplzexR6hGUkt5pPW8AAAAEk"]
[Thu Feb 12 17:17:27.266332 2026] [:error] [pid 39777:tid 39797] [client 158.158.35.157:51183] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aY2ap1zexR6hGUkt5pPW9gAAAFI"]
[Thu Feb 12 17:17:28.030236 2026] [:error] [pid 21431:tid 21460] [client 158.158.35.157:53001] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/class.php"] [unique_id "aY2aqJgxKQsNF5X8gtSJTwAAANg"]
[Thu Feb 12 17:17:28.876658 2026] [:error] [pid 39777:tid 39789] [client 158.158.35.157:40334] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aY2aqFzexR6hGUkt5pPXAAAAAEo"]
[Thu Feb 12 17:17:29.510263 2026] [:error] [pid 21431:tid 21449] [client 158.158.35.157:53051] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aY2aqZgxKQsNF5X8gtSJUQAAAM0"]
[Thu Feb 12 17:17:30.108814 2026] [:error] [pid 21431:tid 21442] [client 158.158.35.157:38105] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aY2aqpgxKQsNF5X8gtSJVAAAAMY"]
[Thu Feb 12 17:17:30.652307 2026] [:error] [pid 21434:tid 21510] [client 158.158.35.157:53009] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/bless5.php"] [unique_id "aY2aqgbL1v6OC5G-tE-bCQAAAc0"]
[Thu Feb 12 17:17:31.150925 2026] [:error] [pid 21434:tid 21498] [client 158.158.35.157:45844] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY2aqwbL1v6OC5G-tE-bDAAAAcE"]
[Thu Feb 12 17:17:31.744128 2026] [:error] [pid 21433:tid 21473] [client 158.158.35.157:52954] [client 158.158.35.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "cientifica.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY2aq9c_9AdG3uAKpzvw7AAAAYM"]
[Thu Feb 12 17:17:32.622412 2026] [:error] [pid 21527:tid 21538] [client 158.158.35.157:45883] [client 158.158.35.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "cientifica.com.au"] [uri "/lock360.php"] [unique_id "aY2arCaer9JPUXlMLuHDkwAAAAk"